last executing test programs: 10.05606457s ago: executing program 1 (id=2613): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xba4ee230eabac5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3ab, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r0, 0x0) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f00000009c0)) socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0xc, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x190767b3, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0xffff0000, 0xe, 0x0, &(0x7f0000000900)="ddff00001a748296f3d62a7200d7", 0x0, 0x1, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x10100) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.587262184s ago: executing program 1 (id=2615): bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x14, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @generic={0x3, 0x0, 0xc, 0xfa7, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 9.223980159s ago: executing program 1 (id=2617): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000002340)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000030a44070403fe80000000000002845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002440), &(0x7f0000002480), 0x0, 0x700}, 0x2c) 8.907237168s ago: executing program 1 (id=2620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x6, &(0x7f0000000240)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x11b, 0x6, &(0x7f0000000240)=r2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r3], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r3], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 7.177586682s ago: executing program 1 (id=2629): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0x5, 0x7, 0xfffff008}, {0x6, 0xfd, 0x6, 0xe5}]}) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffffffffffffffff) 5.971994316s ago: executing program 4 (id=2640): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ff7f0000000000000008000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4092, 0xffc}, 0x40000002) r6 = socket$kcm(0x23, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ec0)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000001f00)=r7, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001f40)={0xffffffffffffffff, r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x6, &(0x7f0000000f80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@generic={0x6, 0xa, 0x6, 0x7fff, 0xfffffffd}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x1b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cd00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000cc0)='GPL\x00', 0x2, 0xfd, &(0x7f0000000d00)=""/253, 0x0, 0x4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r8, &(0x7f0000000940), 0x0}, 0x20) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 3.046838732s ago: executing program 3 (id=2648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x7, &(0x7f0000000180)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_query], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0x4, 0x81}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0xfffffffc}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000340)) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r1, 0x33, 0x10}, 0x20) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180002d01010000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) 2.121049699s ago: executing program 3 (id=2650): socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x16, 0x3, &(0x7f0000000580)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000740)='GPL\x00'}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@arena={0x21, 0x0, 0x0, 0x15, 0x60400, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180200000800000000000000000000008500000028", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) (async) socket$kcm(0xa, 0x3, 0x3a) (async) socket$kcm(0x2, 0x200000000000009, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x404a880) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f00000003c0), 0xe) (async) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000005c0)='Al', 0x2}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8) r7 = perf_event_open(&(0x7f0000000bc0)={0x4, 0x80, 0x5, 0x0, 0x0, 0xc, 0x0, 0x9, 0x235850cc0167f755, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3fb5, 0xb}, 0x3000, 0xfffffffffffffff7, 0xfff, 0x0, 0x8, 0x1400, 0x8, 0x0, 0x7f, 0x0, 0x5}, 0x0, 0x6, r6, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa1, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000022c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) (async) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000700)="a1", 0x1}], 0x1}, 0x80) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r0, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x98, &(0x7f0000000cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x32, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b0000000000000000000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="03000000040000000500000000000000000000000000000000002d5c749861c6ef882b1c24c4e955512e711213ec1e2a2c6022d3d8b8456b9e1f66122fd3b99c9e9e59b185a2cbc0a0868ff7cf1b9606a3e32abaef979580eef19937956acbac204f45bd9eb8afa19f04831a528b7f16feba814b1451e9c25e9419d7b4205f0539ad352b519c8d448b780d9b46d6e63eb75413f0d9248b8700f02c8be28a54cdf603ff3442459a7dd67a11da5176c01c06a1ba91902237aed7a6fbfffdb0146503a5e9017c57a01f1455bc9cfc98db215407863c754c4f1d370d8e0000000000810000000000000000"], 0x50) 2.072184824s ago: executing program 4 (id=2651): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@in6={0xa, 0xfffe, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0x1a}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="a0005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x9, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x7, 0xc, &(0x7f0000001200)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x7, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x0, 0xb, 0x8, 0x21000, r2, 0x8000, '\x00', r3, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0xfeffff, 0x180, 0x3f000002, &(0x7f0000000c80)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000000dc0), &(0x7f0000000e00)}, 0x40) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000180081034e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f000000a401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000009fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a25ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x20040000) 1.936030097s ago: executing program 2 (id=2653): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000000)=@raw=[@generic={0xbf, 0x2, 0xa, 0x0, 0x41c}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.930406477s ago: executing program 0 (id=2654): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000002340)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002440), &(0x7f0000002480), 0x0, 0x700}, 0x2c) 1.656265763s ago: executing program 2 (id=2655): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1d, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36e2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.617780237s ago: executing program 0 (id=2656): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x41ff, 0x29a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0xa, 0xa, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x40012103) 1.48131536s ago: executing program 2 (id=2657): r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000340)) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, r0, 0xb) 1.462510502s ago: executing program 4 (id=2658): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x21, 0x7, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x2, 0x2, 0x1, 0xa0}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) close(0x4) 1.284147679s ago: executing program 3 (id=2659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000580)={'pim6reg1\x00', @link_local={0x1, 0x35}}) (async) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x8}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x1000b0, 0x0, 0x6, 0x1, 0x20000000000000, 0x6}, 0xffffffffffffffff, 0x0, r2, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000600)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000001f00)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000001fc0)="b9158edfaa57fef007fd65580000ffff", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 983.821517ms ago: executing program 4 (id=2660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 979.022167ms ago: executing program 0 (id=2661): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB="000000008a1e9e000000000000000000000000000000003c52acd4cdf4b9f8f2b5e2958688f411b960cdf9cc74646bdf3d5a3051faff354563abd30343dbb223d63ef54e30e55ba7a969bf4cb830f68600eb93ecbc606a09d47d00a6afce0d6db59c772d52af2e9986b3fbb188eaf4877e60d6825dcf2131cc16b30eb232e3a24f0ca1eda9ccc0fdf79f26c2d573", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r2}, 0x38) 784.288936ms ago: executing program 0 (id=2662): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2d, 'cpu'}]}, 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="11000000520081044e81f782db44b90402", 0x11}], 0x1}, 0x0) 761.285768ms ago: executing program 3 (id=2663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x10, &(0x7f0000000f80)=ANY=[], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001000)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 715.203882ms ago: executing program 1 (id=2664): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcc, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x1f76a, 0x6f5f, 0x8000, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1c, 0x1d, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3460, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @jmp={0x5, 0x1, 0xb, 0x4, 0x0, 0x20, 0x8}, @jmp={0x5, 0x1, 0x1, 0x1, 0x6, 0x4, 0xfffffffffffffffc}, @map_fd={0x18, 0xa}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @alu={0x3, 0x1, 0x9, 0x6, 0x6, 0x80, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001040)=[{0x5, 0x4, 0x2, 0x1}], 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x8d2142, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000400), 0xcf) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000500)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=0x400000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x20000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x4, 0x0, 0xf000000) socket$kcm(0x11, 0x200000000000002, 0x300) 633.09704ms ago: executing program 4 (id=2665): bpf$PROG_BIND_MAP(0xa, &(0x7f0000001dc0), 0xc) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x22) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400), 0x6000}], 0x4, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 552.294108ms ago: executing program 3 (id=2666): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000002340)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002440), &(0x7f0000002480), 0x0, 0x700}, 0x2c) 550.170408ms ago: executing program 0 (id=2667): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x5b) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {&(0x7f0000000800)="c8ea9740f6ac9517c31e4d9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x3}, 0x200ce0c0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x83, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x9, &(0x7f0000000c40)=r9, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000000)="04", 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x2000c054) 513.350201ms ago: executing program 2 (id=2668): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009c00000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) 322.549289ms ago: executing program 4 (id=2669): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x9, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x2, 0x2, 0x4, 0x7, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000f80)='syzkaller\x00', 0x9, 0xba, &(0x7f0000000fc0)=""/186, 0x41100, 0x60, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001100)=[0xffffffffffffffff], &(0x7f0000001140)=[{0x3, 0x5, 0xf, 0x6}, {0x3, 0x5, 0x4, 0xa}, {0x3, 0x5, 0x3, 0xb}], 0x10, 0x7}, 0x94) (async, rerun: 64) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000001380)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001400)={r3, &(0x7f0000001440)}, 0x20) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d2a724b, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0xc5, &(0x7f0000000b80)=""/197, 0x41000, 0x50, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000016c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0xe, 0x7ff, 0x3d2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001800), &(0x7f0000001840)=[{0x2, 0x4, 0x5, 0xb}, {0x5, 0x5, 0x6, 0x7}, {0x2, 0x3, 0x9, 0x8}, {0x4, 0x4, 0x3, 0x2}, {0x0, 0x5, 0x9, 0x7}], 0x10, 0x60f0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) r4 = socket$kcm(0xa, 0x6, 0x0) close(r4) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a000140c300000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async, rerun: 32) socket$kcm(0x2, 0x2, 0x73) (async, rerun: 32) sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) (async) perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403214700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 266.029525ms ago: executing program 0 (id=2670): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000440)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480), 0x200002, 0x0) mkdir(0x0, 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000600), 0x9) (async) write$cgroup_type(r6, &(0x7f0000000600), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f0000000640)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740), 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000780), 0x12) (async) write$cgroup_pid(r7, &(0x7f0000000780), 0x12) openat$cgroup_ro(r8, &(0x7f00000007c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(r8, &(0x7f00000007c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000800)=0x1, 0x12) (async) write$cgroup_int(r9, &(0x7f0000000800)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000880), 0x12) (async) write$cgroup_pid(r10, &(0x7f0000000880), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r11, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r11, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) 264.978275ms ago: executing program 3 (id=2671): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xf}]}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f57"], &(0x7f00000005c0)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x1b, &(0x7f0000001680)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000001780)='GPL\x00', 0x5, 0xf8, &(0x7f00000017c0)=""/248, 0x0, 0x2c}, 0x24) (async) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x80d1) 140.274596ms ago: executing program 2 (id=2672): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000480)=r3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x15, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r3, r3, 0x35, 0x34, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff, r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 2 (id=2673): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000080001, 0x80631, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x400, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000080001, 0x80631, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x400, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000100), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="b84af34c5e07f36b1233b8d1e29e16bb3edc42778335047b5da7a55821b35e7929d7460b2428d84839d4da6680db0ef6b6c314c32261ffde799d2255e22550152b3c3792e341e91d420117aecacf71", 0x4f}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000380)=r3, 0x4) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000480)=[{&(0x7f0000001000)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000000500)=""/48, 0x98}, 0x18063) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0x0, 0xe, 0x0, &(0x7f0000000d80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000ac0)='./cgroup/file0/file0\x00', r3, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000b00)={0x5, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000b80)='./cgroup/file0/file0\x00', 0x81) r5 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002020) (async) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002020) syz_open_procfs$namespace(0x0, 0x0) kernel console output (not intermixed with test programs): PID: 11382 Comm: syz.0.1742 Not tainted syzkaller #0 [ 398.259057][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 398.269161][T11382] Call Trace: [ 398.272474][T11382] [ 398.275469][T11382] dump_stack_lvl+0x188/0x24e [ 398.280198][T11382] ? show_regs_print_info+0x12/0x12 [ 398.285452][T11382] ? load_image+0x410/0x410 [ 398.290011][T11382] ? __lock_acquire+0x7ea0/0x7ea0 [ 398.295105][T11382] should_fail_ex+0x390/0x4c0 [ 398.299966][T11382] _copy_to_user+0x2c/0x130 [ 398.304528][T11382] bpf_verifier_vlog+0x172/0x3a0 [ 398.309518][T11382] __btf_verifier_log+0xdf/0x130 [ 398.314503][T11382] ? rcu_is_watching+0x11/0xa0 [ 398.319309][T11382] ? btf_check_sec_info+0x350/0x350 [ 398.324541][T11382] ? lockdep_hardirqs_on+0x94/0x140 [ 398.329781][T11382] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.335999][T11382] ? btf_parse_hdr+0x1dd/0x7d0 [ 398.340796][T11382] btf_parse_hdr+0x493/0x7d0 [ 398.345439][T11382] btf_new_fd+0x367/0x760 [ 398.349824][T11382] __sys_bpf+0x612/0x780 [ 398.354122][T11382] ? bpf_link_show_fdinfo+0x380/0x380 [ 398.359561][T11382] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.367145][T11382] __x64_sys_bpf+0x78/0x90 [ 398.372202][T11382] do_syscall_64+0x4c/0xa0 [ 398.376643][T11382] ? clear_bhb_loop+0x60/0xb0 [ 398.381353][T11382] ? clear_bhb_loop+0x60/0xb0 [ 398.386051][T11382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.391979][T11382] RIP: 0033:0x7f811b79f559 [ 398.396425][T11382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.416059][T11382] RSP: 002b:00007f811c758028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.424496][T11382] RAX: ffffffffffffffda RBX: 00007f811ba25fa0 RCX: 00007f811b79f559 [ 398.432493][T11382] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 398.440485][T11382] RBP: 00007f811c758090 R08: 0000000000000000 R09: 0000000000000000 [ 398.448486][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.456484][T11382] R13: 00007f811ba26038 R14: 00007f811ba25fa0 R15: 00007ffc45f5b268 [ 398.464499][T11382] [ 398.602331][T11398] validate_nla: 1 callbacks suppressed [ 398.602349][T11398] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 398.626038][T11398] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 398.644326][T11398] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1745'. [ 398.662396][T11397] netlink: 'syz.1.1747': attribute type 3 has an invalid length. [ 398.671016][T11398] wlan1: mtu greater than device maximum [ 398.696686][T11397] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1747'. [ 398.702232][T11398] team0: Device wlan1 failed to change mtu [ 399.026489][T11411] netlink: 'syz.2.1751': attribute type 2 has an invalid length. [ 399.223376][T11411] device .