last executing test programs: 4m13.557950457s ago: executing program 1 (id=399): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m11.815860771s ago: executing program 1 (id=404): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 4m9.994562926s ago: executing program 1 (id=415): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 4m9.515521868s ago: executing program 1 (id=418): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8020008, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_attach_bpf(r4, 0x29, 0x43, &(0x7f0000000000)=r5, 0x4) 4m7.948974167s ago: executing program 1 (id=423): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717"], 0x48}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (fail_nth: 10) 4m7.414354481s ago: executing program 1 (id=425): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="09000000000000000000002d0e815a3f283333c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001e30000000000000002000000000000000000"], 0x50) sendmsg$inet(r0, 0x0, 0x200040c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b8587"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4009044) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r6}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48000) syz_clone(0x60021000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 3m51.972832996s ago: executing program 32 (id=425): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="09000000000000000000002d0e815a3f283333c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001e30000000000000002000000000000000000"], 0x50) sendmsg$inet(r0, 0x0, 0x200040c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b8587"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4009044) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r6}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48000) syz_clone(0x60021000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 10.633577165s ago: executing program 3 (id=1120): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f2e2e00305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x35dc00000000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff00000000020004008500000053000000b7080000000000007b8af8ff00000000b7080000baa42c567b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000024c1c41e000000000000020000000800000085000000a500000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000006d482f31000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000000001000000000000000000000011000000000000ff01000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1281857a0041290"], 0xf}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000640)={0x2, 0x0, [0x0, 0x0]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0x3, 0xc1, 0x3f, 0x9, 0x0, 0x3, 0x430e4, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x4}, 0x102809, 0xa, 0xfffffff8, 0x4, 0x6, 0x0, 0xc, 0x0, 0xf, 0x0, 0x4}, 0x0, 0x3, r8, 0xb) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x10, 0x91, 0xc, 0x0, 0x7, 0x280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x8001}, 0x201, 0x5, 0x9, 0x6, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x5, r4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 10.303163643s ago: executing program 0 (id=1124): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 1) 7.377390906s ago: executing program 0 (id=1125): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) unlink(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'io'}, {0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x14) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186800000e0000000000000081000000"], &(0x7f0000000740)='GPL\x00', 0xd873, 0x56, &(0x7f0000000780)=""/86, 0x41100, 0x89, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x4, 0x6, 0x5}, 0x10, 0x1fbf5, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[r1, r0, 0xffffffffffffffff, r0], &(0x7f0000000980)=[{0x5, 0x3, 0x5, 0x7}, {0x4, 0x4, 0xd, 0x4}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xfffffff4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0x8f62, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.376912266s ago: executing program 3 (id=1126): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x2000000}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f0000000100)) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f00000000c0)="b9fb0307683a06000000ffff80f3000000000000001915f37e9f611fe5001a000046a17ace11668b7ffdea8e921db7d9fd3164be10ebb680be9725bc513a45c50691f40eeddd1a6db0c503139a283ea5162b82e416ed62163e7b89658f150fff08ac43da8978b4c5a79b9d3bd9d9fdb6d72200"/127, 0x0, 0x40000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x41) 4.230940125s ago: executing program 3 (id=1129): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f2e2e00305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x35dc00000000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff00000000020004008500000053000000b7080000000000007b8af8ff00000000b7080000baa42c567b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000024c1c41e000000000000020000000800000085000000a500000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000006d482f31000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000000001000000000000000000000011000000000000ff01000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1281857a0041290"], 0xf}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000640)={0x2, 0x0, [0x0, 0x0]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0x3, 0xc1, 0x3f, 0x9, 0x0, 0x3, 0x430e4, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x4}, 0x102809, 0xa, 0xfffffff8, 0x4, 0x6, 0x0, 0xc, 0x0, 0xf, 0x0, 0x4}, 0x0, 0x3, r9, 0xb) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x10, 0x91, 0xc, 0x0, 0x7, 0x280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x8001}, 0x201, 0x5, 0x9, 0x6, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x5, r5, 0x3) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 4.182146396s ago: executing program 0 (id=1131): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffedb, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1d, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x7, 0xfb, 0x3b, 0x0, 0x0, 0x9, 0x20080, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x8084, 0x8000000000000001, 0x3, 0x7, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x2}, r3, 0xa, 0xffffffffffffffff, 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 4.130122037s ago: executing program 4 (id=1132): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) 3.968830391s ago: executing program 0 (id=1133): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.956195261s ago: executing program 4 (id=1134): recvmsg(0xffffffffffffffff, 0x0, 0x3f01) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x5d) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xfffe, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000007f00000000000000008500000011"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0xb5a, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.920528392s ago: executing program 2 (id=1135): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x111863, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f00000000c0)="b9fb0307683a06000000ffff80f3000000000000001915f37e9f611fe5001a000046a17ace11668b7ffdea8e921db7d9fd3164be10ebb680be9725bc513a45c50691f40eeddd1a6db0c503139a283ea5162b82e416ed62163e7b89658f150fff08ac43da8978b4c5a79b9d3bd9d9fdb6d72200"/127, 0x0, 0x40000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x41) 3.874904843s ago: executing program 3 (id=1136): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d0009088fee", 0x10}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r3], 0x48}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) socket$kcm(0x22, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0xfffffffffffffffd, 0xf8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000180)={r11, r5}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 3.758500726s ago: executing program 0 (id=1137): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x2000000}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f0000000100)) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f00000000c0)="b9fb0307683a06000000ffff80f3000000000000001915f37e9f611fe5001a000046a17ace11668b7ffdea8e921db7d9fd3164be10ebb680be9725bc513a45c50691f40eeddd1a6db0c503139a283ea5162b82e416ed62163e7b89658f150fff08ac43da8978b4c5a79b9d3bd9d9fdb6d72200"/127, 0x0, 0x40000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x41) 3.758039426s ago: executing program 4 (id=1138): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x25, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000babc3063b7f0d087e5b7bc919443080b1d7f4b8ab36452561eed28e07031e819f1c8c051ca395ec714201c"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x2000000}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x111863, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f00000000c0)="b9fb0307683a06000000ffff80f3000000000000001915f37e9f611fe5001a000046a17ace11668b7ffdea8e921db7d9fd3164be10ebb680be9725bc513a45c50691f40eeddd1a6db0c503139a283ea5162b82e416ed62163e7b89658f150fff08ac43da8978b4c5a79b9d3bd9d9fdb6d72200"/127, 0x0, 0x40000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x41) 701.204582ms ago: executing program 2 (id=1139): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x2121, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x100000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) 559.909356ms ago: executing program 0 (id=1140): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x7, 0x0, 0x3}, 0x10}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) sendmsg$kcm(r6, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) close(r6) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x9, 0x1, 0xe6, 0x1, 0x0, 0x5, 0x81921, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xca78, 0x1, @perf_config_ext={0x1, 0xffffffffffffff47}, 0x8800, 0x7fffffff, 0x3, 0x9, 0x8, 