last executing test programs: 21.328797213s ago: executing program 3 (id=11795): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x20405, 0x0, 0x0, 0xc}, {0x8004, 0x5, 0x10009, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 21.183018746s ago: executing program 3 (id=11796): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fdffff2100000000548d00000013000000950000000000003f42d7152d441cdff301603db68a7e93a28dd271d5ec55b730ae8306642462c80127e7829baa763838b06dc1a688d30ab3fbd3240ccf270c14b63ef2aa63bde64004b3"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0xd, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0xd2, 0x0, 0x0, 0x30c21, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x121b0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x80040000, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x80048400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x43802700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 19.072957837s ago: executing program 0 (id=11801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)="0000000000000002", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18.887905582s ago: executing program 0 (id=11806): socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000040)="c906c46b8d4b1be7c5bc9345c46b46", 0x0, 0x0, 0x0, 0x7, 0x1, 0x4}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18.768884375s ago: executing program 2 (id=11807): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) 18.659266597s ago: executing program 1 (id=11808): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000006008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 18.397983984s ago: executing program 3 (id=11809): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x20405, 0x0, 0x0, 0xc}, {0x8004, 0x5, 0x10009, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 18.332437145s ago: executing program 1 (id=11810): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x20040004) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)=""/4139, 0x102b}, {&(0x7f00000029c0)=""/4118, 0x1016}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000240)=""/106, 0x6a}], 0x5}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x100000, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x3e, 0x0, 0xa, 0x32e}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) 18.250139227s ago: executing program 2 (id=11811): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, [@generic={0x73, 0x1, 0x1, 0x8e}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 18.248760497s ago: executing program 0 (id=11819): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x97}, [@ldst={0x2, 0x0, 0xb, 0x0, 0x0, 0xe00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 18.1231071s ago: executing program 3 (id=11812): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0xe600, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x65, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900000100f8ff00000000bfa200000000000007020000f8ff040000000085edffffc20000009500000000000000006a0000000000a9425d7ae8fe0bdd22"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080)) 18.12144106s ago: executing program 0 (id=11821): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x20405, 0x0, 0x0, 0xc}, {0x8004, 0x5, 0x10009, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 17.765944069s ago: executing program 0 (id=11813): perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307d", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff3a) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e3704", 0x25}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x527, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000100"/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x4, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x3}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8924, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0xf, 0x0, 0x0, 0x0, 0x7ff0, 0x4172, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x40}, 0x14105, 0x2e, 0x200, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 17.365300109s ago: executing program 1 (id=11814): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1b, &(0x7f0000000100)=r3, 0x4) 17.257823881s ago: executing program 2 (id=11815): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1db5c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00eab9cc1800000000000000e6d60000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, &(0x7f0000000200)=r5, 0x21) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000000000000630200000600000000000000", @ANYRES32=r2, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x0, 0x4e}, 0x23) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 17.173018064s ago: executing program 0 (id=11816): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0xa840) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000040)=""/186, 0xba}], 0x3}, 0x120) socket$kcm(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000280)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="d742124d532276ca059e977784c13a3a925697cd051a703022484c87d1b769431f9a77d8bcf33f397889b836f24a874cf0627eeafadcced5c0a9f92a3492e18b38eb4194af39d896a37c4650", 0x4c}], 0x1, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18}}], 0xd8}, 0x1) r6 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188002ac0f000300", 0x2e}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 17.171324834s ago: executing program 1 (id=11817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b405000000000000611080000000000063013900230000009500090900008c87a4f6c04167077f65ce9ea5a46ad6716d9d4815c15ca4b90d412544c95e1050d04136f5d779bebfa11fbdd19544ec3c930a8747d4a91b113d632d860b87583678dfc263d8e87c62fde6e41b8af3877f742d0be278b44ba33cd9aa61717290509bda53e7f26598ae0ba3aea70e3a16932933473fcbd505354ac7df7aa811d0d8c7546a755c0c4bd179e878d61ca28807bc279ff20682def8b1661ef2084ffd4f0200000000333b73"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth0_vlan', 0x32, 0x32}, 0xd) 17.159411474s ago: executing program 3 (id=11818): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1b, &(0x7f0000000100)=r3, 0x4) (fail_nth: 2) 17.058249746s ago: executing program 1 (id=11820): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x90}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r0}) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000780), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x3}}, 0x80, 0x0}, 0x810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={0xffffffffffffffff, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000002a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[], 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000002d40)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002940)=[{&(0x7f0000000040)="e07655b55f61f6f5bf4ee66ba8dc548fe0330c638a7b630a49b82f28ed7ca352fb8fa611019e4c6674dc95cf7eaa334a853f1fb1721c6e9800e456a85ca62cf29932f1903d037fbdb6085a0c22ee45464b7a2dd0f8618b5ee4949d9f0f333978eee889c46d8200b9bfe7dc92da70cb1f56578d88c991310a3f444dee96243e680ec6e85cce7de9597cf990894797cd733dedf605670774", 0x97}, {&(0x7f0000000100)="982e47476f720e5f12d9b99a1f47b40649bde0928f9e1a9bc2d7994a2d5fe22e29058aa624a1040f871a5f02c2dafb47f2d3fcb9560571f44f66346a22d587dfdaa42e05e78e768aaf6e1368db1b7e4b798a6f53ede43b078cb3763cb8e46fcb7e29ef7ce2f54be794858e7f6da266339f87cf4a7cf254e6d75f353c587a99f5c418119b0921469ab4f92a21bb442c806ad2fa82cc8ba10466e4440ac0987e6565e053637607b6d8f81b172850415c8ac0206bf672def7db08be832d3f5824df9422e443f5d8c330cd729c4a6176a0ab7f879358c265b26f464b52c290473c98c814e56b", 0xe4}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="f99cdba7ac5fba8626779f087bb0baaa6ddda8a75eff4e3c18b7552078e07e8ab3b8d79a1eb9e3ebfdc90ead00de40f99bdfcc1d95f620221be70729769b70874bc869c657577762d753fc3991c62db6b93b3cc56f73b963d110fd38572a1b6d8a2601d79ffa3bd061dea9d8fa2319e3088d4d88edd10c994abba13adeb93339079bf1a6da7fcb5d50197ced399f0a374c5b", 0x92}, {&(0x7f0000002880)="da86bf6647b20a6e909bf35f9a8f4c5b83fefe4b6fd9281b15b9bf4b219df07910cf51d2a90c38e093d6973e3d4725a8efe5106c2151ffc589b180c7acc11e6ce04ab34bb056a226853eaee614a5f7becafdec90cd404835081111e93b2e7c7c44590f1dd7264859460890b2125c8e8066f04077dea86b5548a4704e70333635148d22a592cd45884f13373d5bcf0c0a2ff2cba79cfc", 0x96}], 0x5, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1400000000000000000000000700000000000000000000001c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac1414bb7f00000100000000140000000000000000000000010000000000008000000700140000000000000000000000020000000900000000000000140000000000000000000000010000000100200000000000"], 0x80}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 16.692824545s ago: executing program 3 (id=11822): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9cb5) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) 16.690735095s ago: executing program 2 (id=11823): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x20405, 0x0, 0x0, 0xc}, {0x8004, 0x5, 0x10009, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 16.616684557s ago: executing program 2 (id=11824): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a80016002000044004000000035c0461c1d67f6f94007134cf6efb80fea007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 16.547481038s ago: executing program 1 (id=11825): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x2, 0x0, 0x8000000000000001, 0x80805, 0x4a1fbc8b84ee8d0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10004, 0x7, 0x9, 0x3, 0xfffffffffffffd27, 0x84eb, 0x2, 0x0, 0x6, 0x0, 0x400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa725, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x2, 0x0, 0x8000000000000001, 0x80805, 0x4a1fbc8b84ee8d0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10004, 0x7, 0x9, 0x3, 0xfffffffffffffd27, 0x84eb, 0x2, 0x0, 0x6, 0x0, 0x400}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa725, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 762.875542ms ago: executing program 32 (id=11825): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x2, 0x0, 0x8000000000000001, 0x80805, 0x4a1fbc8b84ee8d0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10004, 0x7, 0x9, 0x3, 0xfffffffffffffd27, 0x84eb, 0x2, 0x0, 0x6, 0x0, 0x400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa725, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x2, 0x0, 0x8000000000000001, 0x80805, 0x4a1fbc8b84ee8d0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10004, 0x7, 0x9, 0x3, 0xfffffffffffffd27, 0x84eb, 0x2, 0x0, 0x6, 0x0, 0x400}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa725, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 0s ago: executing program 2 (id=11827): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="e0b9545dd30a", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x2, 0x9}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r5, 0x0, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e9", 0x2a}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000312", 0x2d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) kernel console output (not intermixed with test programs): promiscuous mode [ 2380.337442][ T7533] syzkaller0: entered promiscuous mode [ 2380.343134][ T7533] syzkaller0: entered allmulticast mode [ 2381.467666][ T7554] netlink: 'syz.0.10785': attribute type 10 has an invalid length. [ 2382.633011][ T7578] netlink: 'syz.3.10795': attribute type 10 has an invalid length. [ 2383.085143][ T7568] syzkaller0: entered promiscuous mode [ 2383.105304][ T7568] syzkaller0: entered allmulticast mode [ 2383.894290][ T7597] delete_channel: no stack [ 2383.899091][ T7597] delete_channel: no stack [ 2384.155262][ T7608] netlink: 'syz.0.10806': attribute type 10 has an invalid length. [ 2384.747827][ T7611] syzkaller0: entered promiscuous mode [ 2384.781141][ T7611] syzkaller0: entered allmulticast mode [ 2385.417517][ T7636] netlink: 'syz.3.10817': attribute type 25 has an invalid length. [ 2385.436044][ T7636] netlink: 'syz.3.10817': attribute type 10 has an invalid length. [ 2385.452240][ T7638] netlink: 'syz.1.10818': attribute type 10 has an invalid length. [ 2387.055514][ T7674] syzkaller0: entered promiscuous mode [ 2387.074886][ T7674] syzkaller0: entered allmulticast mode [ 2390.267101][ T7709] netlink: 'syz.2.10848': attribute type 10 has an invalid length. [ 2390.449767][ T7709] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 2390.789239][ T7719] netlink: 'syz.1.10853': attribute type 10 has an invalid length. [ 2391.008911][ T7732] veth1_macvtap: left promiscuous mode [ 2391.020730][ T7732] macsec0: entered allmulticast mode [ 2391.097702][ T7733] veth1_macvtap: entered promiscuous mode [ 2391.112667][ T7733] veth1_macvtap: entered allmulticast mode [ 2391.158154][ T7733] macsec0: entered promiscuous mode [ 2392.559736][ T7771] FAULT_INJECTION: forcing a failure. [ 2392.559736][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.595367][ T7771] CPU: 0 PID: 7771 Comm: syz.2.10871 Not tainted syzkaller #0 [ 2392.602905][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2392.613325][ T7771] Call Trace: [ 2392.616624][ T7771] [ 2392.619563][ T7771] dump_stack_lvl+0x18c/0x250 [ 2392.624268][ T7771] ? show_regs_print_info+0x20/0x20 [ 2392.629487][ T7771] ? load_image+0x420/0x420 [ 2392.634108][ T7771] ? __might_sleep+0xe0/0xe0 [ 2392.638798][ T7771] ? __lock_acquire+0x7d80/0x7d80 [ 2392.643894][ T7771] ? is_dynamic_key+0x260/0x260 [ 2392.648802][ T7771] should_fail_ex+0x394/0x4c0 [ 2392.653514][ T7771] should_failslab+0x9/0x20 [ 2392.658039][ T7771] slab_pre_alloc_hook+0x59/0x300 [ 2392.663092][ T7771] kmem_cache_alloc_node+0x5e/0x310 [ 2392.668310][ T7771] ? __alloc_skb+0x103/0x2c0 [ 2392.672936][ T7771] __alloc_skb+0x103/0x2c0 [ 2392.677368][ T7771] __ip_append_data+0x2acf/0x3bf0 [ 2392.682413][ T7771] ? _local_bh_enable+0xa0/0xa0 [ 2392.687291][ T7771] ? ip_route_output_key_hash+0x13d/0x330 [ 2392.693033][ T7771] ? raw_send_hdrinc+0x1150/0x1150 [ 2392.698165][ T7771] ? mark_lock+0x94/0x320 [ 2392.702523][ T7771] ? ip_setup_cork+0x840/0x840 [ 2392.707299][ T7771] ? ipv4_mtu+0x313/0x430 [ 2392.711651][ T7771] ? ip_setup_cork+0x527/0x840 [ 2392.716465][ T7771] ? lockdep_hardirqs_on+0x98/0x150 [ 2392.721866][ T7771] ip_append_data+0x10d/0x180 [ 2392.726559][ T7771] ? raw_send_hdrinc+0x1150/0x1150 [ 2392.731708][ T7771] raw_sendmsg+0x155e/0x1ba0 [ 2392.736345][ T7771] ? compat_raw_ioctl+0x70/0x70 [ 2392.741327][ T7771] ? aa_sk_perm+0x83c/0x970 [ 2392.745859][ T7771] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 2392.752291][ T7771] ? aa_sock_msg_perm+0x94/0x150 [ 2392.757238][ T7771] ? sock_rps_record_flow+0x19/0x3f0 [ 2392.762547][ T7771] ? inet_sendmsg+0x7e/0x2a0 [ 2392.767148][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2392.772467][ T7771] ? inet_send_prepare+0x250/0x250 [ 2392.777628][ T7771] ____sys_sendmsg+0x61b/0x980 [ 2392.782433][ T7771] ? __asan_memset+0x22/0x40 [ 2392.787069][ T7771] ? __sys_sendmsg_sock+0x30/0x30 [ 2392.792120][ T7771] ? __import_iovec+0x3fa/0x850 [ 2392.796994][ T7771] ? import_iovec+0x73/0xa0 [ 2392.801514][ T7771] ___sys_sendmsg+0x2a6/0x360 [ 2392.806209][ T7771] ? get_pid_task+0x20/0x1e0 [ 2392.810819][ T7771] ? __sys_sendmsg+0x2b0/0x2b0 [ 2392.815617][ T7771] ? __lock_acquire+0x7d80/0x7d80 [ 2392.820702][ T7771] __se_sys_sendmsg+0x1d0/0x2c0 [ 2392.825577][ T7771] ? __x64_sys_sendmsg+0x80/0x80 [ 2392.830554][ T7771] ? lockdep_hardirqs_on+0x98/0x150 [ 2392.835780][ T7771] do_syscall_64+0x55/0xb0 [ 2392.840214][ T7771] ? clear_bhb_loop+0x40/0x90 [ 2392.844908][ T7771] ? clear_bhb_loop+0x40/0x90 [ 2392.849687][ T7771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2392.855600][ T7771] RIP: 0033:0x7fb39e59e0d9 [ 2392.860037][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2392.879650][ T7771] RSP: 002b:00007fb39f413028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2392.888084][ T7771] RAX: ffffffffffffffda RBX: 00007fb39e825fa0 RCX: 00007fb39e59e0d9 [ 2392.896068][ T7771] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2392.904076][ T7771] RBP: 00007fb39f413090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.912056][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.920122][ T7771] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2392.928119][ T7771] [ 2393.237125][ T7781] netlink: 'syz.2.10874': attribute type 25 has an invalid length. [ 2393.276440][ T7781] netlink: 'syz.2.10874': attribute type 10 has an invalid length. [ 2393.718211][ T7798] netlink: 'syz.0.10883': attribute type 4 has an invalid length. [ 2394.106212][ T7811] netlink: 'syz.3.10889': attribute type 25 has an invalid length. [ 2394.142487][ T7811] netlink: 'syz.3.10889': attribute type 10 has an invalid length. [ 2395.042795][ T7826] netlink: 'syz.1.10893': attribute type 3 has an invalid length. [ 2395.062391][ T7826] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10893'. [ 2395.138842][ T7824] netlink: 'syz.1.10893': attribute type 16 has an invalid length. [ 2395.212945][ T7824] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10893'. [ 2395.547772][ T7834] netlink: 'syz.3.10897': attribute type 10 has an invalid length. [ 2395.560238][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10897'. [ 2395.591576][ T7834] batman_adv: batadv0: Adding interface: veth0_vlan [ 2395.622103][ T7834] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.661543][ T7834] batman_adv: batadv0: Interface activated: veth0_vlan [ 2395.998907][ T7825] netlink: 'syz.2.10894': attribute type 10 has an invalid length. [ 2396.078546][ T7825] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10894'. [ 2396.419971][ T7844] netlink: 'syz.1.10900': attribute type 10 has an invalid length. [ 2399.761177][ T7888] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.10914'. [ 2399.816515][ T7889] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10914'. [ 2399.844351][ T7888] netlink: 'syz.0.10914': attribute