*! entered promiscuous mode [ 399.556914][T11439] FAULT_INJECTION: forcing a failure. [ 399.556914][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.618597][T11439] CPU: 1 PID: 11439 Comm: syz.2.1758 Not tainted syzkaller #0 [ 399.626186][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 399.636292][T11439] Call Trace: [ 399.639611][T11439] [ 399.642591][T11439] dump_stack_lvl+0x188/0x24e [ 399.647316][T11439] ? show_regs_print_info+0x12/0x12 [ 399.652578][T11439] ? load_image+0x410/0x410 [ 399.657133][T11439] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.662222][T11439] should_fail_ex+0x390/0x4c0 [ 399.666959][T11439] _copy_to_user+0x2c/0x130 [ 399.671516][T11439] bpf_verifier_vlog+0x172/0x3a0 [ 399.676497][T11439] __btf_verifier_log+0xdf/0x130 [ 399.681495][T11439] ? btf_check_sec_info+0x350/0x350 [ 399.686761][T11439] __btf_verifier_log_type+0x4de/0x7d0 [ 399.692276][T11439] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.698474][T11439] ? lockdep_hardirqs_on+0x94/0x140 [ 399.703719][T11439] ? btf_int_show+0x27f0/0x27f0 [ 399.708626][T11439] ? btf_enum64_check_meta+0x3ba/0xdd0 [ 399.714210][T11439] btf_enum64_check_meta+0x486/0xdd0 [ 399.719561][T11439] ? irqentry_enter+0x33/0x50 [ 399.724289][T11439] btf_check_all_metas+0x35a/0xa50 [ 399.729437][T11439] ? lock_chain_count+0x20/0x20 [ 399.734329][T11439] btf_parse_type_sec+0xfc/0x1910 [ 399.739410][T11439] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.745589][T11439] ? lockdep_hardirqs_on+0x94/0x140 [ 399.750818][T11439] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.756999][T11439] ? btf_parse_str_sec+0x20a/0x2a0 [ 399.762143][T11439] btf_new_fd+0x3fe/0x760 [ 399.766508][T11439] __sys_bpf+0x612/0x780 [ 399.770815][T11439] ? bpf_link_show_fdinfo+0x380/0x380 [ 399.776225][T11439] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.782417][T11439] __x64_sys_bpf+0x78/0x90 [ 399.786865][T11439] do_syscall_64+0x4c/0xa0 [ 399.791350][T11439] ? clear_bhb_loop+0x60/0xb0 [ 399.796057][T11439] ? clear_bhb_loop+0x60/0xb0 [ 399.800770][T11439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.806714][T11439] RIP: 0033:0x7f67b6b9f559 [ 399.811167][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.830804][T11439] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.839259][T11439] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 399.847251][T11439] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 399.855245][T11439] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 399.863238][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.871242][T11439] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 399.879258][T11439] [ 400.283774][T11454] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1762'. [ 400.294845][T11451] netlink: 'syz.0.1763': attribute type 3 has an invalid length. [ 400.319517][T11451] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1763'. [ 400.361644][T11454] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 400.382129][T11454] CPU: 1 PID: 11454 Comm: syz.2.1762 Not tainted syzkaller #0 [ 400.389674][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.399775][T11454] Call Trace: [ 400.403104][T11454] [ 400.406080][T11454] dump_stack_lvl+0x188/0x24e [ 400.410822][T11454] ? show_regs_print_info+0x12/0x12 [ 400.416080][T11454] ? load_image+0x410/0x410 [ 400.420657][T11454] sysfs_warn_dup+0x8a/0xa0 [ 400.425213][T11454] sysfs_do_create_link_sd+0xc0/0x110 [ 400.430638][T11454] device_add+0x83b/0x1050 [ 400.435111][T11454] wiphy_register+0x1d8b/0x2aa0 [ 400.440065][T11454] ? cfg80211_event_work+0x40/0x40 [ 400.445246][T11454] ? minstrel_ht_alloc+0x894/0xa20 [ 400.450430][T11454] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 400.456561][T11454] ieee80211_register_hw+0x2e33/0x3b00 [ 400.462139][T11454] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 400.468356][T11454] ? ieee80211_register_hw+0xf01/0x3b00 [ 400.473962][T11454] ? ieee80211_register_hw+0xf01/0x3b00 [ 400.479579][T11454] ? ieee80211_tasklet_handler+0x20/0x20 [ 400.485275][T11454] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 400.491234][T11454] ? __debug_object_init+0xed/0x440 [ 400.496497][T11454] ? memset+0x1e/0x40 [ 400.500532][T11454] ? __hrtimer_init+0x189/0x270 [ 400.505437][T11454] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 400.511216][T11454] ? memcpy+0x3c/0x60 [ 400.515251][T11454] hwsim_new_radio_nl+0xab7/0xc90 [ 400.520343][T11454] genl_family_rcv_msg_doit+0x22f/0x350 [ 400.525938][T11454] ? end_current_label_crit_section+0x170/0x170 [ 400.532248][T11454] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 400.538223][T11454] ? bpf_lsm_capable+0x5/0x10 [ 400.542952][T11454] ? security_capable+0x85/0xb0 [ 400.547862][T11454] genl_rcv_msg+0x601/0x790 [ 400.552418][T11454] ? lockdep_hardirqs_on+0x94/0x140 [ 400.557683][T11454] ? genl_bind+0x360/0x360 [ 400.562145][T11454] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 400.568546][T11454] netlink_rcv_skb+0x1ef/0x440 [ 400.573380][T11454] ? genl_bind+0x360/0x360 [ 400.577849][T11454] ? netlink_ack+0x1160/0x1160 [ 400.582697][T11454] ? down_read+0x1a8/0x2d0 [ 400.587172][T11454] genl_rcv+0x24/0x40 [ 400.591200][T11454] netlink_unicast+0x7ad/0x920 [ 400.596033][T11454] netlink_sendmsg+0x8ad/0xbd0 [ 400.600868][T11454] ? netlink_getsockopt+0x550/0x550 [ 400.606141][T11454] ? apparmor_socket_sendmsg+0x8a/0x330 [ 400.611754][T11454] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 400.617100][T11454] ? security_socket_sendmsg+0x7c/0xa0 [ 400.622662][T11454] ? netlink_getsockopt+0x550/0x550 [ 400.627919][T11454] ____sys_sendmsg+0x5ed/0x9a0 [ 400.632753][T11454] ? __sys_sendmsg_sock+0x30/0x30 [ 400.637838][T11454] ? __import_iovec+0x306/0x510 [ 400.642756][T11454] ? import_iovec+0x6f/0xa0 [ 400.647335][T11454] ___sys_sendmsg+0x2a2/0x360 [ 400.652097][T11454] ? __sys_sendmsg+0x2a0/0x2a0 [ 400.656936][T11454] ? ktime_get+0x7b/0x270 [ 400.661370][T11454] __se_sys_sendmsg+0x1c3/0x2b0 [ 400.666271][T11454] ? ct_nmi_exit+0x145/0x1c0 [ 400.670913][T11454] ? __x64_sys_sendmsg+0x80/0x80 [ 400.675934][T11454] ? lockdep_hardirqs_on+0x94/0x140 [ 400.681182][T11454] do_syscall_64+0x4c/0xa0 [ 400.685667][T11454] ? clear_bhb_loop+0x60/0xb0 [ 400.690403][T11454] ? clear_bhb_loop+0x60/0xb0 [ 400.695132][T11454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.701090][T11454] RIP: 0033:0x7f67b6b9f559 [ 400.705559][T11454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.725215][T11454] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.733677][T11454] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 400.741748][T11454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 400.749772][T11454] RBP: 00007f67b6c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 400.757796][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.765814][T11454] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 400.773888][T11454] [ 401.484688][T11484] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 402.377632][T11513] netlink: 'syz.4.1778': attribute type 3 has an invalid length. [ 402.496054][T11505] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.499292][T11513] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1778'. [ 403.575868][T11540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1783'. [ 404.028328][T11552] netlink: 'syz.0.1790': attribute type 3 has an invalid length. [ 404.138059][T11552] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1790'. [ 404.392515][T11559] netlink: 'syz.4.1792': attribute type 3 has an invalid length. [ 404.418425][T11559] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1792'. [ 404.815637][T11576] device wlan1 entered promiscuous mode [ 405.121584][T11604] netlink: 'syz.4.1805': attribute type 3 has an invalid length. [ 405.158362][T11604] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1805'. [ 405.456260][T11621] sock: sock_set_timeout: `syz.4.1808' (pid 11621) tries to set negative timeout [ 405.831164][T11633] netlink: 'syz.4.1811': attribute type 21 has an invalid length. [ 406.301158][T11651] netlink: 'syz.3.1814': attribute type 2 has an invalid length. [ 406.372518][T11650] netlink: 'syz.2.1815': attribute type 39 has an invalid length. [ 409.162774][T11660] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1817'. [ 409.188211][T11660] netlink: zone id is out of range [ 409.193557][T11660] netlink: zone id is out of range [ 409.212521][T11660] netlink: get zone limit has 8 unknown bytes [ 409.301666][T11664] netlink: 'syz.2.1818': attribute type 3 has an invalid length. [ 409.325739][T11664] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1818'. [ 409.477669][T11674] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 409.518197][T11674] syzkaller0: linktype set to 823 [ 409.664877][T11682] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1823'. [ 410.319387][T11697] delete_channel: no stack [ 410.414807][T11710] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 410.470520][T11710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1830'. [ 410.821434][T11727] netlink: 'syz.3.1834': attribute type 3 has an invalid length. [ 410.842624][T11727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1834'. [ 411.273710][T11749] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.1840'. [ 411.312858][T11749] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 411.624746][T11755] netlink: 'syz.0.1842': attribute type 10 has an invalid length. [ 411.638279][T11755] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1842'. [ 411.972017][T11772] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 412.010155][T11772] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1846'. [ 412.788280][T11771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.700294][T11792] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 413.732245][T11792] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1849'. [ 414.586141][T11820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1858'. [ 415.774294][T11847] netlink: 'syz.2.1865': attribute type 3 has an invalid length. [ 415.791243][T11847] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1865'. [ 416.262554][T11873] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1871'. [ 416.689259][T11884] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 416.706976][T11884] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1875'. [ 416.805105][T11889] netlink: 'syz.2.1876': attribute type 3 has an invalid length. [ 416.832263][T11891] netlink: 'syz.3.1878': attribute type 25 has an invalid length. [ 416.845207][T11889] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1876'. [ 416.855061][T11891] netlink: 'syz.3.1878': attribute type 3 has an invalid length. [ 416.870337][T11891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1878'. [ 417.204784][T11909] netlink: 'syz.4.1881': attribute type 3 has an invalid length. [ 417.268849][T11909] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1881'. [ 419.042090][T11961] C: renamed from team_slave_0 [ 421.033006][T11961] netlink: 'syz.4.1894': attribute type 2 has an invalid length. [ 421.047946][T11961] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1894'. [ 421.057053][T11961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.304291][T11970] netlink: 'syz.4.1896': attribute type 3 has an invalid length. [ 421.358512][T11970] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1896'. [ 421.464692][T11977] netlink: 'syz.2.1899': attribute type 2 has an invalid length. [ 421.917378][T12001] ¥: port 1(team0) entered blocking state [ 421.941946][T12001] ¥: port 1(team0) entered disabled state [ 422.009063][T12001] device team0 entered promiscuous mode [ 422.025157][T12001] device team_slave_0 entered promiscuous mode [ 422.036247][T12001] device team_slave_1 entered promiscuous mode [ 422.056177][T12001] device wlan1 entered promiscuous mode [ 422.068833][T12001] device bond0 entered promiscuous mode [ 422.084983][T12001] device bond_slave_0 entered promiscuous mode [ 422.101556][T12001] device bond_slave_1 entered promiscuous mode [ 422.116708][T12001] device geneve1 entered promiscuous mode [ 422.546489][T11988] delete_channel: no stack [ 422.580751][T12025] ref_ctr_offset mismatch. inode: 0x792 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 422.823947][T12038] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 422.896584][T12038] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 423.003519][T12051] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1917'. [ 423.028845][T12051] netlink: 105 bytes leftover after parsing attributes in process `syz.3.1917'. [ 423.040786][T12051] netlink: 105 bytes leftover after parsing attributes in process `syz.3.1917'. [ 423.244352][T12068] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1921'. [ 423.285067][T12069] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1921'. [ 423.973275][T12093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1928'. [ 424.064711][T12100] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.1930'. [ 424.077297][T12100] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 424.273893][T12106] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 424.541739][T12114] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1934'. [ 424.574241][T12118] netlink: 'syz.2.1933': attribute type 10 has an invalid length. [ 424.719107][T12118] bridge0: port 3(dummy0) entered disabled state [ 424.847423][T12118] device dummy0 left promiscuous mode [ 424.886956][T12118] bridge0: port 3(dummy0) entered disabled state [ 425.081754][T12118] device dummy0 entered promiscuous mode [ 425.104315][T12118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.220253][T12138] netlink: 'syz.4.1939': attribute type 3 has an invalid length. [ 425.296469][T12130] netlink: 'syz.0.1938': attribute type 21 has an invalid length. [ 425.314637][T12132] netlink: 'syz.0.1938': attribute type 3 has an invalid length. [ 426.102387][T12156] validate_nla: 2 callbacks suppressed [ 426.102407][T12156] netlink: 'syz.0.1942': attribute type 19 has an invalid length. [ 426.168136][T12156] __nla_validate_parse: 4 callbacks suppressed [ 426.168157][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'. [ 427.013938][T12187] netlink: 'syz.0.1954': attribute type 3 has an invalid length. [ 427.042502][T12187] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1954'. [ 427.074625][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 427.098979][T12180] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1950'. [ 427.122114][T12191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1952'. [ 427.184122][T12191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1952'. [ 427.293953][T12191] netlink: 'syz.1.1952': attribute type 29 has an invalid length. [ 427.426926][T12195] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1952'. [ 