0x3, 0x8, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0xc) r7 = socket$kcm(0x1e, 0x2, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x5, 0x45, &(0x7f0000000980)=""/69, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[r4, r4, r4, r8, r4, r4, r4, r4], &(0x7f0000000c00)=[{0x3, 0x2, 0x1, 0x8}, {0x0, 0x1, 0x4, 0x6}, {0x5, 0x1, 0x6, 0x3}, {0x1, 0x4, 0xf, 0x2}, {0x1, 0x1, 0x4, 0xa}], 0x10, 0x80000000}, 0x94) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/113, 0x71}], 0x1}, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x308) 529.066747ms ago: executing program 4 (id=1141): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffedb, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1d, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x7, 0xfb, 0x3b, 0x0, 0x0, 0x9, 0x20080, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x8084, 0x8000000000000001, 0x3, 0x7, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x2}, r3, 0xa, 0xffffffffffffffff, 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 478.481278ms ago: executing program 2 (id=1142): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) 375.351291ms ago: executing program 2 (id=1143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) 374.387751ms ago: executing program 3 (id=1144): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f2e2e00305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x35dc00000000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff00000000020004008500000053000000b7080000000000007b8af8ff00000000b7080000baa42c567b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000024c1c41e000000000000020000000800000085000000a500000095000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000006d482f31000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000000001000000000000000000000011000000000000ff01000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1281857a0041290"], 0xf}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000640)={0x2, 0x0, [0x0, 0x0]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0x3, 0xc1, 0x3f, 0x9, 0x0, 0x3, 0x430e4, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8d, 0x4}, 0x102809, 0xa, 0xfffffff8, 0x4, 0x6, 0x0, 0xc, 0x0, 0xf, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x10, 0x91, 0xc, 0x0, 0x7, 0x280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x8001}, 0x201, 0x5, 0x9, 0x6, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x5, r5, 0x3) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 348.751461ms ago: executing program 4 (id=1145): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) unlink(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'io'}, {0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x14) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186800000e0000000000000081000000"], &(0x7f0000000740)='GPL\x00', 0xd873, 0x56, &(0x7f0000000780)=""/86, 0x41100, 0x89, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x4, 0x6, 0x5}, 0x10, 0x1fbf5, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[r1, r0, 0xffffffffffffffff, r0], &(0x7f0000000980)=[{0x5, 0x3, 0x5, 0x7}, {0x4, 0x4, 0xd, 0x4}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xfffffff4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0x8f62, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 122.824597ms ago: executing program 2 (id=1146): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$inet(r0, &(0x7f0000001e80)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000002080)='&:Ee\x00', 0x5}], 0x1}, 0x8050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x6) close(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000400ff000000000d00000000000000000000407ad44cd2909a91973b048c59b8f5f2392cc9a1e9abe5091fdfa81a9111e66a405bd548e461b21a08711d9866e3badc03aafa47e4086ab6ef3851aebf0a123511c291bc9f3cbb3cbb9a1ecfa3355a1e9f3a2c20fde521224a8fe24a611c30a7abb2d66e3a3401122fd297c0ed0eb58e28c24fdf8653ac047e326e8a1e1c05e28691d8235315f18ac8e70c0901744ae289f1d30b483d543fc859b36d3762"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r8, &(0x7f0000000c80)={&(0x7f0000000780)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000800)="bc147c6e69c3f058937d6c64bfd5da7de449f47c8fde5440a804466b064ecec4735541c8ab4d3e9a5ae3548bc9b8211cb741893c3dc47b0e3a262750dd79094473d935a5ff17b86731c533c6eecd88965e21a559c46daeffdd5aca81bcc31ee212eaade82b4de5c2d7d4f78cad", 0x6d}, {&(0x7f0000000880)="e60a7dbe4eb58d78c174f0ed093c065624b54c90850665fff543f860ec05c803e7858fb3cd0b11a2e578804fc356646517455b447468c846bdd4c67db39f3cf7fc17321ccbe85fc2174c08818b0339a156f8f3d02ce4dadbfbdeb064373a1d3f9f06ab22634927bc87144bcf519fd3b5795c0f52d82ea4d34e653b9e929419b84aedd084c365c17fa6a75f57e00c71a5e5270b4db12a10a474f4462d60f56f4d36883318b9b1a3b4d6a81cc3e791ff61b2f4605afeb21ea8c0c1aefe1a61441420224a8401b1488ffb5999", 