type 4 has an invalid length. [ 2399.859806][ T7888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10914'. [ 2400.249130][ T7895] netlink: 'syz.0.10917': attribute type 25 has an invalid length. [ 2400.267624][ T7895] netlink: 'syz.0.10917': attribute type 10 has an invalid length. [ 2400.676083][ T7901] netlink: 'syz.3.10919': attribute type 10 has an invalid length. [ 2401.789812][ T7931] netlink: 'syz.3.10930': attribute type 25 has an invalid length. [ 2401.799434][ T7931] netlink: 'syz.3.10930': attribute type 10 has an invalid length. [ 2402.425230][ T7953] sctp: [Deprecated]: syz.3.10940 (pid 7953) Use of int in maxseg socket option. [ 2402.425230][ T7953] Use struct sctp_assoc_value instead [ 2403.086105][ T7970] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10945'. [ 2403.814723][ T7983] netlink: 'syz.3.10953': attribute type 13 has an invalid length. [ 2403.841156][ T7983] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.10953'. [ 2403.862749][ T7986] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10953'. [ 2404.438395][ T7994] netlink: 'syz.1.10956': attribute type 13 has an invalid length. [ 2404.454914][ T7994] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10956'. [ 2404.470598][ T7994] erspan0: refused to change device tx_queue_len [ 2404.812591][ T8005] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10958'. [ 2405.055697][ T8020] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.10964'. [ 2405.248887][ T8026] FAULT_INJECTION: forcing a failure. [ 2405.248887][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.265826][ T8026] CPU: 0 PID: 8026 Comm: syz.1.10967 Not tainted syzkaller #0 [ 2405.273432][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2405.283501][ T8026] Call Trace: [ 2405.286803][ T8026] [ 2405.289738][ T8026] dump_stack_lvl+0x18c/0x250 [ 2405.294427][ T8026] ? sctp_sendmsg+0x1519/0x27b0 [ 2405.299322][ T8026] ? ___sys_sendmsg+0x2a6/0x360 [ 2405.304206][ T8026] ? show_regs_print_info+0x20/0x20 [ 2405.309427][ T8026] ? load_image+0x420/0x420 [ 2405.313955][ T8026] should_fail_ex+0x394/0x4c0 [ 2405.318685][ T8026] should_failslab+0x9/0x20 [ 2405.323223][ T8026] slab_pre_alloc_hook+0x59/0x300 [ 2405.328289][ T8026] ? sctp_add_bind_addr+0x8c/0x360 [ 2405.333419][ T8026] __kmem_cache_alloc_node+0x53/0x250 [ 2405.338825][ T8026] ? sctp_add_bind_addr+0x8c/0x360 [ 2405.343973][ T8026] kmalloc_trace+0x2a/0xe0 [ 2405.348515][ T8026] sctp_add_bind_addr+0x8c/0x360 [ 2405.353480][ T8026] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2405.359246][ T8026] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2405.364986][ T8026] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2405.371062][ T8026] ? sctp_v6_is_any+0x64/0x70 [ 2405.375742][ T8026] ? sctp_copy_one_addr+0x8c/0x350 [ 2405.380880][ T8026] sctp_bind_addr_copy+0xb3/0x3c0 [ 2405.385913][ T8026] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2405.392254][ T8026] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2405.397635][ T8026] ? __sctp_connect+0xd80/0xd80 [ 2405.402635][ T8026] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2405.408036][ T8026] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2405.413608][ T8026] ? security_sctp_bind_connect+0x89/0xb0 [ 2405.419335][ T8026] sctp_sendmsg+0x1519/0x27b0 [ 2405.424040][ T8026] ? sctp_getsockopt+0xb60/0xb60 [ 2405.429268][ T8026] ? aa_af_perm+0x330/0x330 [ 2405.433781][ T8026] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2405.440208][ T8026] ? sock_rps_record_flow+0x19/0x3f0 [ 2405.445504][ T8026] ? inet_sendmsg+0xce/0x2a0 [ 2405.450116][ T8026] ? inet_send_prepare+0x250/0x250 [ 2405.455414][ T8026] ____sys_sendmsg+0x61b/0x980 [ 2405.460186][ T8026] ? __asan_memset+0x22/0x40 [ 2405.464811][ T8026] ? __sys_sendmsg_sock+0x30/0x30 [ 2405.469847][ T8026] ? __import_iovec+0x5f2/0x850 [ 2405.474748][ T8026] ? import_iovec+0x73/0xa0 [ 2405.479351][ T8026] ___sys_sendmsg+0x2a6/0x360 [ 2405.484031][ T8026] ? get_pid_task+0x20/0x1e0 [ 2405.488630][ T8026] ? __sys_sendmsg+0x2b0/0x2b0 [ 2405.493408][ T8026] ? __lock_acquire+0x7d80/0x7d80 [ 2405.498476][ T8026] __se_sys_sendmsg+0x1d0/0x2c0 [ 2405.503337][ T8026] ? __x64_sys_sendmsg+0x80/0x80 [ 2405.508341][ T8026] ? lockdep_hardirqs_on+0x98/0x150 [ 2405.513590][ T8026] do_syscall_64+0x55/0xb0 [ 2405.518211][ T8026] ? clear_bhb_loop+0x40/0x90 [ 2405.522925][ T8026] ? clear_bhb_loop+0x40/0x90 [ 2405.527670][ T8026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2405.533773][ T8026] RIP: 0033:0x7f7c2ab9e0d9 [ 2405.538206][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2405.557826][ T8026] RSP: 002b:00007f7c2b988028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2405.566257][ T8026] RAX: ffffffffffffffda RBX: 00007f7c2ae25fa0 RCX: 00007f7c2ab9e0d9 [ 2405.574335][ T8026] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2405.582438][ T8026] RBP: 00007f7c2b988090 R08: 0000000000000000 R09: 0000000000000000 [ 2405.590433][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2405.598431][ T8026] R13: 00007f7c2ae26038 R14: 00007f7c2ae25fa0 R15: 00007ffee2593598 [ 2405.606613][ T8026] [ 2405.869805][ T8035] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.10971'. [ 2405.907972][ T8038] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10972'. [ 2405.945503][ T8038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10972'. [ 2406.533989][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.546669][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.848852][ T8068] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.10983'. [ 2406.886642][ T8044] syzkaller0: entered promiscuous mode [ 2406.892409][ T8044] syzkaller0: entered allmulticast mode [ 2406.926875][ T8063] netlink: 'syz.3.10982': attribute type 28 has an invalid length. [ 2406.936597][ T8063] netlink: 'syz.3.10982': attribute type 29 has an invalid length. [ 2408.158215][ T8091] __nla_validate_parse: 4 callbacks suppressed [ 2408.158271][ T8091] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10992'. [ 2408.672018][ T8111] syzkaller0: entered promiscuous mode [ 2408.677587][ T8111] syzkaller0: entered allmulticast mode [ 2409.089919][ T8121] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11003'. [ 2409.995828][ T8124] netlink: 99136 bytes leftover after parsing attributes in process `syz.1.11004'. [ 2410.138508][ T8130] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.186620][ T8130] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.262473][ T8131] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.281820][ T8136] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.311698][ T8138] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.339723][ T8130] netlink: 'syz.2.11006': attribute type 29 has an invalid length. [ 2410.703896][ T8151] netlink: 'syz.1.11014': attribute type 25 has an invalid length. [ 2410.729465][ T8151] netlink: 'syz.1.11014': attribute type 10 has an invalid length. [ 2410.840690][ T8152] syzkaller0: entered promiscuous mode [ 2410.857765][ T8152] syzkaller0: entered allmulticast mode [ 2411.088943][ T8163] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11016'. [ 2411.848327][ T8166] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11017'. [ 2412.043342][ T8156] syzkaller0: entered promiscuous mode [ 2412.079666][ T8156] syzkaller0: entered allmulticast mode [ 2412.291012][ T8174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11020'. [ 2412.380272][ T8181] netlink: 'syz.1.11023': attribute type 10 has an invalid length. [ 2412.581265][ T8183] netlink: 'syz.3.11024': attribute type 25 has an invalid length. [ 2412.602981][ T8183] netlink: 'syz.3.11024': attribute type 10 has an invalid length. [ 2412.735223][ T8190] syzkaller0: entered promiscuous mode [ 2412.761529][ T8190] syzkaller0: entered allmulticast mode [ 2413.553692][ T8195] netlink: 99136 bytes leftover after parsing attributes in process `syz.1.11028'. [ 2413.761968][ T8205] netlink: 'syz.0.11032': attribute type 10 has an invalid length. [ 2413.798649][ T8205] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11032'. [ 2413.844094][ T8205] netlink: 'syz.0.11032': attribute type 10 has an invalid length. [ 2413.870790][ T8211] netlink: 'syz.2.11034': attribute type 10 has an invalid length. [ 2413.899650][ T8211] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11034'. [ 2413.932949][ T8211] netlink: 'syz.2.11034': attribute type 10 has an invalid length. [ 2414.116793][ T8223] netlink: 'syz.0.11038': attribute type 10 has an invalid length. [ 2414.158400][ T8225] netlink: 'syz.3.11037': attribute type 25 has an invalid length. [ 2414.193706][ T8225] netlink: 'syz.3.11037': attribute type 10 has an invalid length. [ 2415.378934][ T8238] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11041'. [ 2415.902292][ T8229] syzkaller0: entered promiscuous mode [ 2415.918156][ T8229] syzkaller0: entered allmulticast mode [ 2416.750602][ T8269] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11052'. [ 2418.373596][ T8297] FAULT_INJECTION: forcing a failure. [ 2418.373596][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2418.375501][ T8283] syzkaller0: entered promiscuous mode [ 2418.408143][ T8297] CPU: 0 PID: 8297 Comm: syz.0.11061 Not tainted syzkaller #0 [ 2418.415700][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2418.425786][ T8297] Call Trace: [ 2418.429088][ T8297] [ 2418.432043][ T8297] dump_stack_lvl+0x18c/0x250 [ 2418.436773][ T8297] ? show_regs_print_info+0x20/0x20 [ 2418.442013][ T8297] ? load_image+0x420/0x420 [ 2418.446601][ T8297] ? __might_fault+0xaa/0x120 [ 2418.451309][ T8297] ? __lock_acquire+0x7d80/0x7d80 [ 2418.456459][ T8297] should_fail_ex+0x394/0x4c0 [ 2418.461172][ T8297] _copy_from_iter+0x1cd/0x1290 [ 2418.466055][ T8297] ? rcu_is_watching+0x15/0xb0 [ 2418.470857][ T8297] ? copyout_mc+0x70/0x70 [ 2418.475216][ T8297] ? __virt_addr_valid+0x10c/0x380 [ 2418.480359][ T8297] ? __virt_addr_valid+0x10c/0x380 [ 2418.485499][ T8297] ? __virt_addr_valid+0x10c/0x380 [ 2418.490646][ T8297] ? __check_object_size+0x4fc/0xa40 [ 2418.495973][ T8297] netlink_sendmsg+0x76b/0xbf0 [ 2418.500774][ T8297] ? netlink_getsockopt+0x590/0x590 [ 2418.506055][ T8297] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2418.511645][ T8297] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2418.516968][ T8297] ? security_socket_sendmsg+0x80/0xa0 [ 2418.522455][ T8297] ? netlink_getsockopt+0x590/0x590 [ 2418.527792][ T8297] ____sys_sendmsg+0x61b/0x980 [ 2418.532604][ T8297] ? __asan_memset+0x22/0x40 [ 2418.537230][ T8297] ? __sys_sendmsg_sock+0x30/0x30 [ 2418.542286][ T8297] ? __import_iovec+0x5f2/0x850 [ 2418.547273][ T8297] ? import_iovec+0x73/0xa0 [ 2418.551814][ T8297] ___sys_sendmsg+0x2a6/0x360 [ 2418.556528][ T8297] ? __sys_sendmsg+0x2b0/0x2b0 [ 2418.561480][ T8297] ? trace_call_bpf+0xc3/0x6c0 [ 2418.566334][ T8297] __se_sys_sendmsg+0x1d0/0x2c0 [ 2418.571228][ T8297] ? perf_trace_preemptirq_template+0x269/0x330 [ 2418.577506][ T8297] ? __x64_sys_sendmsg+0x80/0x80 [ 2418.582500][ T8297] ? lockdep_hardirqs_on+0x98/0x150 [ 2418.587746][ T8297] do_syscall_64+0x55/0xb0 [ 2418.592198][ T8297] ? clear_bhb_loop+0x40/0x90 [ 2418.596911][ T8297] ? clear_bhb_loop+0x40/0x90 [ 2418.601624][ T8297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2418.607543][ T8297] RIP: 0033:0x7f69d679e0d9 [ 2418.611987][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2418.631716][ T8297] RSP: 002b:00007f69d758b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2418.640159][ T8297] RAX: ffffffffffffffda RBX: 00007f69d6a25fa0 RCX: 00007f69d679e0d9 [ 2418.648258][ T8297] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2418.656255][ T8297] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2418.664253][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2418.672335][ T8297] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2418.680402][ T8297] [ 2418.757870][ T8283] syzkaller0: entered allmulticast mode [ 2418.779449][ T8300] validate_nla: 2 callbacks suppressed [ 2418.779470][ T8300] netlink: 'syz.2.11062': attribute type 25 has an invalid length. [ 2418.803788][ T8300] netlink: 'syz.2.11062': attribute type 10 has an invalid length. [ 2419.187224][ T8309] netlink: 'syz.0.11066': attribute type 25 has an invalid length. [ 2419.205805][ T8309] netlink: 'syz.0.11066': attribute type 3 has an invalid length. [ 2419.239432][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11066'. [ 2419.434999][ T8307] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11065'. [ 2419.816672][ T8327] netlink: 'syz.2.11073': attribute type 25 has an invalid length. [ 2419.880519][ T8327] netlink: 'syz.2.11073': attribute type 10 has an invalid length. [ 2420.583651][ T8329] syzkaller0: entered promiscuous mode [ 2420.589219][ T8329] syzkaller0: entered allmulticast mode [ 2420.590556][ T8343] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11078'. [ 2421.083009][ T8358] netlink: 'syz.1.11084': attribute type 21 has an invalid length. [ 2421.110334][ T8358] netlink: 'syz.1.11084': attribute type 4 has an invalid length. [ 2421.473392][ T8369] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11089'. [ 2421.549701][ T8371] netlink: 'syz.0.11088': attribute type 25 has an invalid length. [ 2421.577396][ T8371] netlink: 'syz.0.11088': attribute type 10 has an invalid length. [ 2421.940560][ T8373] syzkaller0: entered promiscuous mode [ 2421.982498][ T8373] syzkaller0: entered allmulticast mode [ 2422.386408][ T8387] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11093'. [ 2423.031240][ T8375] syzkaller0: entered promiscuous mode [ 2423.062185][ T8375] syzkaller0: entered allmulticast mode [ 2423.259624][ T8384] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.11092'. [ 2423.867982][ T8411] validate_nla: 1 callbacks suppressed [ 2423.868019][ T8411] netlink: 'syz.1.11099': attribute type 10 has an invalid length. [ 2423.901346][ T8406] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11100'. [ 2424.411399][ T8417] netlink: 'syz.3.11101': attribute type 25 has an invalid length. [ 2424.422311][ T8417] netlink: 'syz.3.11101': attribute type 10 has an invalid length. [ 2426.197716][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11103'. [ 2426.239865][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.976349][ T8421] bridge_slave_0 (unregistering): left allmulticast mode [ 2427.986195][ T8421] bridge_slave_0 (unregistering): left promiscuous mode [ 2427.998764][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.099757][ T8426] syzkaller0: entered promiscuous mode [ 2428.110051][ T8426] syzkaller0: entered allmulticast mode [ 2428.414395][ T8454] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11110'. [ 2429.012989][ T8465] netlink: 'syz.3.11114': attribute type 25 has an invalid length. [ 2429.023088][ T8465] netlink: 'syz.3.11114': attribute type 10 has an invalid length. [ 2429.955018][ T8491] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11122'. [ 2429.973744][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11123'. [ 2430.639010][ T8499] netlink: 'syz.3.11126': attribute type 25 has an invalid length. [ 2430.682739][ T8499] netlink: 'syz.3.11126': attribute type 10 has an invalid length. [ 2430.735966][ T8500] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11125'. [ 2430.783644][ T8498] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11125'. [ 2431.023813][ T8503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11127'. [ 2431.088325][ T8482] syzkaller0: entered promiscuous mode [ 2431.109904][ T8482] syzkaller0: entered allmulticast mode [ 2431.817034][ T8517] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11133'. [ 2431.967384][ T8524] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2432.220439][ T8526] netlink: 'syz.3.11136': attribute type 25 has an invalid length. [ 2432.241794][ T8526] netlink: 'syz.3.11136': attribute type 10 has an invalid length. [ 2433.939386][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11142'. [ 2434.151889][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11142'. [ 2434.718709][ T8560] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11143'. [ 2434.921839][ T8572] netlink: 'syz.3.11147': attribute type 25 has an invalid length. [ 2434.930883][ T8572] netlink: 'syz.3.11147': attribute type 10 has an invalid length. [ 2436.090045][ T8595] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11157'. [ 2436.514299][ T8605] netlink: 'syz.2.11160': attribute type 25 has an invalid length. [ 2436.572224][ T8605] netlink: 'syz.2.11160': attribute type 10 has an invalid length. [ 2436.600468][ T8588] syzkaller0: entered promiscuous mode [ 2436.635462][ T8588] syzkaller0: entered allmulticast mode [ 2436.967662][ T8618] FAULT_INJECTION: forcing a failure. [ 2436.967662][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2436.982137][ T8618] CPU: 0 PID: 8618 Comm: syz.0.11165 Not tainted syzkaller #0 [ 2436.989671][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2436.999930][ T8618] Call Trace: [ 2437.003224][ T8618] [ 2437.006170][ T8618] dump_stack_lvl+0x18c/0x250 [ 2437.010874][ T8618] ? show_regs_print_info+0x20/0x20 [ 2437.016091][ T8618] ? load_image+0x420/0x420 [ 2437.020617][ T8618] ? __lock_acquire+0x7d80/0x7d80 [ 2437.025666][ T8618] ? snprintf+0xe9/0x140 [ 2437.029933][ T8618] should_fail_ex+0x394/0x4c0 [ 2437.034632][ T8618] _copy_to_user+0x2f/0xa0 [ 2437.039089][ T8618] simple_read_from_buffer+0xe7/0x150 [ 2437.044479][ T8618] proc_fail_nth_read+0x1e8/0x260 [ 2437.049529][ T8618] ? proc_fault_inject_write+0x360/0x360 [ 2437.055182][ T8618] ? fsnotify_perm+0x271/0x5e0 [ 2437.059971][ T8618] ? proc_fault_inject_write+0x360/0x360 [ 2437.065626][ T8618] vfs_read+0x298/0x990 [ 2437.069808][ T8618] ? kernel_read+0x1e0/0x1e0 [ 2437.074418][ T8618] ? __fget_files+0x28/0x460 [ 2437.079025][ T8618] ? __fget_files+0x3fc/0x460 [ 2437.083724][ T8618] ? __fdget_pos+0x2a3/0x330 [ 2437.088329][ T8618] ? ksys_read+0x74/0x260 [ 2437.092678][ T8618] ksys_read+0x151/0x260 [ 2437.096940][ T8618] ? vfs_write+0x9a0/0x9a0 [ 2437.101375][ T8618] ? lockdep_hardirqs_on+0x98/0x150 [ 2437.106593][ T8618] do_syscall_64+0x55/0xb0 [ 2437.111021][ T8618] ? clear_bhb_loop+0x40/0x90 [ 2437.115725][ T8618] ? clear_bhb_loop+0x40/0x90 [ 2437.120413][ T8618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2437.126317][ T8618] RIP: 0033:0x7f69d675e90e [ 2437.130851][ T8618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2437.150470][ T8618] RSP: 002b:00007f69d758afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2437.158992][ T8618] RAX: ffffffffffffffda RBX: 00007f69d758b6c0 RCX: 00007f69d675e90e [ 2437.166977][ T8618] RDX: 000000000000000f RSI: 00007f69d758b0a0 RDI: 0000000000000004 [ 2437.174962][ T8618] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2437.182944][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.190945][ T8618] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2437.198943][ T8618] [ 2437.316584][ T8623] netlink: 'syz.3.11174': attribute type 21 has an invalid length. [ 2437.326548][ T8623] netlink: 'syz.3.11174': attribute type 6 has an invalid length. [ 2437.335435][ T8623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11174'. [ 2437.605554][ T8628] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11169'. [ 2437.990212][ T8643] netlink: 'syz.0.11176': attribute type 7 has an invalid length. [ 2438.009941][ T8643] netlink: 'syz.0.11176': attribute type 6 has an invalid length. [ 2438.692844][ T8647] syzkaller0: entered promiscuous mode [ 2438.700972][ T8647] syzkaller0: entered allmulticast mode [ 2438.892491][ T8660] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11181'. [ 2439.979506][ T8674] netlink: 'syz.3.11185': attribute type 8 has an invalid length. [ 2440.012377][ T8674] netlink: 'syz.3.11185': attribute type 1 has an invalid length. [ 2440.021864][ T8674] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11185'. [ 2440.832193][ T8697] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11192'. [ 2441.369340][ T8694] syzkaller0: entered promiscuous mode [ 2441.382354][ T8694] syzkaller0: entered allmulticast mode [ 2441.446334][ T8705] FAULT_INJECTION: forcing a failure. [ 2441.446334][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.535769][ T8705] CPU: 0 PID: 8705 Comm: syz.1.11194 Not tainted syzkaller #0 [ 2441.543314][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2441.553501][ T8705] Call Trace: [ 2441.556798][ T8705] [ 2441.559741][ T8705] dump_stack_lvl+0x18c/0x250 [ 2441.564440][ T8705] ? show_regs_print_info+0x20/0x20 [ 2441.569652][ T8705] ? load_image+0x420/0x420 [ 2441.574186][ T8705] ? __might_sleep+0xe0/0xe0 [ 2441.578797][ T8705] ? __lock_acquire+0x7d80/0x7d80 [ 2441.583841][ T8705] should_fail_ex+0x394/0x4c0 [ 2441.588628][ T8705] should_failslab+0x9/0x20 [ 2441.593153][ T8705] slab_pre_alloc_hook+0x59/0x300 [ 2441.598299][ T8705] ? __get_vm_area_node+0x125/0x370 [ 2441.603542][ T8705] __kmem_cache_alloc_node+0x53/0x250 [ 2441.608965][ T8705] ? __get_vm_area_node+0x125/0x370 [ 2441.614196][ T8705] kmalloc_node_trace+0x26/0xe0 [ 2441.619074][ T8705] __get_vm_area_node+0x125/0x370 [ 2441.624126][ T8705] __vmalloc_node_range+0x36f/0x1320 [ 2441.629438][ T8705] ? netlink_sendmsg+0x602/0xbf0 [ 2441.634387][ T8705] ? netlink_insert+0x1094/0x1390 [ 2441.639431][ T8705] ? netlink_insert+0x2ba/0x1390 [ 2441.644387][ T8705] ? free_vm_area+0x50/0x50 [ 2441.648912][ T8705] ? netlink_sendmsg+0x602/0xbf0 [ 2441.653888][ T8705] vmalloc+0x79/0x90 [ 2441.657801][ T8705] ? netlink_sendmsg+0x602/0xbf0 [ 2441.662760][ T8705] netlink_sendmsg+0x602/0xbf0 [ 2441.667632][ T8705] ? netlink_getsockopt+0x590/0x590 [ 2441.672847][ T8705] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2441.678431][ T8705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2441.683760][ T8705] ? security_socket_sendmsg+0x80/0xa0 [ 2441.689335][ T8705] ? netlink_getsockopt+0x590/0x590 [ 2441.694563][ T8705] ____sys_sendmsg+0x61b/0x980 [ 2441.699365][ T8705] ? __asan_memset+0x22/0x40 [ 2441.703975][ T8705] ? __sys_sendmsg_sock+0x30/0x30 [ 2441.709109][ T8705] ? __import_iovec+0x3fa/0x850 [ 2441.713987][ T8705] ? import_iovec+0x73/0xa0 [ 2441.718539][ T8705] ___sys_sendmsg+0x2a6/0x360 [ 2441.723241][ T8705] ? __sys_sendmsg+0x2b0/0x2b0 [ 2441.728053][ T8705] ? trace_call_bpf+0xc3/0x6c0 [ 2441.732855][ T8705] __se_sys_sendmsg+0x1d0/0x2c0 [ 2441.737725][ T8705] ? perf_trace_preemptirq_template+0x269/0x330 [ 2441.743987][ T8705] ? __x64_sys_sendmsg+0x80/0x80 [ 2441.748951][ T8705] ? lockdep_hardirqs_on+0x98/0x150 [ 2441.754193][ T8705] do_syscall_64+0x55/0xb0 [ 2441.758629][ T8705] ? clear_bhb_loop+0x40/0x90 [ 2441.763328][ T8705] ? clear_bhb_loop+0x40/0x90 [ 2441.768020][ T8705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2441.773926][ T8705] RIP: 0033:0x7f7c2ab9e0d9 [ 2441.778365][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2441.798099][ T8705] RSP: 002b:00007f7c2b988028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.806553][ T8705] RAX: ffffffffffffffda RBX: 00007f7c2ae25fa0 RCX: 00007f7c2ab9e0d9 [ 2441.814629][ T8705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2441.822750][ T8705] RBP: 00007f7c2b988090 R08: 0000000000000000 R09: 0000000000000000 [ 2441.830750][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.838732][ T8705] R13: 00007f7c2ae26038 R14: 00007f7c2ae25fa0 R15: 00007ffee2593598 [ 2441.846738][ T8705] [ 2441.868771][ T8705] syz.1.11194: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2441.900197][ T8705] CPU: 0 PID: 8705 Comm: syz.1.11194 Not tainted syzkaller #0 [ 2441.907737][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2441.917825][ T8705] Call Trace: [ 2441.921135][ T8705] [ 2441.924096][ T8705] dump_stack_lvl+0x18c/0x250 [ 2441.928987][ T8705] ? show_regs_print_info+0x20/0x20 [ 2441.934229][ T8705] ? load_image+0x420/0x420 [ 2441.938785][ T8705] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2441.945237][ T8705] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2441.951777][ T8705] warn_alloc+0x246/0x340 [ 2441.956142][ T8705] ? __get_vm_area_node+0x125/0x370 [ 2441.961387][ T8705] ? zone_watermark_ok_safe+0x230/0x230 [ 2441.966969][ T8705] ? rcu_is_watching+0x15/0xb0 [ 2441.971777][ T8705] ? __get_vm_area_node+0x356/0x370 [ 2441.977019][ T8705] __vmalloc_node_range+0x394/0x1320 [ 2441.982340][ T8705] ? netlink_insert+0x1094/0x1390 [ 2441.987414][ T8705] ? netlink_insert+0x2ba/0x1390 [ 2441.992394][ T8705] ? free_vm_area+0x50/0x50 [ 2441.996945][ T8705] ? netlink_sendmsg+0x602/0xbf0 [ 2442.001911][ T8705] vmalloc+0x79/0x90 [ 2442.005843][ T8705] ? netlink_sendmsg+0x602/0xbf0 [ 2442.010810][ T8705] netlink_sendmsg+0x602/0xbf0 [ 2442.015618][ T8705] ? netlink_getsockopt+0x590/0x590 [ 2442.020855][ T8705] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2442.026440][ T8705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2442.031760][ T8705] ? security_socket_sendmsg+0x80/0xa0 [ 2442.037342][ T8705] ? netlink_getsockopt+0x590/0x590 [ 2442.042585][ T8705] ____sys_sendmsg+0x61b/0x980 [ 2442.047392][ T8705] ? __asan_memset+0x22/0x40 [ 2442.052197][ T8705] ? __sys_sendmsg_sock+0x30/0x30 [ 2442.057249][ T8705] ? __import_iovec+0x3fa/0x850 [ 2442.062146][ T8705] ? import_iovec+0x73/0xa0 [ 2442.066692][ T8705] ___sys_sendmsg+0x2a6/0x360 [ 2442.071407][ T8705] ? __sys_sendmsg+0x2b0/0x2b0 [ 2442.076228][ T8705] ? trace_call_bpf+0xc3/0x6c0 [ 2442.081047][ T8705] __se_sys_sendmsg+0x1d0/0x2c0 [ 2442.085981][ T8705] ? perf_trace_preemptirq_template+0x269/0x330 [ 2442.092262][ T8705] ? __x64_sys_sendmsg+0x80/0x80 [ 2442.097245][ T8705] ? lockdep_hardirqs_on+0x98/0x150 [ 2442.102488][ T8705] do_syscall_64+0x55/0xb0 [ 2442.107038][ T8705] ? clear_bhb_loop+0x40/0x90 [ 2442.111769][ T8705] ? clear_bhb_loop+0x40/0x90 [ 2442.116583][ T8705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2442.122523][ T8705] RIP: 0033:0x7f7c2ab9e0d9 [ 2442.126995][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2442.146650][ T8705] RSP: 002b:00007f7c2b988028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2442.155110][ T8705] RAX: ffffffffffffffda RBX: 00007f7c2ae25fa0 RCX: 00007f7c2ab9e0d9 [ 2442.163115][ T8705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2442.171122][ T8705] RBP: 00007f7c2b988090 R08: 0000000000000000 R09: 0000000000000000 [ 2442.179131][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.187137][ T8705] R13: 00007f7c2ae26038 R14: 00007f7c2ae25fa0 R15: 00007ffee2593598 [ 2442.195165][ T8705] [ 2442.251340][ T8705] Mem-Info: [ 2442.254723][ T8705] active_anon:18236 inactive_anon:0 isolated_anon:0 [ 2442.254723][ T8705] active_file:19398 inactive_file:40879 isolated_file:0 [ 2442.254723][ T8705] unevictable:768 dirty:113 writeback:0 [ 2442.254723][ T8705] slab_reclaimable:11037 slab_unreclaimable:94424 [ 2442.254723][ T8705] mapped:27070 shmem:1361 pagetables:561 [ 2442.254723][ T8705] sec_pagetables:0 bounce:0 [ 2442.254723][ T8705] kernel_misc_reclaimable:0 [ 2442.254723][ T8705] free:1331110 free_pcp:7077 free_cma:0 [ 2442.315778][ T8705] Node 0 active_anon:72988kB inactive_anon:0kB active_file:77592kB inactive_file:163324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108316kB dirty:452kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10224kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 2442.358653][ T8705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2442.397984][ T8705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2442.437473][ T8705] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2442.449877][ T8705] Node 0 DMA32 free:1402672kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72948kB inactive_anon:0kB active_file:77592kB inactive_file:162496kB unevictable:1536kB writepending:452kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:20768kB local_pcp:5292kB free_cma:0kB [ 2442.491466][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 2442.501429][ T8705] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2442.540720][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 2442.549854][ T8705] Node 1 Normal free:3906404kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7264kB local_pcp:7264kB free_cma:0kB [ 2442.628175][ T8705] lowmem_reserve[]: 0 0 0 0 0 [ 2442.644628][ T8705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2442.681701][ T8705] Node 0 DMA32: 756*4kB (UE) 1022*8kB (UM) 665*16kB (UME) 925*32kB (UM) 1045*64kB (UME) 610*128kB (UME) 118*256kB (UME) 71*512kB (UME) 31*1024kB (UM) 17*2048kB (UME) 262*4096kB (UM) = 1402672kB [ 2442.711823][ T8705] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2442.724188][ T8705] Node 1 Normal: 233*4kB (UME) 56*8kB (UME) 38*16kB (UME) 263*32kB (UME) 97*64kB (UME) 19*128kB (UE) 3*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3906404kB [ 2442.743103][ T8705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2442.757589][ T8705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2442.767015][ T8705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2442.784890][ T8705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2442.795696][ T8705] 61640 total pagecache pages [ 2442.800416][ T8705] 0 pages in swap cache [ 2442.808839][ T8705] Free swap = 124996kB [ 2442.814308][ T8705] Total swap = 124996kB [ 2442.818631][ T8705] 2097051 pages RAM [ 2442.826112][ T8705] 0 pages HighMem/MovableOnly [ 2442.830959][ T8705] 416958 pages reserved [ 2442.836230][ T8705] 0 pages cma reserved [ 2443.057269][ T8713] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2443.086634][ T8715] netlink: 'syz.0.11198': attribute type 8 has an invalid length. [ 2443.097244][ T8715] netlink: 'syz.0.11198': attribute type 1 has an invalid length. [ 2443.107468][ T8715] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11198'. [ 2443.131417][ T8715] netlink: 'syz.0.11198': attribute type 21 has an invalid length. [ 2443.148750][ T8715] netlink: 'syz.0.11198': attribute type 33 has an invalid length. [ 2443.168529][ T8715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11198'. [ 2443.759816][ T8728] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11203'. [ 2444.214627][ T8736] FAULT_INJECTION: forcing a failure. [ 2444.214627][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2444.231817][ T8736] CPU: 1 PID: 8736 Comm: syz.0.11206 Not tainted syzkaller #0 [ 2444.239356][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2444.249455][ T8736] Call Trace: [ 2444.252764][ T8736] [ 2444.255722][ T8736] dump_stack_lvl+0x18c/0x250 [ 2444.260449][ T8736] ? show_regs_print_info+0x20/0x20 [ 2444.265695][ T8736] ? load_image+0x420/0x420 [ 2444.270256][ T8736] ? __might_fault+0xaa/0x120 [ 2444.274982][ T8736] ? __lock_acquire+0x7d80/0x7d80 [ 2444.280057][ T8736] should_fail_ex+0x394/0x4c0 [ 2444.284787][ T8736] _copy_from_iter+0x1cd/0x1290 [ 2444.289695][ T8736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2444.295910][ T8736] ? copyout_mc+0x70/0x70 [ 2444.300297][ T8736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2444.306503][ T8736] ? __check_object_size+0x4fc/0xa40 [ 2444.311833][ T8736] kernfs_fop_write_iter+0x19e/0x520 [ 2444.317187][ T8736] vfs_write+0x474/0x9a0 [ 2444.321576][ T8736] ? file_end_write+0x250/0x250 [ 2444.326478][ T8736] ? __fget_files+0x3fc/0x460 [ 2444.331209][ T8736] ? __fdget_pos+0x2a3/0x330 [ 2444.335922][ T8736] ? ksys_write+0x74/0x260 [ 2444.340383][ T8736] ksys_write+0x151/0x260 [ 2444.344759][ T8736] ? __ia32_sys_read+0x90/0x90 [ 2444.349741][ T8736] ? lockdep_hardirqs_on+0x98/0x150 [ 2444.354975][ T8736] do_syscall_64+0x55/0xb0 [ 2444.359408][ T8736] ? clear_bhb_loop+0x40/0x90 [ 2444.364106][ T8736] ? clear_bhb_loop+0x40/0x90 [ 2444.368845][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2444.374750][ T8736] RIP: 0033:0x7f69d679e0d9 [ 2444.379183][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2444.399063][ T8736] RSP: 002b:00007f69d758b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2444.407670][ T8736] RAX: ffffffffffffffda RBX: 00007f69d6a25fa0 RCX: 00007f69d679e0d9 [ 2444.415747][ T8736] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000006 [ 2444.423818][ T8736] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2444.431803][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.439791][ T8736] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2444.447806][ T8736] [ 2444.924557][ T8743] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11209'. [ 2445.038720][ T8745] netlink: 'syz.3.11210': attribute type 5 has an invalid length. [ 2445.066963][ T8745] netlink: 'syz.3.11210': attribute type 1 has an invalid length. [ 2445.104643][ T8745] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.11210'. [ 2445.118046][ T8751] syzkaller0: entered promiscuous mode [ 2445.118076][ T8751] syzkaller0: entered allmulticast mode [ 2445.632303][ T8759] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11214'. [ 2446.047599][ T8768] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11216'. [ 2446.061504][ T8768] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11216'. [ 2448.681149][ T8768] bond0: (slave bond_slave_0): Releasing backup interface [ 2448.708404][ T8768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2448.914368][ T8776] delete_channel: no stack [ 2448.936173][ T8776] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11220'. [ 2449.333135][ T8778] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11221'. [ 2450.197886][ T8796] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11226'. [ 2450.300491][ T8783] syzkaller0: entered promiscuous mode [ 2450.322360][ T8783] syzkaller0: entered allmulticast mode [ 2451.574012][ T8833] netlink: 'syz.3.11240': attribute type 10 has an invalid length. [ 2451.600119][ T8833] netlink: 'syz.3.11240': attribute type 19 has an invalid length. [ 2451.627584][ T8833] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.11240'. [ 2451.760726][ T8830] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11239'. [ 2451.958356][ T8838] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11242'. [ 2451.968527][ T8838] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11242'. [ 2451.987525][ T8838] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11242'. [ 2452.125500][ T8842] netlink: 'syz.1.11244': attribute type 8 has an invalid length. [ 2452.159825][ T8842] netlink: 'syz.1.11244': attribute type 1 has an invalid length. [ 2452.215876][ T8848] netlink: 'syz.1.11244': attribute type 33 has an invalid length. [ 2452.224718][ T8842] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11244'. [ 2452.271805][ T8848] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11244'. [ 2452.337845][ T8846] netlink: 'syz.1.11244': attribute type 21 has an invalid length. [ 2453.582127][ T8847] syzkaller0: entered promiscuous mode [ 2453.622239][ T8847] syzkaller0: entered allmulticast mode [ 2453.746093][ T8857] netlink: 'syz.0.11248': attribute type 33 has an invalid length. [ 2454.099497][ T8861] __nla_validate_parse: 1 callbacks suppressed [ 2454.099540][ T8861] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11250'. [ 2454.196995][ T8865] syzkaller0: entered promiscuous mode [ 2454.218976][ T8865] syzkaller0: entered allmulticast mode [ 2454.720817][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11253'. [ 2454.736007][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11253'. [ 2454.748397][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11253'. [ 2455.602722][ T8892] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11261'. [ 2455.975435][ T8895] netlink: 'syz.0.11262': attribute type 1 has an invalid length. [ 2455.983594][ T8895] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.11262'. [ 2456.057219][ T8897] netlink: 'syz.1.11263': attribute type 1 has an invalid length. [ 2456.072805][ T8897] netlink: 