427.455104][T12191] netlink: 'syz.1.1952': attribute type 29 has an invalid length. [ 427.767185][T12200] netlink: 'syz.0.1955': attribute type 10 has an invalid length. [ 428.607326][T12219] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 428.658839][T12219] syzkaller1: linktype set to 825 [ 428.694286][T12224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1960'. [ 428.813182][T12221] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 428.862090][T12221] syzkaller1: linktype set to 24 [ 428.951238][T12228] netlink: 'syz.4.1962': attribute type 10 has an invalid length. [ 428.971883][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1962'. [ 429.024118][T12228] device dummy0 entered promiscuous mode [ 429.056964][T12228] bridge0: port 3(dummy0) entered blocking state [ 429.102824][T12228] bridge0: port 3(dummy0) entered disabled state [ 429.136907][T12231] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1962'. [ 429.242458][T12234] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.733807][T12260] netlink: 'syz.1.1965': attribute type 3 has an invalid length. [ 429.918801][T12264] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 429.926817][T12264] CPU: 1 PID: 12264 Comm: syz.2.1968 Not tainted syzkaller #0 [ 429.934330][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.944432][T12264] Call Trace: [ 429.947754][T12264] [ 429.950728][T12264] dump_stack_lvl+0x188/0x24e [ 429.955457][T12264] ? show_regs_print_info+0x12/0x12 [ 429.960707][T12264] ? load_image+0x410/0x410 [ 429.965288][T12264] sysfs_warn_dup+0x8a/0xa0 [ 429.969853][T12264] sysfs_do_create_link_sd+0xc0/0x110 [ 429.975289][T12264] device_add+0x83b/0x1050 [ 429.979778][T12264] wiphy_register+0x1d8b/0x2aa0 [ 429.984722][T12264] ? cfg80211_event_work+0x40/0x40 [ 429.989902][T12264] ? minstrel_ht_alloc+0x894/0xa20 [ 429.995083][T12264] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 430.001194][T12264] ieee80211_register_hw+0x2e33/0x3b00 [ 430.006697][T12264] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 430.012893][T12264] ? ieee80211_register_hw+0xf01/0x3b00 [ 430.018488][T12264] ? ieee80211_register_hw+0xf01/0x3b00 [ 430.024083][T12264] ? ieee80211_tasklet_handler+0x20/0x20 [ 430.029754][T12264] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 430.035687][T12264] ? __debug_object_init+0xed/0x440 [ 430.040924][T12264] ? memset+0x1e/0x40 [ 430.044934][T12264] ? __hrtimer_init+0x189/0x270 [ 430.049817][T12264] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 430.055579][T12264] hwsim_new_radio_nl+0xab7/0xc90 [ 430.060646][T12264] genl_family_rcv_msg_doit+0x22f/0x350 [ 430.066223][T12264] ? end_current_label_crit_section+0x170/0x170 [ 430.072503][T12264] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 430.078457][T12264] ? bpf_lsm_capable+0x5/0x10 [ 430.083177][T12264] ? security_capable+0x85/0xb0 [ 430.088068][T12264] genl_rcv_msg+0x601/0x790 [ 430.092604][T12264] ? lock_chain_count+0x20/0x20 [ 430.097500][T12264] ? genl_bind+0x360/0x360 [ 430.101953][T12264] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 430.108319][T12264] netlink_rcv_skb+0x1ef/0x440 [ 430.113117][T12264] ? genl_bind+0x360/0x360 [ 430.117562][T12264] ? netlink_ack+0x1160/0x1160 [ 430.122379][T12264] ? down_read+0x1a8/0x2d0 [ 430.126835][T12264] genl_rcv+0x24/0x40 [ 430.130864][T12264] netlink_unicast+0x7ad/0x920 [ 430.135678][T12264] netlink_sendmsg+0x8ad/0xbd0 [ 430.140511][T12264] ? netlink_getsockopt+0x550/0x550 [ 430.145756][T12264] ? apparmor_socket_sendmsg+0x8a/0x330 [ 430.151338][T12264] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 430.156649][T12264] ? security_socket_sendmsg+0x7c/0xa0 [ 430.162146][T12264] ? netlink_getsockopt+0x550/0x550 [ 430.167384][T12264] ____sys_sendmsg+0x5ed/0x9a0 [ 430.172197][T12264] ? __sys_sendmsg_sock+0x30/0x30 [ 430.177256][T12264] ? __import_iovec+0x306/0x510 [ 430.182151][T12264] ? import_iovec+0x6f/0xa0 [ 430.186691][T12264] ___sys_sendmsg+0x2a2/0x360 [ 430.191410][T12264] ? __fget_files+0x28/0x460 [ 430.196041][T12264] ? __sys_sendmsg+0x2a0/0x2a0 [ 430.200890][T12264] __se_sys_sendmsg+0x1c3/0x2b0 [ 430.205781][T12264] ? __x64_sys_sendmsg+0x80/0x80 [ 430.210770][T12264] ? lockdep_hardirqs_on+0x94/0x140 [ 430.216000][T12264] do_syscall_64+0x4c/0xa0 [ 430.220444][T12264] ? clear_bhb_loop+0x60/0xb0 [ 430.225160][T12264] ? clear_bhb_loop+0x60/0xb0 [ 430.229869][T12264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.235796][T12264] RIP: 0033:0x7f67b6b9f559 [ 430.240243][T12264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.259873][T12264] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.268317][T12264] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 430.276314][T12264] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 430.284332][T12264] RBP: 00007f67b6c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 430.292331][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.300326][T12264] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 430.308345][T12264] [ 430.464325][T12266] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 430.491155][T12276] sctp: [Deprecated]: syz.3.1971 (pid 12276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.491155][T12276] Use struct sctp_sack_info instead [ 431.504785][T12289] netlink: 'syz.2.1975': attribute type 10 has an invalid length. [ 431.533450][T12289] __nla_validate_parse: 3 callbacks suppressed [ 431.533467][T12289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1975'. [ 431.553043][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.560843][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.572431][T12289] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 432.219754][T12313] netlink: 'syz.2.1982': attribute type 3 has an invalid length. [ 432.272669][T12313] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1982'. [ 432.335446][T12318] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 432.352494][T12318] syzkaller0: linktype set to 0 [ 432.385465][T12320] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 432.413465][T12317] netlink: 15486 bytes leftover after parsing attributes in process `syz.0.1983'. [ 433.412689][T12355] netlink: 'syz.2.1992': attribute type 25 has an invalid length. [ 433.429354][T12355] netlink: 'syz.2.1992': attribute type 10 has an invalid length. [ 433.813625][T12381] netlink: 'syz.2.1996': attribute type 3 has an invalid length. [ 433.827169][T12381] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1996'. [ 433.916378][T12386] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1997'. [ 433.936376][T12386] bridge_slave_1: default FDB implementation only supports local addresses [ 434.131044][T12389] can: request_module (can-proto-0) failed. [ 434.220684][T12398] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2001'. [ 434.276096][T12402] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2001'. [ 434.556476][T12417] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 434.564434][T12417] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 434.572743][T12417] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2004'. [ 434.662669][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2005'. [ 434.696785][T12421] netlink: 'syz.0.2006': attribute type 29 has an invalid length. [ 434.717337][T12421] netlink: 'syz.0.2006': attribute type 29 has an invalid length. [ 434.744123][T12422] delete_channel: no stack [ 434.751100][T12426] netlink: 'syz.0.2006': attribute type 29 has an invalid length. [ 434.766828][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 436.420456][T12478] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.156256][T12502] validate_nla: 6 callbacks suppressed [ 437.156276][T12502] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 437.314895][T12501] device syzkaller0 entered promiscuous mode [ 437.358389][T12509] netlink: 'syz.1.2027': attribute type 3 has an invalid length. [ 437.375675][T12509] __nla_validate_parse: 5 callbacks suppressed [ 437.375709][T12509] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2027'. [ 439.961894][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968286][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.126108][T12541] FAULT_INJECTION: forcing a failure. [ 440.126108][T12541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.190178][T12541] CPU: 1 PID: 12541 Comm: syz.2.2034 Not tainted syzkaller #0 [ 440.197740][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.207852][T12541] Call Trace: [ 440.211172][T12541] [ 440.214138][T12541] dump_stack_lvl+0x188/0x24e [ 440.218864][T12541] ? show_regs_print_info+0x12/0x12 [ 440.224109][T12541] ? load_image+0x410/0x410 [ 440.228665][T12541] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.233760][T12541] should_fail_ex+0x390/0x4c0 [ 440.238509][T12541] _copy_to_user+0x2c/0x130 [ 440.243070][T12541] bpf_verifier_vlog+0x172/0x3a0 [ 440.248072][T12541] __btf_verifier_log+0xdf/0x130 [ 440.253061][T12541] ? btf_check_sec_info+0x350/0x350 [ 440.258310][T12541] ? btf_parse_hdr+0x1dd/0x7d0 [ 440.263107][T12541] btf_parse_hdr+0x400/0x7d0 [ 440.267752][T12541] btf_new_fd+0x367/0x760 [ 440.272126][T12541] __sys_bpf+0x612/0x780 [ 440.276411][T12541] ? bpf_link_show_fdinfo+0x380/0x380 [ 440.281831][T12541] ? lock_chain_count+0x20/0x20 [ 440.286723][T12541] __x64_sys_bpf+0x78/0x90 [ 440.291187][T12541] do_syscall_64+0x4c/0xa0 [ 440.295622][T12541] ? clear_bhb_loop+0x60/0xb0 [ 440.300325][T12541] ? clear_bhb_loop+0x60/0xb0 [ 440.305033][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.310962][T12541] RIP: 0033:0x7f67b6b9f559 [ 440.315399][T12541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.335030][T12541] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.343473][T12541] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 440.351472][T12541] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 440.359469][T12541] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 440.367478][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.375487][T12541] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 440.383506][T12541] [ 440.777642][T12550] netlink: 'syz.4.2037': attribute type 10 has an invalid length. [ 441.095928][T12564] netlink: 'syz.0.2042': attribute type 3 has an invalid length. [ 441.110520][T12564] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2042'. [ 441.393820][T12573] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 441.622254][T12583] FAULT_INJECTION: forcing a failure. [ 441.622254][T12583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.659253][T12581] tap0: tun_chr_ioctl cmd 2147767511 [ 441.666878][T12583] CPU: 0 PID: 12583 Comm: syz.4.2049 Not tainted syzkaller #0 [ 441.674405][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 441.684497][T12583] Call Trace: [ 441.687841][T12583] [ 441.690810][T12583] dump_stack_lvl+0x188/0x24e [ 441.695545][T12583] ? show_regs_print_info+0x12/0x12 [ 441.700792][T12583] ? load_image+0x410/0x410 [ 441.705366][T12583] ? __lock_acquire+0x7ea0/0x7ea0 [ 441.710454][T12583] should_fail_ex+0x390/0x4c0 [ 441.715210][T12583] _copy_to_user+0x2c/0x130 [ 441.719758][T12583] bpf_verifier_vlog+0x172/0x3a0 [ 441.724768][T12583] __btf_verifier_log+0xdf/0x130 [ 441.729754][T12583] ? btf_check_sec_info+0x350/0x350 [ 441.735010][T12583] ? btf_parse_hdr+0x1dd/0x7d0 [ 441.739827][T12583] btf_parse_hdr+0x42b/0x7d0 [ 441.744502][T12583] btf_new_fd+0x367/0x760 [ 441.748900][T12583] __sys_bpf+0x612/0x780 [ 441.753203][T12583] ? bpf_link_show_fdinfo+0x380/0x380 [ 441.758648][T12583] ? lock_chain_count+0x20/0x20 [ 441.763577][T12583] __x64_sys_bpf+0x78/0x90 [ 441.768056][T12583] do_syscall_64+0x4c/0xa0 [ 441.772512][T12583] ? clear_bhb_loop+0x60/0xb0 [ 441.777228][T12583] ? clear_bhb_loop+0x60/0xb0 [ 441.781951][T12583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.787895][T12583] RIP: 0033:0x7f5588f9f559 [ 441.792355][T12583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.812001][T12583] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.820456][T12583] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 441.828463][T12583] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 441.836489][T12583] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.844503][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.852520][T12583] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 441.860547][T12583] [ 442.410020][T12598] device syzkaller0 entered promiscuous mode [ 442.434682][T12598] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 442.545597][T12606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'. [ 442.582748][T12606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'. [ 442.631476][T12608] netlink: 'syz.2.2060': attribute type 3 has an invalid length. [ 442.642352][T12608] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2060'. [ 442.655898][T12609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'. [ 442.793474][T12609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2059'. [ 442.894300][T12619] FAULT_INJECTION: forcing a failure. [ 442.894300][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.908626][T12612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2061'. [ 442.943660][T12612] device hsr_slave_0 left promiscuous mode [ 442.951106][T12619] CPU: 1 PID: 12619 Comm: syz.4.2063 Not tainted syzkaller #0 [ 442.958654][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.968770][T12619] Call Trace: [ 442.972123][T12619] [ 442.975140][T12619] dump_stack_lvl+0x188/0x24e [ 442.979902][T12619] ? show_regs_print_info+0x12/0x12 [ 442.985176][T12619] ? load_image+0x410/0x410 [ 442.989767][T12619] ? __lock_acquire+0x7ea0/0x7ea0 [ 442.994885][T12619] should_fail_ex+0x390/0x4c0 [ 442.999659][T12619] _copy_to_user+0x2c/0x130 [ 443.004241][T12619] bpf_verifier_vlog+0x172/0x3a0 [ 443.009260][T12619] __btf_verifier_log+0xdf/0x130 [ 443.014303][T12619] ? btf_check_sec_info+0x350/0x350 [ 443.019618][T12619] ? btf_parse_hdr+0x1dd/0x7d0 [ 443.024466][T12619] btf_parse_hdr+0x456/0x7d0 [ 443.029143][T12619] btf_new_fd+0x367/0x760 [ 443.033571][T12619] __sys_bpf+0x612/0x780 [ 443.037911][T12619] ? bpf_link_show_fdinfo+0x380/0x380 [ 443.043415][T12619] ? lock_chain_count+0x20/0x20 [ 443.048387][T12619] __x64_sys_bpf+0x78/0x90 [ 443.052882][T12619] do_syscall_64+0x4c/0xa0 [ 443.057403][T12619] ? clear_bhb_loop+0x60/0xb0 [ 443.062148][T12619] ? clear_bhb_loop+0x60/0xb0 [ 443.066902][T12619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.072872][T12619] RIP: 0033:0x7f5588f9f559 [ 443.077352][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.097027][T12619] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.105555][T12619] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 443.113604][T12619] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 443.121633][T12619] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.129672][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.137702][T12619] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 443.145819][T12619] [ 443.153687][T12612] device hsr_slave_1 left promiscuous mode [ 443.739221][T12628] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 443.747748][T12628] netlink: 'syz.3.2066': attribute type 8 has an invalid length. [ 443.756209][T12628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2066'. [ 443.767006][T12628] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 443.813174][T12628] netlink: 'syz.3.2066': attribute type 8 has an invalid length. [ 443.905837][T12628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2066'. [ 444.048557][T12628] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 444.170590][T12628] netlink: 'syz.3.2066': attribute type 8 has an invalid length. [ 444.301967][T12628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2066'. [ 444.385640][T12647] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2070'. [ 445.383572][T12661] netlink: 'syz.2.2075': attribute type 3 has an invalid length. [ 446.342376][T12681] rxe_eth0 speed is unknown, defaulting to 1000 [ 446.872085][T12685] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.289371][T12729] netlink: 'syz.0.2092': attribute type 3 has an invalid length. [ 447.989203][T12731] device syzkaller0 entered promiscuous mode [ 448.685184][T12758] netlink: 'syz.0.2098': attribute type 3 has an invalid length. [ 448.723969][T12758] __nla_validate_parse: 5 callbacks suppressed [ 448.723987][T12758] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2098'. [ 450.357035][T12778] FAULT_INJECTION: forcing a failure. [ 450.357035][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.371027][T12778] CPU: 1 PID: 12778 Comm: syz.3.2105 Not tainted syzkaller #0 [ 450.378555][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 450.388653][T12778] Call Trace: [ 450.391971][T12778] [ 450.394943][T12778] dump_stack_lvl+0x188/0x24e [ 450.399710][T12778] ? show_regs_print_info+0x12/0x12 [ 450.404956][T12778] ? load_image+0x410/0x410 [ 450.409504][T12778] ? __lock_acquire+0x7ea0/0x7ea0 [ 