0xcb}, {&(0x7f0000000980)="8570f3896d88b88cdfa5ce327404aed0921ce91f634f29d04e80a30c3c528bb43fcfac170ff30c9c959002e671f5780566eff5c7fd7e43b2e7c995cda82c345742928df8f0cd1a1be0aaf4897468eea75aa4f2c3e5ea0642d287fc7165733539d7599d781dcab75a64c998d8b2ac186540104b20653aed8efada2c28142152fc839da9161fa43a634e437cf450b37cd3e8420b0de72c22db", 0x98}, {&(0x7f0000000a40)="31ef72f5f3da59fbdcc1464132ec5d17a5b485fc719db8d69ca69e342290c004f511ed7400cf4eba5c1da21b8352d03434cf22a6bf93c451e9a53dbb3c482caa567bd7058348853ec0501b25c3b318ffb8310e96f2da3db5f2bcb90e6bea80ede71eb85f74e5663475f5db62b1264cfd289b37c259d3a3947e37aafd9999492ddec1926fd93d4e31658dcd121a29e2fd1071fb2766322319a0949ed160dd3e954851784446c9da44368fa9cb814d42acea5972e45674f9d416342d9196291bd11cda52e1f7eccd7e2769e401bea9044c2f375340bed0367a43d2e1376559422462596f70374752faf8089087d3", 0xed}, {&(0x7f0000000b40)="24b4c11c47c769a827d56d59c8dc0fb76de159ef822a0cf7589d6d3388da9828e691dc77bef6c1de8a908e5153d5d2d698f578db61d6b4fd31e11b07fc684d94ca73c48cb1f7cb65ed79e98b7b466a1c3db65b26e060eabc44bad2219617440a5abab21222c2e88be9e3b3644c803a2c4a8883ae69a85499c54594e8b23f38e52886b04c792d305404fab9412430ccf45d7f7b4333feb9ca9fcce9d40d3e0d3d740b2187df2673d7647e477eb6cf", 0xae}], 0x5}, 0x1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'cpuset'}, {0x2d, 'freezer'}]}, 0x11) close(0x3) 72.782149ms ago: executing program 3 (id=1147): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x111863, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x7f, 0x0, &(0x7f00000000c0)="b9fb0307683a06000000ffff80f3000000000000001915f37e9f611fe5001a000046a17ace11668b7ffdea8e921db7d9fd3164be10ebb680be9725bc513a45c50691f40eeddd1a6db0c503139a283ea5162b82e416ed62163e7b89658f150fff08ac43da8978b4c5a79b9d3bd9d9fdb6d72200"/127, 0x0, 0x40000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x41) 6.75484ms ago: executing program 2 (id=1148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x18, 0xffffffff, 0x9, 0x6, 0x1120, r3, 0x2, '\x00', r8, r6, 0x1, 0x2, 0x4}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1e, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1d}, [@tail_call, @map_fd={0x18, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4b}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @tail_call, @ldst={0x3, 0x2, 0x3, 0xa, 0x4, 0xffffffffffffffe0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0x9, 0x3, 0x5, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000b40)='syzkaller\x00', 0x80000001, 0xc2, &(0x7f0000000c00)=""/194, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000d00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xc, 0x7, 0x28}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[r0, r11, 0x1, r12], &(0x7f0000000e40)=[{0x1, 0x2, 0x5, 0xa}], 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=1149): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYRESDEC=r0], 0x48) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76c, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) kernel console output (not intermixed with test programs): 93][ T6911] ? __lock_acquire+0x7d80/0x7d80 [ 154.958458][ T6911] __se_sys_sendmsg+0x1d0/0x2c0 [ 154.963332][ T6911] ? __x64_sys_sendmsg+0x80/0x80 [ 154.968307][ T6911] ? lockdep_hardirqs_on+0x98/0x150 [ 154.973532][ T6911] do_syscall_64+0x55/0xb0 [ 154.978005][ T6911] ? clear_bhb_loop+0x40/0x90 [ 154.982697][ T6911] ? clear_bhb_loop+0x40/0x90 [ 154.987394][ T6911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.993306][ T6911] RIP: 0033:0x7fce02d9e159 [ 154.997762][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.017390][ T6911] RSP: 002b:00007fce03bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.025821][ T6911] RAX: ffffffffffffffda RBX: 00007fce03025fa0 RCX: 00007fce02d9e159 [ 155.033812][ T6911] RDX: 0000000004009044 RSI: 0000200000000080 RDI: 0000000000000003 [ 155.041792][ T6911] RBP: 00007fce03bff090 R08: 0000000000000000 R09: 0000000000000000 [ 155.049777][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.057770][ T6911] R13: 00007fce03026038 R14: 00007fce03025fa0 R15: 00007ffe8b6c1308 [ 155.065764][ T6911] [ 155.355765][ T6918] FAULT_INJECTION: forcing a failure. [ 155.355765][ T6918] name failslab, interval 1, probability 0, space 0, times 0 [ 155.380721][ T6918] CPU: 0 PID: 6918 Comm: syz.2.311 Not tainted syzkaller #0 [ 155.388158][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.398238][ T6918] Call Trace: [ 155.401545][ T6918] [ 155.404515][ T6918] dump_stack_lvl+0x18c/0x250 [ 155.409248][ T6918] ? show_regs_print_info+0x20/0x20 [ 155.414487][ T6918] ? load_image+0x420/0x420 [ 155.419028][ T6918] ? __might_sleep+0xe0/0xe0 [ 155.423659][ T6918] ? __lock_acquire+0x7d80/0x7d80 [ 155.428722][ T6918] should_fail_ex+0x394/0x4c0 [ 155.433450][ T6918] should_failslab+0x9/0x20 [ 155.438013][ T6918] slab_pre_alloc_hook+0x59/0x300 [ 155.443088][ T6918] ? __get_vm_area_node+0x125/0x370 [ 155.448362][ T6918] __kmem_cache_alloc_node+0x53/0x250 [ 155.453791][ T6918] ? __get_vm_area_node+0x125/0x370 [ 155.459026][ T6918] kmalloc_node_trace+0x26/0xe0 [ 155.463937][ T6918] __get_vm_area_node+0x125/0x370 [ 155.469022][ T6918] __vmalloc_node_range+0x36f/0x1320 [ 155.474345][ T6918] ? netlink_sendmsg+0x602/0xbf0 [ 155.479315][ T6918] ? netlink_insert+0x1094/0x1390 [ 155.484388][ T6918] ? netlink_insert+0x2ba/0x1390 [ 155.489405][ T6918] ? free_vm_area+0x50/0x50 [ 155.493985][ T6918] ? netlink_sendmsg+0x602/0xbf0 [ 155.498962][ T6918] vmalloc+0x79/0x90 [ 155.502895][ T6918] ? netlink_sendmsg+0x602/0xbf0 [ 155.507871][ T6918] netlink_sendmsg+0x602/0xbf0 [ 155.512687][ T6918] ? netlink_getsockopt+0x590/0x590 [ 155.517929][ T6918] ? apparmor_socket_sendmsg+0x8e/0x330 [ 155.523517][ T6918] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.528876][ T6918] ? security_socket_sendmsg+0x80/0xa0 [ 155.534412][ T6918] ? netlink_getsockopt+0x590/0x590 [ 155.539655][ T6918] ____sys_sendmsg+0x61b/0x980 [ 155.544471][ T6918] ? __asan_memset+0x22/0x40 [ 155.549106][ T6918] ? __sys_sendmsg_sock+0x30/0x30 [ 155.554170][ T6918] ? __import_iovec+0x5f2/0x850 [ 155.559074][ T6918] ? import_iovec+0x73/0xa0 [ 155.563630][ T6918] ___sys_sendmsg+0x2a6/0x360 [ 155.568368][ T6918] ? __sys_sendmsg+0x2b0/0x2b0 [ 155.573216][ T6918] ? ktime_get+0x7f/0x280 [ 155.577576][ T6918] ? trace_call_bpf+0xc3/0x6c0 [ 155.582412][ T6918] __se_sys_sendmsg+0x1d0/0x2c0 [ 155.587302][ T6918] ? perf_trace_preemptirq_template+0x269/0x330 [ 155.593593][ T6918] ? __x64_sys_sendmsg+0x80/0x80 [ 155.598603][ T6918] ? lockdep_hardirqs_on+0x98/0x150 [ 155.603864][ T6918] do_syscall_64+0x55/0xb0 [ 155.608321][ T6918] ? clear_bhb_loop+0x40/0x90 [ 155.613064][ T6918] ? clear_bhb_loop+0x40/0x90 [ 155.617787][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.623732][ T6918] RIP: 0033:0x7fce02d9e159 [ 155.628188][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.647822][ T6918] RSP: 002b:00007fce03bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.656309][ T6918] RAX: ffffffffffffffda RBX: 00007fce03025fa0 RCX: 00007fce02d9e159 [ 155.664309][ T6918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 155.672310][ T6918] RBP: 00007fce03bff090 R08: 0000000000000000 R09: 0000000000000000 [ 155.680314][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.688326][ T6918] R13: 00007fce03026038 R14: 00007fce03025fa0 R15: 00007ffe8b6c1308 [ 155.696337][ T6918] [ 155.797121][ T6918] syz.2.311: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 155.829230][ T6918] CPU: 1 PID: 6918 Comm: syz.2.311 Not tainted syzkaller #0 [ 155.836583][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.846661][ T6918] Call Trace: [ 155.849971][ T6918] [ 155.852932][ T6918] dump_stack_lvl+0x18c/0x250 [ 155.857659][ T6918] ? show_regs_print_info+0x20/0x20 [ 155.862887][ T6918] ? load_image+0x420/0x420 [ 155.867417][ T6918] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.873853][ T6918] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 155.880395][ T6918] warn_alloc+0x246/0x340 [ 155.884746][ T6918] ? __get_vm_area_node+0x125/0x370 [ 155.889988][ T6918] ? zone_watermark_ok_safe+0x230/0x230 [ 155.895560][ T6918] ? rcu_is_watching+0x15/0xb0 [ 155.900360][ T6918] ? __get_vm_area_node+0x356/0x370 [ 155.905597][ T6918] __vmalloc_node_range+0x394/0x1320 [ 155.910945][ T6918] ? netlink_insert+0x1094/0x1390 [ 155.916005][ T6918] ? netlink_insert+0x2ba/0x1390 [ 155.920977][ T6918] ? free_vm_area+0x50/0x50 [ 155.925513][ T6918] ? netlink_sendmsg+0x602/0xbf0 [ 155.930476][ T6918] vmalloc+0x79/0x90 [ 155.934510][ T6918] ? netlink_sendmsg+0x602/0xbf0 [ 155.939508][ T6918] netlink_sendmsg+0x602/0xbf0 [ 155.944303][ T6918] ? netlink_getsockopt+0x590/0x590 [ 155.949531][ T6918] ? apparmor_socket_sendmsg+0x8e/0x330 [ 155.955111][ T6918] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.960424][ T6918] ? security_socket_sendmsg+0x80/0xa0 [ 155.965920][ T6918] ? netlink_getsockopt+0x590/0x590 [ 155.971146][ T6918] ____sys_sendmsg+0x61b/0x980 [ 155.975948][ T6918] ? __asan_memset+0x22/0x40 [ 155.980569][ T6918] ? __sys_sendmsg_sock+0x30/0x30 [ 155.985632][ T6918] ? __import_iovec+0x5f2/0x850 [ 155.990521][ T6918] ? import_iovec+0x73/0xa0 [ 155.995060][ T6918] ___sys_sendmsg+0x2a6/0x360 [ 155.999863][ T6918] ? __sys_sendmsg+0x2b0/0x2b0 [ 156.004668][ T6918] ? ktime_get+0x7f/0x280 [ 156.009018][ T6918] ? trace_call_bpf+0xc3/0x6c0 [ 156.013819][ T6918] __se_sys_sendmsg+0x1d0/0x2c0 [ 156.018780][ T6918] ? perf_trace_preemptirq_template+0x269/0x330 [ 156.025051][ T6918] ? __x64_sys_sendmsg+0x80/0x80 [ 156.030023][ T6918] ? lockdep_hardirqs_on+0x98/0x150 [ 156.035266][ T6918] do_syscall_64+0x55/0xb0 [ 156.039727][ T6918] ? clear_bhb_loop+0x40/0x90 [ 156.044437][ T6918] ? clear_bhb_loop+0x40/0x90 [ 156.049132][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.055043][ T6918] RIP: 0033:0x7fce02d9e159 [ 156.059495][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.079127][ T6918] RSP: 002b:00007fce03bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.087570][ T6918] RAX: ffffffffffffffda RBX: 00007fce03025fa0 RCX: 00007fce02d9e159 [ 156.095571][ T6918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 