last executing test programs: 5.176865275s ago: executing program 0 (id=777): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d73"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 4.772956525s ago: executing program 1 (id=781): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 4.005230212s ago: executing program 0 (id=786): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 3.955467415s ago: executing program 2 (id=787): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x100000}], 0x1}, 0x800) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 3.829984951s ago: executing program 1 (id=788): r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x24c44, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592"], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.541229745s ago: executing program 1 (id=789): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x80000002009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, &(0x7f0000000040), 0xcf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000005300000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d86dd", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x3) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0xe33, @private0, 0x8}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)="0a7ad50f10a9af79d91a01473cb7f6fa3903d0796e7a5297f057b2701a31f6065c0fc934a658986ba759ecd10a87f822bdb0c845919e87090f4b3eb683ef224b4a8a4bd43f402212ad1e8842e0437e5c2db5e41c88f65d477307091c50ba41d82b0184b448dd3ac736bbb76d45ed5aba3f568b90934b2027aef80b2bccbb645bb1d1a3ccef92d8898e04ef8fdcf18d4cf1235b18046c3f48be7704e285f153beb0ff4dfb3fe565", 0xa7}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000600)=[{0x40, 0x115, 0x7e7, "5a3b860b25692ae7006b2512469549a75b246ea1d4f76cdc95d01e34b4b24a0a96485ea79819dadf281b9c171e"}], 0x40}, 0x40040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000007c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x3626, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa313c6b876c1d0000007ea60864160af36507001ac0043f020208000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xef, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 3.317008647s ago: executing program 3 (id=792): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x167d17a8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x48081, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000400)={'xfrm0\x00', @random="9f22eceb7d89"}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, 0x0, 0x2, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.102325977s ago: executing program 3 (id=793): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000180)="7cdb015fbb1990a28714976a2615837b64e032", 0x13}, {&(0x7f0000001980)="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", 0x4aa}], 0x3}, 0x24000008) 3.071531018s ago: executing program 0 (id=794): socket$kcm(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff90, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c15", 0xdb}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 2.977750193s ago: executing program 2 (id=795): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.868756919s ago: executing program 0 (id=796): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 2.755685904s ago: executing program 2 (id=797): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 2.755064424s ago: executing program 3 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40000, 0x0, @perf_config_ext={0x1, 0x9}, 0x7e02, 0x0, 0x0, 0x6, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x20004050) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x20004050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) unlink(0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) syz_clone(0x2000480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2000480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xd, r1, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.542065504s ago: executing program 1 (id=799): r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x24c44, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592"], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.870684938s ago: executing program 0 (id=800): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) (fail_nth: 4) 1.388997901s ago: executing program 2 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000080000000850000008700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x3406c012) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f9395c8cbc3dc0da841efa1f2c35249000000630000000c0000000cb800000600000003000000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = openat$cgroup_ro(r3, &(0x7f0000000d00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000060000000000000000000000185a000006000000000000000000000085100000080000001d7268d7f0ffffff8520000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x6}, 0x10, 0x10f2e, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x1, 0xf}, {0x5, 0x1, 0x7, 0x4}], 0x10, 0x1}, 0x94) 1.325076014s ago: executing program 3 (id=802): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x167d17a8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x48081, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000400)={'xfrm0\x00', @random="9f22eceb7d89"}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, 0x0, 0x2, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.302241276s ago: executing program 1 (id=803): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x100000}], 0x1}, 0x800) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 328.766974ms ago: executing program 1 (id=804): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ae, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, &(0x7f0000000200), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000090000000000000e03000000010000000a0000000000000203000000000000000400000d00000000060000000100000000000000000000000000000000000000010000000500003c3a2156000000"], 0x0, 0x62, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) close(r0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 328.353974ms ago: executing program 2 (id=805): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 328.055934ms ago: executing program 3 (id=806): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000180)="7cdb015fbb1990a28714976a2615837b64e032", 0x13}, {&(0x7f0000001980)="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", 0x4aa}], 0x3}, 0x24000008) 323.544504ms ago: executing program 0 (id=812): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x100000}], 0x1}, 0x800) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 82.394125ms ago: executing program 3 (id=807): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x4200, 0x0, 0x1, 0xce375571522576fd, 0x0, 0xfffffffc, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x359, 0x7, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x8) (async) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x359, 0x7, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)="ff"}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000003b000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x5173f40aabd337a1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x9, 0x8}, 0x0, 0xc046, 0x3e, 0xa, 0x6, 0x80007, 0x8, 0x0, 0x8, 0x0, 0x4}, r5, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5603}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) (async) socket$kcm(0xa, 0x7, 0x88) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) 0s ago: executing program 2 (id=808): r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x24c44, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592"], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): etlink: zone id is out of range [ 118.662826][ T6117] netlink: zone id is out of range [ 118.668586][ T6117] netlink: zone id is out of range [ 118.673965][ T6117] netlink: zone id is out of range [ 118.679359][ T6117] netlink: zone id is out of range [ 118.709901][ T6117] netlink: zone id is out of range [ 119.104026][ T6141] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 119.207547][ T6141] team0: Port device wlan1 added [ 119.294414][ T6146] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 120.486349][ T6160] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.98'. [ 121.418390][ T6166] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 121.600193][ T6170] FAULT_INJECTION: forcing a failure. [ 121.600193][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 121.657447][ T6170] CPU: 0 PID: 6170 Comm: syz.3.101 Not tainted syzkaller #0 [ 121.664825][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.674940][ T6170] Call Trace: [ 121.678257][ T6170] [ 121.681235][ T6170] dump_stack_lvl+0x18c/0x250 [ 121.686001][ T6170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.692221][ T6170] ? show_regs_print_info+0x20/0x20 [ 121.697478][ T6170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.703700][ T6170] should_fail_ex+0x39d/0x4d0 [ 121.708432][ T6170] should_failslab+0x9/0x20 [ 121.712989][ T6170] slab_pre_alloc_hook+0x59/0x310 [ 121.718071][ T6170] kmem_cache_alloc+0x5a/0x2d0 [ 121.722878][ T6170] ? security_inode_alloc+0x34/0x110 [ 121.728225][ T6170] security_inode_alloc+0x34/0x110 [ 121.733390][ T6170] inode_init_always+0x8fc/0xc90 [ 121.738384][ T6170] ? memset_orig+0x70/0xac [ 121.742863][ T6170] new_inode_pseudo+0x95/0x1d0 [ 121.747679][ T6170] __sock_create+0x12d/0x940 [ 121.752320][ T6170] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 121.758355][ T6170] __sys_socket+0xd7/0x1a0 [ 121.762839][ T6170] __x64_sys_socket+0x7a/0x90 [ 121.767592][ T6170] do_syscall_64+0x55/0xa0 [ 121.772063][ T6170] ? clear_bhb_loop+0x40/0x90 [ 121.776785][ T6170] ? clear_bhb_loop+0x40/0x90 [ 121.781518][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.787473][ T6170] RIP: 0033:0x7f47d239c799 [ 121.791949][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.811605][ T6170] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 121.820059][ T6170] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 121.828053][ T6170] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a [ 121.836048][ T6170] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.844038][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.852035][ T6170] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 121.860048][ T6170] [ 122.046617][ T6180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.105'. [ 122.815234][ T6190] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.107'. [ 123.338709][ T6201] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 123.712686][ T6210] FAULT_INJECTION: forcing a failure. [ 123.712686][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 123.759006][ T6210] CPU: 1 PID: 6210 Comm: syz.3.115 Not tainted syzkaller #0 [ 123.766377][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.776475][ T6210] Call Trace: [ 123.779797][ T6210] [ 123.782765][ T6210] dump_stack_lvl+0x18c/0x250 [ 123.787511][ T6210] ? show_regs_print_info+0x20/0x20 [ 123.792772][ T6210] ? load_image+0x400/0x400 [ 123.797332][ T6210] ? __might_sleep+0xe0/0xe0 [ 123.801969][ T6210] ? __lock_acquire+0x7d40/0x7d40 [ 123.807026][ T6210] should_fail_ex+0x39d/0x4d0 [ 123.811779][ T6210] should_failslab+0x9/0x20 [ 123.816341][ T6210] slab_pre_alloc_hook+0x59/0x310 [ 123.821421][ T6210] ? __lock_acquire+0x7d40/0x7d40 [ 123.826499][ T6210] kmem_cache_alloc_node+0x60/0x320 [ 123.831804][ T6210] ? __alloc_skb+0x103/0x2c0 [ 123.836458][ T6210] __alloc_skb+0x103/0x2c0 [ 123.840939][ T6210] netlink_sendmsg+0x66a/0xbf0 [ 123.845775][ T6210] ? netlink_getsockopt+0x590/0x590 [ 123.851032][ T6210] ? aa_sock_msg_perm+0x94/0x150 [ 123.856023][ T6210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.861359][ T6210] ? security_socket_sendmsg+0x80/0xa0 [ 123.866871][ T6210] ? netlink_getsockopt+0x590/0x590 [ 123.872128][ T6210] ____sys_sendmsg+0x5ba/0x960 [ 123.876935][ T6210] ? __asan_memset+0x22/0x40 [ 123.881564][ T6210] ? __sys_sendmsg_sock+0x30/0x30 [ 123.886614][ T6210] ? __import_iovec+0x5f2/0x850 [ 123.891505][ T6210] ? import_iovec+0x73/0xa0 [ 123.896032][ T6210] ___sys_sendmsg+0x2a6/0x360 [ 123.900735][ T6210] ? get_pid_task+0x20/0x1e0 [ 123.905356][ T6210] ? __sys_sendmsg+0x2a0/0x2a0 [ 123.910160][ T6210] ? __lock_acquire+0x7d40/0x7d40 [ 123.915231][ T6210] __se_sys_sendmsg+0x1c2/0x2b0 [ 123.920105][ T6210] ? __x64_sys_sendmsg+0x80/0x80 [ 123.925084][ T6210] ? lockdep_hardirqs_on+0x98/0x150 [ 123.930310][ T6210] do_syscall_64+0x55/0xa0 [ 123.934765][ T6210] ? clear_bhb_loop+0x40/0x90 [ 123.939463][ T6210] ? clear_bhb_loop+0x40/0x90 [ 123.944165][ T6210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.950083][ T6210] RIP: 0033:0x7f47d239c799 [ 123.954526][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.974160][ T6210] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.982596][ T6210] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 123.990594][ T6210] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 000000000000000d [ 123.998590][ T6210] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.006582][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.014576][ T6210] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 124.022592][ T6210] [ 124.297096][ T5783] Bluetooth: hci2: Malformed LE Event: 0x02 [ 124.810798][ T6230] bridge_slave_1: left allmulticast mode [ 124.816916][ T6230] bridge_slave_1: left promiscuous mode [ 124.824018][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.515958][ T6230] bridge_slave_0: left allmulticast mode [ 127.521703][ T6230] bridge_slave_0: left promiscuous mode [ 127.527756][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.657209][ T6237] FAULT_INJECTION: forcing a failure. [ 127.657209][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 127.691753][ T6237] CPU: 1 PID: 6237 Comm: syz.0.123 Not tainted syzkaller #0 [ 127.699139][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.709283][ T6237] Call Trace: [ 127.712617][ T6237] [ 127.715603][ T6237] dump_stack_lvl+0x18c/0x250 [ 127.720353][ T6237] ? show_regs_print_info+0x20/0x20 [ 127.725616][ T6237] ? load_image+0x400/0x400 [ 127.730188][ T6237] ? __might_sleep+0xe0/0xe0 [ 127.734845][ T6237] ? __lock_acquire+0x7d40/0x7d40 [ 127.739938][ T6237] should_fail_ex+0x39d/0x4d0 [ 127.744692][ T6237] should_failslab+0x9/0x20 [ 127.749263][ T6237] slab_pre_alloc_hook+0x59/0x310 [ 127.754362][ T6237] ? tomoyo_encode+0x28b/0x540 [ 127.759174][ T6237] ? tomoyo_encode+0x28b/0x540 [ 127.763989][ T6237] __kmem_cache_alloc_node+0x53/0x250 [ 127.769433][ T6237] ? tomoyo_encode+0x28b/0x540 [ 127.774250][ T6237] __kmalloc+0xa4/0x230 [ 127.778484][ T6237] tomoyo_encode+0x28b/0x540 [ 127.783135][ T6237] tomoyo_realpath_from_path+0x592/0x5d0 [ 127.788837][ T6237] tomoyo_path_number_perm+0x248/0x620 [ 127.794366][ T6237] ? tomoyo_path_number_perm+0x217/0x620 [ 127.800072][ T6237] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 127.805684][ T6237] ? ksys_write+0x1c4/0x260 [ 127.810287][ T6237] ? __fget_files+0x28/0x4b0 [ 127.814933][ T6237] ? __fget_files+0x28/0x4b0 [ 127.819601][ T6237] security_file_ioctl+0x70/0xa0 [ 127.824601][ T6237] __se_sys_ioctl+0x48/0x170 [ 127.829262][ T6237] do_syscall_64+0x55/0xa0 [ 127.833835][ T6237] ? clear_bhb_loop+0x40/0x90 [ 127.838564][ T6237] ? clear_bhb_loop+0x40/0x90 [ 127.843328][ T6237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.849281][ T6237] RIP: 0033:0x7f80c579c799 [ 127.853747][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.873502][ T6237] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.882081][ T6237] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 127.890107][ T6237] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 127.898137][ T6237] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 127.906173][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.914256][ T6237] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 127.922374][ T6237] [ 128.007150][ T6237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.459523][ T6235] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.122'. [ 128.469308][ T6235] net_ratelimit: 