450.414579][T12778] should_fail_ex+0x390/0x4c0 [ 450.419280][T12778] _copy_to_user+0x2c/0x130 [ 450.423798][T12778] bpf_verifier_vlog+0x172/0x3a0 [ 450.428762][T12778] __btf_verifier_log+0xdf/0x130 [ 450.433733][T12778] ? btf_check_sec_info+0x350/0x350 [ 450.438968][T12778] ? btf_parse_hdr+0x1dd/0x7d0 [ 450.443777][T12778] btf_parse_hdr+0x493/0x7d0 [ 450.448436][T12778] btf_new_fd+0x367/0x760 [ 450.452818][T12778] __sys_bpf+0x612/0x780 [ 450.457117][T12778] ? bpf_link_show_fdinfo+0x380/0x380 [ 450.462544][T12778] ? lock_chain_count+0x20/0x20 [ 450.467427][T12778] __x64_sys_bpf+0x78/0x90 [ 450.471887][T12778] do_syscall_64+0x4c/0xa0 [ 450.476314][T12778] ? clear_bhb_loop+0x60/0xb0 [ 450.481002][T12778] ? clear_bhb_loop+0x60/0xb0 [ 450.485687][T12778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.491603][T12778] RIP: 0033:0x7fe68279f559 [ 450.496057][T12778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.515709][T12778] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.524138][T12778] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 450.532122][T12778] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 450.540116][T12778] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.548126][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.556126][T12778] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 450.564124][T12778] [ 450.660243][T12780] netlink: 'syz.3.2106': attribute type 3 has an invalid length. [ 450.669003][T12780] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2106'. [ 451.908845][T12749] netlink: 'syz.0.2098': attribute type 5 has an invalid length. [ 452.065887][T12785] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 452.127468][T12786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2108'. [ 452.240033][T12785] team0 (unregistering): Port device team_slave_1 removed [ 452.259247][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.267009][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.301976][T12785] team0 (unregistering): Port device bridge0 removed [ 452.740394][T12809] netlink: 'syz.0.2117': attribute type 3 has an invalid length. [ 452.781964][T12809] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2117'. [ 453.555315][T12822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2120'. [ 453.577478][T12822] netlink: 'syz.0.2120': attribute type 8 has an invalid length. [ 454.163462][T12835] FAULT_INJECTION: forcing a failure. [ 454.163462][T12835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.241258][T12835] CPU: 0 PID: 12835 Comm: syz.4.2123 Not tainted syzkaller #0 [ 454.248823][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 454.258916][T12835] Call Trace: [ 454.262230][T12835] [ 454.265197][T12835] dump_stack_lvl+0x188/0x24e [ 454.269961][T12835] ? show_regs_print_info+0x12/0x12 [ 454.275208][T12835] ? load_image+0x410/0x410 [ 454.279787][T12835] ? __lock_acquire+0x7ea0/0x7ea0 [ 454.284882][T12835] should_fail_ex+0x390/0x4c0 [ 454.289630][T12835] _copy_from_user+0x2c/0x170 [ 454.294351][T12835] btf_new_fd+0x326/0x760 [ 454.298739][T12835] __sys_bpf+0x612/0x780 [ 454.303047][T12835] ? bpf_link_show_fdinfo+0x380/0x380 [ 454.308510][T12835] ? lock_chain_count+0x20/0x20 [ 454.313445][T12835] __x64_sys_bpf+0x78/0x90 [ 454.317917][T12835] do_syscall_64+0x4c/0xa0 [ 454.322373][T12835] ? clear_bhb_loop+0x60/0xb0 [ 454.327092][T12835] ? clear_bhb_loop+0x60/0xb0 [ 454.331822][T12835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.337787][T12835] RIP: 0033:0x7f5588f9f559 [ 454.342251][T12835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.361990][T12835] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.370467][T12835] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 454.378479][T12835] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 454.386524][T12835] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.394534][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.402548][T12835] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 454.410584][T12835] [ 454.973375][T12827] device syzkaller0 entered promiscuous mode [ 459.738424][T12857] device sit0 entered promiscuous mode [ 459.923925][T12866] netlink: 'syz.0.2130': attribute type 3 has an invalid length. [ 459.939853][T12866] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2130'. [ 460.128467][T12879] FAULT_INJECTION: forcing a failure. [ 460.128467][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.158196][T12879] CPU: 0 PID: 12879 Comm: syz.1.2137 Not tainted syzkaller #0 [ 460.165772][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 460.175883][T12879] Call Trace: [ 460.179198][T12879] [ 460.182167][T12879] dump_stack_lvl+0x188/0x24e [ 460.186895][T12879] ? show_regs_print_info+0x12/0x12 [ 460.192138][T12879] ? load_image+0x410/0x410 [ 460.196745][T12879] ? __lock_acquire+0x7ea0/0x7ea0 [ 460.201832][T12879] should_fail_ex+0x390/0x4c0 [ 460.206571][T12879] _copy_to_user+0x2c/0x130 [ 460.211122][T12879] bpf_verifier_vlog+0x172/0x3a0 [ 460.216145][T12879] __btf_verifier_log+0xdf/0x130 [ 460.221140][T12879] ? btf_check_sec_info+0x350/0x350 [ 460.226403][T12879] ? btf_parse_hdr+0x1dd/0x7d0 [ 460.231229][T12879] btf_parse_hdr+0x352/0x7d0 [ 460.235871][T12879] btf_new_fd+0x367/0x760 [ 460.240257][T12879] __sys_bpf+0x612/0x780 [ 460.244553][T12879] ? bpf_link_show_fdinfo+0x380/0x380 [ 460.250001][T12879] ? lock_chain_count+0x20/0x20 [ 460.254915][T12879] __x64_sys_bpf+0x78/0x90 [ 460.259390][T12879] do_syscall_64+0x4c/0xa0 [ 460.263848][T12879] ? clear_bhb_loop+0x60/0xb0 [ 460.268569][T12879] ? clear_bhb_loop+0x60/0xb0 [ 460.273297][T12879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.279249][T12879] RIP: 0033:0x7f1e7c99f559 [ 460.283703][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.303357][T12879] RSP: 002b:00007f1e7d903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.311842][T12879] RAX: ffffffffffffffda RBX: 00007f1e7cc25fa0 RCX: 00007f1e7c99f559 [ 460.319858][T12879] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 460.327868][T12879] RBP: 00007f1e7d903090 R08: 0000000000000000 R09: 0000000000000000 [ 460.335892][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.343905][T12879] R13: 00007f1e7cc26038 R14: 00007f1e7cc25fa0 R15: 00007ffd1fcf7258 [ 460.351936][T12879] [ 460.445449][T12885] netlink: 'syz.4.2138': attribute type 7 has an invalid length. [ 460.464950][T12885] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2138'. [ 460.500669][T12888] FAULT_INJECTION: forcing a failure. [ 460.500669][T12888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.528309][T12888] CPU: 0 PID: 12888 Comm: syz.2.2139 Not tainted syzkaller #0 [ 460.535854][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 460.545957][T12888] Call Trace: [ 460.549279][T12888] [ 460.552252][T12888] dump_stack_lvl+0x188/0x24e [ 460.556979][T12888] ? show_regs_print_info+0x12/0x12 [ 460.562223][T12888] ? load_image+0x410/0x410 [ 460.566780][T12888] ? __lock_acquire+0x7ea0/0x7ea0 [ 460.571862][T12888] should_fail_ex+0x390/0x4c0 [ 460.576626][T12888] _copy_to_user+0x2c/0x130 [ 460.581201][T12888] bpf_verifier_vlog+0x172/0x3a0 [ 460.586170][T12888] btf_verifier_log+0x1f0/0x2b0 [ 460.591056][T12888] ? mark_lock+0x94/0x320 [ 460.595443][T12888] ? btf_find_kptr+0xad0/0xad0 [ 460.600245][T12888] ? __lock_acquire+0x142d/0x7ea0 [ 460.605315][T12888] __btf_verifier_log_type+0x565/0x7d0 [ 460.610808][T12888] ? btf_sec_info_cmp+0x59/0x100 [ 460.615793][T12888] ? btf_int_show+0x27f0/0x27f0 [ 460.620688][T12888] btf_enum64_check_meta+0x486/0xdd0 [ 460.626018][T12888] btf_check_all_metas+0x35a/0xa50 [ 460.631193][T12888] btf_parse_type_sec+0xfc/0x1910 [ 460.636275][T12888] ? btf_check_sec_info+0x350/0x350 [ 460.641512][T12888] ? btf_verifier_log+0x2b0/0x2b0 [ 460.646570][T12888] ? btf_parse_str_sec+0x20a/0x2a0 [ 460.651712][T12888] btf_new_fd+0x3fe/0x760 [ 460.656072][T12888] __sys_bpf+0x612/0x780 [ 460.660350][T12888] ? bpf_link_show_fdinfo+0x380/0x380 [ 460.665774][T12888] ? lock_chain_count+0x20/0x20 [ 460.670675][T12888] __x64_sys_bpf+0x78/0x90 [ 460.675116][T12888] do_syscall_64+0x4c/0xa0 [ 460.679565][T12888] ? clear_bhb_loop+0x60/0xb0 [ 460.684310][T12888] ? clear_bhb_loop+0x60/0xb0 [ 460.689012][T12888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.694933][T12888] RIP: 0033:0x7f67b6b9f559 [ 460.699375][T12888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.719006][T12888] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.727443][T12888] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 460.735445][T12888] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 460.743443][T12888] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 460.751439][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.759431][T12888] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 460.767452][T12888] [ 461.123811][T12901] netlink: 'syz.1.2142': attribute type 2 has an invalid length. [ 461.154364][T12898] netlink: 'syz.1.2142': attribute type 2 has an invalid length. [ 461.360661][T12907] netlink: 'syz.0.2144': attribute type 22 has an invalid length. [ 461.376540][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 461.556379][T12911] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2147'. [ 461.576386][T12912] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2147'. [ 461.703809][ T4294] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 461.778366][T12912] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.130103][T12934] FAULT_INJECTION: forcing a failure. [ 462.130103][T12934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.134560][T12930] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.180033][T12934] CPU: 0 PID: 12934 Comm: syz.4.2153 Not tainted syzkaller #0 [ 462.187564][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 462.197674][T12934] Call Trace: [ 462.200986][T12934] [ 462.203949][T12934] dump_stack_lvl+0x188/0x24e [ 462.208673][T12934] ? show_regs_print_info+0x12/0x12 [ 462.213924][T12934] ? load_image+0x410/0x410 [ 462.218477][T12934] ? __lock_acquire+0x7ea0/0x7ea0 [ 462.223557][T12934] should_fail_ex+0x390/0x4c0 [ 462.228289][T12934] _copy_to_user+0x2c/0x130 [ 462.232893][T12934] bpf_verifier_vlog+0x172/0x3a0 [ 462.237868][T12934] __btf_verifier_log+0xdf/0x130 [ 462.242890][T12934] ? btf_check_sec_info+0x350/0x350 [ 462.248167][T12934] ? btf_parse_hdr+0x1dd/0x7d0 [ 462.252976][T12934] btf_parse_hdr+0x37e/0x7d0 [ 462.257631][T12934] btf_new_fd+0x367/0x760 [ 462.262014][T12934] __sys_bpf+0x612/0x780 [ 462.266306][T12934] ? bpf_link_show_fdinfo+0x380/0x380 [ 462.271763][T12934] ? lock_chain_count+0x20/0x20 [ 462.276668][T12934] __x64_sys_bpf+0x78/0x90 [ 462.281153][T12934] do_syscall_64+0x4c/0xa0 [ 462.285610][T12934] ? clear_bhb_loop+0x60/0xb0 [ 462.290331][T12934] ? clear_bhb_loop+0x60/0xb0 [ 462.295050][T12934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.301003][T12934] RIP: 0033:0x7f5588f9f559 [ 462.305460][T12934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.325106][T12934] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.333566][T12934] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 462.341578][T12934] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 462.349588][T12934] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.357605][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.365613][T12934] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 462.373654][T12934] [ 462.402104][T12937] FAULT_INJECTION: forcing a failure. [ 462.402104][T12937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.476371][T12937] CPU: 1 PID: 12937 Comm: syz.0.2154 Not tainted syzkaller #0 [ 462.483998][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 462.494089][T12937] Call Trace: [ 462.497399][T12937] [ 462.500355][T12937] dump_stack_lvl+0x188/0x24e [ 462.505059][T12937] ? show_regs_print_info+0x12/0x12 [ 462.510279][T12937] ? load_image+0x410/0x410 [ 462.514827][T12937] ? __lock_acquire+0x7ea0/0x7ea0 [ 462.519889][T12937] should_fail_ex+0x390/0x4c0 [ 462.524611][T12937] _copy_to_user+0x2c/0x130 [ 462.529163][T12937] bpf_verifier_vlog+0x172/0x3a0 [ 462.534145][T12937] __btf_verifier_log+0xdf/0x130 [ 462.539118][T12937] ? mark_lock+0x94/0x320 [ 462.543480][T12937] ? btf_check_sec_info+0x350/0x350 [ 462.548720][T12937] ? __lock_acquire+0x142d/0x7ea0 [ 462.553796][T12937] __btf_verifier_log_type+0x5fb/0x7d0 [ 462.559289][T12937] ? btf_sec_info_cmp+0x59/0x100 [ 462.564263][T12937] ? btf_int_show+0x27f0/0x27f0 [ 462.569156][T12937] btf_enum64_check_meta+0x486/0xdd0 [ 462.574489][T12937] btf_check_all_metas+0x35a/0xa50 [ 462.579637][T12937] btf_parse_type_sec+0xfc/0x1910 [ 462.584692][T12937] ? btf_check_sec_info+0x350/0x350 [ 462.589922][T12937] ? btf_verifier_log+0x2b0/0x2b0 [ 462.595001][T12937] ? btf_parse_str_sec+0x20a/0x2a0 [ 462.600140][T12937] btf_new_fd+0x3fe/0x760 [ 462.604501][T12937] __sys_bpf+0x612/0x780 [ 462.608785][T12937] ? bpf_link_show_fdinfo+0x380/0x380 [ 462.614228][T12937] ? lock_chain_count+0x20/0x20 [ 462.619136][T12937] __x64_sys_bpf+0x78/0x90 [ 462.623597][T12937] do_syscall_64+0x4c/0xa0 [ 462.628061][T12937] ? clear_bhb_loop+0x60/0xb0 [ 462.632780][T12937] ? clear_bhb_loop+0x60/0xb0 [ 462.637489][T12937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.643442][T12937] RIP: 0033:0x7f811b79f559 [ 462.647903][T12937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.667545][T12937] RSP: 002b:00007f811c758028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.675986][T12937] RAX: ffffffffffffffda RBX: 00007f811ba25fa0 RCX: 00007f811b79f559 [ 462.684004][T12937] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 462.692001][T12937] RBP: 00007f811c758090 R08: 0000000000000000 R09: 0000000000000000 [ 462.699993][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.707987][T12937] R13: 00007f811ba26038 R14: 00007f811ba25fa0 R15: 00007ffc45f5b268 [ 462.715995][T12937] [ 462.840140][T12942] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 462.862650][T12942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2155'. [ 463.052125][T12944] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2157'. [ 463.385137][T12958] device syzkaller0 entered promiscuous mode [ 463.446835][T12965] IPv6: Can't replace route, no match found [ 463.531502][T12965] netlink: 'syz.4.2165': attribute type 19 has an invalid length. [ 463.563809][T12965] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2165'. [ 463.845471][T12972] FAULT_INJECTION: forcing a failure. [ 463.845471][T12972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.874906][T12972] CPU: 1 PID: 12972 Comm: syz.4.2166 Not tainted syzkaller #0 [ 463.882565][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 463.892666][T12972] Call Trace: [ 463.895985][T12972] [ 463.898957][T12972] dump_stack_lvl+0x188/0x24e [ 463.903696][T12972] ? show_regs_print_info+0x12/0x12 [ 463.908950][T12972] ? load_image+0x410/0x410 [ 463.913511][T12972] ? __lock_acquire+0x7ea0/0x7ea0 [ 463.918634][T12972] should_fail_ex+0x390/0x4c0 [ 463.923392][T12972] _copy_to_user+0x2c/0x130 [ 463.927954][T12972] bpf_verifier_vlog+0x172/0x3a0 [ 463.932942][T12972] __btf_verifier_log+0xdf/0x130 [ 463.937941][T12972] ? btf_check_sec_info+0x350/0x350 [ 463.943220][T12972] ? btf_parse_hdr+0x1dd/0x7d0 [ 463.948087][T12972] btf_parse_hdr+0x3aa/0x7d0 [ 463.952735][T12972] btf_new_fd+0x367/0x760 [ 463.957124][T12972] __sys_bpf+0x612/0x780 [ 463.961437][T12972] ? bpf_link_show_fdinfo+0x380/0x380 [ 463.966884][T12972] ? lock_chain_count+0x20/0x20 [ 463.971801][T12972] __x64_sys_bpf+0x78/0x90 [ 463.976277][T12972] do_syscall_64+0x4c/0xa0 [ 463.980736][T12972] ? clear_bhb_loop+0x60/0xb0 [ 463.985463][T12972] ? clear_bhb_loop+0x60/0xb0 [ 463.990194][T12972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.996148][T12972] RIP: 0033:0x7f5588f9f559 [ 464.000625][T12972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.020286][T12972] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.028791][T12972] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 464.036841][T12972] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 464.044856][T12972] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.052876][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.060896][T12972] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 464.068931][T12972] [ 464.246405][T12978] netlink: 'syz.1.2168': attribute type 11 has an invalid length. [ 464.264924][T12978] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2168'. [ 464.310907][T12974] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.348820][T12987] FAULT_INJECTION: forcing a failure. [ 464.348820][T12987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.428102][T12987] CPU: 0 PID: 12987 Comm: syz.4.2169 Not tainted syzkaller #0 [ 464.435657][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 464.445752][T12987] Call Trace: [ 464.449064][T12987] [ 464.452042][T12987] dump_stack_lvl+0x188/0x24e [ 464.456770][T12987] ? show_regs_print_info+0x12/0x12 [ 464.462010][T12987] ? load_image+0x410/0x410 [ 464.466564][T12987] ? __lock_acquire+0x7ea0/0x7ea0 [ 464.471650][T12987] should_fail_ex+0x390/0x4c0 [ 464.476402][T12987] _copy_to_user+0x2c/0x130 [ 464.480961][T12987] bpf_verifier_vlog+0x172/0x3a0 [ 464.485941][T12987] btf_verifier_log+0x1f0/0x2b0 [ 464.490830][T12987] ? btf_find_kptr+0xad0/0xad0 [ 464.495628][T12987] btf_enum64_check_meta+0xa88/0xdd0 [ 464.500952][T12987] btf_check_all_metas+0x35a/0xa50 [ 464.506093][T12987] btf_parse_type_sec+0xfc/0x1910 [ 464.511150][T12987] ? btf_check_sec_info+0x350/0x350 [ 464.516376][T12987] ? btf_verifier_log+0x2b0/0x2b0 [ 464.521431][T12987] ? btf_parse_str_sec+0x20a/0x2a0 [ 464.526602][T12987] btf_new_fd+0x3fe/0x760 [ 464.530965][T12987] __sys_bpf+0x612/0x780 [ 464.535236][T12987] ? bpf_link_show_fdinfo+0x380/0x380 [ 464.540653][T12987] ? lock_chain_count+0x20/0x20 [ 464.545547][T12987] __x64_sys_bpf+0x78/0x90 [ 464.549996][T12987] do_syscall_64+0x4c/0xa0 [ 464.554429][T12987] ? clear_bhb_loop+0x60/0xb0 [ 464.559151][T12987] ? clear_bhb_loop+0x60/0xb0 [ 464.563846][T12987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.569766][T12987] RIP: 0033:0x7f5588f9f559 [ 464.574200][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.593828][T12987] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.602266][T12987] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 464.610259][T12987] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 464.618289][T12987] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.626276][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.634290][T12987] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 464.642299][T12987] [ 464.725107][T12989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2171'. [ 464.754462][T12989] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 464.781847][T12989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.421944][T13021] FAULT_INJECTION: forcing a failure. [ 465.421944][T13021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.435639][T13021] CPU: 1 PID: 13021 Comm: syz.3.2179 Not tainted syzkaller #0 [ 465.443156][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 465.453256][T13021] Call Trace: [ 465.456566][T13021] [ 465.459535][T13021] dump_stack_lvl+0x188/0x24e [ 465.464291][T13021] ? show_regs_print_info+0x12/0x12 [ 465.469529][T13021] ? load_image+0x410/0x410 [ 465.474096][T13021] ? __lock_acquire+0x7ea0/0x7ea0 [ 465.479207][T13021] should_fail_ex+0x390/0x4c0 [ 465.483941][T13021] _copy_to_user+0x2c/0x130 [ 465.488491][T13021] bpf_verifier_vlog+0x172/0x3a0 [ 465.493468][T13021] __btf_verifier_log+0xdf/0x130 [ 465.498436][T13021] ? btf_check_sec_info+0x350/0x350 [ 465.503696][T13021] ? btf_parse_hdr+0x1dd/0x7d0 [ 465.508488][T13021] btf_parse_hdr+0x3d5/0x7d0 [ 465.513110][T13021] btf_new_fd+0x367/0x760 [ 465.517476][T13021] __sys_bpf+0x612/0x780 [ 465.521750][T13021] ? bpf_link_show_fdinfo+0x380/0x380 [ 465.527165][T13021] ? lock_chain_count+0x20/0x20 [ 465.532082][T13021] __x64_sys_bpf+0x78/0x90 [ 465.536525][T13021] do_syscall_64+0x4c/0xa0 [ 465.540959][T13021] ? clear_bhb_loop+0x60/0xb0 [ 465.545658][T13021] ? clear_bhb_loop+0x60/0xb0 [ 465.550360][T13021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.556287][T13021] RIP: 0033:0x7fe68279f559 [ 465.560757][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.580383][T13021] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.588858][T13021] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 465.596856][T13021] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 465.604845][T13021] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 465.612846][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.620859][T13021] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 465.628875][T13021] [ 465.680462][T13024] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 465.704029][T13024] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2181'. [ 466.281715][T13061] netlink: 'syz.3.2191': attribute type 9 has an invalid length. [ 466.320765][T13061] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2191'. [ 466.655293][T13074] FAULT_INJECTION: forcing a failure. [ 466.655293][T13074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.669035][T13074] CPU: 1 PID: 13074 Comm: syz.3.2195 Not tainted syzkaller #0 [ 466.676572][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 466.686666][T13074] Call Trace: [ 466.690068][T13074] [ 466.693054][T13074] dump_stack_lvl+0x188/0x24e [ 466.697782][T13074] ? show_regs_print_info+0x12/0x12 [ 466.703018][T13074] ? load_image+0x410/0x410 [ 466.707573][T13074] ? __lock_acquire+0x7ea0/0x7ea0 [ 466.712656][T13074] should_fail_ex+0x390/0x4c0 [ 466.719671][T13074] _copy_to_user+0x2c/0x130 [ 466.724244][T13074] bpf_verifier_vlog+0x172/0x3a0 [ 466.729230][T13074] __btf_verifier_log+0xdf/0x130 [ 466.734223][T13074] ? btf_check_sec_info+0x350/0x350 [ 466.739483][T13074] ? btf_parse_hdr+0x1dd/0x7d0 [ 466.744299][T13074] btf_parse_hdr+0x400/0x7d0 [ 466.748942][T13074] btf_new_fd+0x367/0x760 [ 466.753332][T13074] __sys_bpf+0x612/0x780 [ 466.757643][T13074] ? bpf_link_show_fdinfo+0x380/0x380 [ 466.763369][T13074] ? lock_chain_count+0x20/0x20 [ 466.768279][T13074] __x64_sys_bpf+0x78/0x90 [ 466.772745][T13074] do_syscall_64+0x4c/0xa0 [ 466.777287][T13074] ? clear_bhb_loop+0x60/0xb0 [ 466.782011][T13074] ? clear_bhb_loop+0x60/0xb0 [ 466.786744][T13074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.792689][T13074] RIP: 0033:0x7fe68279f559 [ 466.797141][T13074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.816780][T13074] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.825231][T13074] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 466.833319][T13074] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 466.841328][T13074] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.849361][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.857368][T13074] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 466.865394][T13074] [ 466.896938][T13072] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2196'. [ 467.039349][T13095] bridge0: port 3(dummy0) entered disabled state [ 467.052984][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.074643][T13095] device bridge_slave_0 left promiscuous mode [ 467.109706][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.210371][T13098] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2200'. [ 467.226130][T13103] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2203'. [ 467.362334][T13109] netlink: 'syz.2.2204': attribute type 2 has an invalid length. [ 467.375909][T13107] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 467.394504][T13107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2204'. [ 467.512623][T13109] device 0 entered promiscuous mode [ 467.530908][T13107] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 467.546982][T13107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2204'. [ 467.570231][T13121] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 467.597400][T13118] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 467.614292][T13118] syzkaller0: linktype set to 0 [ 467.629787][T13121] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 467.682172][T13124] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 467.714051][T13127] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 467.824327][T13129] netlink: 'syz.0.2209': attribute type 3 has an invalid length. [ 467.843601][T13129] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2209'. [ 468.001167][T13147] FAULT_INJECTION: forcing a failure. [ 468.001167][T13147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.041980][T13147] CPU: 0 PID: 13147 Comm: syz.2.2214 Not tainted syzkaller #0 [ 468.049522][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 468.059624][T13147] Call Trace: [ 468.062971][T13147] [ 468.065943][T13147] dump_stack_lvl+0x188/0x24e [ 468.069313][T13142] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2213'. [ 468.070670][T13147] ? show_regs_print_info+0x12/0x12 [ 468.085029][T13147] ? load_image+0x410/0x410 [ 468.089588][T13147] ? __lock_acquire+0x7ea0/0x7ea0 [ 468.094661][T13147] should_fail_ex+0x390/0x4c0 [ 468.099381][T13147] _copy_to_user+0x2c/0x130 [ 468.103910][T13147] bpf_verifier_vlog+0x172/0x3a0 [ 468.108876][T13147] __btf_verifier_log+0xdf/0x130 [ 468.113847][T13147] ? btf_check_sec_info+0x350/0x350 [ 468.119091][T13147] ? btf_parse_hdr+0x1dd/0x7d0 [ 468.123888][T13147] btf_parse_hdr+0x42b/0x7d0 [ 468.128512][T13147] btf_new_fd+0x367/0x760 [ 468.132878][T13147] __sys_bpf+0x612/0x780 [ 468.137159][T13147] ? bpf_link_show_fdinfo+0x380/0x380 [ 468.142572][T13147] ? lock_chain_count+0x20/0x20 [ 468.147470][T13147] __x64_sys_bpf+0x78/0x90 [ 468.151937][T13147] do_syscall_64+0x4c/0xa0 [ 468.156375][T13147] ? clear_bhb_loop+0x60/0xb0 [ 468.161081][T13147] ? clear_bhb_loop+0x60/0xb0 [ 468.165786][T13147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.171713][T13147] RIP: 0033:0x7f67b6b9f559 [ 468.176149][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.195780][T13147] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.204223][T13147] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 468.212222][T13147] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 468.220221][T13147] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 468.228215][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.236206][T13147] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 468.244228][T13147] [ 468.550016][T13160] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2216'. [ 468.920664][T13175] tipc: Started in network mode [ 468.955369][T13175] tipc: Node identity 9215a268, cluster identity 4711 [ 468.980715][T13175] tipc: Node number set to 2450891368 [ 471.953307][T13196] validate_nla: 4 callbacks suppressed [ 471.953449][T13196] netlink: 'syz.0.2226': attribute type 27 has an invalid length. [ 471.982115][T13205] FAULT_INJECTION: forcing a failure. [ 471.982115][T13205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.995549][T13196] netlink: 'syz.0.2226': attribute type 4 has an invalid length. [ 472.037378][T13205] CPU: 1 PID: 13205 Comm: syz.3.2229 Not tainted syzkaller #0 [ 472.038669][T13196] __nla_validate_parse: 4 callbacks suppressed [ 472.039119][T13196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2226'. [ 472.044897][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 472.044914][T13205] Call Trace: [ 472.044976][T13205] [ 472.045043][T13205] dump_stack_lvl+0x188/0x24e [ 472.081408][T13205] ? show_regs_print_info+0x12/0x12 [ 472.086725][T13205] ? load_image+0x410/0x410 [ 472.091302][T13205] ? __lock_acquire+0x7ea0/0x7ea0 [ 472.096405][T13205] should_fail_ex+0x390/0x4c0 [ 472.101227][T13205] _copy_to_user+0x2c/0x130 [ 472.105848][T13205] bpf_verifier_vlog+0x172/0x3a0 [ 472.110869][T13205] __btf_verifier_log+0xdf/0x130 [ 472.115896][T13205] ? btf_check_sec_info+0x350/0x350 [ 472.121133][T13205] ? btf_parse_hdr+0x1dd/0x7d0 [ 472.125927][T13205] btf_parse_hdr+0x456/0x7d0 [ 472.130548][T13205] btf_new_fd+0x367/0x760 [ 472.134912][T13205] __sys_bpf+0x612/0x780 [ 472.139254][T13205] ? bpf_link_show_fdinfo+0x380/0x380 [ 472.144691][T13205] ? lock_chain_count+0x20/0x20 [ 472.149586][T13205] __x64_sys_bpf+0x78/0x90 [ 472.154037][T13205] do_syscall_64+0x4c/0xa0 [ 472.158472][T13205] ? clear_bhb_loop+0x60/0xb0 [ 472.163223][T13205] ? clear_bhb_loop+0x60/0xb0 [ 472.167925][T13205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.173903][T13205] RIP: 0033:0x7fe68279f559 [ 472.178396][T13205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.198077][T13205] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.206566][T13205] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 472.214561][T13205] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 472.222557][T13205] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.230553][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.238545][T13205] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 472.246549][T13205] [ 472.494597][T13216] netlink: 'syz.1.2228': attribute type 10 has an invalid length. [ 472.502975][T13216] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 472.515037][T13216] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.2228'. [ 472.543414][T13220] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2231'. [ 472.598666][T13196] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.2226'. [ 473.922419][T13237] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2236'. [ 474.043068][T13240] FAULT_INJECTION: forcing a failure. [ 474.043068][T13240] name failslab, interval 1, probability 0, space 0, times 0 [ 474.056230][T13240] CPU: 1 PID: 13240 Comm: syz.1.2237 Not tainted syzkaller #0 [ 474.063764][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 474.073880][T13240] Call Trace: [ 474.077218][T13240] [ 474.080209][T13240] dump_stack_lvl+0x188/0x24e [ 474.084976][T13240] ? show_regs_print_info+0x12/0x12 [ 474.090252][T13240] ? load_image+0x410/0x410 [ 474.094854][T13240] ? __kasan_slab_alloc+0x6b/0x80 [ 474.100126][T13240] should_fail_ex+0x390/0x4c0 [ 474.104909][T13240] should_failslab+0x5/0x20 [ 474.109548][T13240] slab_pre_alloc_hook+0x59/0x300 [ 474.114669][T13240] kmem_cache_alloc+0x56/0x2f0 [ 474.119490][T13240] ? radix_tree_node_alloc+0x7e/0x3a0 [ 474.124948][T13240] radix_tree_node_alloc+0x7e/0x3a0 [ 474.130213][T13240] idr_get_free+0x28b/0xa10 [ 474.134796][T13240] idr_alloc_cyclic+0x286/0x610 [ 474.139723][T13240] ? idr_alloc+0x2e0/0x2e0 [ 474.144279][T13240] ? do_raw_spin_lock+0x128/0x2f0 [ 474.149371][T13240] ? __radix_tree_preload+0x82/0x880 [ 474.154714][T13240] ? btf_alloc_id+0x30/0x2d0 [ 474.159390][T13240] btf_alloc_id+0x4f/0x2d0 [ 474.163855][T13240] btf_new_fd+0x597/0x760 [ 474.168253][T13240] __sys_bpf+0x612/0x780 [ 474.172553][T13240] ? bpf_link_show_fdinfo+0x380/0x380 [ 474.178033][T13240] ? lock_chain_count+0x20/0x20 [ 474.183007][T13240] __x64_sys_bpf+0x78/0x90 [ 474.187472][T13240] do_syscall_64+0x4c/0xa0 [ 474.191925][T13240] ? clear_bhb_loop+0x60/0xb0 [ 474.196653][T13240] ? clear_bhb_loop+0x60/0xb0 [ 474.201372][T13240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.207309][T13240] RIP: 0033:0x7f1e7c99f559 [ 474.211782][T13240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.231431][T13240] RSP: 002b:00007f1e7d903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.239914][T13240] RAX: ffffffffffffffda RBX: 00007f1e7cc25fa0 RCX: 00007f1e7c99f559 [ 474.247966][T13240] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 474.255989][T13240] RBP: 00007f1e7d903090 R08: 0000000000000000 R09: 0000000000000000 [ 474.264002][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.272016][T13240] R13: 00007f1e7cc26038 R14: 00007f1e7cc25fa0 R15: 00007ffd1fcf7258 [ 474.280085][T13240] [ 475.242785][T13258] FAULT_INJECTION: forcing a failure. [ 475.242785][T13258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.272266][T13254] device veth1 entered promiscuous mode [ 475.298132][T13258] CPU: 0 PID: 13258 Comm: syz.2.2241 Not tainted syzkaller #0 [ 475.305680][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 475.315776][T13258] Call Trace: [ 475.319110][T13258] [ 475.322079][T13258] dump_stack_lvl+0x188/0x24e [ 475.326805][T13258] ? show_regs_print_info+0x12/0x12 [ 475.332049][T13258] ? load_image+0x410/0x410 [ 475.336605][T13258] ? __lock_acquire+0x7ea0/0x7ea0 [ 475.341730][T13258] should_fail_ex+0x390/0x4c0 [ 475.346468][T13258] _copy_to_user+0x2c/0x130 [ 475.351021][T13258] bpf_verifier_vlog+0x172/0x3a0 [ 475.356018][T13258] __btf_verifier_log+0xdf/0x130 [ 475.361018][T13258] ? btf_check_sec_info+0x350/0x350 [ 475.366272][T13258] ? btf_parse_hdr+0x1dd/0x7d0 [ 475.371083][T13258] btf_parse_hdr+0x480/0x7d0 [ 475.375726][T13258] btf_new_fd+0x367/0x760 [ 475.380116][T13258] __sys_bpf+0x612/0x780 [ 475.384413][T13258] ? bpf_link_show_fdinfo+0x380/0x380 [ 475.389860][T13258] ? lock_chain_count+0x20/0x20 [ 475.394782][T13258] __x64_sys_bpf+0x78/0x90 [ 475.399245][T13258] do_syscall_64+0x4c/0xa0 [ 475.403706][T13258] ? clear_bhb_loop+0x60/0xb0 [ 475.408427][T13258] ? clear_bhb_loop+0x60/0xb0 [ 475.413147][T13258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.419095][T13258] RIP: 0033:0x7f67b6b9f559 [ 475.423555][T13258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.443199][T13258] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.451670][T13258] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 475.459698][T13258] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 475.467722][T13258] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 475.475740][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.483759][T13258] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 475.491801][T13258] [ 475.614480][T13260] netlink: 'syz.3.2242': attribute type 3 has an invalid length. [ 475.642216][T13260] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2242'. [ 475.992749][T13272] FAULT_INJECTION: forcing a failure. [ 475.992749][T13272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.014195][T13272] CPU: 