156.103557][ T6918] RBP: 00007fce03bff090 R08: 0000000000000000 R09: 0000000000000000 [ 156.111554][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.119548][ T6918] R13: 00007fce03026038 R14: 00007fce03025fa0 R15: 00007ffe8b6c1308 [ 156.127556][ T6918] [ 156.154693][ T6918] Mem-Info: [ 156.160308][ T6918] active_anon:5456 inactive_anon:0 isolated_anon:0 [ 156.160308][ T6918] active_file:11206 inactive_file:39981 isolated_file:0 [ 156.160308][ T6918] unevictable:768 dirty:247 writeback:0 [ 156.160308][ T6918] slab_reclaimable:9696 slab_unreclaimable:93105 [ 156.160308][ T6918] mapped:24457 shmem:1361 pagetables:562 [ 156.160308][ T6918] sec_pagetables:0 bounce:0 [ 156.160308][ T6918] kernel_misc_reclaimable:0 [ 156.160308][ T6918] free:1350442 free_pcp:11223 free_cma:0 [ 156.216968][ T6918] Node 0 active_anon:21824kB inactive_anon:0kB active_file:44924kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97928kB dirty:1084kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 156.266854][ T6918] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 156.331802][ T6918] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.368236][ T6918] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 156.381808][ T6918] Node 0 DMA32 free:1496196kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21888kB inactive_anon:0kB active_file:45124kB inactive_file:158892kB unevictable:1536kB writepending:1384kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:25452kB local_pcp:14216kB free_cma:0kB [ 156.453244][ T6918] lowmem_reserve[]: 0 0 0 0 0 [ 156.459015][ T6918] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.497562][ T6920] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.312'. [ 156.549626][ T6918] lowmem_reserve[]: 0 0 0 0 0 [ 156.554519][ T6918] Node 1 Normal free:3889700kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:7136kB free_cma:0kB [ 156.691862][ T6918] lowmem_reserve[]: 0 0 0 0 0 [ 156.705402][ T6918] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.729038][ T6918] Node 0 DMA32: 331*4kB (UME) 536*8kB (UM) 449*16kB (M) 1493*32kB (UME) 730*64kB (UME) 78*128kB (UME) 13*256kB (UME) 6*512kB (M) 7*1024kB (UME) 4*2048kB (ME) 331*4096kB (M) = 1494812kB [ 156.755568][ T6918] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 156.806861][ T6918] Node 1 Normal: 253*4kB (UME) 56*8kB (UME) 35*16kB (UME) 76*32kB (UME) 19*64kB (UME) 10*128kB (UME) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (ME) = 3889700kB [ 156.838350][ T6932] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.315'. [ 156.861132][ T6918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.873205][ T6918] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.883595][ T6918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.894008][ T6918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.906355][ T6918] 52688 total pagecache pages [ 156.911792][ T6918] 0 pages in swap cache [ 156.916330][ T6918] Free swap = 124996kB [ 156.921664][ T6918] Total swap = 124996kB [ 156.926022][ T6918] 2097051 pages RAM [ 156.939357][ T6918] 0 pages HighMem/MovableOnly [ 156.951776][ T6918] 416960 pages reserved [ 156.967461][ T6932] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 156.976389][ T6918] 0 pages cma reserved [ 157.480568][ T6943] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 160.103681][ T6957] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.321'. [ 160.538153][ T6963] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.323'. [ 161.392271][ T6982] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 161.411354][ T6984] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.327'. [ 161.433668][ T6984] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.327'. [ 161.549888][ T6973] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.327'. [ 161.655725][ T6973] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 161.691563][ T6973] netlink: 'syz.3.327': attribute type 8 has an invalid length. [ 161.716473][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.327'. [ 162.172866][ T7000] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 162.181148][ T7000] netlink: 'syz.0.335': attribute type 2 has an invalid length. [ 162.189569][ T7000] netlink: 'syz.0.335': attribute type 2 has an invalid length. [ 162.234991][ T7000] netlink: 'syz.0.335': attribute type 3 has an invalid length. [ 162.262807][ T7000] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 162.303674][ T7000] netlink: 'syz.0.335': attribute type 5 has an invalid length. [ 162.312601][ T7000] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 162.321371][ T7000] netlink: 204416 bytes leftover after parsing attributes in process `syz.0.335'. [ 162.446483][ T7010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.473699][ T7010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.565274][ T7010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.581834][ T7007] FAULT_INJECTION: forcing a failure. [ 