'syz.1.11263': attribute type 3 has an invalid length. [ 2456.080696][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11263'. [ 2456.092252][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2456.126993][ T8895] bridge0: entered allmulticast mode [ 2456.134635][ T8900] FAULT_INJECTION: forcing a failure. [ 2456.134635][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.163186][ T8900] CPU: 0 PID: 8900 Comm: syz.2.11264 Not tainted syzkaller #0 [ 2456.170772][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2456.180924][ T8900] Call Trace: [ 2456.184277][ T8900] [ 2456.187274][ T8900] dump_stack_lvl+0x18c/0x250 [ 2456.192053][ T8900] ? show_regs_print_info+0x20/0x20 [ 2456.197322][ T8900] ? load_image+0x420/0x420 [ 2456.201929][ T8900] ? __might_sleep+0xe0/0xe0 [ 2456.206590][ T8900] ? __lock_acquire+0x7d80/0x7d80 [ 2456.211697][ T8900] should_fail_ex+0x394/0x4c0 [ 2456.216471][ T8900] should_failslab+0x9/0x20 [ 2456.221060][ T8900] slab_pre_alloc_hook+0x59/0x300 [ 2456.226271][ T8900] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2456.232069][ T8900] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2456.237861][ T8900] __kmem_cache_alloc_node+0x53/0x250 [ 2456.243336][ T8900] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 2456.249117][ T8900] __kmalloc+0xa7/0x240 [ 2456.253333][ T8900] tomoyo_realpath_from_path+0xe6/0x5c0 [ 2456.258971][ T8900] tomoyo_check_open_permission+0x224/0x460 [ 2456.264920][ T8900] ? tomoyo_check_open_permission+0x1cf/0x460 [ 2456.271033][ T8900] ? tomoyo_check_path_number_acl+0x280/0x280 [ 2456.277174][ T8900] ? __asan_memset+0x22/0x40 [ 2456.281866][ T8900] ? __rwlock_init+0x150/0x150 [ 2456.286686][ T8900] ? tomoyo_file_open+0xed/0x180 [ 2456.291696][ T8900] security_file_open+0x62/0xa0 [ 2456.296699][ T8900] do_dentry_open+0x32b/0x14b0 [ 2456.301522][ T8900] ? __asan_memcpy+0x40/0x70 [ 2456.306181][ T8900] path_openat+0x284f/0x3270 [ 2456.310810][ T8900] ? trace_call_bpf+0xc3/0x6c0 [ 2456.315690][ T8900] ? do_filp_open+0x430/0x430 [ 2456.320421][ T8900] ? perf_trace_lock+0x303/0x3b0 [ 2456.325443][ T8900] do_filp_open+0x1f2/0x430 [ 2456.329999][ T8900] ? vfs_tmpfile+0x620/0x620 [ 2456.334695][ T8900] ? _raw_spin_unlock+0x28/0x40 [ 2456.339594][ T8900] ? alloc_fd+0x590/0x640 [ 2456.343992][ T8900] do_sys_openat2+0x134/0x1d0 [ 2456.348810][ T8900] ? do_sys_open+0xe0/0xe0 [ 2456.353273][ T8900] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2456.359299][ T8900] ? lock_chain_count+0x20/0x20 [ 2456.364210][ T8900] __x64_sys_openat+0x139/0x160 [ 2456.369117][ T8900] do_syscall_64+0x55/0xb0 [ 2456.373568][ T8900] ? clear_bhb_loop+0x40/0x90 [ 2456.378280][ T8900] ? clear_bhb_loop+0x40/0x90 [ 2456.382995][ T8900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2456.388925][ T8900] RIP: 0033:0x7fb39e55e90e [ 2456.393379][ T8900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2456.413029][ T8900] RSP: 002b:00007fb39f412ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2456.421489][ T8900] RAX: ffffffffffffffda RBX: 00007fb39f4136c0 RCX: 00007fb39e55e90e [ 2456.429666][ T8900] RDX: 0000000000000000 RSI: 00007fb39f412f90 RDI: ffffffffffffff9c [ 2456.437669][ T8900] RBP: 00007fb39f413090 R08: 0000000000000000 R09: 0000000000000000 [ 2456.445673][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.453679][ T8900] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2456.461732][ T8900] [ 2456.552210][ T8900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2456.609195][ T8904] netlink: 'syz.3.11265': attribute type 1 has an invalid length. [ 2456.641813][ T8904] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.11265'. [ 2456.670256][ T8898] bridge_slave_1: left allmulticast mode [ 2456.676209][ T8898] bridge_slave_1: left promiscuous mode [ 2456.682213][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2456.817500][ T8911] netlink: 'syz.3.11267': attribute type 6 has an invalid length. [ 2457.685306][ T8925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11270'. [ 2457.713320][ T8925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11270'. [ 2457.881349][ T8932] FAULT_INJECTION: forcing a failure. [ 2457.881349][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.917256][ T8932] CPU: 0 PID: 8932 Comm: syz.0.11274 Not tainted syzkaller #0 [ 2457.924805][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2457.934910][ T8932] Call Trace: [ 2457.938214][ T8932] [ 2457.941153][ T8932] dump_stack_lvl+0x18c/0x250 [ 2457.945853][ T8932] ? show_regs_print_info+0x20/0x20 [ 2457.951064][ T8932] ? load_image+0x420/0x420 [ 2457.955683][ T8932] ? __might_sleep+0xe0/0xe0 [ 2457.960319][ T8932] ? __lock_acquire+0x7d80/0x7d80 [ 2457.965356][ T8932] ? __asan_memset+0x22/0x40 [ 2457.970052][ T8932] should_fail_ex+0x394/0x4c0 [ 2457.974844][ T8932] should_failslab+0x9/0x20 [ 2457.979364][ T8932] slab_pre_alloc_hook+0x59/0x300 [ 2457.984410][ T8932] ? __kthread_create_on_node+0x116/0x3d0 [ 2457.990149][ T8932] __kmem_cache_alloc_node+0x53/0x250 [ 2457.995545][ T8932] ? __kthread_create_on_node+0x116/0x3d0 [ 2458.001276][ T8932] kmalloc_trace+0x2a/0xe0 [ 2458.005710][ T8932] ? rxrpc_direct_abort+0x330/0x330 [ 2458.010994][ T8932] __kthread_create_on_node+0x116/0x3d0 [ 2458.016562][ T8932] ? kthread_create_on_node+0x140/0x140 [ 2458.022132][ T8932] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2458.028124][ T8932] ? rxrpc_direct_abort+0x330/0x330 [ 2458.033345][ T8932] ? rxrpc_direct_abort+0x330/0x330 [ 2458.038561][ T8932] kthread_create_on_node+0xec/0x140 [ 2458.043945][ T8932] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2458.049329][ T8932] ? tsk_fork_get_node+0x70/0x70 [ 2458.054276][ T8932] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2458.059675][ T8932] rxrpc_lookup_local+0x1041/0x1700 [ 2458.064901][ T8932] ? rxrpc_local_dont_fragment+0x70/0x70 [ 2458.070558][ T8932] ? none_clear+0x10/0x10 [ 2458.075077][ T8932] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 2458.081263][ T8932] ? do_raw_spin_unlock+0x121/0x230 [ 2458.086487][ T8932] rxrpc_sendmsg+0x2f3/0x5b0 [ 2458.091090][ T8932] ? rxrpc_getsockopt+0x150/0x150 [ 2458.096138][ T8932] ____sys_sendmsg+0x61b/0x980 [ 2458.101031][ T8932] ? __sys_sendmsg_sock+0x30/0x30 [ 2458.106068][ T8932] ? __import_iovec+0x3fa/0x850 [ 2458.110970][ T8932] ? import_iovec+0x73/0xa0 [ 2458.115580][ T8932] ___sys_sendmsg+0x2a6/0x360 [ 2458.120274][ T8932] ? __sys_sendmsg+0x2b0/0x2b0 [ 2458.125092][ T8932] __se_sys_sendmsg+0x1d0/0x2c0 [ 2458.129968][ T8932] ? __x64_sys_sendmsg+0x80/0x80 [ 2458.134940][ T8932] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2458.140855][ T8932] do_syscall_64+0x55/0xb0 [ 2458.145288][ T8932] ? clear_bhb_loop+0x40/0x90 [ 2458.150063][ T8932] ? clear_bhb_loop+0x40/0x90 [ 2458.154754][ T8932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2458.160681][ T8932] RIP: 0033:0x7f69d679e0d9 [ 2458.165132][ T8932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2458.184777][ T8932] RSP: 002b:00007f69d758b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2458.193237][ T8932] RAX: ffffffffffffffda RBX: 00007f69d6a25fa0 RCX: 00007f69d679e0d9 [ 2458.201224][ T8932] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2458.209225][ T8932] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2458.217206][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.225273][ T8932] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2458.233291][ T8932] [ 2459.029629][ T8948] netlink: 'syz.2.11278': attribute type 1 has an invalid length. [ 2459.108926][ T8959] netlink: 'syz.0.11283': attribute type 3 has an invalid length. [ 2459.122159][ T8959] netlink: 'syz.0.11283': attribute type 1 has an invalid length. [ 2459.130420][ T8959] netlink: 'syz.0.11283': attribute type 1 has an invalid length. [ 2459.145335][ T8959] netlink: 'syz.0.11283': attribute type 2 has an invalid length. [ 2459.154137][ T8959] __nla_validate_parse: 8 callbacks suppressed [ 2459.154151][ T8959] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.11283'. [ 2459.213160][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.226093][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.262725][ T8948] bridge0: entered allmulticast mode [ 2459.386373][ T8960] bridge_slave_1: left allmulticast mode [ 2459.396141][ T8960] bridge_slave_1: left promiscuous mode [ 2459.411949][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.420479][ T8960] bridge_slave_0: left allmulticast mode [ 2459.426579][ T8960] bridge_slave_0: left promiscuous mode [ 2459.437860][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.605288][ T8969] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11285'. [ 2459.871841][ T8981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11290'. [ 2459.897861][ T8981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11290'. [ 2459.937455][ T8981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11290'. [ 2460.016923][ T8987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11290'. [ 2463.303300][ T8999] netlink: 'syz.1.11295': attribute type 1 has an invalid length. [ 2463.348842][ T8999] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11295'. [ 2463.655639][ T9004] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11296'. [ 2463.673186][ T9014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11300'. [ 2463.688991][ T9014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11300'. [ 2463.915206][ T9020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2464.477477][ T9034] __nla_validate_parse: 3 callbacks suppressed [ 2464.477495][ T9034] netlink: 826 bytes leftover after parsing attributes in process `syz.1.11307'. [ 2465.605879][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11309'. [ 2465.619633][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11309'. [ 2465.637812][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11309'. [ 2465.666258][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11309'. [ 2465.725526][ T9042] netlink: 'syz.2.11312': attribute type 29 has an invalid length. [ 2465.741993][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11312'. [ 2465.764288][ T9042] netlink: 'syz.2.11312': attribute type 29 has an invalid length. [ 2465.795265][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11312'. [ 2465.825619][ T9049] netlink: 'syz.2.11312': attribute type 15 has an invalid length. [ 2465.845141][ T9049] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11312'. [ 2466.475947][ T9066] netlink: 'syz.2.11317': attribute type 8 has an invalid length. [ 2466.489306][ T9066] netlink: 'syz.2.11317': attribute type 1 has an invalid length. [ 2466.500251][ T9069] netlink: 'syz.2.11317': attribute type 21 has an invalid length. [ 2466.508556][ T9066] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11317'. [ 2466.529948][ T9069] netlink: 'syz.2.11317': attribute type 33 has an invalid length. [ 2466.540586][ T9069] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11317'. [ 2466.926466][ T9071] mac80211_hwsim hwsim87 wlan1: entered promiscuous mode [ 2466.978333][ T9071] mac80211_hwsim hwsim87 wlan1: entered allmulticast mode [ 2467.543275][ T9091] netlink: 'syz.2.11327': attribute type 21 has an invalid length. [ 2467.888230][ T9099] netlink: 'syz.0.11330': attribute type 8 has an invalid length. [ 2467.935046][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.942304][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.771535][ T9124] validate_nla: 6 callbacks suppressed [ 2468.806552][ T9124] netlink: 'syz.1.11340': attribute type 1 has an invalid length. [ 2468.841017][ T9124] netlink: 'syz.1.11340': attribute type 3 has an invalid length. [ 2469.164676][ T9135] netlink: 'syz.2.11344': attribute type 29 has an invalid length. [ 2469.176471][ T9135] netlink: 'syz.2.11344': attribute type 29 has an invalid length. [ 2469.201375][ T9135] netlink: 'syz.2.11344': attribute type 15 has an invalid length. [ 2469.705652][ T9145] __nla_validate_parse: 24 callbacks suppressed [ 2469.705697][ T9145] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11347'. [ 2470.083966][ T9157] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11351'. [ 2470.336155][ T9159] FAULT_INJECTION: forcing a failure. [ 2470.336155][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.372305][ T9159] CPU: 1 PID: 9159 Comm: syz.1.11352 Not tainted syzkaller #0 [ 2470.375578][ T9166] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11361'. [ 2470.379868][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2470.379887][ T9159] Call Trace: [ 2470.379896][ T9159] [ 2470.379906][ T9159] dump_stack_lvl+0x18c/0x250 [ 2470.379941][ T9159] ? show_regs_print_info+0x20/0x20 [ 2470.379965][ T9159] ? load_image+0x420/0x420 [ 2470.380001][ T9159] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2470.380025][ T9159] ? lockdep_hardirqs_on+0x98/0x150 [ 2470.380056][ T9159] should_fail_ex+0x394/0x4c0 [ 2470.380089][ T9159] should_failslab+0x9/0x20 [ 2470.380117][ T9159] slab_pre_alloc_hook+0x59/0x300 [ 2470.380149][ T9159] ? sctp_add_bind_addr+0x8c/0x360 [ 2470.380176][ T9159] __kmem_cache_alloc_node+0x53/0x250 [ 2470.380208][ T9159] ? sctp_add_bind_addr+0x8c/0x360 [ 2470.380231][ T9159] kmalloc_trace+0x2a/0xe0 [ 2470.380261][ T9159] sctp_add_bind_addr+0x8c/0x360 [ 2470.380290][ T9159] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2470.380318][ T9159] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2470.482713][ T9159] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2470.488828][ T9159] ? sctp_v4_is_any+0x35/0x60 [ 2470.493534][ T9159] ? sctp_copy_one_addr+0x8c/0x350 [ 2470.498750][ T9159] sctp_bind_addr_copy+0xb3/0x3c0 [ 2470.503798][ T9159] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2470.510154][ T9159] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2470.515570][ T9159] ? __sctp_connect+0xd80/0xd80 [ 2470.520446][ T9159] ? sctp_sendmsg+0xb7e/0x27b0 [ 2470.525224][ T9159] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2470.530786][ T9159] ? security_sctp_bind_connect+0x89/0xb0 [ 2470.536525][ T9159] sctp_sendmsg+0x1519/0x27b0 [ 2470.541230][ T9159] ? sctp_getsockopt+0xb60/0xb60 [ 2470.546541][ T9159] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2470.552719][ T9159] ? lockdep_hardirqs_on+0x98/0x150 [ 2470.558036][ T9159] ? inet_sendmsg+0xbb/0x2a0 [ 2470.562654][ T9159] ? inet_sendmsg+0xce/0x2a0 [ 2470.567258][ T9159] ? inet_send_prepare+0x250/0x250 [ 2470.572832][ T9159] ____sys_sendmsg+0x61b/0x980 [ 2470.577616][ T9159] ? __asan_memset+0x22/0x40 [ 2470.582224][ T9159] ? __sys_sendmsg_sock+0x30/0x30 [ 2470.587254][ T9159] ? __import_iovec+0x5f2/0x850 [ 2470.592141][ T9159] ? import_iovec+0x73/0xa0 [ 2470.596688][ T9159] ___sys_sendmsg+0x2a6/0x360 [ 2470.601440][ T9159] ? __sys_sendmsg+0x2b0/0x2b0 [ 2470.606264][ T9159] ? ktime_get+0x7f/0x280 [ 2470.610665][ T9159] __se_sys_sendmsg+0x1d0/0x2c0 [ 2470.615541][ T9159] ? __x64_sys_sendmsg+0x80/0x80 [ 2470.620502][ T9159] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2470.626623][ T9159] do_syscall_64+0x55/0xb0 [ 2470.631053][ T9159] ? clear_bhb_loop+0x40/0x90 [ 2470.635743][ T9159] ? clear_bhb_loop+0x40/0x90 [ 2470.640441][ T9159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2470.646449][ T9159] RIP: 0033:0x7f7c2ab9e0d9 [ 2470.650878][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2470.670525][ T9159] RSP: 002b:00007f7c2b988028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2470.678958][ T9159] RAX: ffffffffffffffda RBX: 00007f7c2ae25fa0 RCX: 00007f7c2ab9e0d9 [ 2470.687035][ T9159] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000032 [ 2470.695021][ T9159] RBP: 00007f7c2b988090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.703012][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.710995][ T9159] R13: 00007f7c2ae26038 R14: 00007f7c2ae25fa0 R15: 00007ffee2593598 [ 2470.718998][ T9159] [ 2470.930163][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11355'. [ 2471.014305][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11355'. [ 2471.092166][ T9171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11355'. [ 2471.123504][ T9173] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11355'. [ 2471.299293][ T9176] netlink: 'syz.3.11357': attribute type 29 has an invalid length. [ 2471.320292][ T9182] netlink: 'syz.0.11359': attribute type 10 has an invalid length. [ 2471.322928][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11357'. [ 2471.350546][ T9176] netlink: 'syz.3.11357': attribute type 29 has an invalid length. [ 2471.365972][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11357'. [ 2471.395650][ T9184] netlink: 'syz.3.11357': attribute type 15 has an invalid length. [ 2471.419654][ T9184] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11357'. [ 2471.749194][ T9192] netlink: 'syz.1.11362': attribute type 16 has an invalid length. [ 2472.876712][ T9221] syzkaller0: entered promiscuous mode [ 2472.898225][ T9221] syzkaller0: entered allmulticast mode [ 2474.297808][ T9236] validate_nla: 16 callbacks suppressed [ 2474.297854][ T9236] netlink: 'syz.1.11379': attribute type 8 has an invalid length. [ 2474.323209][ T9236] netlink: 'syz.1.11379': attribute type 1 has an invalid length. [ 2474.352526][ T9238] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2474.373074][ T9236] netlink: 'syz.1.11379': attribute type 21 has an invalid length. [ 2474.399526][ T9242] netlink: 'syz.3.11381': attribute type 8 has an invalid length. [ 2474.421844][ T9242] netlink: 'syz.3.11381': attribute type 1 has an invalid length. [ 2474.551448][ T9242] netlink: 'syz.3.11381': attribute type 21 has an invalid length. [ 2474.565157][ T9245] netlink: 'syz.3.11381': attribute type 33 has an invalid length. [ 2474.690233][ T9252] netlink: 'syz.0.11385': attribute type 10 has an invalid length. [ 2474.800827][ T9255] netlink: 'syz.2.11386': attribute type 1 has an invalid length. [ 2474.828612][ T9255] netlink: 'syz.2.11386': attribute type 3 has an invalid length. [ 2474.853414][ T9255] __nla_validate_parse: 24 callbacks suppressed [ 2474.853455][ T9255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11386'. [ 2475.849342][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11394'. [ 2475.887543][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11394'. [ 2475.928534][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11394'. [ 2475.958890][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11394'. [ 2476.054637][ T9288] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11395'. [ 2476.104246][ T9288] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11395'. [ 2476.431373][ T9292] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11397'. [ 2477.170000][ T9307] FAULT_INJECTION: forcing a failure. [ 2477.170000][ T9307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2477.222234][ T9307] CPU: 1 PID: 9307 Comm: syz.2.11402 Not tainted syzkaller #0 [ 2477.229783][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2477.239888][ T9307] Call Trace: [ 2477.243203][ T9307] [ 2477.246164][ T9307] dump_stack_lvl+0x18c/0x250 [ 2477.250886][ T9307] ? show_regs_print_info+0x20/0x20 [ 2477.256115][ T9307] ? load_image+0x420/0x420 [ 2477.260748][ T9307] ? __might_fault+0xaa/0x120 [ 2477.265463][ T9307] ? __lock_acquire+0x7d80/0x7d80 [ 2477.270549][ T9307] should_fail_ex+0x394/0x4c0 [ 2477.275275][ T9307] _copy_from_iter+0x1cd/0x1290 [ 2477.280169][ T9307] ? copyout_mc+0x70/0x70 [ 2477.284537][ T9307] ? __virt_addr_valid+0x10c/0x380 [ 2477.289679][ T9307] ? __virt_addr_valid+0x10c/0x380 [ 2477.294823][ T9307] ? __virt_addr_valid+0x10c/0x380 [ 2477.300143][ T9307] ? __check_object_size+0x4fc/0xa40 [ 2477.305472][ T9307] tipc_msg_build+0x87a/0xe60 [ 2477.310316][ T9307] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 2477.316429][ T9307] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 2477.322722][ T9307] __tipc_sendmsg+0x1b7a/0x2b20 [ 2477.327632][ T9307] ? rht_unlock+0x1d0/0x1d0 [ 2477.332168][ T9307] ? perf_tp_event+0x1550/0x1550 [ 2477.337141][ T9307] ? register_lock_class+0xc4/0x8a0 [ 2477.342372][ T9307] ? wait_woken+0x180/0x180 [ 2477.346912][ T9307] ? perf_tp_event+0x13f5/0x1550 [ 2477.351884][ T9307] ? mark_lock+0x94/0x320 [ 2477.356240][ T9307] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2477.362255][ T9307] ? __lock_acquire+0x1336/0x7d80 [ 2477.367338][ T9307] ? verify_lock_unused+0x140/0x140 [ 2477.372579][ T9307] __tipc_sendstream+0x104d/0x1290 [ 2477.377736][ T9307] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2477.383512][ T9307] ? mark_lock+0x94/0x320 [ 2477.387881][ T9307] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2477.393977][ T9307] ? lock_chain_count+0x20/0x20 [ 2477.398866][ T9307] ? tsk_advance_rx_queue+0x310/0x310 [ 2477.404279][ T9307] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2477.409682][ T9307] ? _local_bh_enable+0xa0/0xa0 [ 2477.414575][ T9307] tipc_sendstream+0x55/0x70 [ 2477.419195][ T9307] ? tipc_getsockopt+0x5a0/0x5a0 [ 2477.424170][ T9307] ____sys_sendmsg+0x61b/0x980 [ 2477.428976][ T9307] ? __asan_memset+0x22/0x40 [ 2477.433599][ T9307] ? __sys_sendmsg_sock+0x30/0x30 [ 2477.438733][ T9307] ? __import_iovec+0x5f2/0x850 [ 2477.444063][ T9307] ? import_iovec+0x73/0xa0 [ 2477.448605][ T9307] ___sys_sendmsg+0x2a6/0x360 [ 2477.453314][ T9307] ? get_pid_task+0x20/0x1e0 [ 2477.457939][ T9307] ? __sys_sendmsg+0x2b0/0x2b0 [ 2477.462885][ T9307] ? __lock_acquire+0x7d80/0x7d80 [ 2477.468000][ T9307] __se_sys_sendmsg+0x1d0/0x2c0 [ 2477.472900][ T9307] ? perf_trace_preemptirq_template+0x269/0x330 [ 2477.479193][ T9307] ? __x64_sys_sendmsg+0x80/0x80 [ 2477.484182][ T9307] ? lockdep_hardirqs_on+0x98/0x150 [ 2477.489428][ T9307] do_syscall_64+0x55/0xb0 [ 2477.493876][ T9307] ? clear_bhb_loop+0x40/0x90 [ 2477.498584][ T9307] ? clear_bhb_loop+0x40/0x90 [ 2477.503326][ T9307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2477.509251][ T9307] RIP: 0033:0x7fb39e59e0d9 [ 2477.513711][ T9307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2477.533370][ T9307] RSP: 002b:00007fb39f413028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2477.541822][ T9307] RAX: ffffffffffffffda RBX: 00007fb39e825fa0 RCX: 00007fb39e59e0d9 [ 2477.549826][ T9307] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 2477.557845][ T9307] RBP: 00007fb39f413090 R08: 0000000000000000 R09: 0000000000000000 [ 2477.565935][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.573952][ T9307] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2477.581995][ T9307] [ 2477.647728][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11404'. [ 2477.657274][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11404'. [ 2478.981774][T12724] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6 [ 2479.424982][ T9351] validate_nla: 15 callbacks suppressed [ 2479.425027][ T9351] netlink: 'syz.2.11418': attribute type 8 has an invalid length. [ 2479.449957][ T9358] netlink: 'syz.2.11418': attribute type 21 has an invalid length. [ 2479.467352][ T9351] netlink: 'syz.2.11418': attribute type 1 has an invalid length. [ 2479.553384][ T9351] netlink: 'syz.2.11418': attribute type 33 has an invalid length. [ 2479.892705][ T9369] __nla_validate_parse: 15 callbacks suppressed [ 2479.892726][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11425'. [ 2479.914249][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11425'. [ 2479.926435][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11425'. [ 2479.942206][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11425'. [ 2480.054447][ T9371] netlink: 'syz.2.11426': attribute type 10 has an invalid length. [ 2480.063711][ T9371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11426'. [ 2480.103657][ T9371] batman_adv: batadv0: Adding interface: veth0_vlan [ 2480.110894][ T9372] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.11423'. [ 2480.112042][ T9371] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2480.155176][ T9371] batman_adv: batadv0: Interface activated: veth0_vlan [ 2482.157960][ T9387] netlink: 'syz.0.11430': attribute type 8 has an invalid length. [ 2482.172327][ T9387] netlink: 'syz.0.11430': attribute type 1 has an invalid length. [ 2482.188946][ T9387] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11430'. [ 2482.213920][ T9393] netlink: 'syz.0.11430': attribute type 21 has an invalid length. [ 2482.257287][ T9387] netlink: 'syz.0.11430': attribute type 33 has an invalid length. [ 2482.275538][ T9387] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11430'. [ 2482.690098][ T9403] netlink: 'syz.0.11436': attribute type 8 has an invalid length. [ 2482.716183][ T9403] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11436'. [ 2482.748413][ T9404] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11436'. [ 2484.153729][ T9419] syzkaller0: entered promiscuous mode [ 2484.159332][ T9419] syzkaller0: entered allmulticast mode [ 2484.654687][ T9449] FAULT_INJECTION: forcing a failure. [ 2484.654687][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.689888][ T9449] CPU: 1 PID: 9449 Comm: syz.2.11454 Not tainted syzkaller #0 [ 2484.697528][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2484.707712][ T9449] Call Trace: [ 2484.711112][ T9449] [ 2484.714071][ T9449] dump_stack_lvl+0x18c/0x250 [ 2484.718802][ T9449] ? show_regs_print_info+0x20/0x20 [ 2484.724036][ T9449] ? load_image+0x420/0x420 [ 2484.728586][ T9449] ? __might_sleep+0xe0/0xe0 [ 2484.733219][ T9449] ? __lock_acquire+0x7d80/0x7d80 [ 2484.738303][ T9449] ? mark_lock+0x94/0x320 [ 2484.742694][ T9449] should_fail_ex+0x394/0x4c0 [ 2484.747432][ T9449] should_failslab+0x9/0x20 [ 2484.752007][ T9449] slab_pre_alloc_hook+0x59/0x300 [ 2484.757184][ T9449] ? __get_vm_area_node+0x125/0x370 [ 2484.762436][ T9449] __kmem_cache_alloc_node+0x53/0x250 [ 2484.767952][ T9449] ? __get_vm_area_node+0x125/0x370 [ 2484.773280][ T9449] kmalloc_node_trace+0x26/0xe0 [ 2484.778179][ T9449] __get_vm_area_node+0x125/0x370 [ 2484.783257][ T9449] __vmalloc_node_range+0x36f/0x1320 [ 2484.788681][ T9449] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2484.794356][ T9449] ? mark_lock+0x94/0x320 [ 2484.798731][ T9449] ? __lock_acquire+0x1336/0x7d80 [ 2484.803902][ T9449] ? aa_get_newest_label+0xfd/0x5c0 [ 2484.809143][ T9449] ? free_vm_area+0x50/0x50 [ 2484.813688][ T9449] ? end_current_label_crit_section+0x170/0x170 [ 2484.820124][ T9449] ? verify_lock_unused+0x140/0x140 [ 2484.825348][ T9449] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2484.830920][ T9449] __vmalloc+0x7a/0x90 [ 2484.835011][ T9449] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2484.840571][ T9449] bpf_prog_alloc_no_stats+0x46/0x430 [ 2484.845962][ T9449] bpf_prog_alloc+0x3d/0x1a0 [ 2484.850573][ T9449] bpf_prog_load+0x6b2/0x1610 [ 2484.855271][ T9449] ? map_freeze+0x420/0x420 [ 2484.859790][ T9449] ? __might_fault+0xaa/0x120 [ 2484.864515][ T9449] ? __lock_acquire+0x7d80/0x7d80 [ 2484.869680][ T9449] ? file_end_write+0x159/0x250 [ 2484.874547][ T9449] ? __might_fault+0xaa/0x120 [ 2484.879264][ T9449] ? __might_fault+0xc6/0x120 [ 2484.884039][ T9449] ? __might_fault+0xaa/0x120 [ 2484.888728][ T9449] ? bpf_lsm_bpf+0x9/0x10 [ 2484.893083][ T9449] ? security_bpf+0x7e/0xa0 [ 2484.897605][ T9449] __sys_bpf+0x5ba/0x890 [ 2484.901883][ T9449] ? bpf_link_show_fdinfo+0x390/0x390 [ 2484.907282][ T9449] ? lock_chain_count+0x20/0x20 [ 2484.912152][ T9449] __x64_sys_bpf+0x7c/0x90 [ 2484.916592][ T9449] do_syscall_64+0x55/0xb0 [ 2484.921025][ T9449] ? clear_bhb_loop+0x40/0x90 [ 2484.925714][ T9449] ? clear_bhb_loop+0x40/0x90 [ 2484.930404][ T9449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2484.936309][ T9449] RIP: 0033:0x7fb39e59e0d9 [ 2484.940736][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2484.960356][ T9449] RSP: 002b:00007fb39f413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2484.968788][ T9449] RAX: ffffffffffffffda RBX: 00007fb39e825fa0 RCX: 00007fb39e59e0d9 [ 2484.976860][ T9449] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2484.984842][ T9449] RBP: 00007fb39f413090 R08: 0000000000000000 R09: 0000000000000000 [ 2484.993000][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.001163][ T9449] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2485.009159][ T9449] [ 2485.083316][ T9449] syz.2.11454: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2485.113570][ T9449] CPU: 1 PID: 9449 Comm: syz.2.11454 Not tainted syzkaller #0 [ 2485.121190][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2485.131303][ T9449] Call Trace: [ 2485.134612][ T9449] [ 2485.137571][ T9449] dump_stack_lvl+0x18c/0x250 [ 2485.142388][ T9449] ? show_regs_print_info+0x20/0x20 [ 2485.147804][ T9449] ? load_image+0x420/0x420 [ 2485.152359][ T9449] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2485.158822][ T9449] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2485.165372][ T9449] warn_alloc+0x246/0x340 [ 2485.169734][ T9449] ? __get_vm_area_node+0x125/0x370 [ 2485.175068][ T9449] ? zone_watermark_ok_safe+0x230/0x230 [ 2485.180652][ T9449] ? rcu_is_watching+0x15/0xb0 [ 2485.185475][ T9449] ? __get_vm_area_node+0x356/0x370 [ 2485.186773][ T9456] validate_nla: 3 callbacks suppressed [ 2485.186804][ T9456] netlink: 'syz.3.11456': attribute type 10 has an invalid length. [ 2485.190715][ T9449] __vmalloc_node_range+0x394/0x1320 [ 2485.190753][ T9449] ? mark_lock+0x94/0x320 [ 2485.190781][ T9449] ? __lock_acquire+0x1336/0x7d80 [ 2485.190820][ T9449] ? aa_get_newest_label+0xfd/0x5c0 [ 2485.211728][ T9456] __nla_validate_parse: 6 callbacks suppressed [ 2485.211760][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11456'. [ 2485.213797][ T9449] ? free_vm_area+0x50/0x50 [ 2485.244004][ T9449] ? end_current_label_crit_section+0x170/0x170 [ 2485.250311][ T9449] ? verify_lock_unused+0x140/0x140 [ 2485.255568][ T9449] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2485.261173][ T9449] __vmalloc+0x7a/0x90 [ 2485.265292][ T9449] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2485.270898][ T9449] bpf_prog_alloc_no_stats+0x46/0x430 [ 2485.276317][ T9449] bpf_prog_alloc+0x3d/0x1a0 [ 2485.281034][ T9449] bpf_prog_load+0x6b2/0x1610 [ 2485.285761][ T9449] ? map_freeze+0x420/0x420 [ 2485.290303][ T9449] ? __might_fault+0xaa/0x120 [ 2485.295016][ T9449] ? __lock_acquire+0x7d80/0x7d80 [ 2485.300078][ T9449] ? file_end_write+0x159/0x250 [ 2485.305053][ T9449] ? __might_fault+0xaa/0x120 [ 2485.309766][ T9449] ? __might_fault+0xc6/0x120 [ 2485.314485][ T9449] ? __might_fault+0xaa/0x120 [ 2485.319193][ T9449] ? bpf_lsm_bpf+0x9/0x10 [ 2485.323559][ T9449] ? security_bpf+0x7e/0xa0 [ 2485.328100][ T9449] __sys_bpf+0x5ba/0x890 [ 2485.332391][ T9449] ? bpf_link_show_fdinfo+0x390/0x390 [ 2485.337819][ T9449] ? lock_chain_count+0x20/0x20 [ 2485.342714][ T9449] __x64_sys_bpf+0x7c/0x90 [ 2485.347169][ T9449] do_syscall_64+0x55/0xb0 [ 2485.351614][ T9449] ? clear_bhb_loop+0x40/0x90 [ 2485.356325][ T9449] ? clear_bhb_loop+0x40/0x90 [ 2485.361044][ T9449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2485.366967][ T9449] RIP: 0033:0x7fb39e59e0d9 [ 2485.371434][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2485.391090][ T9449] RSP: 002b:00007fb39f413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2485.399555][ T9449] RAX: ffffffffffffffda RBX: 00007fb39e825fa0 RCX: 00007fb39e59e0d9 [ 2485.407663][ T9449] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2485.415688][ T9449] RBP: 00007fb39f413090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.423709][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.431715][ T9449] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2485.439836][ T9449] [ 2485.496233][ T9449] Mem-Info: [ 2485.509939][ T9449] active_anon:20506 inactive_anon:0 isolated_anon:0 [ 2485.509939][ T9449] active_file:19398 inactive_file:40897 isolated_file:0 [ 2485.509939][ T9449] unevictable:768 dirty:201 writeback:0 [ 2485.509939][ T9449] slab_reclaimable:10910 slab_unreclaimable:94219 [ 2485.509939][ T9449] mapped:24961 shmem:1361 pagetables:586 [ 2485.509939][ T9449] sec_pagetables:0 bounce:0 [ 2485.509939][ T9449] kernel_misc_reclaimable:0 [ 2485.509939][ T9449] free:1329647 free_pcp:7040 free_cma:0 [ 2485.605819][ T9449] Node 0 active_anon:81824kB inactive_anon:0kB active_file:77592kB inactive_file:163388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99644kB dirty:804kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9940kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no [ 2485.651718][ T9449] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2485.669169][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11458'. [ 2485.691856][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11458'. [ 2485.703801][ T9449] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2485.756255][ T9449] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2485.769211][ T9449] Node 0 DMA32 free:1396820kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:81584kB inactive_anon:0kB active_file:77592kB inactive_file:162560kB unevictable:1536kB writepending:804kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:22348kB local_pcp:13560kB free_cma:0kB [ 2485.781083][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11458'. [ 2485.835029][ T9449] lowmem_reserve[]: 0 0 0 0 0 [ 2485.839846][ T9449] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2485.876466][ T9449] lowmem_reserve[]: 0 0 0 0 0 [ 2485.881278][ T9449] Node 1 Normal free:3906404kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7264kB local_pcp:0kB free_cma:0kB [ 2485.888058][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11458'. [ 2485.923302][ T9449] lowmem_reserve[]: 0 0 0 0 0 [ 2485.933827][ T9449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2485.961695][ T9449] Node 0 DMA32: 7*4kB (UME) 487*8kB (UME) 712*16kB (UME) 1086*32kB (UME) 1112*64kB (UME) 604*128kB (UME) 102*256kB (UME) 63*512kB (UME) 31*1024kB (UM) 17*2048kB (UME) 262*4096kB (UM) = 1396628kB [ 2485.991652][ T9449] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2486.011674][ T9449] Node 1 Normal: 233*4kB (UME) 56*8kB (UME) 38*16kB (UME) 263*32kB (UME) 97*64kB (UME) 19*128kB (UE) 3*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3906404kB [ 2486.052736][ T9449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2486.072942][ T9449] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2486.098829][ T9449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2486.116240][ T9449] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2486.138238][ T9449] 61656 total pagecache pages [ 2486.181723][ T9449] 0 pages in swap cache [ 2486.185965][ T9449] Free swap = 124996kB [ 2486.190157][ T9449] Total swap = 124996kB [ 2486.232691][ T9449] 2097051 pages RAM [ 2486.236577][ T9449] 0 pages HighMem/MovableOnly [ 2486.241293][ T9449] 416958 pages reserved [ 2486.277104][ T9449] 0 pages cma reserved [ 2486.318572][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2486.334009][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2486.440062][ T9474] bridge0: entered allmulticast mode [ 2487.177585][ T9473] syzkaller0: entered promiscuous mode [ 2487.202188][ T9473] syzkaller0: entered allmulticast mode [ 2487.265888][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11469'. [ 2487.285381][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11469'. [ 2487.401925][ T9497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11469'. [ 2487.426178][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11469'. [ 2487.764949][ T9501] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 2489.826904][ T9546] FAULT_INJECTION: forcing a failure. [ 2489.826904][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.897965][ T9546] CPU: 0 PID: 9546 Comm: syz.0.11486 Not tainted syzkaller #0 [ 2489.905542][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2489.915841][ T9546] Call Trace: [ 2489.919184][ T9546] [ 2489.922173][ T9546] dump_stack_lvl+0x18c/0x250 [ 2489.927032][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2489.933265][ T9546] ? show_regs_print_info+0x20/0x20 [ 2489.938524][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2489.944796][ T9546] should_fail_ex+0x394/0x4c0 [ 2489.949586][ T9546] should_failslab+0x9/0x20 [ 2489.954195][ T9546] slab_pre_alloc_hook+0x59/0x300 [ 2489.959374][ T9546] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2489.966118][ T9546] ? bpf_test_init+0x9f/0x140 [ 2489.970865][ T9546] ? bpf_test_init+0x9f/0x140 [ 2489.975615][ T9546] __kmem_cache_alloc_node+0x53/0x250 [ 2489.981073][ T9546] ? bpf_test_init+0x9f/0x140 [ 2489.985812][ T9546] __kmalloc+0xa7/0x240 [ 2489.990055][ T9546] bpf_test_init+0x9f/0x140 [ 2489.994656][ T9546] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2490.000091][ T9546] ? __lock_acquire+0x7d80/0x7d80 [ 2490.005229][ T9546] ? dev_put+0x80/0x80 [ 2490.009419][ T9546] ? dev_put+0x80/0x80 [ 2490.013682][ T9546] bpf_prog_test_run+0x31f/0x390 [ 2490.018696][ T9546] __sys_bpf+0x49d/0x890 [ 2490.023013][ T9546] ? bpf_link_show_fdinfo+0x390/0x390 [ 2490.028597][ T9546] ? lock_chain_count+0x20/0x20 [ 2490.033556][ T9546] __x64_sys_bpf+0x7c/0x90 [ 2490.038129][ T9546] do_syscall_64+0x55/0xb0 [ 2490.042609][ T9546] ? clear_bhb_loop+0x40/0x90 [ 2490.047356][ T9546] ? clear_bhb_loop+0x40/0x90 [ 2490.052207][ T9546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2490.058343][ T9546] RIP: 0033:0x7f69d679e0d9 [ 2490.062826][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2490.082861][ T9546] RSP: 002b:00007f69d758b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2490.091437][ T9546] RAX: ffffffffffffffda RBX: 00007f69d6a25fa0 RCX: 00007f69d679e0d9 [ 2490.099465][ T9546] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2490.107490][ T9546] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2490.115513][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2490.123576][ T9546] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2490.131661][ T9546] [ 2493.038687][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11494'. [ 2493.052115][ T9576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11494'. [ 2493.080455][ T9582] syz.2.11496 (9582) used obsolete PPPIOCDETACH ioctl [ 2493.935893][ T9614] netlink: 'syz.0.11505': attribute type 21 has an invalid length. [ 2493.985233][ T9610] netlink: 'syz.0.11505': attribute type 8 has an invalid length. [ 2494.002860][ T9614] netlink: 'syz.0.11505': attribute type 33 has an invalid length. [ 2494.012998][ T9610] netlink: 'syz.0.11505': attribute type 1 has an invalid length. [ 2494.042817][ T9614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11505'. [ 2494.061781][ T9610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11505'. [ 2494.127775][ T9594] syzkaller0: entered promiscuous mode [ 2494.137572][ T9594] syzkaller0: entered allmulticast mode [ 2495.020839][ T9638] netlink: 'syz.3.11515': attribute type 10 has an invalid length. [ 2495.192444][ T9644] netlink: 'syz.1.11518': attribute type 2 has an invalid length. [ 2496.059494][ T9662] netlink: 'syz.3.11526': attribute type 25 has an invalid length. [ 2496.082937][ T9662] netlink: 'syz.3.11526': attribute type 10 has an invalid length. [ 2496.110339][ T9660] netlink: 'syz.1.11524': attribute type 2 has an invalid length. [ 2496.142019][ T9667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11524'. [ 2496.790168][ T9648] syzkaller0: entered promiscuous mode [ 2496.840183][ T9648] syzkaller0: entered allmulticast mode [ 2497.670075][ T9688] netlink: 'syz.3.11531': attribute type 25 has an invalid length. [ 2497.823459][ T9693] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11535'. [ 2497.884386][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11534'. [ 2497.906158][ T9694] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11534'. [ 2497.945404][ T9693] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11535'. [ 2498.250520][ T9705] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.11538'. [ 2498.318551][ T9708] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.11538'. [ 2498.523817][ T9712] netlink: 165360 bytes leftover after parsing attributes in process `syz.0.11541'. [ 2498.874932][ T9723] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11545'. [ 2498.897055][ T9721] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11545'. [ 2499.105318][ T9729] validate_nla: 16 callbacks suppressed [ 2499.105358][ T9729] netlink: 'syz.3.11546': attribute type 8 has an invalid length. [ 2499.120819][ T9729] netlink: 'syz.3.11546': attribute type 1 has an invalid length. [ 2499.132491][ T9729] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11546'. [ 2499.145429][ T9737] netlink: 'syz.3.11546': attribute type 21 has an invalid length. [ 2499.208416][ T9729] netlink: 'syz.3.11546': attribute type 33 has an invalid length. [ 2499.227171][ T9729] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11546'. [ 2499.277387][ T9738] €Â0: renamed from pim6reg1 [ 2499.439022][ T9747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11552'. [ 2500.182951][ T9762] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11557'. [ 2500.255946][ T9766] netlink: 'syz.3.11561': attribute type 29 has an invalid length. [ 2500.282628][ T9766] netlink: 'syz.3.11561': attribute type 29 has an invalid length. [ 2500.544329][ T9773] FAULT_INJECTION: forcing a failure. [ 2500.544329][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.557641][ T9773] CPU: 0 PID: 9773 Comm: syz.2.11562 Not tainted syzkaller #0 [ 2500.565138][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2500.575322][ T9773] Call Trace: [ 2500.578631][ T9773] [ 2500.581618][ T9773] dump_stack_lvl+0x18c/0x250 [ 2500.586362][ T9773] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2500.592553][ T9773] ? show_regs_print_info+0x20/0x20 [ 2500.597808][ T9773] ? load_image+0x420/0x420 [ 2500.602361][ T9773] should_fail_ex+0x394/0x4c0 [ 2500.607065][ T9773] should_failslab+0x9/0x20 [ 2500.611604][ T9773] slab_pre_alloc_hook+0x59/0x300 [ 2500.616650][ T9773] kmem_cache_alloc_node+0x5e/0x310 [ 2500.621869][ T9773] ? __alloc_skb+0x103/0x2c0 [ 2500.626501][ T9773] __alloc_skb+0x103/0x2c0 [ 2500.630967][ T9773] tipc_buf_acquire+0x2b/0xe0 [ 2500.635664][ T9773] tipc_named_publish+0x266/0x760 [ 2500.640709][ T9773] tipc_nametbl_publish+0xee/0x1f0 [ 2500.645847][ T9773] tipc_sk_publish+0x1cc/0x430 [ 2500.650644][ T9773] ? __lock_acquire+0x7d80/0x7d80 [ 2500.655684][ T9773] ? tipc_sk_withdraw+0x640/0x640 [ 2500.660721][ T9773] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 2500.666371][ T9773] ? tipc_nametbl_build_group+0x482/0x4c0 [ 2500.672111][ T9773] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 2500.677775][ T9773] tipc_sk_join+0x3b0/0x6a0 [ 2500.682300][ T9773] ? __tipc_sendstream+0x1290/0x1290 [ 2500.687614][ T9773] tipc_setsockopt+0x73f/0x990 [ 2500.692401][ T9773] ? tipc_shutdown+0x4d0/0x4d0 [ 2500.697178][ T9773] ? __fget_files+0x28/0x460 [ 2500.701788][ T9773] ? aa_sock_opt_perm+0x74/0x100 [ 2500.706752][ T9773] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2500.712312][ T9773] ? security_socket_setsockopt+0x7e/0xa0 [ 2500.718041][ T9773] ? tipc_shutdown+0x4d0/0x4d0 [ 2500.722827][ T9773] do_sock_setsockopt+0x175/0x1a0 [ 2500.727863][ T9773] ? __fdget+0x180/0x210 [ 2500.732333][ T9773] __x64_sys_setsockopt+0x182/0x200 [ 2500.737558][ T9773] do_syscall_64+0x55/0xb0 [ 2500.741990][ T9773] ? clear_bhb_loop+0x40/0x90 [ 2500.746686][ T9773] ? clear_bhb_loop+0x40/0x90 [ 2500.751386][ T9773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2500.757302][ T9773] RIP: 0033:0x7fb39e59e0d9 [ 2500.761732][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2500.781351][ T9773] RSP: 002b:00007fb39f413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2500.789868][ T9773] RAX: ffffffffffffffda RBX: 00007fb39e825fa0 RCX: 00007fb39e59e0d9 [ 2500.797865][ T9773] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 2500.805868][ T9773] RBP: 00007fb39f413090 R08: 0000000000000043 R09: 0000000000000000 [ 2500.813874][ T9773] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000002 [ 2500.821961][ T9773] R13: 00007fb39e826038 R14: 00007fb39e825fa0 R15: 00007ffd8266c198 [ 2500.830059][ T9773] [ 2500.833257][ T9773] tipc: Publication distribution failure [ 2500.943398][ T9777] syzkaller0: entered promiscuous mode [ 2500.948949][ T9777] syzkaller0: entered allmulticast mode [ 2501.114586][ T9781] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11566'. [ 2503.284628][ T9787] netlink: 'syz.2.11568': attribute type 4 has an invalid length. [ 2503.292587][ T9787] __nla_validate_parse: 1 callbacks suppressed [ 2503.292601][ T9787] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11568'. [ 2503.320940][ T9787] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2503.338414][ T9780] netlink: 'syz.1.11565': attribute type 32 has an invalid length. [ 2503.355210][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11567'. [ 2503.757799][ T9798] syzkaller0: entered promiscuous mode [ 2503.783137][ T9798] syzkaller0: entered allmulticast mode [ 2504.065502][ T9810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11574'. [ 2506.779287][ T9806] syzkaller0: entered promiscuous mode [ 2506.784860][ T9806] syzkaller0: entered allmulticast mode [ 2506.818903][ T9820] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11577'. [ 2507.026154][ T9833] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11580'. [ 2509.939456][ T9864] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11590'. [ 2510.234433][ T9873] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11592'. [ 2510.855240][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11597'. [ 2510.876633][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11597'. [ 2510.900982][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11597'. [ 2510.927331][ T9890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11597'. [ 2510.942725][ T9888] netlink: 'syz.3.11596': attribute type 2 has an invalid length. [ 2510.963046][ T9888] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.11596'. [ 2511.973851][ T9898] netlink: 99136 bytes leftover after parsing attributes in process `syz.1.11600'. [ 2512.019528][ T9905] FAULT_INJECTION: forcing a failure. [ 2512.019528][ T9905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2512.044091][ T9905] CPU: 1 PID: 9905 Comm: syz.2.11602 Not tainted syzkaller #0 [ 2512.051634][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2512.061731][ T9905] Call Trace: [ 2512.065073][ T9905] [ 2512.068036][ T9905] dump_stack_lvl+0x18c/0x250 [ 2512.072762][ T9905] ? show_regs_print_info+0x20/0x20 [ 2512.078014][ T9905] ? load_image+0x420/0x420 [ 2512.082564][ T9905] ? __might_fault+0xaa/0x120 [ 2512.087370][ T9905] ? __lock_acquire+0x7d80/0x7d80 [ 2512.092531][ T9905] should_fail_ex+0x394/0x4c0 [ 2512.097262][ T9905] _copy_from_iter+0x1cd/0x1290 [ 2512.102155][ T9905] ? rcu_is_watching+0x15/0xb0 [ 2512.106970][ T9905] ? copyout_mc+0x70/0x70 [ 2512.111349][ T9905] ? __virt_addr_valid+0x10c/0x380 [ 2512.116501][ T9905] ? __virt_addr_valid+0x10c/0x380 [ 2512.121656][ T9905] ? __virt_addr_valid+0x10c/0x380 [ 2512.126821][ T9905] ? __check_object_size+0x4fc/0xa40 [ 2512.132146][ T9905] kcm_sendmsg+0xddc/0x27b0 [ 2512.136838][ T9905] ? kcm_getsockopt+0x280/0x280 [ 2512.141731][ T9905] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2512.147323][ T9905] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2512.152643][ T9905] ? security_socket_sendmsg+0x80/0xa0 [ 2512.158135][ T9905] ? kcm_getsockopt+0x280/0x280 [ 2512.163027][ T9905] ____sys_sendmsg+0x61b/0x980 [ 2512.167846][ T9905] ? __asan_memset+0x22/0x40 [ 2512.172476][ T9905] ? __sys_sendmsg_sock+0x30/0x30 [ 2512.177530][ T9905] ? __import_iovec+0x5f2/0x850 [ 2512.182436][ T9905] ? import_iovec+0x73/0xa0 [ 2512.186981][ T9905] ___sys_sendmsg+0x2a6/0x360 [ 2512.191706][ T9905] ? __sys_sendmsg+0x2b0/0x2b0 [ 2512.196542][ T9905] ? trace_call_bpf+0xc3/0x6c0 [ 2512.201395][ T9905] __se_sys_sendmsg+0x1d0/0x2c0 [ 2512.206287][ T9905] ? __x64_sys_sendmsg+0x80/0x80 [ 2512.211284][ T9905] ? lockdep_hardirqs_on+0x98/0x150 [ 2512.216518][ T9905] do_syscall_64+0x55/0xb0 [ 2512.220949][ T9905] ? clear_bhb_loop+0x40/0x90 [ 2512.225647][ T9905] ? clear_bhb_loop+0x40/0x90 [ 2512.230369][ T9905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2512.236279][ T9905] RIP: 0033:0x7fb39e59e0d9 [ 2512.240720][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2512.260521][ T9905] RSP: 002b:00007fb39f3f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.268950][ T9905] RAX: ffffffffffffffda RBX: 00007fb39e826090 RCX: 00007fb39e59e0d9 [ 2512.276937][ T9905] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000004 [ 2512.284919][ T9905] RBP: 00007fb39f3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 2512.292919][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.300911][ T9905] R13: 00007fb39e826128 R14: 00007fb39e826090 R15: 00007ffd8266c198 [ 2512.308922][ T9905] [ 2515.721075][T12724] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 2515.898636][ T9923] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11606'. [ 2516.003352][ T9929] netlink: 'syz.1.11614': attribute type 29 has an invalid length. [ 2516.026271][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11614'. [ 2516.083036][ T9929] netlink: 'syz.1.11614': attribute type 29 has an invalid length. [ 2516.131689][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11614'. [ 2517.433499][ T9939] syzkaller0: entered promiscuous mode [ 2517.461149][ T9939] syzkaller0: entered allmulticast mode [ 2518.832821][ T9943] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11612'. [ 2519.152898][ T9954] FAULT_INJECTION: forcing a failure. [ 2519.152898][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.179554][ T9954] CPU: 0 PID: 9954 Comm: syz.0.11617 Not tainted syzkaller #0 [ 2519.187126][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2519.197256][ T9954] Call Trace: [ 2519.200579][ T9954] [ 2519.203547][ T9954] dump_stack_lvl+0x18c/0x250 [ 2519.208277][ T9954] ? show_regs_print_info+0x20/0x20 [ 2519.213525][ T9954] ? load_image+0x420/0x420 [ 2519.218085][ T9954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2519.224114][ T9954] ? __asan_memset+0x22/0x40 [ 2519.228755][ T9954] should_fail_ex+0x394/0x4c0 [ 2519.233480][ T9954] should_failslab+0x9/0x20 [ 2519.238031][ T9954] slab_pre_alloc_hook+0x59/0x300 [ 2519.243107][ T9954] ? __debug_object_init+0xec/0x450 [ 2519.248352][ T9954] kmem_cache_alloc+0x5a/0x2c0 [ 2519.253154][ T9954] ? slab_build_skb+0x28/0x3e0 [ 2519.257969][ T9954] slab_build_skb+0x28/0x3e0 [ 2519.262597][ T9954] bpf_prog_test_run_skb+0x38f/0x18f0 [ 2519.268025][ T9954] ? __fget_files+0x28/0x460 [ 2519.272657][ T9954] ? __fget_files+0x3fc/0x460 [ 2519.277379][ T9954] ? cpu_online+0x60/0x60 [ 2519.281746][ T9954] bpf_prog_test_run+0x31f/0x390 [ 2519.286727][ T9954] __sys_bpf+0x49d/0x890 [ 2519.291008][ T9954] ? bpf_link_show_fdinfo+0x390/0x390 [ 2519.296429][ T9954] ? lock_chain_count+0x20/0x20 [ 2519.301323][ T9954] __x64_sys_bpf+0x7c/0x90 [ 2519.305780][ T9954] do_syscall_64+0x55/0xb0 [ 2519.310233][ T9954] ? clear_bhb_loop+0x40/0x90 [ 2519.314943][ T9954] ? clear_bhb_loop+0x40/0x90 [ 2519.319659][ T9954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2519.325588][ T9954] RIP: 0033:0x7f69d679e0d9 [ 2519.330034][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2519.349764][ T9954] RSP: 002b:00007f69d758b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2519.358219][ T9954] RAX: ffffffffffffffda RBX: 00007f69d6a25fa0 RCX: 00007f69d679e0d9 [ 2519.366237][ T9954] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2519.374249][ T9954] RBP: 00007f69d758b090 R08: 0000000000000000 R09: 0000000000000000 [ 2519.382264][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2519.390291][ T9954] R13: 00007f69d6a26038 R14: 00007f69d6a25fa0 R15: 00007fffbd66e798 [ 2519.398331][ T9954] [ 2519.525409][ T9960] netlink: 'syz.3.11620': attribute type 10 has an invalid length. [ 2519.601996][ T9951] syzkaller0: entered promiscuous mode [ 2519.622979][ T9951] syzkaller0: entered allmulticast mode [ 2519.885439][ T9963] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2523.478184][ T9963] batman_adv: batadv0: Removing interface: veth0_vlan [ 2524.590852][T10000] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11627'. [ 2524.630248][T10009] netlink: 'syz.2.11630': attribute type 39 has an invalid length. [ 2524.737633][T10014] netlink: 'syz.1.11631': attribute type 21 has an invalid length. [ 2524.775866][T10014] netlink: 'syz.1.11631': attribute type 6 has an invalid length. [ 2524.796242][T10014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11631'. [ 2524.821979][T10012] netlink: 'syz.2.11632': attribute type 8 has an invalid length. [ 2524.844348][T10012] netlink: 'syz.2.11632': attribute type 1 has an invalid length. [ 2524.872278][T10012] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11632'. [ 2525.140121][T10022] netlink: 'syz.0.11635': attribute type 3 has an invalid length. [ 2525.149853][T10022] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11635'. [ 2525.850551][T10029] netlink: 'syz.3.11638': attribute type 1 has an invalid length. [ 2525.895981][T10029] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.11638'. [ 2525.949344][T10033] sit0: entered allmulticast mode [ 2526.041842][T10026] syzkaller0: entered promiscuous mode [ 2526.050448][T10026] syzkaller0: entered allmulticast mode [ 2526.134319][T10033] sit0: entered promiscuous mode [ 2526.702420][T10042] netlink: 'syz.0.11642': attribute type 8 has an invalid length. [ 2526.726651][T10042] netlink: 'syz.0.11642': attribute type 1 has an invalid length. [ 