0 PID: 13272 Comm: syz.4.2246 Not tainted syzkaller #0 [ 476.021739][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 476.031845][T13272] Call Trace: [ 476.035167][T13272] [ 476.038134][T13272] dump_stack_lvl+0x188/0x24e [ 476.042862][T13272] ? show_regs_print_info+0x12/0x12 [ 476.048112][T13272] ? load_image+0x410/0x410 [ 476.052691][T13272] ? __lock_acquire+0x7ea0/0x7ea0 [ 476.057771][T13272] ? irqentry_enter+0x33/0x50 [ 476.062590][T13272] should_fail_ex+0x390/0x4c0 [ 476.067324][T13272] _copy_from_user+0x2c/0x170 [ 476.072054][T13272] iovec_from_user+0x143/0x360 [ 476.076965][T13272] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 476.083170][T13272] __import_iovec+0x6c/0x510 [ 476.087830][T13272] import_iovec+0x6f/0xa0 [ 476.092220][T13272] ___sys_sendmsg+0x252/0x360 [ 476.097062][T13272] ? __sys_sendmsg+0x2a0/0x2a0 [ 476.101914][T13272] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 476.107819][T13272] __se_sys_sendmsg+0x1c3/0x2b0 [ 476.112733][T13272] ? __x64_sys_sendmsg+0x80/0x80 [ 476.117749][T13272] ? syscall_enter_from_user_mode+0x2a/0x80 [ 476.123701][T13272] do_syscall_64+0x4c/0xa0 [ 476.128159][T13272] ? clear_bhb_loop+0x60/0xb0 [ 476.132905][T13272] ? clear_bhb_loop+0x60/0xb0 [ 476.137636][T13272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.143584][T13272] RIP: 0033:0x7f5588f9f559 [ 476.148036][T13272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.167697][T13272] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.176161][T13272] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 476.184216][T13272] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 476.192226][T13272] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 476.200241][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.208275][T13272] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 476.216304][T13272] [ 476.224589][T13273] nr0: port 1(hsr0) entered blocking state [ 476.240713][T13273] nr0: port 1(hsr0) entered disabled state [ 476.251478][T13273] device hsr0 entered promiscuous mode [ 476.285530][T13273] nr0: port 1(hsr0) entered blocking state [ 476.291533][T13273] nr0: port 1(hsr0) entered forwarding state [ 476.335341][T13283] netlink: 'syz.3.2248': attribute type 21 has an invalid length. [ 476.353785][T13283] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 476.381777][T13287] netlink: 'syz.4.2249': attribute type 27 has an invalid length. [ 476.390905][T13287] netlink: 'syz.4.2249': attribute type 4 has an invalid length. [ 476.399477][T13287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2249'. [ 476.475071][T13287] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.2249'. [ 476.503062][T13289] FAULT_INJECTION: forcing a failure. [ 476.503062][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 476.519925][T13289] CPU: 0 PID: 13289 Comm: syz.3.2250 Not tainted syzkaller #0 [ 476.527449][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 476.537551][T13289] Call Trace: [ 476.540862][T13289] [ 476.543817][T13289] dump_stack_lvl+0x188/0x24e [ 476.548533][T13289] ? show_regs_print_info+0x12/0x12 [ 476.553769][T13289] ? load_image+0x410/0x410 [ 476.558305][T13289] ? __might_sleep+0xd0/0xd0 [ 476.563001][T13289] ? __lock_acquire+0x7ea0/0x7ea0 [ 476.568069][T13289] should_fail_ex+0x390/0x4c0 [ 476.572784][T13289] should_failslab+0x5/0x20 [ 476.577314][T13289] slab_pre_alloc_hook+0x59/0x300 [ 476.582374][T13289] kmem_cache_alloc+0x56/0x2f0 [ 476.587162][T13289] ? __alloc_file+0x25/0x230 [ 476.591839][T13289] __alloc_file+0x25/0x230 [ 476.596285][T13289] alloc_empty_file+0x90/0x180 [ 476.601074][T13289] alloc_file+0x5b/0x5f0 [ 476.605347][T13289] alloc_file_pseudo+0x180/0x200 [ 476.610327][T13289] ? alloc_empty_file_noaccount+0x80/0x80 [ 476.616084][T13289] ? alloc_fd+0x590/0x640 [ 476.620473][T13289] anon_inode_getfd+0xc6/0x1b0 [ 476.625340][T13289] btf_new_fd+0x5d3/0x760 [ 476.629703][T13289] __sys_bpf+0x612/0x780 [ 476.633986][T13289] ? bpf_link_show_fdinfo+0x380/0x380 [ 476.639403][T13289] ? lock_chain_count+0x20/0x20 [ 476.644314][T13289] __x64_sys_bpf+0x78/0x90 [ 476.648789][T13289] do_syscall_64+0x4c/0xa0 [ 476.653227][T13289] ? clear_bhb_loop+0x60/0xb0 [ 476.657931][T13289] ? clear_bhb_loop+0x60/0xb0 [ 476.662649][T13289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.668575][T13289] RIP: 0033:0x7fe68279f559 [ 476.673012][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.692642][T13289] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.701097][T13289] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 476.709104][T13289] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 476.717100][T13289] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 476.725091][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.733091][T13289] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 476.741106][T13289] [ 476.984744][T13299] FAULT_INJECTION: forcing a failure. [ 476.984744][T13299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.022690][T13299] CPU: 0 PID: 13299 Comm: syz.0.2254 Not tainted syzkaller #0 [ 477.030236][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.040337][T13299] Call Trace: [ 477.043649][T13299] [ 477.046613][T13299] dump_stack_lvl+0x188/0x24e [ 477.051344][T13299] ? show_regs_print_info+0x12/0x12 [ 477.056582][T13299] ? load_image+0x410/0x410 [ 477.061135][T13299] ? __lock_acquire+0x7ea0/0x7ea0 [ 477.066219][T13299] should_fail_ex+0x390/0x4c0 [ 477.070960][T13299] _copy_to_user+0x2c/0x130 [ 477.075515][T13299] bpf_verifier_vlog+0x172/0x3a0 [ 477.080508][T13299] __btf_verifier_log+0xdf/0x130 [ 477.085551][T13299] ? btf_check_sec_info+0x350/0x350 [ 477.090810][T13299] ? btf_parse_hdr+0x1dd/0x7d0 [ 477.095607][T13299] btf_parse_hdr+0x493/0x7d0 [ 477.100234][T13299] btf_new_fd+0x367/0x760 [ 477.104602][T13299] __sys_bpf+0x612/0x780 [ 477.108883][T13299] ? bpf_link_show_fdinfo+0x380/0x380 [ 477.114316][T13299] ? lock_chain_count+0x20/0x20 [ 477.119203][T13299] __x64_sys_bpf+0x78/0x90 [ 477.123655][T13299] do_syscall_64+0x4c/0xa0 [ 477.128108][T13299] ? clear_bhb_loop+0x60/0xb0 [ 477.132807][T13299] ? clear_bhb_loop+0x60/0xb0 [ 477.137508][T13299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.143437][T13299] RIP: 0033:0x7f811b79f559 [ 477.147878][T13299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.167528][T13299] RSP: 002b:00007f811c758028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.175980][T13299] RAX: ffffffffffffffda RBX: 00007f811ba25fa0 RCX: 00007f811b79f559 [ 477.184068][T13299] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 477.192060][T13299] RBP: 00007f811c758090 R08: 0000000000000000 R09: 0000000000000000 [ 477.200052][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.208060][T13299] R13: 00007f811ba26038 R14: 00007f811ba25fa0 R15: 00007ffc45f5b268 [ 477.216066][T13299] [ 477.318399][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 477.375745][T13305] can: request_module (can-proto-0) failed. [ 477.403732][T13305] sctp: [Deprecated]: syz.3.2255 (pid 13305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.403732][T13305] Use struct sctp_sack_info instead [ 477.500992][T13310] netlink: 'syz.0.2256': attribute type 3 has an invalid length. [ 477.520128][T13312] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 477.521268][T13310] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2256'. [ 477.548715][T13312] bridge0: port 3(dummy0) entered disabled state [ 477.609654][T13316] netlink: 'syz.1.2257': attribute type 3 has an invalid length. [ 477.625257][T13312] device dummy0 left promiscuous mode [ 477.637981][T13312] bridge0: port 3(dummy0) entered disabled state [ 477.654187][T13316] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2257'. [ 477.690797][T13312] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 477.706624][T13320] FAULT_INJECTION: forcing a failure. [ 477.706624][T13320] name failslab, interval 1, probability 0, space 0, times 0 [ 477.748021][T13320] CPU: 0 PID: 13320 Comm: syz.2.2259 Not tainted syzkaller #0 [ 477.755576][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.765682][T13320] Call Trace: [ 477.769001][T13320] [ 477.771977][T13320] dump_stack_lvl+0x188/0x24e [ 477.776709][T13320] ? show_regs_print_info+0x12/0x12 [ 477.781958][T13320] ? load_image+0x410/0x410 [ 477.786513][T13320] ? __might_sleep+0xd0/0xd0 [ 477.791146][T13320] ? __lock_acquire+0x7ea0/0x7ea0 [ 477.796228][T13320] should_fail_ex+0x390/0x4c0 [ 477.800971][T13320] should_failslab+0x5/0x20 [ 477.805511][T13320] slab_pre_alloc_hook+0x59/0x300 [ 477.810582][T13320] ? __get_vm_area_node+0x122/0x330 [ 477.815920][T13320] __kmem_cache_alloc_node+0x4f/0x270 [ 477.821340][T13320] ? __get_vm_area_node+0x122/0x330 [ 477.826570][T13320] kmalloc_node_trace+0x22/0xe0 [ 477.831446][T13320] __get_vm_area_node+0x122/0x330 [ 477.836502][T13320] __vmalloc_node_range+0x357/0x1380 [ 477.841822][T13320] ? netlink_sendmsg+0x5ec/0xbd0 [ 477.846890][T13320] ? netlink_insert+0x28d/0x13b0 [ 477.851879][T13320] ? free_vm_area+0x50/0x50 [ 477.856422][T13320] ? netlink_sendmsg+0x5ec/0xbd0 [ 477.861403][T13320] vmalloc+0x75/0x80 [ 477.865335][T13320] ? netlink_sendmsg+0x5ec/0xbd0 [ 477.870326][T13320] netlink_sendmsg+0x5ec/0xbd0 [ 477.875158][T13320] ? netlink_getsockopt+0x550/0x550 [ 477.880401][T13320] ? apparmor_socket_sendmsg+0x8a/0x330 [ 477.886072][T13320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.891384][T13320] ? security_socket_sendmsg+0x7c/0xa0 [ 477.896925][T13320] ? netlink_getsockopt+0x550/0x550 [ 477.902157][T13320] ____sys_sendmsg+0x5ed/0x9a0 [ 477.906965][T13320] ? __sys_sendmsg_sock+0x30/0x30 [ 477.912019][T13320] ? __import_iovec+0x306/0x510 [ 477.916907][T13320] ? import_iovec+0x6f/0xa0 [ 477.921448][T13320] ___sys_sendmsg+0x2a2/0x360 [ 477.926160][T13320] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.930990][T13320] __se_sys_sendmsg+0x1c3/0x2b0 [ 477.935878][T13320] ? __x64_sys_sendmsg+0x80/0x80 [ 477.940868][T13320] do_syscall_64+0x4c/0xa0 [ 477.945303][T13320] ? clear_bhb_loop+0x60/0xb0 [ 477.950003][T13320] ? clear_bhb_loop+0x60/0xb0 [ 477.954707][T13320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.960631][T13320] RIP: 0033:0x7f67b6b9f559 [ 477.965068][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.984698][T13320] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.993139][T13320] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 478.001134][T13320] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 478.009130][T13320] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 478.017140][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.025133][T13320] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 478.033150][T13320] [ 478.059519][T13320] syz.2.2259: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 478.076226][T13320] CPU: 1 PID: 13320 Comm: syz.2.2259 Not tainted syzkaller #0 [ 478.083754][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.093847][T13320] Call Trace: [ 478.097165][T13320] [ 478.100157][T13320] dump_stack_lvl+0x188/0x24e [ 478.104876][T13320] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 478.111407][T13320] ? show_regs_print_info+0x12/0x12 [ 478.116659][T13320] ? load_image+0x410/0x410 [ 478.121214][T13320] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 478.127673][T13320] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 478.134229][T13320] warn_alloc+0x242/0x330 [ 478.138615][T13320] ? __get_vm_area_node+0x122/0x330 [ 478.143848][T13320] ? zone_watermark_ok_safe+0x270/0x270 [ 478.149433][T13320] ? rcu_is_watching+0x11/0xa0 [ 478.154338][T13320] ? __get_vm_area_node+0x318/0x330 [ 478.159666][T13320] __vmalloc_node_range+0x37c/0x1380 [ 478.164991][T13320] ? netlink_insert+0x28d/0x13b0 [ 478.169966][T13320] ? free_vm_area+0x50/0x50 [ 478.174502][T13320] ? netlink_sendmsg+0x5ec/0xbd0 [ 478.179475][T13320] vmalloc+0x75/0x80 [ 478.183401][T13320] ? netlink_sendmsg+0x5ec/0xbd0 [ 478.188370][T13320] netlink_sendmsg+0x5ec/0xbd0 [ 478.193178][T13320] ? netlink_getsockopt+0x550/0x550 [ 478.198409][T13320] ? apparmor_socket_sendmsg+0x8a/0x330 [ 478.204014][T13320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 478.209329][T13320] ? security_socket_sendmsg+0x7c/0xa0 [ 478.214818][T13320] ? netlink_getsockopt+0x550/0x550 [ 478.220046][T13320] ____sys_sendmsg+0x5ed/0x9a0 [ 478.224845][T13320] ? __sys_sendmsg_sock+0x30/0x30 [ 478.229920][T13320] ? __import_iovec+0x306/0x510 [ 478.234812][T13320] ? import_iovec+0x6f/0xa0 [ 478.239349][T13320] ___sys_sendmsg+0x2a2/0x360 [ 478.244083][T13320] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.248941][T13320] __se_sys_sendmsg+0x1c3/0x2b0 [ 478.253842][T13320] ? __x64_sys_sendmsg+0x80/0x80 [ 478.258832][T13320] do_syscall_64+0x4c/0xa0 [ 478.263272][T13320] ? clear_bhb_loop+0x60/0xb0 [ 478.267980][T13320] ? clear_bhb_loop+0x60/0xb0 [ 478.272685][T13320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.278615][T13320] RIP: 0033:0x7f67b6b9f559 [ 478.283075][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.302703][T13320] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.311142][T13320] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 478.319147][T13320] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 478.327142][T13320] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 478.335139][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.343131][T13320] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 478.351148][T13320] [ 478.387966][T13320] Mem-Info: [ 478.391437][T13320] active_anon:8878 inactive_anon:0 isolated_anon:0 [ 478.391437][T13320] active_file:19228 inactive_file:40115 isolated_file:0 [ 478.391437][T13320] unevictable:768 dirty:234 writeback:0 [ 478.391437][T13320] slab_reclaimable:21633 slab_unreclaimable:99477 [ 478.391437][T13320] mapped:29536 shmem:1364 pagetables:599 [ 478.391437][T13320] sec_pagetables:0 bounce:0 [ 478.391437][T13320] kernel_misc_reclaimable:0 [ 478.391437][T13320] free:1306485 free_pcp:8658 free_cma:0 [ 478.444301][T13320] Node 0 active_anon:35512kB inactive_anon:0kB active_file:76912kB inactive_file:160260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118144kB dirty:936kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 478.500171][T13320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 478.628308][T13320] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.665507][T13331] FAULT_INJECTION: forcing a failure. [ 478.665507][T13331] name failslab, interval 1, probability 0, space 0, times 0 [ 478.678733][T13331] CPU: 0 PID: 13331 Comm: syz.3.2262 Not tainted syzkaller #0 [ 478.686255][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.696351][T13331] Call Trace: [ 478.699677][T13331] [ 478.702647][T13331] dump_stack_lvl+0x188/0x24e [ 478.707371][T13331] ? show_regs_print_info+0x12/0x12 [ 478.712614][T13331] ? load_image+0x410/0x410 [ 478.717164][T13331] ? __might_sleep+0xd0/0xd0 [ 478.721803][T13331] ? __lock_acquire+0x7ea0/0x7ea0 [ 478.726886][T13331] should_fail_ex+0x390/0x4c0 [ 478.731621][T13331] should_failslab+0x5/0x20 [ 478.736161][T13331] slab_pre_alloc_hook+0x59/0x300 [ 478.741261][T13331] kmem_cache_alloc+0x56/0x2f0 [ 478.746071][T13331] ? __alloc_file+0x25/0x230 [ 478.750708][T13331] __alloc_file+0x25/0x230 [ 478.755172][T13331] alloc_empty_file+0x90/0x180 [ 478.759978][T13331] alloc_file+0x5b/0x5f0 [ 478.764266][T13331] alloc_file_pseudo+0x180/0x200 [ 478.769252][T13331] ? alloc_empty_file_noaccount+0x80/0x80 [ 478.775018][T13331] ? alloc_fd+0x590/0x640 [ 478.779402][T13331] anon_inode_getfd+0xc6/0x1b0 [ 478.784222][T13331] btf_new_fd+0x5d3/0x760 [ 478.788610][T13331] __sys_bpf+0x612/0x780 [ 478.792898][T13331] ? bpf_link_show_fdinfo+0x380/0x380 [ 478.798336][T13331] ? lock_chain_count+0x20/0x20 [ 478.798376][T13320] lowmem_reserve[]: [ 478.803231][T13331] __x64_sys_bpf+0x78/0x90 [ 478.803265][T13331] do_syscall_64+0x4c/0xa0 [ 478.807482][T13320] 0 [ 478.811535][T13331] ? clear_bhb_loop+0x60/0xb0 [ 478.811566][T13331] ? clear_bhb_loop+0x60/0xb0 [ 478.811590][T13331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.811630][T13331] RIP: 0033:0x7fe68279f559 [ 478.811649][T13331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.811669][T13331] RSP: 002b:00007fe6809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.811695][T13331] RAX: ffffffffffffffda RBX: 00007fe682a25fa0 RCX: 00007fe68279f559 [ 478.811712][T13331] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 478.811727][T13331] RBP: 00007fe6809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.811741][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.811755][T13331] R13: 00007fe682a26038 R14: 00007fe682a25fa0 R15: 00007ffc173ecf68 [ 478.811788][T13331] [ 478.931307][T13335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2261'. [ 478.988133][T13320] 2509 2510 2510 2510 [ 478.992357][T13320] Node 0 DMA32 free:1307620kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:35328kB inactive_anon:0kB active_file:76912kB inactive_file:160260kB unevictable:1536kB writepending:936kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:19104kB