213 callbacks suppressed [ 128.469322][ T6235] netlink: zone id is out of range [ 128.476387][ T6243] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 128.480388][ T6235] netlink: zone id is out of range [ 128.480406][ T6235] netlink: zone id is out of range [ 128.498633][ T6235] netlink: zone id is out of range [ 128.503794][ T6235] netlink: zone id is out of range [ 128.509151][ T6235] netlink: zone id is out of range [ 128.514307][ T6235] netlink: zone id is out of range [ 128.527101][ T6243] bond0: (slave bond_slave_0): Releasing backup interface [ 128.559931][ T6235] netlink: zone id is out of range [ 128.565995][ T6235] netlink: zone id is out of range [ 128.571169][ T6235] netlink: zone id is out of range [ 129.219507][ T6258] netlink: 'syz.0.129': attribute type 13 has an invalid length. [ 129.440130][ T6269] FAULT_INJECTION: forcing a failure. [ 129.440130][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 129.485376][ T6269] CPU: 0 PID: 6269 Comm: syz.0.133 Not tainted syzkaller #0 [ 129.492758][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.502858][ T6269] Call Trace: [ 129.506178][ T6269] [ 129.509146][ T6269] dump_stack_lvl+0x18c/0x250 [ 129.513896][ T6269] ? show_regs_print_info+0x20/0x20 [ 129.519152][ T6269] ? load_image+0x400/0x400 [ 129.523716][ T6269] ? __might_sleep+0xe0/0xe0 [ 129.528373][ T6269] ? __lock_acquire+0x7d40/0x7d40 [ 129.533456][ T6269] should_fail_ex+0x39d/0x4d0 [ 129.538229][ T6269] should_failslab+0x9/0x20 [ 129.542793][ T6269] slab_pre_alloc_hook+0x59/0x310 [ 129.547884][ T6269] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 129.553677][ T6269] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 129.559297][ T6269] __kmem_cache_alloc_node+0x53/0x250 [ 129.564764][ T6269] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 129.570364][ T6269] __kmalloc+0xa4/0x230 [ 129.574584][ T6269] bpf_prog_test_run_skb+0x238/0x12b0 [ 129.580008][ T6269] ? __fget_files+0x28/0x4b0 [ 129.584687][ T6269] ? __fget_files+0x28/0x4b0 [ 129.589313][ T6269] ? __fget_files+0x43d/0x4b0 [ 129.594042][ T6269] ? cpu_online+0x60/0x60 [ 129.598397][ T6269] bpf_prog_test_run+0x321/0x390 [ 129.603361][ T6269] __sys_bpf+0x49d/0x890 [ 129.607633][ T6269] ? bpf_link_show_fdinfo+0x390/0x390 [ 129.613044][ T6269] ? lock_chain_count+0x20/0x20 [ 129.617960][ T6269] __x64_sys_bpf+0x7c/0x90 [ 129.622408][ T6269] do_syscall_64+0x55/0xa0 [ 129.626851][ T6269] ? clear_bhb_loop+0x40/0x90 [ 129.631549][ T6269] ? clear_bhb_loop+0x40/0x90 [ 129.636255][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.642174][ T6269] RIP: 0033:0x7f80c579c799 [ 129.646619][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.666338][ T6269] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.674796][ T6269] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 129.682804][ T6269] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 129.690806][ T6269] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 129.698809][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.706814][ T6269] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 129.714831][ T6269] [ 130.139148][ T6273] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.135'. [ 130.173833][ T6285] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 130.362017][ T6287] FAULT_INJECTION: forcing a failure. [ 130.362017][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 130.395497][ T6287] CPU: 0 PID: 6287 Comm: syz.2.140 Not tainted syzkaller #0 [ 130.402927][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.413036][ T6287] Call Trace: [ 130.416365][ T6287] [ 130.419351][ T6287] dump_stack_lvl+0x18c/0x250 [ 130.424084][ T6287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.430293][ T6287] ? show_regs_print_info+0x20/0x20 [ 130.435565][ T6287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.441766][ T6287] should_fail_ex+0x39d/0x4d0 [ 130.446494][ T6287] should_failslab+0x9/0x20 [ 130.451026][ T6287] slab_pre_alloc_hook+0x59/0x310 [ 130.456085][ T6287] ? __lock_acquire+0x7d40/0x7d40 [ 130.461144][ T6287] kmem_cache_alloc_node+0x60/0x320 [ 130.466375][ T6287] ? __alloc_skb+0x103/0x2c0 [ 130.470997][ T6287] __alloc_skb+0x103/0x2c0 [ 130.475451][ T6287] netlink_sendmsg+0x66a/0xbf0 [ 130.480255][ T6287] ? netlink_getsockopt+0x590/0x590 [ 130.485503][ T6287] ? netlink_getsockopt+0x590/0x590 [ 130.490750][ T6287] ____sys_sendmsg+0x5ba/0x960 [ 130.495538][ T6287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.501724][ T6287] ? __asan_memset+0x22/0x40 [ 130.506349][ T6287] ? __sys_sendmsg_sock+0x30/0x30 [ 130.511395][ T6287] ? __import_iovec+0x3fa/0x850 [ 130.516290][ T6287] ? import_iovec+0x73/0xa0 [ 130.520823][ T6287] ___sys_sendmsg+0x2a6/0x360 [ 130.525526][ T6287] ? __sys_sendmsg+0x2a0/0x2a0 [ 130.530354][ T6287] __se_sys_sendmsg+0x1c2/0x2b0 [ 130.535240][ T6287] ? __x64_sys_sendmsg+0x80/0x80 [ 130.540217][ T6287] do_syscall_64+0x55/0xa0 [ 130.544663][ T6287] ? clear_bhb_loop+0x40/0x90 [ 130.549369][ T6287] ? clear_bhb_loop+0x40/0x90 [ 130.554076][ T6287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.559995][ T6287] RIP: 0033:0x7faadd99c799 [ 130.564457][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.584117][ T6287] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.592574][ T6287] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 130.600575][ T6287] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 130.608665][ T6287] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 130.616663][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.624653][ T6287] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 130.632660][ T6287] [ 130.786737][ T6296] netlink: 168 bytes leftover after parsing attributes in process `syz.0.142'. [ 131.010427][ T6300] FAULT_INJECTION: forcing a failure. [ 131.010427][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.057534][ T6300] CPU: 0 PID: 6300 Comm: syz.1.144 Not tainted syzkaller #0 [ 131.065015][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.075137][ T6300] Call Trace: [ 131.078494][ T6300] [ 131.081492][ T6300] dump_stack_lvl+0x18c/0x250 [ 131.086269][ T6300] ? show_regs_print_info+0x20/0x20 [ 131.091562][ T6300] ? load_image+0x400/0x400 [ 131.096163][ T6300] ? __might_fault+0xaa/0x120 [ 131.100941][ T6300] ? __lock_acquire+0x7d40/0x7d40 [ 131.106066][ T6300] should_fail_ex+0x39d/0x4d0 [ 131.110852][ T6300] _copy_to_iter+0x1ce/0x1120 [ 131.115650][ T6300] ? __virt_addr_valid+0x18c/0x540 [ 131.120848][ T6300] ? iov_iter_init+0x1e0/0x1e0 [ 131.125699][ T6300] ? __virt_addr_valid+0x18c/0x540 [ 131.131070][ T6300] ? __virt_addr_valid+0x469/0x540 [ 131.136267][ T6300] ? __phys_addr_symbol+0x2f/0x70 [ 131.141371][ T6300] ? __check_object_size+0x506/0xa20 [ 131.146797][ T6300] __skb_datagram_iter+0xdb/0x780 [ 131.151910][ T6300] ? unix_stream_read_generic+0x2a6/0x2080 [ 131.157802][ T6300] ? unix_stream_read_generic+0x687/0x2080 [ 131.163715][ T6300] ? skb_copy_datagram_iter+0x200/0x200 [ 131.169343][ T6300] ? do_raw_spin_lock+0x11f/0x2c0 [ 131.174497][ T6300] skb_copy_datagram_iter+0xb1/0x200 [ 131.179880][ T6300] unix_stream_read_actor+0x6c/0xa0 [ 131.185190][ T6300] unix_stream_read_generic+0xd69/0x2080 [ 131.190919][ T6300] ? perf_trace_lock+0x304/0x3b0 [ 131.196051][ T6300] ? unix_stream_read_actor+0xa0/0xa0 [ 131.201527][ T6300] ? unix_bpf_recvmsg+0xa22/0xde0 [ 131.206668][ T6300] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 131.212766][ T6300] __unix_stream_recvmsg+0xfc/0x150 [ 131.218062][ T6300] ? scm_recv_unix+0x840/0x840 [ 131.222909][ T6300] ? __unix_stream_recvmsg+0x150/0x150 [ 131.228480][ T6300] ? _raw_spin_unlock+0x40/0x40 [ 131.233436][ T6300] ? remove_wait_queue+0x33/0x120 [ 131.238562][ T6300] unix_bpf_recvmsg+0xc75/0xde0 [ 131.243575][ T6300] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 131.249741][ T6300] ? wait_woken+0x180/0x180 [ 131.254331][ T6300] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 131.258751][ T6303] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 131.260484][ T6300] ? aa_sk_perm+0x83c/0x970 [ 131.260573][ T6300] unix_stream_recvmsg+0x150/0x1c0 [ 131.260612][ T6300] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 131.260656][ T6300] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 131.260695][ T6300] ? __unix_stream_recvmsg+0x150/0x150 [ 131.260750][ T6300] ? aa_sock_msg_perm+0x94/0x150 [ 131.260795][ T6300] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 131.260826][ T6300] ? security_socket_recvmsg+0x89/0xb0 [ 131.260856][ T6300] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 131.260905][ T6300] ____sys_recvmsg+0x2ce/0x5e0 [ 131.261001][ T6300] ? __sys_recvmsg_sock+0x50/0x50 [ 131.261095][ T6300] ? import_iovec+0x73/0xa0 [ 131.261143][ T6300] ___sys_recvmsg+0x216/0x590 [ 131.261198][ T6300] ? __sys_recvmsg+0x2a0/0x2a0 [ 131.261252][ T6300] ? ksys_write+0x1c4/0x260 [ 131.261338][ T6300] ? __fget_files+0x43d/0x4b0 [ 131.261437][ T6300] __x64_sys_recvmsg+0x20c/0x2e0 [ 131.261481][ T6300] ? ___sys_recvmsg+0x590/0x590 [ 131.261579][ T6300] ? lockdep_hardirqs_on+0x98/0x150 [ 131.261629][ T6300] do_syscall_64+0x55/0xa0 [ 131.261664][ T6300] ? clear_bhb_loop+0x40/0x90 [ 131.261692][ T6300] ? clear_bhb_loop+0x40/0x90 [ 131.261732][ T6300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.261761][ T6300] RIP: 0033:0x7f4922f9c799 [ 131.261791][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.261813][ T6300] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 131.261846][ T6300] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 131.261867][ T6300] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000005 [ 131.261885][ T6300] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 131.261903][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.261927][ T6300] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 131.262010][ T6300] [ 131.695823][ T6303] netlink: 55 bytes leftover after parsing attributes in process `syz.2.145'. [ 132.564195][ T6314] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.149'. [ 132.867898][ T6321] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 133.170495][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.177342][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.308943][ T6337] FAULT_INJECTION: forcing a failure. [ 133.308943][ T6337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.344964][ T6337] CPU: 1 PID: 6337 Comm: syz.1.154 Not tainted syzkaller #0 [ 133.352334][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.362446][ T6337] Call Trace: [ 133.365782][ T6337] [ 133.368750][ T6337] dump_stack_lvl+0x18c/0x250 [ 133.373489][ T6337] ? show_regs_print_info+0x20/0x20 [ 133.378749][ T6337] ? load_image+0x400/0x400 [ 133.383343][ T6337] ? __might_fault+0xaa/0x120 [ 133.388101][ T6337] ? __lock_acquire+0x7d40/0x7d40 [ 133.393175][ T6337] should_fail_ex+0x39d/0x4d0 [ 133.397897][ T6337] _copy_from_user+0x2f/0xe0 [ 133.402522][ T6337] ___sys_sendmsg+0x1c7/0x360 [ 133.407230][ T6337] ? get_pid_task+0x20/0x1e0 [ 133.411854][ T6337] ? __sys_sendmsg+0x2a0/0x2a0 [ 133.416656][ T6337] ? __lock_acquire+0x7d40/0x7d40 [ 133.421735][ T6337] __se_sys_sendmsg+0x1c2/0x2b0 [ 133.426609][ T6337] ? __x64_sys_sendmsg+0x80/0x80 [ 133.431577][ T6337] ? lockdep_hardirqs_on+0x98/0x150 [ 133.436806][ T6337] do_syscall_64+0x55/0xa0 [ 133.441258][ T6337] ? clear_bhb_loop+0x40/0x90 [ 133.445970][ T6337] ? clear_bhb_loop+0x40/0x90 [ 133.450675][ T6337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.456950][ T6337] RIP: 0033:0x7f4922f9c799 [ 133.461390][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.481135][ T6337] RSP: 002b:00007f4923e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.489579][ T6337] RAX: ffffffffffffffda RBX: 00007f4923216180 RCX: 00007f4922f9c799 [ 133.497578][ T6337] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 133.505568][ T6337] RBP: 00007f4923e88090 R08: 0000000000000000 R09: 0000000000000000 [ 133.513581][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.521582][ T6337] R13: 00007f4923216218 R14: 00007f4923216180 R15: 00007ffc30d32658 [ 133.529594][ T6337] [ 133.560651][ T6339] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 133.577937][ T6339] team0: Device ipvlan1 failed to register rx_handler [ 134.074834][ T6344] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 134.085779][ T6351] FAULT_INJECTION: forcing a failure. [ 134.085779][ T6351] name failslab, interval 1, probability 0, space 0, times 0 [ 134.103401][ T6344] hsr_slave_0: left promiscuous mode [ 134.109347][ T6351] CPU: 1 PID: 6351 Comm: syz.2.159 Not tainted syzkaller #0 [ 134.116706][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.126917][ T6351] Call Trace: [ 134.130255][ T6351] [ 134.133240][ T6351] dump_stack_lvl+0x18c/0x250 [ 134.138000][ T6351] ? show_regs_print_info+0x20/0x20 [ 134.143271][ T6351] ? load_image+0x400/0x400 [ 134.147844][ T6351] ? __might_sleep+0xe0/0xe0 [ 134.152496][ T6351] ? __lock_acquire+0x7d40/0x7d40 [ 134.157597][ T6351] should_fail_ex+0x39d/0x4d0 [ 134.162386][ T6351] should_failslab+0x9/0x20 [ 134.166961][ T6351] slab_pre_alloc_hook+0x59/0x310 [ 134.172051][ T6351] ? __lock_acquire+0x7d40/0x7d40 [ 134.177121][ T6351] kmem_cache_alloc_node+0x60/0x320 [ 134.182449][ T6351] ? __alloc_skb+0x103/0x2c0 [ 134.187091][ T6351] __alloc_skb+0x103/0x2c0 [ 134.191562][ T6351] netlink_sendmsg+0x66a/0xbf0 [ 134.196380][ T6351] ? netlink_getsockopt+0x590/0x590 [ 134.201622][ T6351] ? aa_sock_msg_perm+0x94/0x150 [ 134.206604][ T6351] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 134.212010][ T6351] ? security_socket_sendmsg+0x80/0xa0 [ 134.217502][ T6351] ? netlink_getsockopt+0x590/0x590 [ 134.222743][ T6351] ____sys_sendmsg+0x5ba/0x960 [ 134.227638][ T6351] ? __asan_memset+0x22/0x40 [ 134.232502][ T6351] ? __sys_sendmsg_sock+0x30/0x30 [ 134.238677][ T6351] ? __import_iovec+0x5f2/0x850 [ 134.243700][ T6351] ? import_iovec+0x73/0xa0 [ 134.248872][ T6351] ___sys_sendmsg+0x2a6/0x360 [ 134.253699][ T6351] ? get_pid_task+0x20/0x1e0 [ 134.258638][ T6351] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.263578][ T6351] ? __lock_acquire+0x7d40/0x7d40 [ 134.268783][ T6351] __se_sys_sendmsg+0x1c2/0x2b0 [ 134.273711][ T6351] ? __x64_sys_sendmsg+0x80/0x80 [ 134.278724][ T6351] ? lockdep_hardirqs_on+0x98/0x150 [ 134.284065][ T6351] do_syscall_64+0x55/0xa0 [ 134.288616][ T6351] ? clear_bhb_loop+0x40/0x90 [ 134.293990][ T6351] ? clear_bhb_loop+0x40/0x90 [ 134.298973][ T6351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.304910][ T6351] RIP: 0033:0x7faadd99c799 [ 134.309367][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.329020][ T6351] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.337752][ T6351] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 134.346203][ T6351] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 134.354416][ T6351] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 134.362431][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.370646][ T6351] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 134.378700][ T6351] [ 134.400032][ T6344] hsr_slave_1: left promiscuous mode [ 134.698940][ T6356] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.160'. [ 134.751597][ T6356] net_ratelimit: 212 callbacks suppressed [ 134.751613][ T6356] netlink: zone id is out of range [ 134.763664][ T6356] netlink: zone id is out of range [ 134.782095][ T6356] netlink: zone id is out of range [ 134.845514][ T6356] netlink: zone id is out of range [ 134.864933][ T6356] netlink: zone id is out of range [ 134.918004][ T6356] netlink: zone id is out of range [ 134.937489][ T6356] netlink: zone id is out of range [ 134.949858][ T6356] netlink: zone id is out of range [ 134.978602][ T6356] netlink: zone id is out of range [ 135.019168][ T6356] netlink: zone id is out of range [ 135.356507][ T6363] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 135.839216][ T6377] netlink: 830 bytes leftover after parsing attributes in process `syz.3.168'. [ 135.913920][ T6377] IPv6: Can't replace route, no match found [ 135.952542][ T6385] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 136.583053][ T6398] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 136.937971][ T6391] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.173'. [ 137.498097][ T6404] warning: `syz.1.