162.581834][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.581882][ T7007] CPU: 0 PID: 7007 Comm: syz.1.337 Not tainted syzkaller #0 [ 162.581919][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.581932][ T7007] Call Trace: [ 162.581940][ T7007] [ 162.581948][ T7007] dump_stack_lvl+0x18c/0x250 [ 162.581982][ T7007] ? show_regs_print_info+0x20/0x20 [ 162.582008][ T7007] ? load_image+0x420/0x420 [ 162.582033][ T7007] ? __lock_acquire+0x7d80/0x7d80 [ 162.582060][ T7007] ? snprintf+0xe9/0x140 [ 162.582084][ T7007] should_fail_ex+0x394/0x4c0 [ 162.582117][ T7007] _copy_to_user+0x2f/0xa0 [ 162.582143][ T7007] simple_read_from_buffer+0xe7/0x150 [ 162.582170][ T7007] proc_fail_nth_read+0x1e8/0x260 [ 162.582204][ T7007] ? proc_fault_inject_write+0x360/0x360 [ 162.582265][ T7007] ? fsnotify_perm+0x271/0x5e0 [ 162.582295][ T7007] ? proc_fault_inject_write+0x360/0x360 [ 162.582329][ T7007] vfs_read+0x298/0x990 [ 162.582366][ T7007] ? kernel_read+0x1e0/0x1e0 [ 162.582399][ T7007] ? __fget_files+0x28/0x460 [ 162.582431][ T7007] ? __fget_files+0x3fc/0x460 [ 162.582471][ T7007] ? __fdget_pos+0x2a3/0x330 [ 162.582509][ T7007] ? ksys_read+0x74/0x260 [ 162.582540][ T7007] ksys_read+0x151/0x260 [ 162.582572][ T7007] ? vfs_write+0x9a0/0x9a0 [ 162.582605][ T7007] ? lockdep_hardirqs_on+0x98/0x150 [ 162.582638][ T7007] do_syscall_64+0x55/0xb0 [ 162.582660][ T7007] ? clear_bhb_loop+0x40/0x90 [ 162.582683][ T7007] ? clear_bhb_loop+0x40/0x90 [ 162.582710][ T7007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.582734][ T7007] RIP: 0033:0x7fd81695e98e [ 162.582752][ T7007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.582769][ T7007] RSP: 002b:00007fd8178fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.582793][ T7007] RAX: ffffffffffffffda RBX: 00007fd8179006c0 RCX: 00007fd81695e98e [ 162.582809][ T7007] RDX: 000000000000000f RSI: 00007fd8179000a0 RDI: 0000000000000005 [ 162.582822][ T7007] RBP: 00007fd817900090 R08: 0000000000000000 R09: 0000000000000000 [ 162.582836][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.582848][ T7007] R13: 00007fd816c26038 R14: 00007fd816c25fa0 R15: 00007ffc20d7e118 [ 162.582882][ T7007] [ 162.867228][ T7010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.137657][ T7022] netlink: 128 bytes leftover after parsing attributes in process `syz.3.338'. [ 163.178284][ T7022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.218933][ T7025] FAULT_INJECTION: forcing a failure. [ 163.218933][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.238680][ T7017] tap0: tun_chr_ioctl cmd 1074025676 [ 163.254322][ T7017] tap0: owner set to 776 [ 163.259065][ T7025] CPU: 0 PID: 7025 Comm: syz.1.342 Not tainted syzkaller #0 [ 163.266485][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.276566][ T7025] Call Trace: [ 163.279881][ T7025] [ 163.282841][ T7025] dump_stack_lvl+0x18c/0x250 [ 163.287589][ T7025] ? show_regs_print_info+0x20/0x20 [ 163.292849][ T7025] ? load_image+0x420/0x420 [ 163.297417][ T7025] ? __lock_acquire+0x7d80/0x7d80 [ 163.302601][ T7025] ? snprintf+0xe9/0x140 [ 163.306897][ T7025] should_fail_ex+0x394/0x4c0 [ 163.311640][ T7025] _copy_to_user+0x2f/0xa0 [ 163.316112][ T7025] simple_read_from_buffer+0xe7/0x150 [ 163.321547][ T7025] proc_fail_nth_read+0x1e8/0x260 [ 163.326621][ T7025] ? proc_fault_inject_write+0x360/0x360 [ 163.332314][ T7025] ? fsnotify_perm+0x271/0x5e0 [ 163.337130][ T7025] ? proc_fault_inject_write+0x360/0x360 [ 163.342799][ T7025] vfs_read+0x298/0x990 [ 163.347001][ T7025] ? kernel_read+0x1e0/0x1e0 [ 163.351624][ T7025] ? __fget_files+0x28/0x460 [ 163.356256][ T7025] ? __fget_files+0x3fc/0x460 [ 163.360973][ T7025] ? __fdget_pos+0x2a3/0x330 [ 163.365590][ T7025] ? ksys_read+0x74/0x260 [ 163.369954][ T7025] ksys_read+0x151/0x260 [ 163.374243][ T7025] ? vfs_write+0x9a0/0x9a0 [ 163.378705][ T7025] ? lockdep_hardirqs_on+0x98/0x150 [ 163.383931][ T7025] do_syscall_64+0x55/0xb0 [ 163.388368][ T7025] ? clear_bhb_loop+0x40/0x90 [ 163.393074][ T7025] ? clear_bhb_loop+0x40/0x90 [ 163.397770][ T7025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.403682][ T7025] RIP: 0033:0x7fd81695e98e [ 163.408115][ T7025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.427736][ T7025] RSP: 002b:00007fd8178fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.436172][ T7025] RAX: ffffffffffffffda RBX: 00007fd8179006c0 RCX: 00007fd81695e98e [ 163.444166][ T7025] RDX: 000000000000000f RSI: 00007fd8179000a0 RDI: 0000000000000005 [ 163.452154][ T7025] RBP: 00007fd817900090 R08: 0000000000000000 R09: 0000000000000000 [ 163.460184][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.468180][ T7025] R13: 00007fd816c26038 R14: 00007fd816c25fa0 R15: 00007ffc20d7e118 [ 163.476189][ T7025] [ 163.943889][ T7042] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.348'. [ 164.300291][ T7050] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.349'. [ 164.317626][ T7049] FAULT_INJECTION: forcing a failure. [ 164.317626][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 