local_pcp:15476kB free_cma:0kB [ 479.127486][T13342] netlink: 'syz.3.2264': attribute type 27 has an invalid length. [ 479.144968][T13342] netlink: 'syz.3.2264': attribute type 4 has an invalid length. [ 479.170880][T13342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2264'. [ 479.182044][T13320] lowmem_reserve[]: 0 0 1 1 1 [ 479.196526][T13320] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.340228][T13342] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.2264'. [ 479.396863][T13320] lowmem_reserve[]: 0 0 0 0 0 [ 479.432423][T13320] Node 1 Normal free:3902992kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15776kB local_pcp:8768kB free_cma:0kB [ 479.559148][T13320] lowmem_reserve[]: 0 0 0 0 0 [ 479.574337][T13320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.628228][T13320] Node 0 DMA32: 2005*4kB (UM) 1084*8kB (UME) 823*16kB (UME) 1170*32kB (UME) 390*64kB (UME) 160*128kB (UME) 106*256kB (UM) 87*512kB (UM) 36*1024kB (UM) 8*2048kB (UM) 261*4096kB (UME) = 1306724kB [ 479.700060][T13320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 479.727892][T13320] Node 1 Normal: 222*4kB (UM) 39*8kB (UME) 34*16kB (UE) 72*32kB (UME) 27*64kB (UME) 13*128kB (UM) 11*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3902992kB [ 479.786887][T13320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.817990][T13320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 479.844878][T13320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.862765][T13320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 479.939161][T13320] 60707 total pagecache pages [ 479.955909][T13320] 0 pages in swap cache [ 479.977752][T13320] Free swap = 124996kB [ 480.026727][T13320] Total swap = 124996kB [ 480.072298][T13320] 2097051 pages RAM [ 480.076192][T13320] 0 pages HighMem/MovableOnly [ 480.140187][T13320] 419818 pages reserved [ 480.144454][T13320] 0 pages cma reserved [ 480.297978][T13345] rxe_eth0 speed is unknown, defaulting to 1000 [ 481.062863][T13369] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2270'. [ 481.525233][T13371] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 481.625730][T13371] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2271'. [ 481.896215][T13379] FAULT_INJECTION: forcing a failure. [ 481.896215][T13379] name failslab, interval 1, probability 0, space 0, times 0 [ 481.981374][T13379] CPU: 0 PID: 13379 Comm: syz.4.2275 Not tainted syzkaller #0 [ 481.988917][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.999012][T13379] Call Trace: [ 482.002327][T13379] [ 482.005290][T13379] dump_stack_lvl+0x188/0x24e [ 482.010026][T13379] ? show_regs_print_info+0x12/0x12 [ 482.015275][T13379] ? load_image+0x410/0x410 [ 482.019859][T13379] ? __might_sleep+0xd0/0xd0 [ 482.024497][T13379] ? __lock_acquire+0x7ea0/0x7ea0 [ 482.029580][T13379] should_fail_ex+0x390/0x4c0 [ 482.034317][T13379] should_failslab+0x5/0x20 [ 482.038867][T13379] slab_pre_alloc_hook+0x59/0x300 [ 482.043956][T13379] kmem_cache_alloc+0x56/0x2f0 [ 482.048784][T13379] ? security_file_alloc+0x30/0x110 [ 482.054036][T13379] security_file_alloc+0x30/0x110 [ 482.059120][T13379] __alloc_file+0xc2/0x230 [ 482.063587][T13379] alloc_empty_file+0x90/0x180 [ 482.068401][T13379] alloc_file+0x5b/0x5f0 [ 482.072695][T13379] alloc_file_pseudo+0x180/0x200 [ 482.077684][T13379] ? alloc_empty_file_noaccount+0x80/0x80 [ 482.083458][T13379] ? alloc_fd+0x590/0x640 [ 482.087851][T13379] anon_inode_getfd+0xc6/0x1b0 [ 482.092673][T13379] btf_new_fd+0x5d3/0x760 [ 482.097096][T13379] __sys_bpf+0x612/0x780 [ 482.101391][T13379] ? bpf_link_show_fdinfo+0x380/0x380 [ 482.106833][T13379] ? lock_chain_count+0x20/0x20 [ 482.111743][T13379] __x64_sys_bpf+0x78/0x90 [ 482.116209][T13379] do_syscall_64+0x4c/0xa0 [ 482.120671][T13379] ? clear_bhb_loop+0x60/0xb0 [ 482.125412][T13379] ? clear_bhb_loop+0x60/0xb0 [ 482.130138][T13379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.136090][T13379] RIP: 0033:0x7f5588f9f559 [ 482.140550][T13379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.160203][T13379] RSP: 002b:00007f55871f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.168664][T13379] RAX: ffffffffffffffda RBX: 00007f5589225fa0 RCX: 00007f5588f9f559 [ 482.176692][T13379] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 482.184695][T13379] RBP: 00007f55871f6090 R08: 0000000000000000 R09: 0000000000000000 [ 482.192726][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.200731][T13379] R13: 00007f5589226038 R14: 00007f5589225fa0 R15: 00007fffc4184ad8 [ 482.208743][T13379] [ 482.910434][T13403] netlink: 'syz.4.2281': attribute type 39 has an invalid length. [ 483.196360][T13418] netlink: 'syz.4.2284': attribute type 3 has an invalid length. [ 483.219258][T13418] netlink: 105104 bytes leftover after parsing attributes in process `syz.4.2284'. [ 483.427840][T13425] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 483.502836][T13425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2287'. [ 483.532154][T13427] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2287'. [ 483.617445][T13432] FAULT_INJECTION: forcing a failure. [ 483.617445][T13432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.708304][T13432] CPU: 1 PID: 13432 Comm: syz.1.2289 Not tainted syzkaller #0 [ 483.715948][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 483.726037][T13432] Call Trace: [ 483.729352][T13432] [ 483.732342][T13432] dump_stack_lvl+0x188/0x24e [ 483.737071][T13432] ? show_regs_print_info+0x12/0x12 [ 483.742318][T13432] ? load_image+0x410/0x410 [ 483.746901][T13432] ? __lock_acquire+0x7ea0/0x7ea0 [ 483.751988][T13432] ? snprintf+0xe5/0x140 [ 483.756274][T13432] should_fail_ex+0x390/0x4c0 [ 483.761013][T13432] _copy_to_user+0x2c/0x130 [ 483.765573][T13432] simple_read_from_buffer+0xe3/0x150 [ 483.771103][T13432] proc_fail_nth_read+0x1a6/0x220 [ 483.776227][T13432] ? proc_fault_inject_write+0x310/0x310 [ 483.781909][T13432] ? fsnotify_perm+0x248/0x550 [ 483.786738][T13432] ? proc_fault_inject_write+0x310/0x310 [ 483.792412][T13432] vfs_read+0x2db/0x960 [ 483.796707][T13432] ? kernel_read+0x1e0/0x1e0 [ 483.801349][T13432] ? __fget_files+0x28/0x460 [ 483.806000][T13432] ? __fget_files+0x3fc/0x460 [ 483.810744][T13432] ? __fdget_pos+0x2ae/0x360 [ 483.815376][T13432] ? ksys_read+0x70/0x260 [ 483.819762][T13432] ksys_read+0x14d/0x260 [ 483.824058][T13432] ? vfs_write+0x9a0/0x9a0 [ 483.828529][T13432] ? lockdep_hardirqs_on+0x94/0x140 [ 483.833777][T13432] do_syscall_64+0x4c/0xa0 [ 483.838230][T13432] ? clear_bhb_loop+0x60/0xb0 [ 483.842952][T13432] ? clear_bhb_loop+0x60/0xb0 [ 483.847672][T13432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.853617][T13432] RIP: 0033:0x7f1e7c95fd8e [ 483.858073][T13432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.877814][T13432] RSP: 002b:00007f1e7d902fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.886270][T13432] RAX: ffffffffffffffda RBX: 00007f1e7d9036c0 RCX: 00007f1e7c95fd8e [ 483.894285][T13432] RDX: 000000000000000f RSI: 00007f1e7d9030a0 RDI: 0000000000000003 [ 483.902298][T13432] RBP: 00007f1e7d903090 R08: 0000000000000000 R09: 0000000000000000 [ 483.910331][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.918347][T13432] R13: 00007f1e7cc26038 R14: 00007f1e7cc25fa0 R15: 00007ffd1fcf7258 [ 483.926372][T13432] [ 484.288604][T13445] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2293'. [ 484.308617][T13445] openvswitch: netlink: Message has 6 unknown bytes. [ 484.382663][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2293'. [ 484.462697][T13452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2295'. [ 484.538058][T13452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2295'. [ 484.549516][T13448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2295'. [ 484.589209][T13445] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 484.636209][T13445] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2293'. [ 484.844493][T13461] FAULT_INJECTION: forcing a failure. [ 484.844493][T13461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.988667][T13461] CPU: 0 PID: 13461 Comm: syz.2.2297 Not tainted syzkaller #0 [ 484.996231][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.006321][T13461] Call Trace: [ 485.009686][T13461] [ 485.012652][T13461] dump_stack_lvl+0x188/0x24e [ 485.017419][T13461] ? show_regs_print_info+0x12/0x12 [ 485.022665][T13461] ? load_image+0x410/0x410 [ 485.027219][T13461] ? __lock_acquire+0x7ea0/0x7ea0 [ 485.032309][T13461] should_fail_ex+0x390/0x4c0 [ 485.037077][T13461] _copy_to_user+0x2c/0x130 [ 485.041665][T13461] bpf_verifier_vlog+0x172/0x3a0 [ 485.046649][T13461] __btf_verifier_log+0xdf/0x130 [ 485.051656][T13461] ? btf_check_sec_info+0x350/0x350 [ 485.056911][T13461] ? perf_trace_lock+0xf8/0x390 [ 485.061839][T13461] __btf_verifier_log_type+0x5fb/0x7d0 [ 485.067396][T13461] ? btf_sec_info_cmp+0x59/0x100 [ 485.072404][T13461] ? btf_int_show+0x27f0/0x27f0 [ 485.077327][T13461] btf_enum64_check_meta+0x486/0xdd0 [ 485.082683][T13461] btf_check_all_metas+0x35a/0xa50 [ 485.087838][T13461] btf_parse_type_sec+0xfc/0x1910 [ 485.092909][T13461] ? btf_check_sec_info+0x350/0x350 [ 485.098161][T13461] ? btf_verifier_log+0x2b0/0x2b0 [ 485.103223][T13461] ? btf_parse_str_sec+0x20a/0x2a0 [ 485.108381][T13461] btf_new_fd+0x3fe/0x760 [ 485.112785][T13461] __sys_bpf+0x612/0x780 [ 485.117051][T13461] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.122456][T13461] ? lock_chain_count+0x20/0x20 [ 485.127335][T13461] __x64_sys_bpf+0x78/0x90 [ 485.131802][T13461] do_syscall_64+0x4c/0xa0 [ 485.136244][T13461] ? clear_bhb_loop+0x60/0xb0 [ 485.140967][T13461] ? clear_bhb_loop+0x60/0xb0 [ 485.145691][T13461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.151618][T13461] RIP: 0033:0x7f67b6b9f559 [ 485.156056][T13461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.175687][T13461] RSP: 002b:00007f67b7b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.184146][T13461] RAX: ffffffffffffffda RBX: 00007f67b6e25fa0 RCX: 00007f67b6b9f559 [ 485.192151][T13461] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012 [ 485.200142][T13461] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 485.208138][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.216124][T13461] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 485.224324][T13461] [ 485.236343][T13460] netlink: 'syz.4.2298': attribute type 3 has an invalid length. [ 485.318168][T13460] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2298'. [ 486.311644][T13492] netlink: 'syz.3.2304': attribute type 17 has an invalid length. [ 487.320804][T13525] netlink: 'syz.1.2314': attribute type 3 has an invalid length. [ 487.335172][T13526] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 487.604790][T13533] rxe_eth0 speed is unknown, defaulting to 1000 [ 489.633620][T13580] netlink: 'syz.4.2329': attribute type 3 has an invalid length. [ 489.684409][T13580] __nla_validate_parse: 4 callbacks suppressed [ 489.684427][T13580] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2329'. [ 489.773383][T13587] netlink: 'syz.3.2332': attribute type 3 has an invalid length. [ 489.789243][T13578] netlink: 'syz.4.2329': attribute type 2 has an invalid length. [ 489.803097][T13587] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2332'. [ 489.821964][T13578] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 489.829651][T13590] device syzkaller0 entered promiscuous mode [ 489.846222][T13578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 490.272714][T13605] netlink: 'syz.1.2338': attribute type 10 has an invalid length. [ 490.308146][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2338'. [ 490.317443][T13605] netlink: 'syz.1.2338': attribute type 10 has an invalid length. [ 490.335622][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2338'. [ 490.353178][T13607] netlink: 'syz.1.2338': attribute type 10 has an invalid length. [ 490.374661][T13607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2338'. [ 490.413205][T13608] rxe_eth0 speed is unknown, defaulting to 1000 [ 491.031365][T13655] netlink: 'syz.0.2347': attribute type 3 has an invalid length. [ 491.047063][T13655] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2347'. [ 491.342922][T13670] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2352'. [ 492.319894][T13702] netlink: 'syz.3.2362': attribute type 3 has an invalid length. [ 492.327723][T13702] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2362'. [ 492.894550][T13718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2366'. [ 495.164195][T13744] netlink: 'syz.1.2374': attribute type 3 has an invalid length. [ 495.220084][T13744] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2374'. [ 495.398346][T13755] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 495.493764][T13746] netlink: 'syz.0.2376': attribute type 29 has an invalid length. [ 495.622345][T13746] netlink: 'syz.0.2376': attribute type 29 has an invalid length. [ 495.757784][T13752] netlink: 'syz.0.2376': attribute type 29 has an invalid length. [ 495.848022][T13762] netlink: 'syz.0.2376': attribute type 29 has an invalid length. [ 496.334122][T13777] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2382'. [ 496.381242][T13767] netlink: 'syz.2.2381': attribute type 2 has an invalid length. [ 496.400347][T13777] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 496.428733][T13767] netlink: 'syz.2.2381': attribute type 3 has an invalid length. [ 496.463783][T13767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2381'. [ 497.191825][T13815] netlink: 'syz.2.2393': attribute type 2 has an invalid length. [ 497.205784][T13815] netlink: 199540 bytes leftover after parsing attributes in process `syz.2.2393'. [ 498.033345][T13840] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2397'. [ 498.194771][T13844] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.2400'. [ 498.264164][T13844] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 498.414155][T13845] netlink: 'syz.1.2401': attribute type 39 has an invalid length. [ 498.553021][T13845] device syz_tun left promiscuous mode [ 498.603630][T13845] team0: Port device syz_tun removed [ 499.162697][T13864] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2407'. [ 499.384434][T13872] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2409'. [ 499.510786][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2410'. [ 499.570152][T13886] bridge0: port 3(veth0_vlan) entered blocking state [ 499.598223][T13886] bridge0: port 3(veth0_vlan) entered disabled state [ 499.801345][T13886] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 501.122437][T13912] validate_nla: 1 callbacks suppressed [ 501.122456][T13912] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 501.231318][T13916] netlink: 'syz.1.2416': attribute type 2 has an invalid length. [ 501.273031][T13919] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 501.289126][T13917] netlink: 'syz.1.2416': attribute type 2 has an invalid length. [ 501.401848][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.408360][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.618082][T13912] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 502.830831][T13929] -1: renamed from syzkaller0 [ 502.944271][T13941] ip6gretap0: mtu less than device minimum [ 504.132990][T13964] netlink: 'syz.4.2428': attribute type 2 has an invalid length. [ 504.154117][T13964] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2428'. [ 504.205222][T13963] IPv6: Can't replace route, no match found [ 504.216760][T13975] netlink: 'syz.4.2428': attribute type 2 has an invalid length. [ 504.267176][T13975] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2428'. [ 505.366925][T14007] device sit0 entered promiscuous mode [ 505.458896][T14013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2439'. [ 506.014695][T14013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2439'. [ 506.049757][T14012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2439'. [ 507.743145][T14020] rxe_eth0 speed is unknown, defaulting to 1000 [ 509.345623][T14062] tipc: Started in network mode [ 509.351140][T14062] tipc: Node identity 9215a268, cluster identity 4711 [ 509.359104][T14062] tipc: Node number set to 2450891368 [ 510.502518][T14090] netlink: 'syz.3.2455': attribute type 3 has an invalid length. [ 510.603535][T14090] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2455'. [ 510.706480][T14094] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2459'. [ 511.342824][T14110] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.2461'. [ 511.358377][T14110] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.2461'. [ 511.387988][T14110] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.2461'. [ 511.678199][T14120] netlink: 'syz.0.2465': attribute type 21 has an invalid length. [ 511.745061][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 511.940052][T14128] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 512.496619][T14128] device macvlan0 entered promiscuous mode [ 512.528712][T14128] team0: Port device macvlan0 added [ 513.420665][T14148] netlink: 'syz.2.2473': attribute type 3 has an invalid length. [ 513.438449][T14148] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2473'. [ 515.903214][T14214] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2490'. [ 519.110359][T14241] IPv6: Can't replace route, no match found [ 519.126774][T14248] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 519.644125][ T4294] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 519.836770][T14268] delete_channel: no stack [ 520.052166][T14281] netlink: 'syz.2.2504': attribute type 3 has an invalid length. [ 520.080882][T14282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2503'. [ 520.093324][T14281] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2504'. [ 521.728086][T14271] Bluetooth: hci2: command 0x2016 tx timeout [ 522.377051][T14282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2503'. [ 522.664774][T14303] netlink: 'syz.3.2510': attribute type 10 has an invalid length. [ 522.834984][T14306] rxe_eth0 speed is unknown, defaulting to 1000 [ 523.864180][T14347] netlink: 'syz.3.2519': attribute type 3 has an invalid length. [ 523.919001][T14347] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2519'. [ 525.297764][T14378] netlink: 'syz.0.2525': attribute type 10 has an invalid length. [ 525.714320][T14392] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2528'. [ 525.748398][T14392] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 525.809239][T14389] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2527'. [ 526.043034][T14402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2531'. [ 526.147905][T14405] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 526.269312][T14409] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 526.343472][T14419] netlink: 'syz.4.2535': attribute type 10 has an invalid length. [ 526.406254][T14419] batman_adv: batadv0: Removing interface: netdevsim0 [ 527.463500][T14439] netlink: 'syz.4.2540': attribute type 10 has an invalid length. [ 527.960214][T14445] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2543'. [ 528.810094][T14462] netlink: 'syz.1.2549': attribute type 3 has an invalid length. [ 528.838107][T14462] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2549'. [ 528.880944][T14466] netlink: 'syz.1.2549': attribute type 2 has an invalid length. [ 528.903148][T14466] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2549'. [ 529.022404][T14467] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2551'. [ 529.177154][T14471] netlink: 'syz.2.2552': attribute type 21 has an invalid length. [ 529.314053][T14471] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.319463][T14477] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2552'. [ 529.536205][T14471] IPv6: Can't replace route, no match found [ 529.779056][T14477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2552'. [ 530.929973][T14494] netlink: 'syz.3.2557': attribute type 10 has an invalid length. [ 530.953752][T14494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2557'. [ 530.978398][T14502] netlink: 'syz.4.2560': attribute type 6 has an invalid length. [ 531.009189][T14502] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2560'. [ 531.070555][T14507] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2561'. [ 532.004941][T14525] netlink: 'syz.0.2568': attribute type 10 has an invalid length. [ 532.006764][T14518] netlink: 'syz.3.2566': attribute type 3 has an invalid length. [ 532.083309][T14527] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2568'. [ 532.152647][T14527] netlink: zone id is out of range [ 532.164292][T14527] netlink: zone id is out of range [ 532.176594][T14527] netlink: zone id is out of range [ 532.190962][T14527] netlink: zone id is out of range [ 532.214682][T14527] netlink: del zone limit has 4 unknown bytes [ 533.913358][T14571] __nla_validate_parse: 1 callbacks suppressed [ 533.913386][T14571] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2577'. [ 533.939811][T14571] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2577'. [ 533.994441][T14571] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2577'. [ 534.301400][T14576] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2580'. [ 534.657344][T14592] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.2586'. [ 534.753743][T14589] netlink: 'syz.2.2583': attribute type 3 has an invalid length. [ 534.820776][T14589] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2583'. [ 535.322735][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2591'. [ 535.359274][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2591'. [ 535.370259][T14607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2591'. [ 535.440310][T14610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2591'. [ 535.464756][T14614] netlink: 'syz.0.2595': attribute type 2 has an invalid length. [ 536.375240][T14642] netlink: 'syz.3.2604': attribute type 3 has an invalid length. [ 537.217450][T14653] tipc: Started in network mode [ 537.224228][T14653] tipc: Node identity 9215a268, cluster identity 4711 [ 537.253431][T14653] tipc: Node number set to 2450891368 [ 538.772998][T14681] netlink: 'syz.2.2616': attribute type 21 has an invalid length. [ 538.837059][T14681] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.883787][T14681] IPv6: Can't replace route, no match found [ 538.970226][T14696] __nla_validate_parse: 2 callbacks suppressed [ 538.970376][T14696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2622'. [ 539.178600][T14701] netlink: 'syz.0.2624': attribute type 3 has an invalid length. [ 539.193868][T14701] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2624'. [ 539.215920][T14702] netlink: 'syz.0.2624': attribute type 21 has an invalid length. [ 539.807855][T14709] FAULT_INJECTION: forcing a failure. [ 539.807855][T14709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.850759][T14709] CPU: 1 PID: 14709 Comm: syz.2.2625 Not tainted syzkaller #0 [ 539.858312][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.868412][T14709] Call Trace: [ 539.871723][T14709] [ 539.874688][T14709] dump_stack_lvl+0x188/0x24e [ 539.879420][T14709] ? show_regs_print_info+0x12/0x12 [ 539.884667][T14709] ? load_image+0x410/0x410 [ 539.889229][T14709] ? __lock_acquire+0x7ea0/0x7ea0 [ 539.894358][T14709] ? snprintf+0xe5/0x140 [ 539.898661][T14709] should_fail_ex+0x390/0x4c0 [ 539.903398][T14709] _copy_to_user+0x2c/0x130 [ 539.907957][T14709] simple_read_from_buffer+0xe3/0x150 [ 539.913384][T14709] proc_fail_nth_read+0x1a6/0x220 [ 539.918465][T14709] ? proc_fault_inject_write+0x310/0x310 [ 539.924158][T14709] ? fsnotify_perm+0x248/0x550 [ 539.928968][T14709] ? proc_fault_inject_write+0x310/0x310 [ 539.934650][T14709] vfs_read+0x2db/0x960 [ 539.938875][T14709] ? kernel_read+0x1e0/0x1e0 [ 539.943520][T14709] ? __fget_files+0x28/0x460 [ 539.948165][T14709] ? __fget_files+0x3fc/0x460 [ 539.952927][T14709] ? __fdget_pos+0x2ae/0x360 [ 539.957567][T14709] ? ksys_read+0x70/0x260 [ 539.961983][T14709] ksys_read+0x14d/0x260 [ 539.966284][T14709] ? vfs_write+0x9a0/0x9a0 [ 539.970764][T14709] ? lockdep_hardirqs_on+0x94/0x140 [ 539.976019][T14709] do_syscall_64+0x4c/0xa0 [ 539.980479][T14709] ? clear_bhb_loop+0x60/0xb0 [ 539.985178][T14709] ? clear_bhb_loop+0x60/0xb0 [ 539.989881][T14709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.995811][T14709] RIP: 0033:0x7f67b6b5fd8e [ 540.000252][T14709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.019908][T14709] RSP: 002b:00007f67b7b36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.028348][T14709] RAX: ffffffffffffffda RBX: 00007f67b7b376c0 RCX: 00007f67b6b5fd8e [ 540.036354][T14709] RDX: 000000000000000f RSI: 00007f67b7b370a0 RDI: 0000000000000004 [ 540.044351][T14709] RBP: 00007f67b7b37090 R08: 0000000000000000 R09: 0000000000000000 [ 540.052341][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.060333][T14709] R13: 00007f67b6e26038 R14: 00007f67b6e25fa0 R15: 00007ffef7fc13b8 [ 540.068347][T14709] [ 540.359491][T14712] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2626'. [ 540.504536][T14713] rxe_eth0 speed is unknown, defaulting to 1000 [ 540.841353][T14718] rxe_eth0 speed is unknown, defaulting to 1000 [ 541.434609][T14740] netlink: 'syz.0.2639': attribute type 10 has an invalid length. [ 545.345921][T14776] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 545.354160][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2648'. [ 545.555570][T14782] netlink: 'syz.3.2650': attribute type 10 has an invalid length. [ 545.582605][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.589864][T14782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.597422][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.604660][T14782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.631052][T14782] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 545.766212][T14792] netlink: 'syz.4.2651': attribute type 21 has an invalid length. [ 545.795534][T14792] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.856024][T14792] IPv6: Can't replace route, no match found [ 546.372747][T14815] Â: renamed from pim6reg1 [ 546.539041][T14807] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.121018][T14841] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2667'. [ 547.149141][T14841] openvswitch: netlink: Key type 386 is out of range max 32 [ 547.925715][T14860] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2669'. [ 550.373188][T14847] ------------[ cut here ]------------ [ 550.379550][T14847] WARNING: CPU: 0 PID: 14847 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 550.389475][T14847] Modules linked in: [ 550.393426][T14847] CPU: 0 PID: 14847 Comm: syz.0.2670 Not tainted syzkaller #0 [ 550.400993][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.411148][T14847] RIP: 0010:perf_pending_task+0x353/0x480 [ 550.416933][T14847] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 550.436650][T14847] RSP: 0018:ffffc900067b78e8 EFLAGS: 00010293 [ 550.442794][T14847] RAX: ffffffff81a7eb03 RBX: ffff888076c4ea58 RCX: ffff88807d338000 [ 550.450839][T14847] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.458892][T14847] RBP: ffff888076c4e820 R08: ffff88807d338a03 R09: 1ffff1100fa67140 [ 550.466900][T14847] R10: dffffc0000000000 R11: ffffed100fa67141 R12: ffff88807d338000 [ 550.474950][T14847] R13: ffff888030709d60 R14: 0000000000000000 R15: 1ffff1100ed89d04 [ 550.483004][T14847] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 550.492004][T14847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.498655][T14847] CR2: 0000000000000004 CR3: 000000007e42b000 CR4: 00000000003506f0 [ 550.506688][T14847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.514756][T14847] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 550.522819][T14847] Call Trace: [ 550.526139][T14847] [ 550.529144][T14847] task_work_run+0x1d0/0x260 [ 550.533895][T14847] ? task_work_cancel+0x220/0x220 [ 550.539014][T14847] ? do_raw_spin_unlock+0x11d/0x230 [ 550.544266][T14847] do_exit+0x9d5/0x2570 [ 550.548590][T14847] ? release_firmware_map_entry+0x187/0x187 [ 550.554540][T14847] ? put_task_struct+0x80/0x80 [ 550.559401][T14847] ? preempt_schedule_common+0xa5/0xd0 [ 550.564903][T14847] ? preempt_schedule+0xbc/0xd0 [ 550.569826][T14847] ? schedule_preempt_disabled+0x20/0x20 [ 550.575515][T14847] ? lock_chain_count+0x20/0x20 [ 550.580462][T14847] do_group_exit+0x229/0x2e0 [ 550.585188][T14847] get_signal+0x1259/0x1340 [ 550.589794][T14847] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 550.595756][T14847] arch_do_signal_or_restart+0xc4/0x1310 [ 550.601561][T14847] ? try_to_wake_up+0x68f/0x10b0 [ 550.606595][T14847] ? wake_up_q+0x8c/0xc0 [ 550.610920][T14847] ? __mutex_unlock_slowpath+0x658/0x6c0 [ 550.616599][T14847] ? get_sigframe_size+0x10/0x10 [ 550.621622][T14847] ? mutex_unlock+0x10/0x10 [ 550.626168][T14847] ? __fget_files+0x3fc/0x460 [ 550.630945][T14847] ? ksys_write+0x1fd/0x260 [ 550.635554][T14847] ? exit_to_user_mode_loop+0x3b/0x110 [ 550.641174][T14847] exit_to_user_mode_loop+0x70/0x110 [ 550.646514][T14847] exit_to_user_mode_prepare+0xee/0x180 [ 550.652141][T14847] syscall_exit_to_user_mode+0x16/0x40 [ 550.657662][T14847] do_syscall_64+0x58/0xa0 [ 550.662151][T14847] ? clear_bhb_loop+0x60/0xb0 [ 550.666873][T14847] ? clear_bhb_loop+0x60/0xb0 [ 550.671642][T14847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.677596][T14847] RIP: 0033:0x7f811b79f559 [ 550.682159][T14847] Code: Unable to access opcode bytes at 0x7f811b79f52f. [ 550.689320][T14847] RSP: 002b:00007f811c737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.697766][T14847] RAX: 0000000000000012 RBX: 00007f811ba26090 RCX: 00007f811b79f559 [ 550.705851][T14847] RDX: 0000000000000012 RSI: 0000200000000780 RDI: 000000000000000d [ 550.713935][T14847] RBP: 00007f811b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.721979][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.730037][T14847] R13: 00007f811ba26128 R14: 00007f811ba26090 R15: 00007ffc45f5b268 [ 550.738104][T14847] [ 550.741185][T14847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 550.748499][T14847] CPU: 0 PID: 14847 Comm: syz.0.2670 Not tainted syzkaller #0 [ 550.755996][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.766152][T14847] Call Trace: [ 550.769469][T14847] [ 550.772437][T14847] dump_stack_lvl+0x188/0x24e [ 550.777145][T14847] ? memcpy+0x3c/0x60 [ 550.781176][T14847] ? show_regs_print_info+0x12/0x12 [ 550.786420][T14847] ? load_image+0x410/0x410 [ 550.790966][T14847] panic+0x2d3/0x710 [ 550.794906][T14847] ? bpf_jit_dump+0xd0/0xd0 [ 550.799504][T14847] __warn+0x2f8/0x4f0 [ 550.803549][T14847] ? perf_pending_task+0x353/0x480 [ 550.808692][T14847] ? perf_pending_task+0x353/0x480 [ 550.813858][T14847] report_bug+0x2ba/0x4f0 [ 550.818232][T14847] ? perf_pending_task+0x353/0x480 [ 550.823392][T14847] handle_bug+0x3a/0x70 [ 550.827582][T14847] exc_invalid_op+0x16/0x40 [ 550.832104][T14847] asm_exc_invalid_op+0x16/0x20 [ 550.836992][T14847] RIP: 0010:perf_pending_task+0x353/0x480 [ 550.842740][T14847] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 550.862396][T14847] RSP: 0018:ffffc900067b78e8 EFLAGS: 00010293 [ 550.868489][T14847] RAX: ffffffff81a7eb03 RBX: ffff888076c4ea58 RCX: ffff88807d338000 [ 550.876500][T14847] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.884490][T14847] RBP: ffff888076c4e820 R08: ffff88807d338a03 R09: 1ffff1100fa67140 [ 550.892490][T14847] R10: dffffc0000000000 R11: ffffed100fa67141 R12: ffff88807d338000 [ 550.900488][T14847] R13: ffff888030709d60 R14: 0000000000000000 R15: 1ffff1100ed89d04 [ 550.908506][T14847] ? perf_pending_task+0x353/0x480 [ 550.913681][T14847] ? perf_pending_task+0x353/0x480 [ 550.918833][T14847] task_work_run+0x1d0/0x260 [ 550.923453][T14847] ? task_work_cancel+0x220/0x220 [ 550.928503][T14847] ? do_raw_spin_unlock+0x11d/0x230 [ 550.933743][T14847] do_exit+0x9d5/0x2570 [ 550.937954][T14847] ? release_firmware_map_entry+0x187/0x187 [ 550.943877][T14847] ? put_task_struct+0x80/0x80 [ 550.948674][T14847] ? preempt_schedule_common+0xa5/0xd0 [ 550.954169][T14847] ? preempt_schedule+0xbc/0xd0 [ 550.959148][T14847] ? schedule_preempt_disabled+0x20/0x20 [ 550.964814][T14847] ? lock_chain_count+0x20/0x20 [ 550.969699][T14847] do_group_exit+0x229/0x2e0 [ 550.974341][T14847] get_signal+0x1259/0x1340 [ 550.978893][T14847] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 550.984835][T14847] arch_do_signal_or_restart+0xc4/0x1310 [ 550.990499][T14847] ? try_to_wake_up+0x68f/0x10b0 [ 550.995476][T14847] ? wake_up_q+0x8c/0xc0 [ 550.999764][T14847] ? __mutex_unlock_slowpath+0x658/0x6c0 [ 551.005422][T14847] ? get_sigframe_size+0x10/0x10 [ 551.010381][T14847] ? mutex_unlock+0x10/0x10 [ 551.014911][T14847] ? __fget_files+0x3fc/0x460 [ 551.019640][T14847] ? ksys_write+0x1fd/0x260 [ 551.024171][T14847] ? exit_to_user_mode_loop+0x3b/0x110 [ 551.029658][T14847] exit_to_user_mode_loop+0x70/0x110 [ 551.034979][T14847] exit_to_user_mode_prepare+0xee/0x180 [ 551.040561][T14847] syscall_exit_to_user_mode+0x16/0x40 [ 551.046069][T14847] do_syscall_64+0x58/0xa0 [ 551.050529][T14847] ? clear_bhb_loop+0x60/0xb0 [ 551.055228][T14847] ? clear_bhb_loop+0x60/0xb0 [ 551.059938][T14847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.065859][T14847] RIP: 0033:0x7f811b79f559 [ 551.070297][T14847] Code: Unable to access opcode bytes at 0x7f811b79f52f. [ 551.077505][T14847] RSP: 002b:00007f811c737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.085943][T14847] RAX: 0000000000000012 RBX: 00007f811ba26090 RCX: 00007f811b79f559 [ 551.093936][T14847] RDX: 0000000000000012 RSI: 0000200000000780 RDI: 000000000000000d [ 551.101938][T14847] RBP: 00007f811b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 551.109941][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.117936][T14847] R13: 00007f811ba26128 R14: 00007f811ba26090 R15: 00007ffc45f5b268 [ 551.125945][T14847] [ 551.129566][T14847] Kernel Offset: disabled [ 551.133910][T14847] Rebooting in 86400 seconds..