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.950838][ T6419] FAULT_INJECTION: forcing a failure. [ 137.950838][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 137.994843][ T6419] CPU: 0 PID: 6419 Comm: syz.2.183 Not tainted syzkaller #0 [ 138.002213][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.012317][ T6419] Call Trace: [ 138.015640][ T6419] [ 138.018626][ T6419] dump_stack_lvl+0x18c/0x250 [ 138.023383][ T6419] ? show_regs_print_info+0x20/0x20 [ 138.028635][ T6419] ? load_image+0x400/0x400 [ 138.033186][ T6419] ? __might_sleep+0xe0/0xe0 [ 138.037820][ T6419] ? __lock_acquire+0x7d40/0x7d40 [ 138.042902][ T6419] should_fail_ex+0x39d/0x4d0 [ 138.047644][ T6419] should_failslab+0x9/0x20 [ 138.052194][ T6419] slab_pre_alloc_hook+0x59/0x310 [ 138.057275][ T6419] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 138.062946][ T6419] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 138.068619][ T6419] __kmem_cache_alloc_node+0x53/0x250 [ 138.074063][ T6419] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 138.079747][ T6419] __kmalloc_node+0xa4/0x230 [ 138.084397][ T6419] memcg_alloc_slab_cgroups+0x87/0x130 [ 138.089919][ T6419] slab_post_alloc_hook+0xf4/0x4b0 [ 138.095073][ T6419] kmem_cache_alloc_node+0x14c/0x320 [ 138.100427][ T6419] ? __alloc_skb+0x103/0x2c0 [ 138.105080][ T6419] __alloc_skb+0x103/0x2c0 [ 138.109552][ T6419] alloc_skb_with_frags+0xca/0x7b0 [ 138.114707][ T6419] ? verify_lock_unused+0x140/0x140 [ 138.119952][ T6419] ? verify_lock_unused+0x140/0x140 [ 138.125271][ T6419] ? aa_label_sk_perm+0x463/0x5c0 [ 138.130535][ T6419] sock_alloc_send_pskb+0x883/0x9a0 [ 138.135835][ T6419] ? sock_kzfree_s+0x50/0x50 [ 138.140502][ T6419] ? __might_sleep+0xe0/0xe0 [ 138.145911][ T6419] ? mark_lock+0x94/0x320 [ 138.150306][ T6419] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 138.156538][ T6419] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 138.162892][ T6419] unix_stream_sendmsg+0x48b/0xbf0 [ 138.168109][ T6419] ? unix_show_fdinfo+0x270/0x270 [ 138.173273][ T6419] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 138.179732][ T6419] ? aa_sock_msg_perm+0x94/0x150 [ 138.184744][ T6419] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.190090][ T6419] ? security_socket_sendmsg+0x80/0xa0 [ 138.195635][ T6419] ? unix_show_fdinfo+0x270/0x270 [ 138.200733][ T6419] ____sys_sendmsg+0x5ba/0x960 [ 138.205596][ T6419] ? __asan_memset+0x22/0x40 [ 138.210333][ T6419] ? __sys_sendmsg_sock+0x30/0x30 [ 138.215587][ T6419] ? __import_iovec+0x5f2/0x850 [ 138.220521][ T6419] ? import_iovec+0x73/0xa0 [ 138.225086][ T6419] ___sys_sendmsg+0x2a6/0x360 [ 138.229826][ T6419] ? get_pid_task+0x20/0x1e0 [ 138.234502][ T6419] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.239340][ T6419] ? __lock_acquire+0x7d40/0x7d40 [ 138.244451][ T6419] __se_sys_sendmsg+0x1c2/0x2b0 [ 138.249384][ T6419] ? __x64_sys_sendmsg+0x80/0x80 [ 138.254431][ T6419] ? lockdep_hardirqs_on+0x98/0x150 [ 138.259698][ T6419] do_syscall_64+0x55/0xa0 [ 138.264167][ T6419] ? clear_bhb_loop+0x40/0x90 [ 138.268945][ T6419] ? clear_bhb_loop+0x40/0x90 [ 138.273678][ T6419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.279714][ T6419] RIP: 0033:0x7faadd99c799 [ 138.284177][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.304010][ T6419] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.312480][ T6419] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 138.320546][ T6419] RDX: 0000000024040004 RSI: 0000200000000240 RDI: 0000000000000004 [ 138.328722][ T6419] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 138.336827][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.345368][ T6419] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 138.353586][ T6419] [ 138.532213][ T6429] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 138.811119][ T6436] netlink: 763 bytes leftover after parsing attributes in process `syz.2.187'. [ 139.096670][ T6448] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.189'. [ 139.711376][ T6459] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 139.739547][ T6459] FAULT_INJECTION: forcing a failure. [ 139.739547][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 139.771713][ T6459] CPU: 0 PID: 6459 Comm: syz.1.195 Not tainted syzkaller #0 [ 139.779100][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.789210][ T6459] Call Trace: [ 139.792537][ T6459] [ 139.795517][ T6459] dump_stack_lvl+0x18c/0x250 [ 139.800254][ T6459] ? show_regs_print_info+0x20/0x20 [ 139.805510][ T6459] ? load_image+0x400/0x400 [ 139.810068][ T6459] ? __lock_acquire+0x7d40/0x7d40 [ 139.815149][ T6459] should_fail_ex+0x39d/0x4d0 [ 139.819890][ T6459] should_failslab+0x9/0x20 [ 139.824449][ T6459] slab_pre_alloc_hook+0x59/0x310 [ 139.829531][ T6459] ? device_rename+0xb3/0x1e0 [ 139.834260][ T6459] ? device_rename+0xb3/0x1e0 [ 139.839028][ T6459] __kmem_cache_alloc_node+0x53/0x250 [ 139.844472][ T6459] ? device_rename+0xb3/0x1e0 [ 139.849204][ T6459] __kmalloc_node_track_caller+0xa2/0x230 [ 139.854998][ T6459] kstrdup+0x3b/0x80 [ 139.858957][ T6459] device_rename+0xb3/0x1e0 [ 139.863531][ T6459] dev_change_name+0x307/0x8c0 [ 139.868345][ T6459] ? end_current_label_crit_section+0x170/0x170 [ 139.874648][ T6459] ? dev_load+0x21/0x1f0 [ 139.878941][ T6459] ? dev_ioctl+0x5dc/0x1140 [ 139.883500][ T6459] ? dev_alloc_name+0x1d0/0x1d0 [ 139.888415][ T6459] ? full_name_hash+0x92/0xe0 [ 139.893227][ T6459] ? dev_ifsioc+0x316/0xc40 [ 139.897806][ T6459] dev_ioctl+0x5ec/0x1140 [ 139.902195][ T6459] sock_do_ioctl+0x239/0x310 [ 139.906855][ T6459] ? sock_show_fdinfo+0xb0/0xb0 [ 139.911774][ T6459] sock_ioctl+0x5ba/0x7e0 [ 139.916156][ T6459] ? sock_poll+0x3e0/0x3e0 [ 139.920635][ T6459] ? bpf_lsm_file_ioctl+0x9/0x10 [ 139.925618][ T6459] ? security_file_ioctl+0x80/0xa0 [ 139.930785][ T6459] ? sock_poll+0x3e0/0x3e0 [ 139.935247][ T6459] __se_sys_ioctl+0xfd/0x170 [ 139.939888][ T6459] do_syscall_64+0x55/0xa0 [ 139.944357][ T6459] ? clear_bhb_loop+0x40/0x90 [ 139.949081][ T6459] ? clear_bhb_loop+0x40/0x90 [ 139.953813][ T6459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.959758][ T6459] RIP: 0033:0x7f4922f9c799 [ 139.964216][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.983907][ T6459] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.992385][ T6459] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 140.000408][ T6459] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 140.008434][ T6459] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 140.016459][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.024480][ T6459] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 140.032522][ T6459] [ 140.058937][ T6461] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 140.536059][ T6473] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.201'. [ 140.555490][ T6473] net_ratelimit: 212 callbacks suppressed [ 140.555510][ T6473] netlink: zone id is out of range [ 140.603042][ T6473] netlink: zone id is out of range [ 140.614740][ T6473] netlink: zone id is out of range [ 140.635764][ T6473] netlink: zone id is out of range [ 140.862742][ T6482] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 140.918407][ T6482] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.202'. [ 141.229558][ T6491] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 141.244331][ T6491] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 141.254682][ T6491] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 141.293722][ T6493] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 141.309148][ T6493] netlink: 156 bytes leftover after parsing attributes in process `syz.3.207'. [ 141.341753][ T6493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.207'. [ 141.429168][ T6495] netlink: 'syz.1.208': attribute type 10 has an invalid length. [ 141.969199][ T6503] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.212'. [ 142.018357][ T6503] netlink: zone id is out of range [ 142.058807][ T6503] netlink: zone id is out of range [ 142.076815][ T6503] netlink: zone id is out of range [ 142.089544][ T6503] netlink: zone id is out of range [ 142.439595][ T6515] FAULT_INJECTION: forcing a failure. [ 142.439595][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.458887][ T6515] CPU: 1 PID: 6515 Comm: syz.1.217 Not tainted syzkaller #0 [ 142.466262][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.476382][ T6515] Call Trace: [ 142.479713][ T6515] [ 142.482689][ T6515] dump_stack_lvl+0x18c/0x250 [ 142.487436][ T6515] ? show_regs_print_info+0x20/0x20 [ 142.492689][ T6515] ? load_image+0x400/0x400 [ 142.497245][ T6515] ? __lock_acquire+0x7d40/0x7d40 [ 142.502332][ T6515] ? snprintf+0xe9/0x140 [ 142.506635][ T6515] should_fail_ex+0x39d/0x4d0 [ 142.511382][ T6515] _copy_to_user+0x2f/0xa0 [ 142.515862][ T6515] simple_read_from_buffer+0xe7/0x150 [ 142.521300][ T6515] proc_fail_nth_read+0x1e8/0x260 [ 142.526380][ T6515] ? proc_fault_inject_write+0x360/0x360 [ 142.532079][ T6515] ? fsnotify_perm+0x271/0x5e0 [ 142.536902][ T6515] ? proc_fault_inject_write+0x360/0x360 [ 142.542588][ T6515] vfs_read+0x28b/0x970 [ 142.546804][ T6515] ? kernel_read+0x1e0/0x1e0 [ 142.551448][ T6515] ? __fget_files+0x28/0x4b0 [ 142.556083][ T6515] ? __fget_files+0x28/0x4b0 [ 142.560729][ T6515] ? __fget_files+0x43d/0x4b0 [ 142.565480][ T6515] ? __fdget_pos+0x2a3/0x330 [ 142.570121][ T6515] ? ksys_read+0x75/0x260 [ 142.574506][ T6515] ksys_read+0x150/0x260 [ 142.578788][ T6515] ? vfs_write+0x990/0x990 [ 142.583242][ T6515] ? lockdep_hardirqs_on+0x98/0x150 [ 142.588485][ T6515] do_syscall_64+0x55/0xa0 [ 142.592943][ T6515] ? clear_bhb_loop+0x40/0x90 [ 142.597647][ T6515] ? clear_bhb_loop+0x40/0x90 [ 142.602355][ T6515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.608276][ T6515] RIP: 0033:0x7f4922f5cfce [ 142.612712][ T6515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.632349][ T6515] RSP: 002b:00007f4923ec9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.640794][ T6515] RAX: ffffffffffffffda RBX: 00007f4923eca6c0 RCX: 00007f4922f5cfce [ 142.648818][ T6515] RDX: 000000000000000f RSI: 00007f4923eca0a0 RDI: 0000000000000004 [ 142.656812][ T6515] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 142.664827][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.672850][ T6515] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 142.680875][ T6515] [ 142.720404][ T6518] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 143.046907][ T6529] FAULT_INJECTION: forcing a failure. [ 143.046907][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.081875][ T6529] CPU: 1 PID: 6529 Comm: syz.2.222 Not tainted syzkaller #0 [ 143.089247][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.099354][ T6529] Call Trace: [ 143.102670][ T6529] [ 143.105636][ T6529] dump_stack_lvl+0x18c/0x250 [ 143.110403][ T6529] ? show_regs_print_info+0x20/0x20 [ 143.115650][ T6529] ? load_image+0x400/0x400 [ 143.120218][ T6529] ? __might_fault+0xaa/0x120 [ 143.124941][ T6529] ? __lock_acquire+0x7d40/0x7d40 [ 143.130015][ T6529] should_fail_ex+0x39d/0x4d0 [ 143.134755][ T6529] _copy_from_user+0x2f/0xe0 [ 143.139405][ T6529] ____sys_sendmsg+0x2fd/0x960 [ 143.144217][ T6529] ? __lock_acquire+0x7d40/0x7d40 [ 143.149301][ T6529] ? __sys_sendmsg_sock+0x30/0x30 [ 143.154374][ T6529] ? __import_iovec+0x3fa/0x850 [ 143.159292][ T6529] ? import_iovec+0x73/0xa0 [ 143.163842][ T6529] ___sys_sendmsg+0x2a6/0x360 [ 143.168567][ T6529] ? get_pid_task+0x20/0x1e0 [ 143.173634][ T6529] ? __sys_sendmsg+0x2a0/0x2a0 [ 143.178459][ T6529] ? __lock_acquire+0x7d40/0x7d40 [ 143.183560][ T6529] __se_sys_sendmsg+0x1c2/0x2b0 [ 143.188463][ T6529] ? __x64_sys_sendmsg+0x80/0x80 [ 143.193476][ T6529] ? lockdep_hardirqs_on+0x98/0x150 [ 143.198724][ T6529] do_syscall_64+0x55/0xa0 [ 143.203182][ T6529] ? clear_bhb_loop+0x40/0x90 [ 143.207890][ T6529] ? clear_bhb_loop+0x40/0x90 [ 143.212599][ T6529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.218523][ T6529] RIP: 0033:0x7faadd99c799 [ 143.222964][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.242601][ T6529] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.251041][ T6529] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 143.259041][ T6529] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 0000000000000007 [ 143.267039][ T6529] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 143.275044][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.283053][ T6529] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 143.291067][ T6529] [ 143.726609][ T6538] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.226'. [ 143.744239][ T6538] netlink: zone id is out of range [ 143.754489][ T6538] netlink: zone id is out of range [ 144.045925][ T6547] netlink: 'syz.1.230': attribute type 10 has an invalid length. [ 144.367573][ T6555] netlink: 'syz.0.234': attribute type 3 has an invalid length. [ 144.384719][ T6555] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.234'. [ 144.802454][ T6566] lo: entered allmulticast mode [ 145.990170][ T6588] validate_nla: 1 callbacks suppressed [ 145.990199][ T6588] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 146.764455][ T6586] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.245'. [ 146.824114][ T6586] net_ratelimit: 2 callbacks suppressed [ 146.824177][ T6586] netlink: zone id is out of range [ 146.871069][ T6586] netlink: zone id is out of range [ 146.893390][ T6586] netlink: zone id is out of range [ 146.959324][ T6586] netlink: zone id is out of range [ 146.965385][ T6586] netlink: zone id is out of range [ 146.970584][ T6586] netlink: zone id is out of range [ 146.975824][ T6586] netlink: zone id is out of range [ 146.981095][ T6586] netlink: zone id is out of range [ 146.986568][ T6586] netlink: zone id is out of range [ 146.991857][ T6586] netlink: zone id is out of range [ 147.772001][ T6617] netlink: 'syz.2.256': attribute type 10 has an invalid length. [ 149.153589][ T6631] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.260'. [ 149.817757][ T6647] netlink: 'syz.1.267': attribute type 10 has an invalid length. [ 149.839720][ T6652] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 149.950892][ T6652] team0: Port device wlan1 added [ 151.196875][ T6686] netlink: 'syz.2.280': attribute type 10 has an invalid length. [ 152.927810][ T6721] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 152.952699][ T6723] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 154.514194][ T6754] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.303'. [ 154.531695][ T6754] net_ratelimit: 138 callbacks suppressed [ 154.531713][ T6754] netlink: zone id is out of range [ 154.612490][ T6754] netlink: zone id is out of range [ 154.628496][ T6754] netlink: zone id is out of range [ 154.709635][ T6754] netlink: zone id is out of range [ 154.794427][ T6754] netlink: zone id is out of range [ 154.804584][ T6754] netlink: zone id is out of range [ 154.812558][ T6754] netlink: zone id is out of range [ 154.818950][ T6754] netlink: zone id is out of range [ 154.825916][ T6754] netlink: zone id is out of range [ 154.832899][ T6754] netlink: zone id is out of range [ 155.175454][ T6761] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 155.499475][ T6770] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 156.431865][ T6792] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.316'. [ 156.874722][ T6802] netlink: 'syz.1.320': attribute type 10 has an invalid length. [ 157.505722][ T6824] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.329'. [ 158.103954][ T6839] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 158.551346][ T6847] netlink: 'syz.3.339': attribute type 13 has an invalid length. [ 158.854056][ T6856] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.342'. [ 159.126977][ T6859] netlink: 168 bytes leftover after parsing attributes in process `syz.3.345'. [ 159.167951][ T6864] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 160.146617][ T6889] netlink: 830 bytes leftover after parsing attributes in process `syz.0.356'. [ 160.331216][ T6885] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.355'. [ 160.347169][ T6885] net_ratelimit: 286 callbacks suppressed [ 160.347186][ T6885] netlink: zone id is out of range [ 160.363324][ T6885] netlink: zone id is out of range [ 160.369277][ T6889] IPv6: Can't replace route, no match found [ 160.374007][ T6885] netlink: zone id is out of range [ 160.449572][ T6885] netlink: zone id is out of range [ 160.466243][ T6885] netlink: zone id is out of range [ 160.491937][ T6885] netlink: zone id is out of range [ 160.523155][ T6885] netlink: zone id is out of range [ 160.555613][ T6885] netlink: zone id is out of range [ 160.562927][ T6885] netlink: zone id is out of range [ 160.607229][ T6885] netlink: zone id is out of range [ 160.992881][ T6898] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 161.156156][ T6902] netlink: 168 bytes leftover after parsing attributes in process `syz.1.360'. [ 162.107226][ T5783] Bluetooth: hci3: Malformed LE Event: 0x02 [ 162.221948][ T6927] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.371'. [ 163.227878][ T6939] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 165.692609][ T6973] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.383'. [ 165.722910][ T6973] net_ratelimit: 138 callbacks suppressed [ 165.722929][ T6973] netlink: zone id is out of range [ 165.741458][ T6973] netlink: zone id is out of range [ 165.777619][ T6973] netlink: zone id is out of range [ 165.795318][ T6973] netlink: zone id is out of range [ 165.815339][ T6973] netlink: zone id is out of range [ 165.837934][ T6973] netlink: zone id is out of range [ 165.965781][ T6973] netlink: zone id is out of range [ 165.972955][ T6973] netlink: zone id is out of range [ 165.989794][ T6973] netlink: zone id is out of range [ 166.008753][ T6973] netlink: zone id is out of range [ 166.427433][ T6983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 166.641172][ T6994] netlink: 'syz.3.391': attribute type 10 has an invalid length. [ 168.343964][ T7026] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 168.426090][ T7028] FAULT_INJECTION: forcing a failure. [ 168.426090][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 168.472607][ T7028] CPU: 0 PID: 7028 Comm: syz.2.401 Not tainted syzkaller #0 [ 168.480103][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.490500][ T7028] Call Trace: [ 168.493933][ T7028] [ 168.497109][ T7028] dump_stack_lvl+0x18c/0x250 [ 168.502007][ T7028] ? show_regs_print_info+0x20/0x20 [ 168.507400][ T7028] ? load_image+0x400/0x400 [ 168.512213][ T7028] ? __might_sleep+0xe0/0xe0 [ 168.517010][ T7028] ? __lock_acquire+0x7d40/0x7d40 [ 168.522287][ T7028] should_fail_ex+0x39d/0x4d0 [ 168.527229][ T7028] should_failslab+0x9/0x20 [ 168.531901][ T7028] slab_pre_alloc_hook+0x59/0x310 [ 168.537179][ T7028] kmem_cache_alloc_node+0x60/0x320 [ 168.542556][ T7028] ? __alloc_skb+0x103/0x2c0 [ 168.547437][ T7028] __alloc_skb+0x103/0x2c0 [ 168.552083][ T7028] alloc_skb_with_frags+0xca/0x7b0 [ 168.557387][ T7028] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 168.563641][ T7028] sock_alloc_send_pskb+0x883/0x9a0 [ 168.569213][ T7028] ? sock_kzfree_s+0x50/0x50 [ 168.574129][ T7028] ? tomoyo_check_unix_address+0x607/0x7e0 [ 168.580124][ T7028] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 168.586519][ T7028] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 168.592765][ T7028] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 168.599239][ T7028] unix_dgram_sendmsg+0x5a2/0x16d0 [ 168.604649][ T7028] ? aa_sk_perm+0x83c/0x970 [ 168.609448][ T7028] ? unix_dgram_poll+0x680/0x680 [ 168.614620][ T7028] ? tomoyo_socket_sendmsg_permission+0x1da/0x2f0 [ 168.621279][ T7028] ? aa_sock_msg_perm+0x94/0x150 [ 168.626441][ T7028] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.631900][ T7028] ? security_socket_sendmsg+0x80/0xa0 [ 168.637529][ T7028] ? unix_dgram_poll+0x680/0x680 [ 168.642851][ T7028] ____sys_sendmsg+0x5ba/0x960 [ 168.647806][ T7028] ? __lock_acquire+0x7d40/0x7d40 [ 168.653062][ T7028] ? __asan_memset+0x22/0x40 [ 168.657830][ T7028] ? __sys_sendmsg_sock+0x30/0x30 [ 168.663005][ T7028] ? __import_iovec+0x3fa/0x850 [ 168.668141][ T7028] ? import_iovec+0x73/0xa0 [ 168.672868][ T7028] ___sys_sendmsg+0x2a6/0x360 [ 168.677707][ T7028] ? get_pid_task+0x20/0x1e0 [ 168.682522][ T7028] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.687689][ T7028] ? __lock_acquire+0x7d40/0x7d40 [ 168.693194][ T7028] __se_sys_sendmsg+0x1c2/0x2b0 [ 168.698255][ T7028] ? __x64_sys_sendmsg+0x80/0x80 [ 168.703542][ T7028] ? lockdep_hardirqs_on+0x98/0x150 [ 168.708983][ T7028] do_syscall_64+0x55/0xa0 [ 168.713569][ T7028] ? clear_bhb_loop+0x40/0x90 [ 168.718407][ T7028] ? clear_bhb_loop+0x40/0x90 [ 168.723289][ T7028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.729358][ T7028] RIP: 0033:0x7faadd99c799 [ 168.733974][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.753925][ T7028] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.762592][ T7028] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 168.770735][ T7028] RDX: 0000000000000150 RSI: 0000200000000a40 RDI: 0000000000000006 [ 168.778951][ T7028] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 168.787094][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.795233][ T7028] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 168.803561][ T7028] [ 169.851159][ T7043] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.406'. [ 170.539658][ T7063] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 170.743005][ T7075] FAULT_INJECTION: forcing a failure. [ 170.743005][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 170.803743][ T7074] net_ratelimit: 137 callbacks suppressed [ 170.803763][ T7074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.832535][ T7075] CPU: 0 PID: 7075 Comm: syz.3.414 Not tainted syzkaller #0 [ 170.839938][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.850110][ T7075] Call Trace: [ 170.853438][ T7075] [ 170.856411][ T7075] dump_stack_lvl+0x18c/0x250 [ 170.861180][ T7075] ? show_regs_print_info+0x20/0x20 [ 170.866451][ T7075] ? load_image+0x400/0x400 [ 170.871037][ T7075] ? __might_sleep+0xe0/0xe0 [ 170.877787][ T7075] ? __lock_acquire+0x7d40/0x7d40 [ 170.882881][ T7075] should_fail_ex+0x39d/0x4d0 [ 170.887634][ T7075] should_failslab+0x9/0x20 [ 170.892299][ T7075] slab_pre_alloc_hook+0x59/0x310 [ 170.897404][ T7075] ? sk_prot_alloc+0xe7/0x210 [ 170.902249][ T7075] ? sk_prot_alloc+0xe7/0x210 [ 170.906994][ T7075] __kmem_cache_alloc_node+0x53/0x250 [ 170.912460][ T7075] ? sk_prot_alloc+0xe7/0x210 [ 170.917212][ T7075] __kmalloc+0xa4/0x230 [ 170.921447][ T7075] sk_prot_alloc+0xe7/0x210 [ 170.926017][ T7075] ? sk_alloc+0x24/0x360 [ 170.930384][ T7075] sk_alloc+0x3a/0x360 [ 170.934615][ T7075] ? bpf_ctx_init+0x163/0x1a0 [ 170.939540][ T7075] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 170.945159][ T7075] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 170.950628][ T7075] ? __fget_files+0x28/0x4b0 [ 170.955640][ T7075] ? __fget_files+0x28/0x4b0 [ 170.960409][ T7075] ? __fget_files+0x43d/0x4b0 [ 170.965823][ T7075] ? cpu_online+0x60/0x60 [ 170.970405][ T7075] bpf_prog_test_run+0x321/0x390 [ 170.975506][ T7075] __sys_bpf+0x49d/0x890 [ 170.979917][ T7075] ? bpf_link_show_fdinfo+0x390/0x390 [ 170.985389][ T7075] ? lock_chain_count+0x20/0x20 [ 170.990331][ T7075] __x64_sys_bpf+0x7c/0x90 [ 170.994849][ T7075] do_syscall_64+0x55/0xa0 [ 170.999432][ T7075] ? clear_bhb_loop+0x40/0x90 [ 171.004235][ T7075] ? clear_bhb_loop+0x40/0x90 [ 171.009000][ T7075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.014960][ T7075] RIP: 0033:0x7f47d239c799 [ 171.019441][ T7075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.039160][ T7075] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.047645][ T7075] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 171.055765][ T7075] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 171.063794][ T7075] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.071828][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.079861][ T7075] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 171.087917][ T7075] [ 171.281526][ T7078] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.416'. [ 172.446819][ T7094] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 172.456051][ T7094] netlink: 'syz.0.421': attribute type 3 has an invalid length. [ 172.479683][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.421'. [ 172.577532][ T7102] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 172.662025][ T7104] FAULT_INJECTION: forcing a failure. [ 172.662025][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 172.676313][ T7104] CPU: 1 PID: 7104 Comm: syz.1.425 Not tainted syzkaller #0 [ 172.683675][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.693794][ T7104] Call Trace: [ 172.697401][ T7104] [ 172.700376][ T7104] dump_stack_lvl+0x18c/0x250 [ 172.705547][ T7104] ? show_regs_print_info+0x20/0x20 [ 172.710813][ T7104] ? load_image+0x400/0x400 [ 172.715396][ T7104] ? __might_sleep+0xe0/0xe0 [ 172.720215][ T7104] ? __lock_acquire+0x7d40/0x7d40 [ 172.725312][ T7104] should_fail_ex+0x39d/0x4d0 [ 172.730797][ T7104] should_failslab+0x9/0x20 [ 172.735565][ T7104] slab_pre_alloc_hook+0x59/0x310 [ 172.741266][ T7104] ? sk_prot_alloc+0xe7/0x210 [ 172.746056][ T7104] ? sk_prot_alloc+0xe7/0x210 [ 172.750808][ T7104] __kmem_cache_alloc_node+0x53/0x250 [ 172.756267][ T7104] ? sk_prot_alloc+0xe7/0x210 [ 172.761092][ T7104] __kmalloc+0xa4/0x230 [ 172.765328][ T7104] sk_prot_alloc+0xe7/0x210 [ 172.770120][ T7104] ? sk_alloc+0x24/0x360 [ 172.774517][ T7104] sk_alloc+0x3a/0x360 [ 172.778740][ T7104] ? bpf_ctx_init+0x163/0x1a0 [ 172.783471][ T7104] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 172.789079][ T7104] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 172.794505][ T7104] ? __fget_files+0x28/0x4b0 [ 172.799462][ T7104] ? __fget_files+0x28/0x4b0 [ 172.804192][ T7104] ? __fget_files+0x43d/0x4b0 [ 172.808940][ T7104] ? cpu_online+0x60/0x60 [ 172.813507][ T7104] bpf_prog_test_run+0x321/0x390 [ 172.818775][ T7104] __sys_bpf+0x49d/0x890 [ 172.823087][ T7104] ? bpf_link_show_fdinfo+0x390/0x390 [ 172.828525][ T7104] ? lock_chain_count+0x20/0x20 [ 172.833448][ T7104] __x64_sys_bpf+0x7c/0x90 [ 172.837925][ T7104] do_syscall_64+0x55/0xa0 [ 172.842412][ T7104] ? clear_bhb_loop+0x40/0x90 [ 172.847235][ T7104] ? clear_bhb_loop+0x40/0x90 [ 172.851967][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.858007][ T7104] RIP: 0033:0x7f4922f9c799 [ 172.862578][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.882539][ T7104] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.891281][ T7104] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 172.899572][ T7104] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 172.907603][ T7104] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 172.915717][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.923910][ T7104] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 172.931959][ T7104] [ 173.924135][ T7111] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.428'. [ 175.758414][ T7139] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 177.723636][ T7161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.443'. [ 178.473374][ T7165] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 178.930395][ T7169] FAULT_INJECTION: forcing a failure. [ 178.930395][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.962991][ T7169] CPU: 0 PID: 7169 Comm: syz.0.447 Not tainted syzkaller #0 [ 178.970366][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.980473][ T7169] Call Trace: [ 178.983798][ T7169] [ 178.986765][ T7169] dump_stack_lvl+0x18c/0x250 [ 178.991487][ T7169] ? show_regs_print_info+0x20/0x20 [ 178.996716][ T7169] ? load_image+0x400/0x400 [ 179.001245][ T7169] ? __might_fault+0xaa/0x120 [ 179.005948][ T7169] ? __lock_acquire+0x7d40/0x7d40 [ 179.011036][ T7169] should_fail_ex+0x39d/0x4d0 [ 179.015754][ T7169] _copy_from_user+0x2f/0xe0 [ 179.020375][ T7169] bpf_prog_test_run_skb+0x266/0x12b0 [ 179.025776][ T7169] ? __fget_files+0x28/0x4b0 [ 179.030398][ T7169] ? __fget_files+0x28/0x4b0 [ 179.035022][ T7169] ? __fget_files+0x43d/0x4b0 [ 179.039734][ T7169] ? cpu_online+0x60/0x60 [ 179.044085][ T7169] bpf_prog_test_run+0x321/0x390 [ 179.049056][ T7169] __sys_bpf+0x49d/0x890 [ 179.053367][ T7169] ? bpf_link_show_fdinfo+0x390/0x390 [ 179.058791][ T7169] ? lock_chain_count+0x20/0x20 [ 179.063673][ T7169] __x64_sys_bpf+0x7c/0x90 [ 179.068117][ T7169] do_syscall_64+0x55/0xa0 [ 179.072564][ T7169] ? clear_bhb_loop+0x40/0x90 [ 179.077274][ T7169] ? clear_bhb_loop+0x40/0x90 [ 179.081981][ T7169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.087898][ T7169] RIP: 0033:0x7f80c579c799 [ 179.092339][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.111966][ T7169] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.120407][ T7169] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 179.128405][ T7169] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 179.136398][ T7169] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 179.144501][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.152496][ T7169] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 179.160528][ T7169] [ 179.402943][ T7186] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.452'. [ 179.979788][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.116959][ T7201] netlink: 'syz.2.456': attribute type 4 has an invalid length. [ 180.258317][ T7205] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 180.448773][ T7207] netlink: 'syz.0.459': attribute type 3 has an invalid length. [ 180.494755][ T7207] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.459'. [ 181.293913][ T7229] FAULT_INJECTION: forcing a failure. [ 181.293913][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 181.308386][ T7229] CPU: 0 PID: 7229 Comm: syz.0.466 Not tainted syzkaller #0 [ 181.315891][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.326009][ T7229] Call Trace: [ 181.329330][ T7229] [ 181.332310][ T7229] dump_stack_lvl+0x18c/0x250 [ 181.337064][ T7229] ? show_regs_print_info+0x20/0x20 [ 181.342328][ T7229] ? load_image+0x400/0x400 [ 181.346899][ T7229] ? __might_sleep+0xe0/0xe0 [ 181.351545][ T7229] ? __lock_acquire+0x7d40/0x7d40 [ 181.356642][ T7229] should_fail_ex+0x39d/0x4d0 [ 181.361386][ T7229] should_failslab+0x9/0x20 [ 181.365959][ T7229] slab_pre_alloc_hook+0x59/0x310 [ 181.371053][ T7229] ? sk_prot_alloc+0xe7/0x210 [ 181.375787][ T7229] ? sk_prot_alloc+0xe7/0x210 [ 181.380515][ T7229] __kmem_cache_alloc_node+0x53/0x250 [ 181.385954][ T7229] ? sk_prot_alloc+0xe7/0x210 [ 181.390684][ T7229] __kmalloc+0xa4/0x230 [ 181.394897][ T7229] sk_prot_alloc+0xe7/0x210 [ 181.399459][ T7229] ? sk_alloc+0x24/0x360 [ 181.403759][ T7229] sk_alloc+0x3a/0x360 [ 181.407880][ T7229] ? bpf_ctx_init+0x163/0x1a0 [ 181.412641][ T7229] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 181.418247][ T7229] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 181.423682][ T7229] ? __fget_files+0x28/0x4b0 [ 181.428334][ T7229] ? __fget_files+0x28/0x4b0 [ 181.432981][ T7229] ? __fget_files+0x43d/0x4b0 [ 181.437734][ T7229] ? cpu_online+0x60/0x60 [ 181.442132][ T7229] bpf_prog_test_run+0x321/0x390 [ 181.447131][ T7229] __sys_bpf+0x49d/0x890 [ 181.451436][ T7229] ? bpf_link_show_fdinfo+0x390/0x390 [ 181.456882][ T7229] ? lock_chain_count+0x20/0x20 [ 181.461797][ T7229] __x64_sys_bpf+0x7c/0x90 [ 181.466263][ T7229] do_syscall_64+0x55/0xa0 [ 181.470730][ T7229] ? clear_bhb_loop+0x40/0x90 [ 181.475461][ T7229] ? clear_bhb_loop+0x40/0x90 [ 181.480201][ T7229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.486154][ T7229] RIP: 0033:0x7f80c579c799 [ 181.490617][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.510291][ T7229] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.518768][ T7229] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 181.526794][ T7229] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 181.534816][ T7229] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 