2526.791905][T10042] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11642'. [ 2526.860897][T10037] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2527.167702][T10051] netlink: 'syz.1.11645': attribute type 8 has an invalid length. [ 2527.187998][T10051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11645'. [ 2527.415705][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2527.433291][T10059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2527.449535][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2527.459590][T10059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2527.549244][T10067] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11652'. [ 2528.789261][T10089] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11660'. [ 2529.379548][T10104] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11662'. [ 2529.392679][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.392746][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.462002][T10104] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2530.633001][T10129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11669'. [ 2530.649869][T10129] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.11669'. [ 2530.753429][T10133] validate_nla: 6 callbacks suppressed [ 2530.753478][T10133] netlink: 'syz.0.11671': attribute type 21 has an invalid length. [ 2530.930515][T10142] sit0: entered allmulticast mode [ 2533.299834][T10172] netlink: 'syz.1.11680': attribute type 25 has an invalid length. [ 2533.352370][T10172] netlink: 'syz.1.11680': attribute type 10 has an invalid length. [ 2533.544668][T10168] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2534.238833][T10185] netlink: 'syz.1.11683': attribute type 21 has an invalid length. [ 2534.476683][T10188] netlink: 'syz.1.11686': attribute type 8 has an invalid length. [ 2534.486356][T10188] netlink: 'syz.1.11686': attribute type 1 has an invalid length. [ 2534.509257][T10188] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11686'. [ 2535.340389][T10203] netlink: 'syz.1.11692': attribute type 25 has an invalid length. [ 2535.354677][T10203] netlink: 'syz.1.11692': attribute type 10 has an invalid length. [ 2535.416963][T10201] netlink: 'syz.3.11691': attribute type 10 has an invalid length. [ 2536.494551][T10216] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11694'. [ 2536.615652][T10220] netlink: 'syz.1.11695': attribute type 21 has an invalid length. [ 2537.205420][T10241] netlink: 'syz.1.11703': attribute type 25 has an invalid length. [ 2537.217483][T10241] netlink: 'syz.1.11703': attribute type 10 has an invalid length. [ 2537.485193][T10246] netlink: 'syz.0.11705': attribute type 10 has an invalid length. [ 2537.515813][T10246] geneve0: entered promiscuous mode [ 2537.588784][T10246] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2537.682465][T10253] netlink: 'syz.1.11708': attribute type 21 has an invalid length. [ 2538.083287][T10264] netlink: 'syz.1.11713': attribute type 10 has an invalid length. [ 2538.321829][T10274] netlink: 'syz.1.11717': attribute type 4 has an invalid length. [ 2538.470455][T10277] netlink: 'syz.1.11718': attribute type 21 has an invalid length. [ 2538.765532][T10282] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.694774][T10298] netlink: 'syz.3.11725': attribute type 10 has an invalid length. [ 2539.953068][T10306] netlink: 6 bytes leftover after parsing attributes in process `syz.1.11726'. [ 2540.063012][T10306] openvswitch: netlink: Flow key attr not present in new flow. [ 2540.982694][T10312] netlink: 'syz.1.11729': attribute type 21 has an invalid length. [ 2541.004824][T10314] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11730'. [ 2541.580352][T10316] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2541.664162][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11733'. [ 2541.678699][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11733'. [ 2541.709262][T10321] validate_nla: 1 callbacks suppressed [ 2541.709281][T10321] netlink: 'syz.3.11733': attribute type 11 has an invalid length. [ 2542.636591][T10336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11737'. [ 2542.665799][T10338] netlink: 'syz.1.11738': attribute type 10 has an invalid length. [ 2542.710333][T10336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11737'. [ 2543.004446][T10348] netlink: 'syz.0.11742': attribute type 21 has an invalid length. [ 2543.749815][T10359] netlink: 'syz.3.11745': attribute type 25 has an invalid length. [ 2543.760154][T10359] netlink: 'syz.3.11745': attribute type 10 has an invalid length. [ 2544.197135][T10370] netlink: 'syz.2.11748': attribute type 21 has an invalid length. [ 2544.290346][T10375] netlink: 'syz.3.11749': attribute type 21 has an invalid length. [ 2544.333327][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11749'. [ 2544.396313][T10377] netlink: 'syz.3.11749': attribute type 27 has an invalid length. [ 2544.508274][T10377] netlink: 'syz.3.11749': attribute type 3 has an invalid length. [ 2544.578008][T10375] netlink: 196 bytes leftover after parsing attributes in process `syz.3.11749'. [ 2544.661759][T10377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11749'. [ 2545.532227][T10390] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.11755'. [ 2545.846700][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11758'. [ 2545.860343][T10403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2545.871792][T10403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2545.880342][T10403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2545.888627][T10403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2545.899266][T10403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2545.907480][T10403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2546.031774][T10398] netlink: 'syz.2.11758': attribute type 11 has an invalid length. [ 2546.040857][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11758'. [ 2546.494406][T10400] chnl_net:caif_netlink_parms(): no params data found [ 2546.748102][T10427] netlink: 'syz.0.11764': attribute type 13 has an invalid length. [ 2546.757871][T10427] __nla_validate_parse: 1 callbacks suppressed [ 2546.757889][T10427] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11764'. [ 2546.775622][T10427] erspan0: refused to change device tx_queue_len [ 2546.788183][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.827348][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.839224][T10400] bridge_slave_0: entered allmulticast mode [ 2546.847322][T10400] bridge_slave_0: entered promiscuous mode [ 2546.855696][T10428] netlink: 'syz.3.11763': attribute type 25 has an invalid length. [ 2546.865918][T10428] netlink: 'syz.3.11763': attribute type 10 has an invalid length. [ 2546.879178][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.886623][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.894547][T10400] bridge_slave_1: entered allmulticast mode [ 2546.903433][T10400] bridge_slave_1: entered promiscuous mode [ 2546.941376][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2546.955858][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2546.997526][T10400] team0: Port device team_slave_0 added [ 2547.025745][T10400] team0: Port device team_slave_1 added [ 2547.088205][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2547.098396][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2547.125484][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2547.140508][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2547.164975][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2547.199636][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2547.300172][T10437] FAULT_INJECTION: forcing a failure. [ 2547.300172][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.314530][T10437] CPU: 0 PID: 10437 Comm: syz.3.11768 Not tainted syzkaller #0 [ 2547.322124][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2547.332193][T10437] Call Trace: [ 2547.335485][T10437] [ 2547.338430][T10437] dump_stack_lvl+0x18c/0x250 [ 2547.343125][T10437] ? sctp_sendmsg+0x1519/0x27b0 [ 2547.347991][T10437] ? ___sys_sendmsg+0x2a6/0x360 [ 2547.352856][T10437] ? show_regs_print_info+0x20/0x20 [ 2547.358076][T10437] ? load_image+0x420/0x420 [ 2547.362609][T10437] should_fail_ex+0x394/0x4c0 [ 2547.367305][T10437] should_failslab+0x9/0x20 [ 2547.371828][T10437] slab_pre_alloc_hook+0x59/0x300 [ 2547.376869][T10437] ? sctp_add_bind_addr+0x8c/0x360 [ 2547.381996][T10437] __kmem_cache_alloc_node+0x53/0x250 [ 2547.387390][T10437] ? sctp_add_bind_addr+0x8c/0x360 [ 2547.392513][T10437] kmalloc_trace+0x2a/0xe0 [ 2547.396947][T10437] sctp_add_bind_addr+0x8c/0x360 [ 2547.401908][T10437] sctp_copy_local_addr_list+0x31b/0x4e0 [ 2547.407557][T10437] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 2547.413294][T10437] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 2547.419380][T10437] ? sctp_v6_is_any+0x64/0x70 [ 2547.424071][T10437] ? sctp_copy_one_addr+0x8c/0x350 [ 2547.429198][T10437] sctp_bind_addr_copy+0xb3/0x3c0 [ 2547.434239][T10437] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2547.440590][T10437] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2547.445903][T10437] ? __sctp_connect+0xd80/0xd80 [ 2547.450766][T10437] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2547.456157][T10437] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2547.461998][T10437] ? security_sctp_bind_connect+0x89/0xb0 [ 2547.467756][T10437] sctp_sendmsg+0x1519/0x27b0 [ 2547.472481][T10437] ? sctp_getsockopt+0xb60/0xb60 [ 2547.477442][T10437] ? aa_af_perm+0x330/0x330 [ 2547.481971][T10437] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2547.488406][T10437] ? sock_rps_record_flow+0x19/0x3f0 [ 2547.493710][T10437] ? inet_sendmsg+0xce/0x2a0 [ 2547.498311][T10437] ? inet_send_prepare+0x250/0x250 [ 2547.503439][T10437] ____sys_sendmsg+0x61b/0x980 [ 2547.508226][T10437] ? __asan_memset+0x22/0x40 [ 2547.512841][T10437] ? __sys_sendmsg_sock+0x30/0x30 [ 2547.517882][T10437] ? __import_iovec+0x5f2/0x850 [ 2547.522763][T10437] ? import_iovec+0x73/0xa0 [ 2547.527290][T10437] ___sys_sendmsg+0x2a6/0x360 [ 2547.532015][T10437] ? __sys_sendmsg+0x2b0/0x2b0 [ 2547.536905][T10437] ? trace_call_bpf+0xc3/0x6c0 [ 2547.541710][T10437] __se_sys_sendmsg+0x1d0/0x2c0 [ 2547.546572][T10437] ? perf_trace_preemptirq_template+0x269/0x330 [ 2547.552834][T10437] ? __x64_sys_sendmsg+0x80/0x80 [ 2547.557802][T10437] ? lockdep_hardirqs_on+0x98/0x150 [ 2547.563027][T10437] do_syscall_64+0x55/0xb0 [ 2547.567545][T10437] ? clear_bhb_loop+0x40/0x90 [ 2547.572499][T10437] ? clear_bhb_loop+0x40/0x90 [ 2547.577285][T10437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2547.583308][T10437] RIP: 0033:0x7fd91b99e0d9 [ 2547.587771][T10437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2547.607498][T10437] RSP: 002b:00007fd91c955028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.615946][T10437] RAX: ffffffffffffffda RBX: 00007fd91bc25fa0 RCX: 00007fd91b99e0d9 [ 2547.623935][T10437] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2547.631983][T10437] RBP: 00007fd91c955090 R08: 0000000000000000 R09: 0000000000000000 [ 2547.639982][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2547.647968][T10437] R13: 00007fd91bc26038 R14: 00007fd91bc25fa0 R15: 00007ffdbe308d58 [ 2547.655976][T10437] [ 2547.687427][T10400] hsr_slave_0: entered promiscuous mode [ 2547.698651][T10400] hsr_slave_1: entered promiscuous mode [ 2547.712747][T10400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2547.720383][T10400] Cannot create hsr debugfs directory [ 2547.861263][T10442] netlink: 'syz.0.11769': attribute type 11 has an invalid length. [ 2547.924685][T10445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11769'. [ 2547.941912][T12724] Bluetooth: hci2: command tx timeout [ 2547.976343][T10400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2548.004628][T10445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11769'. [ 2548.090479][T10400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2548.261156][T10400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2548.305520][T10456] netlink: 'syz.2.11773': attribute type 2 has an invalid length. [ 2548.353869][T10456] netlink: 'syz.2.11773': attribute type 4 has an invalid length. [ 2548.386381][T10456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11773'. [ 2548.463512][T10400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2548.492244][T10457] netlink: 'syz.3.11775': attribute type 25 has an invalid length. [ 2548.505547][T10457] netlink: 'syz.3.11775': attribute type 10 has an invalid length. [ 2548.739853][T10400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2548.754291][T10400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2548.776666][T10400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2548.797124][T10400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2548.963873][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2549.002914][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 2549.029492][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.037128][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2549.053745][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.060967][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.274227][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2549.318100][T10400] veth0_vlan: entered promiscuous mode [ 2549.330946][T10400] veth1_vlan: entered promiscuous mode [ 2549.362114][T10400] veth0_macvtap: entered promiscuous mode [ 2549.371170][T10400] veth1_macvtap: entered promiscuous mode [ 2549.388897][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2549.400347][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2549.410320][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2549.421363][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2549.432968][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2549.449493][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2549.460439][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2549.476416][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2549.487299][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2549.497368][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2549.509316][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2549.520593][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2549.535942][T10400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.544945][T10400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.554484][T10400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.563270][T10400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2549.639200][ T1946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.649197][ T1946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.681058][ T1946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.689232][ T1946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.820619][T10482] netlink: 'syz.1.11753': attribute type 21 has an invalid length. [ 2550.012044][T12724] Bluetooth: hci2: command tx timeout [ 2550.069442][T10492] netlink: 'syz.2.11790': attribute type 13 has an invalid length. [ 2550.149579][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2550.235373][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2551.015108][T10508] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.11786'. [ 2552.091872][T12724] Bluetooth: hci2: command tx timeout [ 2553.059187][T10516] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11792'. [ 2553.093157][T10516] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2553.177931][T10518] validate_nla: 3 callbacks suppressed [ 2553.177954][T10518] netlink: 'syz.1.11787': attribute type 25 has an invalid length. [ 2553.205835][T10518] netlink: 'syz.1.11787': attribute type 10 has an invalid length. [ 2553.314022][T10523] netlink: 'syz.3.11795': attribute type 21 has an invalid length. [ 2553.478982][T10530] netlink: 'syz.2.11805': attribute type 21 has an invalid length. [ 2554.225229][T12724] Bluetooth: hci2: command tx timeout [ 2554.771378][T10544] netlink: 'syz.2.11799': attribute type 10 has an invalid length. [ 2554.801770][T10544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11799'. [ 2554.849033][T10536] syzkaller0: entered promiscuous mode [ 2554.892390][T10536] syzkaller0: entered allmulticast mode [ 2555.370911][T10544] netlink: 'syz.2.11799': attribute type 10 has an invalid length. [ 2556.353869][T10574] netlink: 'syz.3.11809': attribute type 21 has an invalid length. [ 2556.563971][T10586] netlink: 'syz.0.11821': attribute type 21 has an invalid length. [ 2556.881431][T10585] syzkaller0: entered promiscuous mode [ 2556.898016][T10585] syzkaller0: entered allmulticast mode [ 2557.528423][T10604] FAULT_INJECTION: forcing a failure. [ 2557.528423][T10604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2557.547731][T10604] CPU: 0 PID: 10604 Comm: syz.3.11818 Not tainted syzkaller #0 [ 2557.555361][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2557.565462][T10604] Call Trace: [ 2557.568887][T10604] [ 2557.571853][T10604] dump_stack_lvl+0x18c/0x250 [ 2557.576572][T10604] ? show_regs_print_info+0x20/0x20 [ 2557.581791][T10604] ? load_image+0x420/0x420 [ 2557.586339][T10604] ? __might_fault+0xaa/0x120 [ 2557.591041][T10604] ? __lock_acquire+0x7d80/0x7d80 [ 2557.596108][T10604] should_fail_ex+0x394/0x4c0 [ 2557.600818][T10604] _copy_from_user+0x2f/0xe0 [ 2557.605516][T10604] smc_setsockopt+0x3bb/0xb00 [ 2557.610266][T10604] ? smc_shutdown+0x9a0/0x9a0 [ 2557.614956][T10604] ? __fget_files+0x28/0x460 [ 2557.619569][T10604] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2557.625216][T10604] ? security_socket_setsockopt+0x7e/0xa0 [ 2557.630951][T10604] ? smc_shutdown+0x9a0/0x9a0 [ 2557.635645][T10604] do_sock_setsockopt+0x175/0x1a0 [ 2557.640687][T10604] ? __fdget+0x180/0x210 [ 