181.542840][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.550861][ T7229] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 181.558902][ T7229] [ 181.614057][ T7231] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 181.964450][ T7246] FAULT_INJECTION: forcing a failure. [ 181.964450][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.991608][ T7246] CPU: 1 PID: 7246 Comm: syz.3.472 Not tainted syzkaller #0 [ 181.998986][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.009090][ T7246] Call Trace: [ 182.012422][ T7246] [ 182.015398][ T7246] dump_stack_lvl+0x18c/0x250 [ 182.020134][ T7246] ? show_regs_print_info+0x20/0x20 [ 182.025408][ T7246] ? load_image+0x400/0x400 [ 182.029954][ T7246] ? __might_fault+0xaa/0x120 [ 182.034664][ T7246] ? __lock_acquire+0x7d40/0x7d40 [ 182.039722][ T7246] should_fail_ex+0x39d/0x4d0 [ 182.044439][ T7246] _copy_from_iter+0x1d9/0x12e0 [ 182.049401][ T7246] ? slab_post_alloc_hook+0x8a/0x4b0 [ 182.054766][ T7246] ? __virt_addr_valid+0x18c/0x540 [ 182.059933][ T7246] ? __lock_acquire+0x7d40/0x7d40 [ 182.064992][ T7246] ? rcu_is_watching+0x15/0xb0 [ 182.069797][ T7246] ? copyout_mc+0x70/0x70 [ 182.074157][ T7246] ? __virt_addr_valid+0x18c/0x540 [ 182.079300][ T7246] ? __virt_addr_valid+0x18c/0x540 [ 182.084448][ T7246] ? __virt_addr_valid+0x469/0x540 [ 182.089604][ T7246] ? __check_object_size+0x506/0xa20 [ 182.094937][ T7246] netlink_sendmsg+0x76b/0xbf0 [ 182.099740][ T7246] ? netlink_getsockopt+0x590/0x590 [ 182.104978][ T7246] ? aa_sock_msg_perm+0x94/0x150 [ 182.109955][ T7246] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.115277][ T7246] ? security_socket_sendmsg+0x80/0xa0 [ 182.120762][ T7246] ? netlink_getsockopt+0x590/0x590 [ 182.125996][ T7246] ____sys_sendmsg+0x5ba/0x960 [ 182.130792][ T7246] ? __asan_memset+0x22/0x40 [ 182.135414][ T7246] ? __sys_sendmsg_sock+0x30/0x30 [ 182.140476][ T7246] ? __import_iovec+0x5f2/0x850 [ 182.145367][ T7246] ? import_iovec+0x73/0xa0 [ 182.149913][ T7246] ___sys_sendmsg+0x2a6/0x360 [ 182.154650][ T7246] ? get_pid_task+0x20/0x1e0 [ 182.159288][ T7246] ? __sys_sendmsg+0x2a0/0x2a0 [ 182.164152][ T7246] ? __lock_acquire+0x7d40/0x7d40 [ 182.169240][ T7246] __se_sys_sendmsg+0x1c2/0x2b0 [ 182.174127][ T7246] ? __x64_sys_sendmsg+0x80/0x80 [ 182.179109][ T7246] ? lockdep_hardirqs_on+0x98/0x150 [ 182.184344][ T7246] do_syscall_64+0x55/0xa0 [ 182.188804][ T7246] ? clear_bhb_loop+0x40/0x90 [ 182.193511][ T7246] ? clear_bhb_loop+0x40/0x90 [ 182.198216][ T7246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.204131][ T7246] RIP: 0033:0x7f47d239c799 [ 182.208571][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.228210][ T7246] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.236651][ T7246] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 182.244650][ T7246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 182.252653][ T7246] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.260672][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.268679][ T7246] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 182.276698][ T7246] [ 182.393894][ T7251] FAULT_INJECTION: forcing a failure. [ 182.393894][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.410643][ T7251] CPU: 1 PID: 7251 Comm: syz.0.473 Not tainted syzkaller #0 [ 182.418002][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.428191][ T7251] Call Trace: [ 182.431517][ T7251] [ 182.434528][ T7251] dump_stack_lvl+0x18c/0x250 [ 182.439263][ T7251] ? show_regs_print_info+0x20/0x20 [ 182.444540][ T7251] ? load_image+0x400/0x400 [ 182.449100][ T7251] ? __might_fault+0xaa/0x120 [ 182.453835][ T7251] ? __lock_acquire+0x7d40/0x7d40 [ 182.458920][ T7251] should_fail_ex+0x39d/0x4d0 [ 182.464105][ T7251] _copy_to_iter+0x1ce/0x1120 [ 182.468856][ T7251] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 182.474812][ T7251] ? iov_iter_init+0x1e0/0x1e0 [ 182.479636][ T7251] ? __virt_addr_valid+0x18c/0x540 [ 182.484804][ T7251] ? __virt_addr_valid+0x469/0x540 [ 182.489972][ T7251] ? __phys_addr_symbol+0x2f/0x70 [ 182.495068][ T7251] __skb_datagram_iter+0xdb/0x780 [ 182.500148][ T7251] ? tsk_importance+0x150/0x150 [ 182.505051][ T7251] ? skb_copy_datagram_iter+0x200/0x200 [ 182.510787][ T7251] ? tipc_wait_for_rcvmsg+0x640/0x640 [ 182.516229][ T7251] skb_copy_datagram_iter+0xb1/0x200 [ 182.521577][ T7251] tipc_recvmsg+0x7cc/0x1400 [ 182.526241][ T7251] ? tipc_send_packet+0x90/0x90 [ 182.531156][ T7251] ? aa_sock_msg_perm+0x94/0x150 [ 182.536148][ T7251] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 182.541489][ T7251] ? security_socket_recvmsg+0x89/0xb0 [ 182.547003][ T7251] ? tipc_send_packet+0x90/0x90 [ 182.551905][ T7251] ____sys_recvmsg+0x2ce/0x5e0 [ 182.556737][ T7251] ? __sys_recvmsg_sock+0x50/0x50 [ 182.561824][ T7251] ? import_iovec+0x73/0xa0 [ 182.566380][ T7251] ___sys_recvmsg+0x216/0x590 [ 182.571108][ T7251] ? __sys_recvmsg+0x2a0/0x2a0 [ 182.575929][ T7251] ? ksys_write+0x1c4/0x260 [ 182.580504][ T7251] ? __fget_files+0x43d/0x4b0 [ 182.585248][ T7251] __x64_sys_recvmsg+0x20c/0x2e0 [ 182.590242][ T7251] ? ___sys_recvmsg+0x590/0x590 [ 182.595160][ T7251] ? lockdep_hardirqs_on+0x98/0x150 [ 182.600410][ T7251] do_syscall_64+0x55/0xa0 [ 182.604882][ T7251] ? clear_bhb_loop+0x40/0x90 [ 182.609614][ T7251] ? clear_bhb_loop+0x40/0x90 [ 182.614346][ T7251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.620292][ T7251] RIP: 0033:0x7f80c579c799 [ 182.624757][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.644451][ T7251] RSP: 002b:00007f80c6689028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 182.652926][ T7251] RAX: ffffffffffffffda RBX: 00007f80c5a16090 RCX: 00007f80c579c799 [ 182.660958][ T7251] RDX: 0000000040000180 RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.668983][ T7251] RBP: 00007f80c6689090 R08: 0000000000000000 R09: 0000000000000000 [ 182.677012][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.685041][ T7251] R13: 00007f80c5a16128 R14: 00007f80c5a16090 R15: 00007ffefbf9c838 [ 182.693095][ T7251] [ 183.031211][ T7263] FAULT_INJECTION: forcing a failure. [ 183.031211][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 183.070081][ T7263] CPU: 1 PID: 7263 Comm: syz.1.477 Not tainted syzkaller #0 [ 183.077456][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.087555][ T7263] Call Trace: [ 183.090881][ T7263] [ 183.093846][ T7263] dump_stack_lvl+0x18c/0x250 [ 183.098581][ T7263] ? show_regs_print_info+0x20/0x20 [ 183.103827][ T7263] ? load_image+0x400/0x400 [ 183.108381][ T7263] ? __might_sleep+0xe0/0xe0 [ 183.113027][ T7263] ? __lock_acquire+0x7d40/0x7d40 [ 183.118094][ T7263] ? __lock_acquire+0x1273/0x7d40 [ 183.123177][ T7263] should_fail_ex+0x39d/0x4d0 [ 183.127913][ T7263] should_failslab+0x9/0x20 [ 183.132470][ T7263] slab_pre_alloc_hook+0x59/0x310 [ 183.137642][ T7263] kmem_cache_alloc_node+0x60/0x320 [ 183.142892][ T7263] ? __alloc_skb+0x103/0x2c0 [ 183.147545][ T7263] __alloc_skb+0x103/0x2c0 [ 183.152026][ T7263] alloc_skb_with_frags+0xca/0x7b0 [ 183.157184][ T7263] ? mark_lock+0x94/0x320 [ 183.161580][ T7263] ? __lock_acquire+0x1273/0x7d40 [ 183.166655][ T7263] sock_alloc_send_pskb+0x883/0x9a0 [ 183.171924][ T7263] ? sock_kzfree_s+0x50/0x50 [ 183.176567][ T7263] ? verify_lock_unused+0x140/0x140 [ 183.181810][ T7263] ? dev_get_by_index+0x22/0x2d0 [ 183.186800][ T7263] ? dev_get_by_index+0x22/0x2d0 [ 183.191790][ T7263] packet_sendmsg+0x316e/0x4d70 [ 183.196717][ T7263] ? __might_sleep+0xe0/0xe0 [ 183.201357][ T7263] ? verify_lock_unused+0x140/0x140 [ 183.206597][ T7263] ? mark_lock+0x94/0x320 [ 183.210971][ T7263] ? __lock_acquire+0x1273/0x7d40 [ 183.216041][ T7263] ? verify_lock_unused+0x140/0x140 [ 183.221305][ T7263] ? aa_sk_perm+0x83c/0x970 [ 183.225899][ T7263] ? packet_getsockopt+0xad0/0xad0 [ 183.231089][ T7263] ? aa_sock_msg_perm+0x94/0x150 [ 183.236095][ T7263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 183.241430][ T7263] ? security_socket_sendmsg+0x80/0xa0 [ 183.246943][ T7263] ? packet_getsockopt+0xad0/0xad0 [ 183.252120][ T7263] ____sys_sendmsg+0x5ba/0x960 [ 183.256932][ T7263] ? __lock_acquire+0x7d40/0x7d40 [ 183.262016][ T7263] ? __asan_memset+0x22/0x40 [ 183.266656][ T7263] ? __sys_sendmsg_sock+0x30/0x30 [ 183.271725][ T7263] ? __import_iovec+0x5f2/0x850 [ 183.276645][ T7263] ? import_iovec+0x73/0xa0 [ 183.281197][ T7263] ___sys_sendmsg+0x2a6/0x360 [ 183.285920][ T7263] ? get_pid_task+0x20/0x1e0 [ 183.290580][ T7263] ? __sys_sendmsg+0x2a0/0x2a0 [ 183.295420][ T7263] ? __lock_acquire+0x7d40/0x7d40 [ 183.300518][ T7263] __se_sys_sendmsg+0x1c2/0x2b0 [ 183.305426][ T7263] ? __x64_sys_sendmsg+0x80/0x80 [ 183.310423][ T7263] ? lockdep_hardirqs_on+0x98/0x150 [ 183.315676][ T7263] do_syscall_64+0x55/0xa0 [ 183.320145][ T7263] ? clear_bhb_loop+0x40/0x90 [ 183.324866][ T7263] ? clear_bhb_loop+0x40/0x90 [ 183.329590][ T7263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.335542][ T7263] RIP: 0033:0x7f4922f9c799 [ 183.340003][ T7263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.359729][ T7263] RSP: 002b:00007f4923ea9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.368188][ T7263] RAX: ffffffffffffffda RBX: 00007f4923216090 RCX: 00007f4922f9c799 [ 183.376200][ T7263] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 183.384212][ T7263] RBP: 00007f4923ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 183.392230][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.400244][ T7263] R13: 00007f4923216128 R14: 00007f4923216090 R15: 00007ffc30d32658 [ 183.408281][ T7263] [ 183.772890][ T7270] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 185.139202][ T7301] netlink: 'syz.1.488': attribute type 2 has an invalid length. [ 185.188621][ T7301] netlink: 'syz.1.488': attribute type 33 has an invalid length. [ 185.206905][ T7301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.488'. [ 185.255821][ T7305] netlink: 14 bytes leftover after parsing attributes in process `syz.1.488'. [ 188.050003][ T7301] syz.1.488 (7301) used greatest stack depth: 20456 bytes left [ 189.160675][ T7326] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 189.202742][ T7328] netlink: 'syz.1.493': attribute type 10 has an invalid length. [ 189.232039][ T7328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 189.255957][ T7328] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 189.723395][ T7338] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.496'. [ 189.926627][ T7338] netlink: zone id is out of range [ 189.997918][ T7338] netlink: zone id is out of range [ 190.003726][ T7338] netlink: zone id is out of range [ 190.010099][ T7338] netlink: zone id is out of range [ 190.017009][ T7338] netlink: zone id is out of range [ 190.029981][ T7338] netlink: zone id is out of range [ 190.038007][ T7338] netlink: zone id is out of range [ 190.043452][ T7338] netlink: zone id is out of range [ 190.050118][ T7338] netlink: zone id is out of range [ 190.523301][ T7344] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.499'. [ 190.928909][ T7360] netlink: 'syz.2.502': attribute type 2 has an invalid length. [ 191.056691][ T7365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.502'. [ 193.202509][ T7360] netlink: 'syz.2.502': attribute type 33 has an invalid length. [ 193.213285][ T7360] netlink: 152 bytes leftover after parsing attributes in process `syz.2.502'. [ 194.094343][ T7376] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 194.356741][ T7384] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.508'. [ 194.608905][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616202][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.174147][ T7394] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.511'. [ 195.190201][ T7394] net_ratelimit: 137 callbacks suppressed [ 195.190220][ T7394] netlink: zone id is out of range [ 195.205598][ T7394] netlink: zone id is out of range [ 195.211621][ T7394] netlink: zone id is out of range [ 195.219835][ T7394] netlink: zone id is out of range [ 195.225973][ T7394] netlink: zone id is out of range [ 195.232221][ T7394] netlink: zone id is out of range [ 195.239020][ T7394] netlink: zone id is out of range [ 195.245808][ T7394] netlink: zone id is out of range [ 195.251808][ T7394] netlink: zone id is out of range [ 195.266968][ T7394] netlink: zone id is out of range [ 195.907104][ T7406] netlink: 'syz.0.514': attribute type 2 has an invalid length. [ 195.948551][ T7402] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.515'. [ 196.093378][ T7409] netlink: 14 bytes leftover after parsing attributes in process `syz.0.514'. [ 197.889960][ T7413] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 198.878458][ T7424] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 200.608897][ T7451] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.524'. [ 200.624287][ T7451] net_ratelimit: 136 callbacks suppressed [ 200.624306][ T7451] netlink: zone id is out of range [ 200.644909][ T7451] netlink: zone id is out of range [ 200.650414][ T7451] netlink: zone id is out of range [ 200.656710][ T7451] netlink: zone id is out of range [ 200.664912][ T7451] netlink: zone id is out of range [ 200.674935][ T7451] netlink: zone id is out of range [ 200.684962][ T7451] netlink: zone id is out of range [ 200.691686][ T7451] netlink: zone id is out of range [ 200.707277][ T7451] netlink: zone id is out of range [ 200.714947][ T7451] netlink: zone id is out of range [ 201.393430][ T7465] netlink: 'syz.3.528': attribute type 2 has an invalid length. [ 201.528046][ T7465] netlink: 'syz.3.528': attribute type 33 has an invalid length. [ 201.582056][ T7472] netlink: 14 bytes leftover after parsing attributes in process `syz.3.528'. [ 201.724366][ T7465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.528'. [ 202.959341][ T7471] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.530'. [ 203.725281][ T7479] netlink: 'syz.2.531': attribute type 10 has an invalid length. [ 204.814200][ T7494] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 205.939581][ T7496] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.540'. [ 205.966833][ T7496] net_ratelimit: 136 callbacks suppressed [ 205.967062][ T7496] netlink: zone id is out of range [ 205.992134][ T7496] netlink: zone id is out of range [ 206.005348][ T7496] netlink: zone id is out of range [ 206.021786][ T7496] netlink: zone id is out of range [ 206.048628][ T7496] netlink: zone id is out of range [ 206.063564][ T7496] netlink: zone id is out of range [ 206.089391][ T7496] netlink: zone id is out of range [ 206.124060][ T7496] netlink: zone id is out of range [ 206.144959][ T7496] netlink: zone id is out of range [ 206.152604][ T7496] netlink: zone id is out of range [ 206.752745][ T7523] FAULT_INJECTION: forcing a failure. [ 206.752745][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 206.774701][ T7523] CPU: 0 PID: 7523 Comm: syz.0.544 Not tainted syzkaller #0 [ 206.782087][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.792191][ T7523] Call Trace: [ 206.795511][ T7523] [ 206.798476][ T7523] dump_stack_lvl+0x18c/0x250 [ 206.803210][ T7523] ? show_regs_print_info+0x20/0x20 [ 206.808457][ T7523] ? load_image+0x400/0x400 [ 206.813012][ T7523] ? __might_sleep+0xe0/0xe0 [ 206.817647][ T7523] ? __lock_acquire+0x7d40/0x7d40 [ 206.822718][ T7523] should_fail_ex+0x39d/0x4d0 [ 206.827455][ T7523] should_failslab+0x9/0x20 [ 206.832004][ T7523] slab_pre_alloc_hook+0x59/0x310 [ 206.837083][ T7523] ? sk_prot_alloc+0xe7/0x210 [ 206.841811][ T7523] ? sk_prot_alloc+0xe7/0x210 [ 206.846528][ T7523] __kmem_cache_alloc_node+0x53/0x250 [ 206.851971][ T7523] ? sk_prot_alloc+0xe7/0x210 [ 206.856693][ T7523] __kmalloc+0xa4/0x230 [ 206.860921][ T7523] sk_prot_alloc+0xe7/0x210 [ 206.865470][ T7523] ? sk_alloc+0x24/0x360 [ 206.869761][ T7523] sk_alloc+0x3a/0x360 [ 206.873872][ T7523] ? bpf_ctx_init+0x163/0x1a0 [ 206.878626][ T7523] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 206.884224][ T7523] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 206.889722][ T7523] ? __fget_files+0x28/0x4b0 [ 206.894362][ T7523] ? __fget_files+0x28/0x4b0 [ 206.899047][ T7523] ? __fget_files+0x43d/0x4b0 [ 206.903784][ T7523] ? cpu_online+0x60/0x60 [ 