2557.644950][T10604] __x64_sys_setsockopt+0x182/0x200 [ 2557.650180][T10604] do_syscall_64+0x55/0xb0 [ 2557.654611][T10604] ? clear_bhb_loop+0x40/0x90 [ 2557.659301][T10604] ? clear_bhb_loop+0x40/0x90 [ 2557.663995][T10604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2557.669902][T10604] RIP: 0033:0x7fd91b99e0d9 [ 2557.674331][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2557.694040][T10604] RSP: 002b:00007fd91c955028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2557.702478][T10604] RAX: ffffffffffffffda RBX: 00007fd91bc25fa0 RCX: 00007fd91b99e0d9 [ 2557.710463][T10604] RDX: 000000000000001b RSI: 0000000000000006 RDI: 0000000000000003 [ 2557.718446][T10604] RBP: 00007fd91c955090 R08: 0000000000000004 R09: 0000000000000000 [ 2557.726430][T10604] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 2557.734413][T10604] R13: 00007fd91bc26038 R14: 00007fd91bc25fa0 R15: 00007ffdbe308d58 [ 2557.742416][T10604] [ 2557.916326][T10611] netlink: 'syz.2.11823': attribute type 21 has an invalid length. [ 2558.060443][T10616] netlink: 'syz.2.11824': attribute type 4 has an invalid length. [ 2558.069919][T10616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11824'. [ 2590.817289][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.831567][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2663.161493][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2663.168216][ C1] rcu: 1-....: (10500 ticks this GP) idle=975c/1/0x4000000000000000 softirq=185089/185090 fqs=3838 [ 2663.180114][ C1] rcu: hardirqs softirqs csw/system [ 2663.186527][ C1] rcu: number: 1477033 1 0 [ 2663.193022][ C1] rcu: cputime: 16851 35638 41 ==> 52490(ms) [ 2663.200819][ C1] rcu: (t=10500 jiffies g=259069 q=682 ncpus=2) [ 2663.207150][ C1] rcu: rcu_preempt kthread starved for 1222 jiffies! g259069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2663.218361][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2663.228437][ C1] rcu: RCU grace-period kthread stack dump: [ 2663.234478][ C1] task:rcu_preempt state:R running task stack:26960 pid:17 ppid:2 flags:0x00004000 [ 2663.245286][ C1] Call Trace: [ 2663.248578][ C1] [ 2663.251528][ C1] __schedule+0x15ae/0x4660 [ 2663.256082][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2663.261122][ C1] ? lock_chain_count+0x20/0x20 [ 2663.265982][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.271190][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2663.277086][ C1] ? asan.module_dtor+0x20/0x20 [ 2663.281941][ C1] ? rcu_is_watching+0x15/0xb0 [ 2663.286726][ C1] schedule+0xbd/0x170 [ 2663.290811][ C1] schedule_timeout+0x188/0x2d0 [ 2663.295663][ C1] ? console_conditional_schedule+0x40/0x40 [ 2663.301560][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2663.307549][ C1] ? update_process_times+0x1b0/0x1b0 [ 2663.312929][ C1] ? prepare_to_swait_event+0x344/0x360 [ 2663.318506][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 2663.323380][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 2663.329551][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.334754][ C1] ? rcu_gp_init+0x1530/0x1530 [ 2663.339532][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2663.345525][ C1] ? finish_swait+0xca/0x1d0 [ 2663.350115][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 2663.354705][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2663.359830][ C1] ? __kthread_parkme+0x71/0x1c0 [ 2663.364765][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 2663.369816][ C1] kthread+0x2fa/0x390 [ 2663.373902][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2663.379053][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2663.383657][ C1] ret_from_fork+0x48/0x80 [ 2663.388107][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2663.392699][ C1] ret_from_fork_asm+0x11/0x20 [ 2663.397487][ C1] [ 2663.400507][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2663.406837][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2663.412046][ C0] NMI backtrace for cpu 0 [ 2663.412056][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2663.412071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2663.412079][ C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x52e/0x9c0 [ 2663.412102][ C0] Code: 8b 44 24 18 c6 00 00 48 8b 44 24 10 42 0f b6 04 28 84 c0 0f 85 1b 01 00 00 48 8d 43 01 c6 00 01 41 bc 00 80 ff ff eb 07 f3 90 <41> ff c4 74 47 43 0f b6 04 2e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 2663.412115][ C0] RSP: 0018:ffffc900000079a0 EFLAGS: 00000206 [ 2663.412131][ C0] RAX: 0000000000000000 RBX: ffff88807cee0cd8 RCX: ffffffff8ce93440 [ 2663.412142][ C0] RDX: 0000000000000100 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 2663.412153][ C0] RBP: ffffc90000007a90 R08: ffffffff911ed5c7 R09: 1ffffffff223dab8 [ 2663.412164][ C0] R10: dffffc0000000000 R11: fffffbfff223dab9 R12: 00000000ffffc5f6 [ 2663.412175][ C0] R13: dffffc0000000000 R14: 1ffff1100f9dc19b R15: ffff8880b8e30001 [ 2663.412193][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2663.412206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2663.412218][ C0] CR2: 00007ffd255e1fb0 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2663.412233][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2663.412243][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2663.412253][ C0] Call Trace: [ 2663.412261][ C0] [ 2663.412272][ C0] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 2663.412294][ C0] do_raw_spin_lock+0x23e/0x2b0 [ 2663.412316][ C0] ? __rwlock_init+0x150/0x150 [ 2663.412334][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2663.412356][ C0] tcp_write_timer+0x2d/0x280 [ 2663.412382][ C0] call_timer_fn+0x189/0x540 [ 2663.412398][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 2663.412418][ C0] ? call_timer_fn+0xd2/0x540 [ 2663.412433][ C0] ? __run_timers+0x810/0x810 [ 2663.412452][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2663.412474][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.412493][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 2663.412514][ C0] __run_timers+0x570/0x810 [ 2663.412536][ C0] ? detach_timer+0x2b0/0x2b0 [ 2663.412555][ C0] ? lock_chain_count+0x20/0x20 [ 2663.412574][ C0] run_timer_softirq+0x67/0xf0 [ 2663.412590][ C0] handle_softirqs+0x27d/0x820 [ 2663.412606][ C0] ? read_tsc+0x9/0x20 [ 2663.412621][ C0] ? ktime_get+0x24b/0x280 [ 2663.412640][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2663.412657][ C0] ? do_softirq+0x1a0/0x1a0 [ 2663.412675][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2663.412696][ C0] __irq_exit_rcu+0xd3/0x190 [ 2663.412711][ C0] ? irq_exit_rcu+0x20/0x20 [ 2663.412730][ C0] irq_exit_rcu+0x9/0x20 [ 2663.412744][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2663.412764][ C0] [ 2663.412769][ C0] [ 2663.412775][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2663.412795][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2663.412814][ C0] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 2663.412826][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 2663.412838][ C0] RAX: 895cdcb7996ac000 RBX: ffffffff81630c41 RCX: 895cdcb7996ac000 [ 2663.412850][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 2663.412860][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 2663.412871][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 2663.412882][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 2663.412895][ C0] ? do_idle+0x221/0x5c0 [ 2663.412917][ C0] default_idle+0x13/0x20 [ 2663.412936][ C0] default_idle_call+0x6c/0xa0 [ 2663.412956][ C0] do_idle+0x221/0x5c0 [ 2663.412976][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2663.412994][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2663.413019][ C0] cpu_startup_entry+0x43/0x60 [ 2663.413036][ C0] rest_init+0x2e2/0x300 [ 2663.413057][ C0] ? time_init+0x40/0x40 [ 2663.413145][ C0] arch_call_rest_init+0xe/0x10 [ 2663.413214][ C0] start_kernel+0x461/0x4e0 [ 2663.413237][ C0] x86_64_start_reservations+0x2a/0x30 [ 2663.413256][ C0] x86_64_start_kernel+0x60/0x60 [ 2663.413275][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2663.413302][ C0] [ 2663.414042][ C1] CPU: 1 PID: 10618 Comm: syz.1.11825 Not tainted syzkaller #0 [ 2663.843023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2663.853526][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 2663.860390][ C1] Code: 00 4d 85 e4 75 16 e8 d5 c9 0f 00 eb 15 e8 ce c9 0f 00 e8 19 62 17 09 4d 85 e4 74 ea e8 bf c9 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 2663.879996][ C1] RSP: 0018:ffffc900001ef500 EFLAGS: 00000246 [ 2663.886067][ C1] RAX: ffffffff8177a861 RBX: 0000000000000000 RCX: ffff888027539e00 [ 2663.894046][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2663.902015][ C1] RBP: ffffc900001ef5b8 R08: ffffffff911ed5c7 R09: 1ffffffff223dab8 [ 2663.909989][ C1] R10: dffffc0000000000 R11: fffffbfff223dab9 R12: 0000000000000200 [ 2663.917964][ C1] R13: 000001fb63109b96 R14: 1ffff9200003dea0 R15: dffffc0000000000 [ 2663.925937][ C1] FS: 00007fc6162076c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2663.934889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2663.941471][ C1] CR2: 0000000100000000 CR3: 000000001eb13000 CR4: 00000000003506e0 [ 2663.949456][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2663.957908][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2663.965926][ C1] Call Trace: [ 2663.969208][ C1] [ 2663.972057][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 2663.977364][ C1] ? __skb_clone+0x5c/0x6c0 [ 2663.981878][ C1] ? __skb_clone+0x446/0x6c0 [ 2663.986479][ C1] ktime_get_with_offset+0x103/0x330 [ 2663.991792][ C1] dev_queue_xmit_nit+0x8c9/0xba0 [ 2663.996832][ C1] ? dev_queue_xmit_nit+0x2d/0xba0 [ 2664.001967][ C1] dev_hard_start_xmit+0x150/0x790 [ 2664.007113][ C1] sch_direct_xmit+0x251/0x4a0 [ 2664.011915][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.018088][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 2664.024075][ C1] __dev_queue_xmit+0x162a/0x3630 [ 2664.029114][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 2664.034241][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.040410][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 2664.045794][ C1] ? neigh_resolve_output+0x4e7/0x710 [ 2664.051264][ C1] ? neigh_resolve_output+0x5f5/0x710 [ 2664.056737][ C1] ? ip_finish_output2+0x45a/0x1260 [ 2664.062030][ C1] ip_finish_output2+0xd97/0x1260 [ 2664.067155][ C1] ? ip_finish_output2+0x45a/0x1260 [ 2664.072354][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2664.077575][ C1] ? ip_fragment+0x210/0x210 [ 2664.082360][ C1] ? ip_finish_output+0x190/0x4c0 [ 2664.087481][ C1] ? ip_finish_output+0x3ec/0x4c0 [ 2664.092540][ C1] ip_output+0x2a5/0x3a0 [ 2664.096886][ C1] ? ip_output+0x5a/0x3a0 [ 2664.101219][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 2664.106247][ C1] __ip_queue_xmit+0x1056/0x1960 [ 2664.111278][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 2664.116214][ C1] __tcp_transmit_skb+0x1dd6/0x3470 [ 2664.121424][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 2664.126290][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 2664.131227][ C1] tcp_rcv_established+0x132c/0x1d70 [ 2664.136541][ C1] ? tcp_check_space+0xa80/0xa80 [ 2664.141501][ C1] ? rt_is_expired+0x10/0x2d0 [ 2664.146236][ C1] ? rt_is_expired+0x250/0x2d0 [ 2664.151036][ C1] tcp_v4_do_rcv+0x6d3/0xba0 [ 2664.155659][ C1] tcp_v4_rcv+0x2358/0x2a60 [ 2664.160181][ C1] ? tcp_v4_rcv+0x10d1/0x2a60 [ 2664.164871][ C1] ? tcp_filter+0x90/0x90 [ 2664.169220][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2664.174638][ C1] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 2664.180134][ C1] ? ip_local_deliver_finish+0x1c2/0x510 [ 2664.185835][ C1] ip_local_deliver_finish+0x2c3/0x510 [ 2664.191310][ C1] NF_HOOK+0x32d/0x3b0 [ 2664.195580][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2664.201307][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 2664.205643][ C1] ? NF_HOOK+0x9f/0x3b0 [ 2664.209884][ C1] ? ip_local_deliver+0x180/0x180 [ 2664.214932][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 2664.219199][ C1] ? ip_local_deliver+0x9e/0x180 [ 2664.224160][ C1] ? ip_local_deliver+0x10b/0x180 [ 2664.229226][ C1] ip_sublist_rcv+0xa36/0xd60 [ 2664.233911][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2664.241249][ C1] ? ip_list_rcv+0x440/0x440 [ 2664.245859][ C1] ? ip_rcv_core+0xd80/0xd80 [ 2664.250732][ C1] ? ip_rcv_core+0x898/0xd80 [ 2664.255461][ C1] ip_list_rcv+0x3ed/0x440 [ 2664.260174][ C1] ? ip_rcv_finish+0x250/0x250 [ 2664.265044][ C1] ? ip_rcv_finish+0x250/0x250 [ 2664.269901][ C1] __netif_receive_skb_list_core+0x2d9/0x770 [ 2664.275890][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 2664.280570][ C1] ? read_tsc+0x9/0x20 [ 2664.284638][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 2664.290795][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 2664.297302][ C1] ? netif_receive_skb_core+0x230/0x230 [ 2664.302864][ C1] ? dev_gro_receive+0x10b0/0x22a0 [ 2664.307976][ C1] napi_gro_receive+0x553/0xaf0 [ 2664.312827][ C1] receive_buf+0x20ab/0x3660 [ 2664.317533][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.323689][ C1] ? virtnet_poll_tx+0x530/0x530 [ 2664.328634][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.334808][ C1] virtnet_poll+0x69e/0x1300 [ 2664.339413][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 2664.345684][ C1] ? refill_work+0x220/0x220 [ 2664.350274][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.356427][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2664.361637][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.367926][ C1] __napi_poll+0xbb/0x460 [ 2664.372353][ C1] net_rx_action+0x65f/0xcc0 [ 2664.376954][ C1] ? net_tx_action+0x950/0x950 [ 2664.381736][ C1] ? detach_timer+0x2b0/0x2b0 [ 2664.386425][ C1] handle_softirqs+0x27d/0x820 [ 2664.391191][ C1] ? read_tsc+0x9/0x20 [ 2664.395259][ C1] ? ktime_get+0x24b/0x280 [ 2664.399676][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2664.404444][ C1] ? do_softirq+0x1a0/0x1a0 [ 2664.409017][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2664.414322][ C1] __irq_exit_rcu+0xd3/0x190 [ 2664.418923][ C1] ? irq_exit_rcu+0x20/0x20 [ 2664.423467][ C1] irq_exit_rcu+0x9/0x20 [ 2664.427740][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2664.433409][ C1] [ 2664.436341][ C1] [ 2664.439272][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.445255][ C1] RIP: 0010:___slab_alloc+0x78/0x12f0 [ 2664.450645][ C1] Code: 48 89 44 24 58 48 85 c0 75 20 83 fd ff 74 11 48 63 c5 48 0f a3 05 c0 bc 55 15 0f 82 5d 03 00 00 bd ff ff ff ff e9 53 03 00 00 <48> 8b 7c 24 58 83 fd ff 0f 84 f5 00 00 00 48 8b 07 48 83 f8 ff 0f [ 2664.470272][ C1] RSP: 0018:ffffc90003557618 EFLAGS: 00000206 [ 2664.476365][ C1] RAX: 843773c040b5c400 RBX: ffffffff81df5be2 RCX: 843773c040b5c400 [ 2664.484347][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 2664.492343][ C1] RBP: 00000000ffffffff R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 2664.500424][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff8880b8f411f0 [ 2664.508406][ C1] R13: ffff8880b8f411d0 R14: 0000000000000286 R15: ffff888027539e00 [ 2664.516468][ C1] ? ___slab_alloc+0x422/0x12f0 [ 2664.521336][ C1] ? alloc_vmap_area+0x1b4/0x1e50 [ 2664.526367][ C1] kmem_cache_alloc_node+0x12e/0x310 [ 2664.531666][ C1] ? alloc_vmap_area+0x1b4/0x1e50 [ 2664.536701][ C1] alloc_vmap_area+0x1b4/0x1e50 [ 2664.541578][ C1] ? vm_map_ram+0xcf0/0xcf0 [ 2664.546091][ C1] ? rcu_is_watching+0x15/0xb0 [ 2664.550864][ C1] __get_vm_area_node+0x162/0x370 [ 2664.555895][ C1] __vmalloc_node_range+0x36f/0x1320 [ 2664.561281][ C1] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2664.566844][ C1] ? mark_lock+0x94/0x320 [ 2664.571175][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2664.576936][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2664.582936][ C1] ? free_vm_area+0x50/0x50 [ 2664.587485][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.593658][ C1] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2664.599225][ C1] __vmalloc+0x7a/0x90 [ 2664.603300][ C1] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 2664.608869][ C1] bpf_prog_alloc_no_stats+0x46/0x430 [ 2664.614272][ C1] bpf_prog_alloc+0x3d/0x1a0 [ 2664.618881][ C1] bpf_prog_load+0x6b2/0x1610 [ 2664.623650][ C1] ? map_freeze+0x420/0x420 [ 2664.628166][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.634338][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2664.639538][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.645692][ C1] ? _copy_from_user+0x11/0xe0 [ 2664.650502][ C1] ? rep_movs_alternative+0x4c/0x90 [ 2664.655982][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 2664.660354][ C1] ? security_bpf+0x7e/0xa0 [ 2664.664882][ C1] __sys_bpf+0x5ba/0x890 [ 2664.669144][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 2664.674524][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2664.680680][ C1] __x64_sys_bpf+0x7c/0x90 [ 2664.685099][ C1] do_syscall_64+0x55/0xb0 [ 2664.689513][ C1] ? clear_bhb_loop+0x40/0x90 [ 2664.694193][ C1] ? clear_bhb_loop+0x40/0x90 [ 2664.698865][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2664.704768][ C1] RIP: 0033:0x7fc61539e0d9 [ 2664.709188][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2664.728893][ C1] RSP: 002b:00007fc616207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2664.737310][ C1] RAX: ffffffffffffffda RBX: 00007fc615625fa0 RCX: 00007fc61539e0d9 [ 2664.745386][ C1] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2664.753368][ C1] RBP: 00007fc615435024 R08: 0000000000000000 R09: 0000000000000000 [ 2664.761340][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2664.769308][ C1] R13: 00007fc615626038 R14: 00007fc615625fa0 R15: 00007ffdbc3b67e8 [ 2664.777289][ C1] [ 2671.572475][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2671.578844][ T1290] ieee802154 phy1 wpan1: encryption failed: -22