206.908157][ T7523] bpf_prog_test_run+0x321/0x390 [ 206.913139][ T7523] __sys_bpf+0x49d/0x890 [ 206.917427][ T7523] ? bpf_link_show_fdinfo+0x390/0x390 [ 206.922859][ T7523] ? lock_chain_count+0x20/0x20 [ 206.927764][ T7523] __x64_sys_bpf+0x7c/0x90 [ 206.932236][ T7523] do_syscall_64+0x55/0xa0 [ 206.936707][ T7523] ? clear_bhb_loop+0x40/0x90 [ 206.941428][ T7523] ? clear_bhb_loop+0x40/0x90 [ 206.946162][ T7523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.952100][ T7523] RIP: 0033:0x7f80c579c799 [ 206.956552][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.976199][ T7523] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.984750][ T7523] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 206.992760][ T7523] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 207.000772][ T7523] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 207.008782][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.016791][ T7523] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 207.024814][ T7523] [ 207.535362][ T7526] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 207.805920][ T7527] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.545'. [ 207.980709][ T7535] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 208.384124][ T7537] FAULT_INJECTION: forcing a failure. [ 208.384124][ T7537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.403703][ T7537] CPU: 0 PID: 7537 Comm: syz.3.549 Not tainted syzkaller #0 [ 208.411189][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.421761][ T7537] Call Trace: [ 208.425715][ T7537] [ 208.428974][ T7537] dump_stack_lvl+0x18c/0x250 [ 208.433762][ T7537] ? show_regs_print_info+0x20/0x20 [ 208.439092][ T7537] ? load_image+0x400/0x400 [ 208.443662][ T7537] ? __might_fault+0xaa/0x120 [ 208.448409][ T7537] ? __lock_acquire+0x7d40/0x7d40 [ 208.453513][ T7537] should_fail_ex+0x39d/0x4d0 [ 208.458272][ T7537] _copy_from_user+0x2f/0xe0 [ 208.463358][ T7537] ____sys_sendmsg+0x2fd/0x960 [ 208.468203][ T7537] ? __sys_sendmsg_sock+0x30/0x30 [ 208.473300][ T7537] ? __import_iovec+0x3fa/0x850 [ 208.478230][ T7537] ? import_iovec+0x73/0xa0 [ 208.482802][ T7537] ___sys_sendmsg+0x2a6/0x360 [ 208.488914][ T7537] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.493809][ T7537] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.498820][ T7537] ? __x64_sys_sendmsg+0x80/0x80 [ 208.503918][ T7537] do_syscall_64+0x55/0xa0 [ 208.508551][ T7537] ? clear_bhb_loop+0x40/0x90 [ 208.514258][ T7537] ? clear_bhb_loop+0x40/0x90 [ 208.519073][ T7537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.525441][ T7537] RIP: 0033:0x7f47d239c799 [ 208.530064][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.549701][ T7537] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.559673][ T7537] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 208.567875][ T7537] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000006 [ 208.577230][ T7537] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.585348][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.593373][ T7537] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 208.601396][ T7537] [ 209.274306][ T7558] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 210.687844][ T7567] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 210.895645][ T7580] FAULT_INJECTION: forcing a failure. [ 210.895645][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 210.914721][ T7580] CPU: 1 PID: 7580 Comm: syz.1.563 Not tainted syzkaller #0 [ 210.922093][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.932198][ T7580] Call Trace: [ 210.935525][ T7580] [ 210.938495][ T7580] dump_stack_lvl+0x18c/0x250 [ 210.943240][ T7580] ? show_regs_print_info+0x20/0x20 [ 210.948493][ T7580] ? load_image+0x400/0x400 [ 210.953044][ T7580] ? __might_sleep+0xe0/0xe0 [ 210.957692][ T7580] ? __lock_acquire+0x7d40/0x7d40 [ 210.962772][ T7580] should_fail_ex+0x39d/0x4d0 [ 210.967513][ T7580] should_failslab+0x9/0x20 [ 210.972067][ T7580] slab_pre_alloc_hook+0x59/0x310 [ 210.977148][ T7580] ? sk_prot_alloc+0xe7/0x210 [ 210.981874][ T7580] ? sk_prot_alloc+0xe7/0x210 [ 210.986604][ T7580] __kmem_cache_alloc_node+0x53/0x250 [ 210.992037][ T7580] ? sk_prot_alloc+0xe7/0x210 [ 210.996777][ T7580] __kmalloc+0xa4/0x230 [ 211.000995][ T7580] sk_prot_alloc+0xe7/0x210 [ 211.005545][ T7580] ? sk_alloc+0x24/0x360 [ 211.009848][ T7580] sk_alloc+0x3a/0x360 [ 211.013969][ T7580] ? bpf_ctx_init+0x163/0x1a0 [ 211.018697][ T7580] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 211.024294][ T7580] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 211.029735][ T7580] ? __fget_files+0x28/0x4b0 [ 211.034385][ T7580] ? __fget_files+0x28/0x4b0 [ 211.039044][ T7580] ? __fget_files+0x43d/0x4b0 [ 211.043791][ T7580] ? cpu_online+0x60/0x60 [ 211.048173][ T7580] bpf_prog_test_run+0x321/0x390 [ 211.053172][ T7580] __sys_bpf+0x49d/0x890 [ 211.057481][ T7580] ? bpf_link_show_fdinfo+0x390/0x390 [ 211.062921][ T7580] ? lock_chain_count+0x20/0x20 [ 211.067836][ T7580] __x64_sys_bpf+0x7c/0x90 [ 211.072316][ T7580] do_syscall_64+0x55/0xa0 [ 211.076811][ T7580] ? clear_bhb_loop+0x40/0x90 [ 211.081548][ T7580] ? clear_bhb_loop+0x40/0x90 [ 211.086288][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.092238][ T7580] RIP: 0033:0x7f4922f9c799 [ 211.096719][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.116377][ T7580] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.124855][ T7580] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 211.132872][ T7580] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 211.140899][ T7580] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 211.148918][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.156937][ T7580] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 211.164982][ T7580] [ 211.438130][ T7582] netlink: 'syz.1.564': attribute type 21 has an invalid length. [ 211.498640][ T7584] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 211.738877][ T7589] FAULT_INJECTION: forcing a failure. [ 211.738877][ T7589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.784547][ T7589] CPU: 0 PID: 7589 Comm: syz.2.567 Not tainted syzkaller #0 [ 211.791924][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.802028][ T7589] Call Trace: [ 211.805354][ T7589] [ 211.808352][ T7589] dump_stack_lvl+0x18c/0x250 [ 211.813092][ T7589] ? show_regs_print_info+0x20/0x20 [ 211.818351][ T7589] ? load_image+0x400/0x400 [ 211.822906][ T7589] ? __lock_acquire+0x7d40/0x7d40 [ 211.827981][ T7589] ? snprintf+0xe9/0x140 [ 211.832282][ T7589] should_fail_ex+0x39d/0x4d0 [ 211.837024][ T7589] _copy_to_user+0x2f/0xa0 [ 211.841488][ T7589] simple_read_from_buffer+0xe7/0x150 [ 211.846928][ T7589] proc_fail_nth_read+0x1e8/0x260 [ 211.852014][ T7589] ? proc_fault_inject_write+0x360/0x360 [ 211.857703][ T7589] ? fsnotify_perm+0x271/0x5e0 [ 211.862530][ T7589] ? proc_fault_inject_write+0x360/0x360 [ 211.868218][ T7589] vfs_read+0x28b/0x970 [ 211.872438][ T7589] ? kernel_read+0x1e0/0x1e0 [ 211.877079][ T7589] ? __fget_files+0x28/0x4b0 [ 211.881719][ T7589] ? __fget_files+0x28/0x4b0 [ 211.886365][ T7589] ? __fget_files+0x43d/0x4b0 [ 211.891106][ T7589] ? __fdget_pos+0x2a3/0x330 [ 211.895749][ T7589] ? ksys_read+0x75/0x260 [ 211.900125][ T7589] ksys_read+0x150/0x260 [ 211.904409][ T7589] ? vfs_write+0x990/0x990 [ 211.908870][ T7589] ? lockdep_hardirqs_on+0x98/0x150 [ 211.914096][ T7589] do_syscall_64+0x55/0xa0 [ 211.918545][ T7589] ? clear_bhb_loop+0x40/0x90 [ 211.923251][ T7589] ? clear_bhb_loop+0x40/0x90 [ 211.927962][ T7589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.933912][ T7589] RIP: 0033:0x7faadd95cfce [ 211.938389][ T7589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.958027][ T7589] RSP: 002b:00007faade775fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.966480][ T7589] RAX: ffffffffffffffda RBX: 00007faade7766c0 RCX: 00007faadd95cfce [ 211.974485][ T7589] RDX: 000000000000000f RSI: 00007faade7760a0 RDI: 0000000000000005 [ 211.982485][ T7589] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 211.990491][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.998485][ T7589] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 212.006502][ T7589] [ 212.673739][ T7601] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 212.770124][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 212.776375][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 212.778006][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 212.782483][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 212.918961][ T5783] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 213.097895][ T7614] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 213.432023][ T7620] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 213.468210][ T7620] netlink: 164 bytes leftover after parsing attributes in process `syz.1.578'. [ 214.037527][ T7631] netlink: 'syz.2.581': attribute type 10 has an invalid length. [ 214.052713][ T7633] netlink: 'syz.3.582': attribute type 21 has an invalid length. [ 214.065108][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.582'. [ 214.243901][ T7630] delete_channel: no stack [ 214.307782][ T7639] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.583'. [ 214.392816][ T7642] FAULT_INJECTION: forcing a failure. [ 214.392816][ T7642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.455337][ T7642] CPU: 0 PID: 7642 Comm: syz.1.584 Not tainted syzkaller #0 [ 214.462710][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.472812][ T7642] Call Trace: [ 214.476145][ T7642] [ 214.479125][ T7642] dump_stack_lvl+0x18c/0x250 [ 214.483881][ T7642] ? show_regs_print_info+0x20/0x20 [ 214.489142][ T7642] ? load_image+0x400/0x400 [ 214.493665][ T7642] ? __might_fault+0xaa/0x120 [ 214.498366][ T7642] ? __lock_acquire+0x7d40/0x7d40 [ 214.503433][ T7642] should_fail_ex+0x39d/0x4d0 [ 214.508178][ T7642] _copy_from_user+0x2f/0xe0 [ 214.512823][ T7642] __sys_bpf+0x23e/0x890 [ 214.517114][ T7642] ? bpf_link_show_fdinfo+0x390/0x390 [ 214.522558][ T7642] ? lock_chain_count+0x20/0x20 [ 214.527555][ T7642] __x64_sys_bpf+0x7c/0x90 [ 214.532023][ T7642] do_syscall_64+0x55/0xa0 [ 214.536497][ T7642] ? clear_bhb_loop+0x40/0x90 [ 214.541224][ T7642] ? clear_bhb_loop+0x40/0x90 [ 214.545959][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.551906][ T7642] RIP: 0033:0x7f4922f9c799 [ 214.556462][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.576120][ T7642] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.584595][ T7642] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 214.592622][ T7642] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 214.600652][ T7642] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 214.608669][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.616692][ T7642] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 214.624729][ T7642] [ 215.073240][ T7653] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 215.879075][ T7665] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 215.903139][ T7662] netlink: 'syz.2.591': attribute type 21 has an invalid length. [ 216.037510][ T7672] FAULT_INJECTION: forcing a failure. [ 216.037510][ T7672] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 216.064726][ T7674] netlink: 'syz.2.595': attribute type 5 has an invalid length. [ 216.072589][ T7672] CPU: 1 PID: 7672 Comm: syz.1.594 Not tainted syzkaller #0 [ 216.079936][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.090039][ T7672] Call Trace: [ 216.093348][ T7672] [ 216.096324][ T7672] dump_stack_lvl+0x18c/0x250 [ 216.101050][ T7672] ? show_regs_print_info+0x20/0x20 [ 216.106319][ T7672] ? load_image+0x400/0x400 [ 216.110863][ T7672] ? __lock_acquire+0x7d40/0x7d40 [ 216.115920][ T7672] ? _copy_from_iter+0x201/0x12e0 [ 216.120984][ T7672] should_fail_ex+0x39d/0x4d0 [ 216.125703][ T7672] prepare_alloc_pages+0x1e2/0x5f0 [ 216.130858][ T7672] __alloc_pages+0x134/0x460 [ 216.135474][ T7672] ? zone_statistics+0x170/0x170 [ 216.140468][ T7672] ? _raw_spin_lock_irqsave+0x100/0x100 [ 216.146048][ T7672] ? copy_page_from_iter+0xe8/0x100 [ 216.151282][ T7672] pipe_write+0x62b/0x1b10 [ 216.155760][ T7672] ? pipe_read+0x1310/0x1310 [ 216.160385][ T7672] ? end_current_label_crit_section+0x149/0x170 [ 216.166656][ T7672] ? common_file_perm+0x198/0x1f0 [ 216.171715][ T7672] vfs_write+0x46c/0x990 [ 216.175996][ T7672] ? file_end_write+0x250/0x250 [ 216.180877][ T7672] ? __fget_files+0x43d/0x4b0 [ 216.185596][ T7672] ? __fdget_pos+0x1d8/0x330 [ 216.190216][ T7672] ? ksys_write+0x75/0x260 [ 216.194708][ T7672] ksys_write+0x150/0x260 [ 216.199077][ T7672] ? __ia32_sys_read+0x90/0x90 [ 216.203927][ T7672] ? lockdep_hardirqs_on+0x98/0x150 [ 216.209506][ T7672] do_syscall_64+0x55/0xa0 [ 216.213960][ T7672] ? clear_bhb_loop+0x40/0x90 [ 216.218662][ T7672] ? clear_bhb_loop+0x40/0x90 [ 216.223377][ T7672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.229304][ T7672] RIP: 0033:0x7f4922f9c799 [ 216.233761][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.253400][ T7672] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.261844][ T7672] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 216.269847][ T7672] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 216.277840][ T7672] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 216.285832][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.293823][ T7672] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 216.301840][ T7672] [ 216.341371][ T7674] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.595'. [ 216.541500][ T7681] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 218.263037][ T7708] validate_nla: 1 callbacks suppressed [ 218.263058][ T7708] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 218.590322][ T7718] FAULT_INJECTION: forcing a failure. [ 218.590322][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.624797][ T7718] CPU: 0 PID: 7718 Comm: syz.0.607 Not tainted syzkaller #0 [ 218.632194][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.642302][ T7718] Call Trace: [ 218.645626][ T7718] [ 218.648599][ T7718] dump_stack_lvl+0x18c/0x250 [ 218.653340][ T7718] ? show_regs_print_info+0x20/0x20 [ 218.658602][ T7718] ? load_image+0x400/0x400 [ 218.663168][ T7718] ? __might_fault+0xaa/0x120 [ 218.667912][ T7718] ? __lock_acquire+0x7d40/0x7d40 [ 218.672978][ T7718] should_fail_ex+0x39d/0x4d0 [ 218.677698][ T7718] _copy_from_iter+0x1d9/0x12e0 [ 218.682585][ T7718] ? slab_post_alloc_hook+0x8a/0x4b0 [ 218.687905][ T7718] ? __virt_addr_valid+0x18c/0x540 [ 218.693047][ T7718] ? __lock_acquire+0x7d40/0x7d40 [ 218.698104][ T7718] ? rcu_is_watching+0x15/0xb0 [ 218.702904][ T7718] ? copyout_mc+0x70/0x70 [ 218.707280][ T7718] ? __virt_addr_valid+0x18c/0x540 [ 218.712419][ T7718] ? __virt_addr_valid+0x18c/0x540 [ 218.717564][ T7718] ? __virt_addr_valid+0x469/0x540 [ 218.722717][ T7718] ? __check_object_size+0x506/0xa20 [ 218.728040][ T7718] netlink_sendmsg+0x76b/0xbf0 [ 218.732864][ T7718] ? netlink_getsockopt+0x590/0x590 [ 218.738120][ T7718] ? aa_sock_msg_perm+0x94/0x150 [ 218.743120][ T7718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 218.748554][ T7718] ? security_socket_sendmsg+0x80/0xa0 [ 218.754048][ T7718] ? netlink_getsockopt+0x590/0x590 [ 218.759288][ T7718] ____sys_sendmsg+0x5ba/0x960 [ 218.764125][ T7718] ? __asan_memset+0x22/0x40 [ 218.768756][ T7718] ? __sys_sendmsg_sock+0x30/0x30 [ 218.773800][ T7718] ? __import_iovec+0x5f2/0x850 [ 218.778777][ T7718] ? import_iovec+0x73/0xa0 [ 218.783341][ T7718] ___sys_sendmsg+0x2a6/0x360 [ 218.788154][ T7718] ? __sys_sendmsg+0x2a0/0x2a0 [ 218.792966][ T7718] ? trace_call_bpf+0xc3/0x6c0 [ 218.797784][ T7718] __se_sys_sendmsg+0x1c2/0x2b0 [ 218.802662][ T7718] ? __x64_sys_sendmsg+0x80/0x80 [ 218.807639][ T7718] ? lockdep_hardirqs_on+0x98/0x150 [ 218.812866][ T7718] do_syscall_64+0x55/0xa0 [ 218.817318][ T7718] ? clear_bhb_loop+0x40/0x90 [ 218.822023][ T7718] ? clear_bhb_loop+0x40/0x90 [ 218.826732][ T7718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.832656][ T7718] RIP: 0033:0x7f80c579c799 [ 218.837100][ T7718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.856822][ T7718] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.865270][ T7718] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 218.873263][ T7718] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 218.881256][ T7718] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 218.889252][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.897248][ T7718] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 218.905262][ T7718] [ 218.945299][ T7720] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 219.099815][ T7727] FAULT_INJECTION: forcing a failure. [ 219.099815][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 219.133215][ T7727] CPU: 1 PID: 7727 Comm: syz.1.610 Not tainted syzkaller #0 [ 219.140607][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.150731][ T7727] Call Trace: [ 219.154066][ T7727] [ 219.157066][ T7727] dump_stack_lvl+0x18c/0x250 [ 219.161837][ T7727] ? show_regs_print_info+0x20/0x20 [ 219.167120][ T7727] ? load_image+0x400/0x400 [ 219.171712][ T7727] ? __might_sleep+0xe0/0xe0 [ 219.176380][ T7727] ? __lock_acquire+0x7d40/0x7d40 [ 219.181489][ T7727] ? mark_lock+0x94/0x320 [ 219.185986][ T7727] should_fail_ex+0x39d/0x4d0 [ 219.190752][ T7727] should_failslab+0x9/0x20 [ 219.195320][ T7727] slab_pre_alloc_hook+0x59/0x310 [ 219.200428][ T7727] kmem_cache_alloc_node+0x60/0x320 [ 219.205707][ T7727] ? __alloc_skb+0x103/0x2c0 [ 219.210381][ T7727] __alloc_skb+0x103/0x2c0 [ 219.214889][ T7727] inet_netconf_notify_devconf+0x173/0x230 [ 219.220776][ T7727] inetdev_event+0x7c8/0x1630 [ 219.225529][ T7727] ? netdevice_event+0x8e0/0x8e0 [ 219.230543][ T7727] ? rdma_roce_rescan_device+0x30/0x30 [ 219.236084][ T7727] ? devinet_exit_net+0x220/0x220 [ 219.241190][ T7727] notifier_call_chain+0x197/0x380 [ 219.246360][ T7727] unregister_netdevice_many_notify+0x100d/0x1900 [ 219.252824][ T7727] ? __queue_work+0xc4e/0x1020 [ 219.257648][ T7727] ? unregister_netdevice_many+0x20/0x20 [ 219.263319][ T7727] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 219.269343][ T7727] ? lock_chain_count+0x20/0x20 [ 219.274229][ T7727] ? __queue_work+0x1af/0x1020 [ 219.279034][ T7727] ? queue_delayed_work_on+0x114/0x200 [ 219.284546][ T7727] unregister_netdevice_queue+0x32c/0x370 [ 219.290308][ T7727] ? delayed_work_timer_fn+0x80/0x80 [ 219.295631][ T7727] ? list_netdevice+0x730/0x730 [ 219.300529][ T7727] ? linkwatch_fire_event+0x17/0x210 [ 219.305865][ T7727] __tun_detach+0xd45/0x1500 [ 219.310518][ T7727] ? tun_chr_open+0x510/0x510 [ 219.315229][ T7727] tun_chr_close+0x10d/0x1c0 [ 219.319862][ T7727] __fput+0x234/0x970 [ 219.323892][ T7727] __se_sys_close+0x15f/0x220 [ 219.328613][ T7727] do_syscall_64+0x55/0xa0 [ 219.333079][ T7727] ? clear_bhb_loop+0x40/0x90 [ 219.337799][ T7727] ? clear_bhb_loop+0x40/0x90 [ 219.342513][ T7727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.348440][ T7727] RIP: 0033:0x7f4922f9c799 [ 219.352889][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.372536][ T7727] RSP: 002b:00007f4923eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 219.380991][ T7727] RAX: ffffffffffffffda RBX: 00007f4923215fa0 RCX: 00007f4922f9c799 [ 219.389004][ T7727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 219.397270][ T7727] RBP: 00007f4923eca090 R08: 0000000000000000 R09: 0000000000000000 [ 219.405270][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.413267][ T7727] R13: 00007f4923216038 R14: 00007f4923215fa0 R15: 00007ffc30d32658 [ 219.421296][ T7727] [ 219.451081][ T7729] FAULT_INJECTION: forcing a failure. [ 219.451081][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 219.465028][ T7729] CPU: 0 PID: 7729 Comm: syz.2.611 Not tainted syzkaller #0 [ 219.472481][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.482581][ T7729] Call Trace: [ 219.485902][ T7729] [ 219.488880][ T7729] dump_stack_lvl+0x18c/0x250 [ 219.493624][ T7729] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.499843][ T7729] ? show_regs_print_info+0x20/0x20 [ 219.505079][ T7729] ? load_image+0x400/0x400 [ 219.509632][ T7729] should_fail_ex+0x39d/0x4d0 [ 219.514369][ T7729] should_failslab+0x9/0x20 [ 219.518930][ T7729] slab_pre_alloc_hook+0x59/0x310 [ 219.524009][ T7729] ? sctp_get_port_local+0xe65/0x1620 [ 219.529430][ T7729] ? sctp_add_bind_addr+0x8c/0x360 [ 219.534589][ T7729] __kmem_cache_alloc_node+0x53/0x250 [ 219.540002][ T7729] ? sctp_add_bind_addr+0x8c/0x360 [ 219.545178][ T7729] kmalloc_trace+0x2a/0xe0 [ 219.549640][ T7729] sctp_add_bind_addr+0x8c/0x360 [ 219.554597][ T7729] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 219.560090][ T7729] sctp_do_bind+0x616/0x990 [ 219.564653][ T7729] sctp_connect_new_asoc+0x26a/0x6a0 [ 219.569996][ T7729] ? __sctp_connect+0xd80/0xd80 [ 219.574895][ T7729] ? __local_bh_enable_ip+0x13a/0x1c0 [ 219.580335][ T7729] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 219.585937][ T7729] ? security_sctp_bind_connect+0x89/0xb0 [ 219.591725][ T7729] sctp_sendmsg+0x1575/0x28c0 [ 219.596468][ T7729] ? sctp_getsockopt+0xb60/0xb60 [ 219.601463][ T7729] ? lock_chain_count+0x20/0x20 [ 219.606373][ T7729] ? inet_send_prepare+0x260/0x260 [ 219.611507][ T7729] ? sctp_getsockopt+0xb60/0xb60 [ 219.616480][ T7729] ? inet_send_prepare+0x260/0x260 [ 219.621676][ T7729] ____sys_sendmsg+0x5ba/0x960 [ 219.626484][ T7729] ? __lock_acquire+0x7d40/0x7d40 [ 219.631552][ T7729] ? __asan_memset+0x22/0x40 [ 219.636173][ T7729] ? __sys_sendmsg_sock+0x30/0x30 [ 219.641259][ T7729] ? __import_iovec+0x5f2/0x850 [ 219.646151][ T7729] ? import_iovec+0x73/0xa0 [ 219.650688][ T7729] ___sys_sendmsg+0x2a6/0x360 [ 219.655393][ T7729] ? __sys_sendmsg+0x2a0/0x2a0 [ 219.660213][ T7729] __se_sys_sendmsg+0x1c2/0x2b0 [ 219.665097][ T7729] ? __x64_sys_sendmsg+0x80/0x80 [ 219.670096][ T7729] ? syscall_enter_from_user_mode+0x2e/0x80 [ 219.676058][ T7729] do_syscall_64+0x55/0xa0 [ 219.680507][ T7729] ? clear_bhb_loop+0x40/0x90 [ 219.685218][ T7729] ? clear_bhb_loop+0x40/0x90 [ 219.689948][ T7729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.695879][ T7729] RIP: 0033:0x7faadd99c799 [ 219.700331][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.719969][ T7729] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.728428][ T7729] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 219.736441][ T7729] RDX: 000000000000c000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 219.744553][ T7729] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 219.752566][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.760564][ T7729] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 219.768598][ T7729] [ 220.244853][ T7750] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 220.435269][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.618'. [ 220.635136][ T7761] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 221.051375][ T7768] netlink: 'syz.0.622': attribute type 21 has an invalid length. [ 221.084839][ T7768] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.760945][ T7779] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 221.874269][ T7786] FAULT_INJECTION: forcing a failure. [ 221.874269][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.890060][ T7786] CPU: 0 PID: 7786 Comm: syz.3.627 Not tainted syzkaller #0 [ 221.897419][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.907529][ T7786] Call Trace: [ 221.910847][ T7786] [ 221.913816][ T7786] dump_stack_lvl+0x18c/0x250 [ 221.918560][ T7786] ? show_regs_print_info+0x20/0x20 [ 221.923816][ T7786] ? load_image+0x400/0x400 [ 221.928378][ T7786] ? __lock_acquire+0x7d40/0x7d40 [ 221.933457][ T7786] ? snprintf+0xe9/0x140 [ 221.937757][ T7786] should_fail_ex+0x39d/0x4d0 [ 221.942489][ T7786] _copy_to_user+0x2f/0xa0 [ 221.946957][ T7786] simple_read_from_buffer+0xe7/0x150 [ 221.952393][ T7786] proc_fail_nth_read+0x1e8/0x260 [ 221.957483][ T7786] ? proc_fault_inject_write+0x360/0x360 [ 221.963171][ T7786] ? fsnotify_perm+0x271/0x5e0 [ 221.967972][ T7786] ? proc_fault_inject_write+0x360/0x360 [ 221.973635][ T7786] vfs_read+0x28b/0x970 [ 221.977842][ T7786] ? kernel_read+0x1e0/0x1e0 [ 221.982464][ T7786] ? __fget_files+0x28/0x4b0 [ 221.987083][ T7786] ? __fget_files+0x28/0x4b0 [ 221.991698][ T7786] ? __fget_files+0x43d/0x4b0 [ 221.996412][ T7786] ? __fdget_pos+0x2a3/0x330 [ 222.001028][ T7786] ? ksys_read+0x75/0x260 [ 222.005388][ T7786] ksys_read+0x150/0x260 [ 222.009663][ T7786] ? vfs_write+0x990/0x990 [ 222.014107][ T7786] ? lockdep_hardirqs_on+0x98/0x150 [ 222.019337][ T7786] do_syscall_64+0x55/0xa0 [ 222.023787][ T7786] ? clear_bhb_loop+0x40/0x90 [ 222.028490][ T7786] ? clear_bhb_loop+0x40/0x90 [ 222.033194][ T7786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.039115][ T7786] RIP: 0033:0x7f47d235cfce [ 222.043556][ T7786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.063197][ T7786] RSP: 002b:00007f47d324cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.071647][ T7786] RAX: ffffffffffffffda RBX: 00007f47d324d6c0 RCX: 00007f47d235cfce [ 222.079670][ T7786] RDX: 000000000000000f RSI: 00007f47d324d0a0 RDI: 0000000000000004 [ 222.087676][ T7786] RBP: 00007f47d324d090 R08: 0000000000000000 R09: 0000000000000000 [ 222.095671][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.103666][ T7786] R13: 00007f47d2616218 R14: 00007f47d2616180 R15: 00007ffc73a778f8 [ 222.111678][ T7786] [ 222.135735][ T7784] netlink: 'syz.1.628': attribute type 25 has an invalid length. [ 222.173212][ T7784] netlink: 'syz.1.628': attribute type 9 has an invalid length. [ 222.244592][ T7789] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 222.286708][ T7789] team0: Device ipvlan1 failed to register rx_handler [ 222.463955][ T7794] FAULT_INJECTION: forcing a failure. [ 222.463955][ T7794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.479868][ T7794] CPU: 1 PID: 7794 Comm: syz.3.630 Not tainted syzkaller #0 [ 222.487253][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.497355][ T7794] Call Trace: [ 222.500685][ T7794] [ 222.503647][ T7794] dump_stack_lvl+0x18c/0x250 [ 222.508393][ T7794] ? show_regs_print_info+0x20/0x20 [ 222.513654][ T7794] ? load_image+0x400/0x400 [ 222.518211][ T7794] ? __might_fault+0xaa/0x120 [ 222.522932][ T7794] ? __lock_acquire+0x7d40/0x7d40 [ 222.528003][ T7794] should_fail_ex+0x39d/0x4d0 [ 222.532719][ T7794] _copy_from_user+0x2f/0xe0 [ 222.537342][ T7794] ___sys_sendmsg+0x1c7/0x360 [ 222.542047][ T7794] ? __sys_sendmsg+0x2a0/0x2a0 [ 222.546879][ T7794] __se_sys_sendmsg+0x1c2/0x2b0 [ 222.551762][ T7794] ? __x64_sys_sendmsg+0x80/0x80 [ 222.556736][ T7794] ? syscall_enter_from_user_mode+0x2e/0x80 [ 222.562662][ T7794] do_syscall_64+0x55/0xa0 [ 222.567120][ T7794] ? clear_bhb_loop+0x40/0x90 [ 222.571825][ T7794] ? clear_bhb_loop+0x40/0x90 [ 222.576528][ T7794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.582477][ T7794] RIP: 0033:0x7f47d239c799 [ 222.586919][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.606564][ T7794] RSP: 002b:00007f47d328f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.615007][ T7794] RAX: ffffffffffffffda RBX: 00007f47d2615fa0 RCX: 00007f47d239c799 [ 222.623024][ T7794] RDX: 0000000000098010 RSI: 0000200000000240 RDI: 000000000000000c [ 222.631021][ T7794] RBP: 00007f47d328f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.639019][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.647009][ T7794] R13: 00007f47d2616038 R14: 00007f47d2615fa0 R15: 00007ffc73a778f8 [ 222.655048][ T7794] [ 222.884055][ T7800] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 223.422387][ T7817] validate_nla: 2 callbacks suppressed [ 223.422405][ T7817] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 224.591178][ T7831] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 224.728486][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 224.776001][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 224.816558][ T7837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 224.873121][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 225.068970][ T7845] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 225.208697][ T7851] FAULT_INJECTION: forcing a failure. [ 225.208697][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.231164][ T7851] CPU: 1 PID: 7851 Comm: syz.2.652 Not tainted syzkaller #0 [ 225.238532][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.248635][ T7851] Call Trace: [ 225.251946][ T7851] [ 225.254913][ T7851] dump_stack_lvl+0x18c/0x250 [ 225.259653][ T7851] ? show_regs_print_info+0x20/0x20 [ 225.264905][ T7851] ? load_image+0x400/0x400 [ 225.269466][ T7851] ? __might_fault+0xaa/0x120 [ 225.274188][ T7851] ? __lock_acquire+0x7d40/0x7d40 [ 225.279265][ T7851] should_fail_ex+0x39d/0x4d0 [ 225.284011][ T7851] _copy_to_user+0x2f/0xa0 [ 225.288478][ T7851] inet_gifconf+0x338/0x500 [ 225.293039][ T7851] ? inet_make_mask+0x70/0x70 [ 225.297764][ T7851] ? __might_fault+0xaa/0x120 [ 225.302466][ T7851] ? __might_fault+0xc6/0x120 [ 225.307167][ T7851] ? __might_fault+0xaa/0x120 [ 225.311877][ T7851] dev_ifconf+0x20e/0x310 [ 225.316237][ T7851] ? sock_diag_rcv_msg+0x600/0x600 [ 225.321386][ T7851] sock_ioctl+0x221/0x7e0 [ 225.325757][ T7851] ? sock_poll+0x3e0/0x3e0 [ 225.330410][ T7851] ? bpf_lsm_file_ioctl+0x9/0x10 [ 225.335401][ T7851] ? security_file_ioctl+0x80/0xa0 [ 225.340572][ T7851] ? sock_poll+0x3e0/0x3e0 [ 225.345027][ T7851] __se_sys_ioctl+0xfd/0x170 [ 225.349664][ T7851] do_syscall_64+0x55/0xa0 [ 225.354115][ T7851] ? clear_bhb_loop+0x40/0x90 [ 225.358822][ T7851] ? clear_bhb_loop+0x40/0x90 [ 225.363534][ T7851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.369459][ T7851] RIP: 0033:0x7faadd99c799 [ 225.373915][ T7851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.393569][ T7851] RSP: 002b:00007faade776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.402015][ T7851] RAX: ffffffffffffffda RBX: 00007faaddc15fa0 RCX: 00007faadd99c799 [ 225.410016][ T7851] RDX: 0000200000000340 RSI: 0000000000008912 RDI: 0000000000000004 [ 225.418013][ T7851] RBP: 00007faade776090 R08: 0000000000000000 R09: 0000000000000000 [ 225.426005][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.434002][ T7851] R13: 00007faaddc16038 R14: 00007faaddc15fa0 R15: 00007fffa5fae698 [ 225.442018][ T7851] [ 225.715025][ T7858] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 226.329696][ T7863] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.656'. [ 226.357302][ T7863] net_ratelimit: 136 callbacks suppressed [ 226.357323][ T7863] netlink: zone id is out of range [ 226.396722][ T7863] netlink: zone id is out of range [ 226.416637][ T7863] netlink: zone id is out of range [ 226.449166][ T7863] netlink: zone id is out of range [ 226.466467][ T7863] netlink: zone id is out of range [ 226.475306][ T7863] netlink: zone id is out of range [ 226.484911][ T7863] netlink: zone id is out of range [ 226.490888][ T7863] netlink: zone id is out of range [ 226.515513][ T7863] netlink: zone id is out of range [ 226.522047][ T7863] netlink: zone id is out of range [ 227.210105][ T7885] netlink: 'syz.0.663': attribute type 21 has an invalid length. [ 227.234815][ T7885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.663'. [ 227.254801][ T7887] netlink: 'syz.0.663': attribute type 21 has an invalid length. [ 227.264349][ T7887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.663'. [ 227.290288][ T7885] netlink: 'syz.0.663': attribute type 39 has an invalid length. [ 227.382000][ T7887] netlink: 'syz.0.663': attribute type 39 has an invalid length. [ 227.827388][ T7893] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 228.742365][ T7910] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.671'. [ 228.934701][ T7912] netlink: 'syz.3.673': attribute type 5 has an invalid length. [ 229.058034][ T7912] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.673'. [ 231.599241][ T7959] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.685'. [ 231.708763][ T7959] net_ratelimit: 138 callbacks suppressed [ 231.708783][ T7959] netlink: zone id is out of range [ 231.726262][ T7959] netlink: zone id is out of range [ 231.753867][ T7959] netlink: zone id is out of range [ 231.777928][ T7959] netlink: zone id is out of range [ 231.825794][ T7959] netlink: zone id is out of range [ 231.831038][ T7959] netlink: zone id is out of range [ 231.878655][ T7959] netlink: zone id is out of range [ 231.883882][ T7959] netlink: zone id is out of range [ 231.907577][ T7959] netlink: zone id is out of range [ 231.912799][ T7959] netlink: zone id is out of range [ 232.201893][ T7970] netlink: 'syz.0.690': attribute type 5 has an invalid length. [ 232.273131][ T7970] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.690'. [ 232.800659][ T7970] syz.0.690 (7970) used greatest stack depth: 20392 bytes left [ 233.847797][ T7984] netlink: 'syz.1.694': attribute type 21 has an invalid length. [ 233.875080][ T7984] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.202329][ T8014] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.699'. [ 236.456299][ T8032] netlink: 'syz.1.704': attribute type 5 has an invalid length. [ 236.580215][ T8032] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.704'. [ 237.610070][ T8056] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.712'. [ 237.625275][ T8056] net_ratelimit: 138 callbacks suppressed [ 237.625292][ T8056] netlink: zone id is out of range [ 237.639306][ T8056] netlink: zone id is out of range [ 237.647017][ T8056] netlink: zone id is out of range [ 237.652376][ T8056] netlink: zone id is out of range [ 240.710004][ T8084] netlink: 'syz.2.716': attribute type 21 has an invalid length. [ 240.737226][ T8084] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.652449][ T8110] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.726'. [ 241.688373][ T8110] netlink: zone id is out of range [ 241.816422][ T8110] netlink: zone id is out of range [ 241.826120][ T8110] netlink: zone id is out of range [ 241.847347][ T8110] netlink: zone id is out of range [ 242.199779][ T8125] FAULT_INJECTION: forcing a failure. [ 242.199779][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.262854][ T8125] CPU: 1 PID: 8125 Comm: syz.3.729 Not tainted syzkaller #0 [ 242.270235][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.280441][ T8125] Call Trace: [ 242.283784][ T8125] [ 242.286771][ T8125] dump_stack_lvl+0x18c/0x250 [ 242.291519][ T8125] ? show_regs_print_info+0x20/0x20 [ 242.296782][ T8125] ? load_image+0x400/0x400 [ 242.301361][ T8125] ? __lock_acquire+0x7d40/0x7d40 [ 242.306453][ T8125] ? __local_bh_enable_ip+0x13a/0x1c0 [ 242.311884][ T8125] should_fail_ex+0x39d/0x4d0 [ 242.316617][ T8125] strncpy_from_user+0x36/0x2d0 [ 242.321504][ T8125] mptcp_setsockopt+0x12ba/0x3390 [ 242.326621][ T8125] ? __fget_files+0x28/0x4b0 [ 242.331244][ T8125] ? pm_nl_exit_net+0x230/0x230 [ 242.336137][ T8125] ? aa_af_perm+0x330/0x330 [ 242.340702][ T8125] ? __fget_files+0x28/0x4b0 [ 242.345337][ T8125] ? __fget_files+0x28/0x4b0 [ 242.349965][ T8125] ? aa_sock_opt_perm+0x74/0x100 [ 242.354943][ T8125] ? sock_common_setsockopt+0x36/0xc0 [ 242.360440][ T8125] ? sock_common_recvmsg+0x190/0x190 [ 242.365876][ T8125] do_sock_setsockopt+0x175/0x1a0 [ 242.370930][ T8125] ? __fdget+0x180/0x210 [ 242.375204][ T8125] __x64_sys_setsockopt+0x182/0x200 [ 242.380509][ T8125] do_syscall_64+0x55/0xa0 [ 242.384969][ T8125] ? clear_bhb_loop+0x40/0x90 [ 242.389682][ T8125] ? clear_bhb_loop+0x40/0x90 [ 242.394397][ T8125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.400332][ T8125] RIP: 0033:0x7f47d239c799 [ 242.404773][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.424417][ T8125] RSP: 002b:00007f47d326e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.432882][ T8125] RAX: ffffffffffffffda RBX: 00007f47d2616090 RCX: 00007f47d239c799 [ 242.440885][ T8125] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000006 [ 242.448886][ T8125] RBP: 00007f47d326e090 R08: 0000000000000004 R09: 0000000000000000 [ 242.456878][ T8125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.464888][ T8125] R13: 00007f47d2616128 R14: 00007f47d2616090 R15: 00007ffc73a778f8 [ 242.472904][ T8125] [ 243.350162][ T8144] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.734'. [ 245.841938][ T8184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.744'. [ 247.964912][ T8216] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.754'. [ 247.989233][ T8216] netlink: zone id is out of range [ 248.058202][ T8216] netlink: zone id is out of range [ 248.085146][ T8216] netlink: zone id is out of range [ 248.093972][ T8216] netlink: zone id is out of range [ 249.120056][ T8228] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 250.030195][ T8249] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.764'. [ 250.061100][ T8249] netlink: zone id is out of range [ 250.137946][ T8249] netlink: zone id is out of range [ 250.144182][ T8249] netlink: zone id is out of range [ 250.149719][ T8249] netlink: zone id is out of range [ 250.687181][ T8262] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 251.086996][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 251.107403][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 251.187174][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 251.207952][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.768'. [ 251.303001][ T8274] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 251.569598][ T8279] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 253.032498][ T8296] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.775'. [ 253.257696][ T8296] netlink: zone id is out of range [ 253.341672][ T8296] netlink: zone id is out of range [ 253.351074][ T8296] netlink: zone id is out of range [ 253.381787][ T8296] netlink: zone id is out of range [ 253.652928][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.779'. [ 254.915413][ T8335] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.788'. [ 254.926758][ T8335] netlink: zone id is out of range [ 254.933367][ T8335] netlink: zone id is out of range [ 254.939138][ T8335] netlink: zone id is out of range [ 254.944334][ T8335] netlink: zone id is out of range [ 255.050243][ T8337] netlink: 'syz.3.790': attribute type 49 has an invalid length. [ 255.138936][ T8341] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 256.048938][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055551][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.389148][ T8370] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.799'. [ 256.438271][ T8370] netlink: zone id is out of range [ 256.471711][ T8370] netlink: zone id is out of range [ 256.853503][ T8372] FAULT_INJECTION: forcing a failure. [ 256.853503][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 256.872057][ T8372] CPU: 0 PID: 8372 Comm: syz.0.800 Not tainted syzkaller #0 [ 256.879430][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.889538][ T8372] Call Trace: [ 256.892859][ T8372] [ 256.895818][ T8372] dump_stack_lvl+0x18c/0x250 [ 256.900546][ T8372] ? show_regs_print_info+0x20/0x20 [ 256.905789][ T8372] ? load_image+0x400/0x400 [ 256.910337][ T8372] ? __might_sleep+0xe0/0xe0 [ 256.914958][ T8372] ? __lock_acquire+0x7d40/0x7d40 [ 256.920021][ T8372] should_fail_ex+0x39d/0x4d0 [ 256.924738][ T8372] should_failslab+0x9/0x20 [ 256.929273][ T8372] slab_pre_alloc_hook+0x59/0x310 [ 256.934371][ T8372] ? br_netlink_fini+0x30/0x30 [ 256.939203][ T8372] kmem_cache_alloc_node+0x60/0x320 [ 256.944483][ T8372] ? __alloc_skb+0x103/0x2c0 [ 256.949146][ T8372] __alloc_skb+0x103/0x2c0 [ 256.953648][ T8372] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 256.958991][ T8372] rtnetlink_event+0x1b7/0x260 [ 256.963793][ T8372] notifier_call_chain+0x197/0x380 [ 256.968951][ T8372] dev_set_mtu_ext+0x463/0x680 [ 256.973777][ T8372] ? dev_validate_mtu+0x170/0x170 [ 256.978847][ T8372] ? __mutex_trylock_common+0x159/0x260 [ 256.984428][ T8372] ? trace_raw_output_contention_end+0xd0/0xd0 [ 256.990616][ T8372] ? do_vfs_ioctl+0x1573/0x1cc0 [ 256.995505][ T8372] dev_set_mtu+0xec/0x1c0 [ 256.999871][ T8372] ? dev_set_mtu_ext+0x680/0x680 [ 257.004872][ T8372] ? __dev_get_by_name+0xe5/0x130 [ 257.009932][ T8372] ? dev_ifsioc+0x4f9/0xc40 [ 257.014478][ T8372] dev_ioctl+0x7b4/0x1140 [ 257.018850][ T8372] sock_do_ioctl+0x239/0x310 [ 257.023473][ T8372] ? sock_show_fdinfo+0xb0/0xb0 [ 257.028409][ T8372] sock_ioctl+0x5ba/0x7e0 [ 257.032816][ T8372] ? sock_poll+0x3e0/0x3e0 [ 257.037322][ T8372] ? bpf_lsm_file_ioctl+0x9/0x10 [ 257.042298][ T8372] ? security_file_ioctl+0x80/0xa0 [ 257.047455][ T8372] ? sock_poll+0x3e0/0x3e0 [ 257.051907][ T8372] __se_sys_ioctl+0xfd/0x170 [ 257.056551][ T8372] do_syscall_64+0x55/0xa0 [ 257.061014][ T8372] ? clear_bhb_loop+0x40/0x90 [ 257.065758][ T8372] ? clear_bhb_loop+0x40/0x90 [ 257.070476][ T8372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.076401][ T8372] RIP: 0033:0x7f80c579c799 [ 257.080853][ T8372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.100490][ T8372] RSP: 002b:00007f80c66aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.108963][ T8372] RAX: ffffffffffffffda RBX: 00007f80c5a15fa0 RCX: 00007f80c579c799 [ 257.116962][ T8372] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 257.124969][ T8372] RBP: 00007f80c66aa090 R08: 0000000000000000 R09: 0000000000000000 [ 257.132970][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.140969][ T8372] R13: 00007f80c5a16038 R14: 00007f80c5a15fa0 R15: 00007ffefbf9c838 [ 257.148992][ T8372] [ 258.590131][ T8399] netlink: 'syz.3.807': attribute type 28 has an invalid length. [ 258.601296][ T8399] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 258.613892][ T8399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.807'. [ 258.740233][ T8400] ------------[ cut here ]------------ [ 258.746168][ T8400] WARNING: CPU: 1 PID: 8400 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 258.756076][ T8400] Modules linked in: [ 258.760031][ T8400] CPU: 1 PID: 8400 Comm: syz.3.807 Not tainted syzkaller #0 [ 258.767665][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.777929][ T8400] RIP: 0010:perf_pending_task+0x35c/0x470 [ 258.784680][ T8400] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 258.798439][ T8404] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.808'. [ 258.804652][ T8400] RSP: 0018:ffffc9000376f9c0 EFLAGS: 00010293 [ 258.804683][ T8400] RAX: ffffffff81b13c0c RBX: ffff888078ff9cc8 RCX: ffff888029110000 [ 258.804702][ T8400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 258.804717][ T8400] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 258.804734][ T8400] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888029110000 [ 258.804752][ T8400] R13: ffff88805b2fbd30 R14: ffff888078ff9a88 R15: 1ffff1100f1ff351 [ 258.804770][ T8400] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 258.804789][ T8400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.804806][ T8400] CR2: 00007fb321922cb8 CR3: 000000005333f000 CR4: 00000000003506e0 [ 258.804827][ T8400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.804842][ T8400] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 258.804857][ T8400] Call Trace: [ 258.804867][ T8400] [ 258.804885][ T8400] task_work_run+0x1d4/0x260 [ 258.804927][ T8400] ? task_work_cancel+0x220/0x220 [ 258.804974][ T8400] do_exit+0x95a/0x2460 [ 258.805025][ T8400] ? put_task_struct+0xc0/0xc0 [ 258.805083][ T8400] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 258.805110][ T8400] ? get_signal+0x1068/0x13f0 [ 258.805135][ T8400] ? lock_chain_count+0x20/0x20 [ 258.805178][ T8400] ? _raw_spin_lock_irq+0xbb/0xf0 [ 258.805211][ T8400] do_group_exit+0x21b/0x2d0 [ 258.805246][ T8400] ? lockdep_hardirqs_on+0x98/0x150 [ 258.805276][ T8400] get_signal+0x12fc/0x13f0 [ 258.805328][ T8400] arch_do_signal_or_restart+0xc2/0x800 [ 258.805365][ T8400] ? lock_chain_count+0x20/0x20 [ 258.805392][ T8400] ? get_sigframe_size+0x20/0x20 [ 258.805459][ T8400] exit_to_user_mode_loop+0x70/0x110 [ 258.805493][ T8400] exit_to_user_mode_prepare+0xee/0x180 [ 258.805527][ T8400] syscall_exit_to_user_mode+0x1a/0x50 [ 258.805555][ T8400] do_syscall_64+0x61/0xa0 [ 258.805587][ T8400] ? clear_bhb_loop+0x40/0x90 [ 258.805613][ T8400] ? clear_bhb_loop+0x40/0x90 [ 258.805643][ T8400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.805669][ T8400] RIP: 0033:0x7f47d239c799 [ 258.805690][ T8400] Code: Unable to access opcode bytes at 0x7f47d239c76f. [ 258.805703][ T8400] RSP: 002b:00007f47d326e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.805729][ T8400] RAX: fffffffffffffe00 RBX: 00007f47d2616098 RCX: 00007f47d239c799 [ 258.805746][ T8400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47d2616098 [ 258.805762][ T8400] RBP: 00007f47d2616090 R08: 0000000000000000 R09: 0000000000000000 [ 258.805777][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.805792][ T8400] R13: 00007f47d2616128 R14: 00007ffc73a77810 R15: 00007ffc73a778f8 [ 258.805831][ T8400] [ 258.805843][ T8400] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.805854][ T8400] CPU: 1 PID: 8400 Comm: syz.3.807 Not tainted syzkaller #0 [ 258.805873][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.805886][ T8400] Call Trace: [ 258.805894][ T8400] [ 258.805902][ T8400] dump_stack_lvl+0x18c/0x250 [ 258.805937][ T8400] ? show_regs_print_info+0x20/0x20 [ 258.805975][ T8400] ? load_image+0x400/0x400 [ 258.806019][ T8400] panic+0x2dc/0x730 [ 258.806058][ T8400] ? bpf_jit_dump+0xd0/0xd0 [ 258.806107][ T8400] __warn+0x2e0/0x470 [ 258.806129][ T8400] ? perf_pending_task+0x35c/0x470 [ 258.806188][ T8400] ? perf_pending_task+0x35c/0x470 [ 258.806220][ T8400] report_bug+0x2be/0x4f0 [ 258.806240][ T8400] ? perf_pending_task+0x35c/0x470 [ 258.806272][ T8400] ? perf_pending_task+0x35c/0x470 [ 258.806303][ T8400] ? perf_pending_task+0x35e/0x470 [ 258.806333][ T8400] handle_bug+0xcf/0x120 [ 258.806446][ T8400] exc_invalid_op+0x1a/0x50 [ 258.806542][ T8400] asm_exc_invalid_op+0x1a/0x20 [ 258.806596][ T8400] RIP: 0010:perf_pending_task+0x35c/0x470 [ 258.806678][ T8400] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 258.806728][ T8400] RSP: 0018:ffffc9000376f9c0 EFLAGS: 00010293 [ 258.806771][ T8400] RAX: ffffffff81b13c0c RBX: ffff888078ff9cc8 RCX: ffff888029110000 [ 258.806812][ T8400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 258.806844][ T8400] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 258.806884][ T8400] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888029110000 [ 258.806924][ T8400] R13: ffff88805b2fbd30 R14: ffff888078ff9a88 R15: 1ffff1100f1ff351 [ 258.806987][ T8400] ? perf_pending_task+0x35c/0x470 [ 258.807104][ T8400] task_work_run+0x1d4/0x260 [ 258.807196][ T8400] ? task_work_cancel+0x220/0x220 [ 258.807294][ T8400] do_exit+0x95a/0x2460 [ 258.807408][ T8400] ? put_task_struct+0xc0/0xc0 [ 258.807496][ T8400] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 258.807558][ T8400] ? get_signal+0x1068/0x13f0 [ 258.807620][ T8400] ? lock_chain_count+0x20/0x20 [ 258.807682][ T8400] ? _raw_spin_lock_irq+0xbb/0xf0 [ 258.807733][ T8400] do_group_exit+0x21b/0x2d0 [ 258.807829][ T8400] ? lockdep_hardirqs_on+0x98/0x150 [ 258.807920][ T8400] get_signal+0x12fc/0x13f0 [ 258.808044][ T8400] arch_do_signal_or_restart+0xc2/0x800 [ 258.808126][ T8400] ? lock_chain_count+0x20/0x20 [ 258.808198][ T8400] ? get_sigframe_size+0x20/0x20 [ 258.808362][ T8400] exit_to_user_mode_loop+0x70/0x110 [ 258.808440][ T8400] exit_to_user_mode_prepare+0xee/0x180 [ 258.808514][ T8400] syscall_exit_to_user_mode+0x1a/0x50 [ 258.808584][ T8400] do_syscall_64+0x61/0xa0 [ 258.808657][ T8400] ? clear_bhb_loop+0x40/0x90 [ 258.808712][ T8400] ? clear_bhb_loop+0x40/0x90 [ 258.808782][ T8400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.808845][ T8400] RIP: 0033:0x7f47d239c799 [ 258.808887][ T8400] Code: Unable to access opcode bytes at 0x7f47d239c76f. [ 258.808910][ T8400] RSP: 002b:00007f47d326e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.808962][ T8400] RAX: fffffffffffffe00 RBX: 00007f47d2616098 RCX: 00007f47d239c799 [ 258.809002][ T8400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47d2616098 [ 258.809034][ T8400] RBP: 00007f47d2616090 R08: 0000000000000000 R09: 0000000000000000 [ 258.809066][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.809097][ T8400] R13: 00007f47d2616128 R14: 00007ffc73a77810 R15: 00007ffc73a778f8 [ 258.809200][ T8400] [ 258.816082][ T8400] Kernel Offset: disabled