164.340911][ T7049] CPU: 1 PID: 7049 Comm: syz.0.350 Not tainted syzkaller #0 [ 164.348283][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.358385][ T7049] Call Trace: [ 164.361705][ T7049] [ 164.364666][ T7049] dump_stack_lvl+0x18c/0x250 [ 164.369399][ T7049] ? show_regs_print_info+0x20/0x20 [ 164.374688][ T7049] ? load_image+0x420/0x420 [ 164.379243][ T7049] ? __might_sleep+0xe0/0xe0 [ 164.383884][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 164.388957][ T7049] should_fail_ex+0x394/0x4c0 [ 164.393682][ T7049] should_failslab+0x9/0x20 [ 164.398231][ T7049] slab_pre_alloc_hook+0x59/0x300 [ 164.403321][ T7049] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 164.409167][ T7049] kmem_cache_alloc_lru+0x4d/0x2b0 [ 164.414322][ T7049] ? sock_alloc_inode+0x28/0xc0 [ 164.419214][ T7049] sock_alloc_inode+0x28/0xc0 [ 164.423916][ T7049] ? sockfs_init_fs_context+0xb0/0xb0 [ 164.429316][ T7049] new_inode_pseudo+0x63/0x1d0 [ 164.434111][ T7049] __sock_create+0x12d/0x940 [ 164.438734][ T7049] mptcp_subflow_create_socket+0x10c/0xad0 [ 164.444572][ T7049] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.450759][ T7049] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 164.456610][ T7049] __mptcp_nmpc_sk+0x157/0x720 [ 164.461399][ T7049] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 164.468190][ T7049] ? __local_bh_enable_ip+0x13a/0x1c0 [ 164.473593][ T7049] ? lockdep_hardirqs_on+0x98/0x150 [ 164.478831][ T7049] ? __local_bh_enable_ip+0x13a/0x1c0 [ 164.484229][ T7049] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 164.489561][ T7049] mptcp_sendmsg+0x144c/0x1670 [ 164.494356][ T7049] ? aa_sk_perm+0x1ae/0x970 [ 164.498886][ T7049] ? aa_sk_perm+0x83c/0x970 [ 164.503409][ T7049] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 164.509242][ T7049] ? aa_af_perm+0x330/0x330 [ 164.513773][ T7049] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 164.520225][ T7049] ? mptcp_shutdown+0x80/0x80 [ 164.524933][ T7049] ? sock_rps_record_flow+0x19/0x3f0 [ 164.530256][ T7049] ? inet_sendmsg+0xce/0x2a0 [ 164.534895][ T7049] ? inet_send_prepare+0x250/0x250 [ 164.540056][ T7049] ____sys_sendmsg+0x61b/0x980 [ 164.544856][ T7049] ? __asan_memset+0x22/0x40 [ 164.549502][ T7049] ? __sys_sendmsg_sock+0x30/0x30 [ 164.554561][ T7049] ? __import_iovec+0x3fa/0x850 [ 164.559471][ T7049] ? import_iovec+0x73/0xa0 [ 164.564015][ T7049] ___sys_sendmsg+0x2a6/0x360 [ 164.568733][ T7049] ? __sys_sendmsg+0x2b0/0x2b0 [ 164.573543][ T7049] ? ktime_get+0x7f/0x280 [ 164.577896][ T7049] ? trace_call_bpf+0xc3/0x6c0 [ 164.582713][ T7049] __se_sys_sendmsg+0x1d0/0x2c0 [ 164.587628][ T7049] ? perf_trace_preemptirq_template+0x269/0x330 [ 164.593914][ T7049] ? __x64_sys_sendmsg+0x80/0x80 [ 164.598893][ T7049] ? lockdep_hardirqs_on+0x98/0x150 [ 164.604121][ T7049] do_syscall_64+0x55/0xb0 [ 164.608566][ T7049] ? clear_bhb_loop+0x40/0x90 [ 164.613266][ T7049] ? clear_bhb_loop+0x40/0x90 [ 164.617965][ T7049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.623873][ T7049] RIP: 0033:0x7fc91879e159 [ 164.628304][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.647927][ T7049] RSP: 002b:00007fc9196dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.656365][ T7049] RAX: ffffffffffffffda RBX: 00007fc918a25fa0 RCX: 00007fc91879e159 [ 164.664359][ T7049] RDX: 0000000030004091 RSI: 0000200000000080 RDI: 0000000000000009 [ 164.672346][ T7049] RBP: 00007fc9196dc090 R08: 0000000000000000 R09: 0000000000000000 [ 164.680345][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.688349][ T7049] R13: 00007fc918a26038 R14: 00007fc918a25fa0 R15: 00007ffeab2ffb28 [ 164.696373][ T7049] [ 164.746994][ T7049] socket: no more sockets [ 165.005561][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.055370][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.100821][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.110644][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.154770][ T7061] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 165.168343][ T7061] batman_adv: batadv0: Removing interface: virt_wifi0 [ 166.071861][ T7086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.356'. [ 166.111490][ T7086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.193283][ T7086] tap0: tun_chr_ioctl cmd 1074025676 [ 166.199622][ T7086] tap0: owner set to 776 [ 166.225143][ T7095] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.359'. [ 166.820024][ T7109] syz.3.363[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.820310][ T7109] syz.3.363[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.902523][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.938831][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.974495][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.001277][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.015624][ T7124] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 169.024521][ T7124] batman_adv: batadv0: Removing interface: virt_wifi0 [ 169.221014][ T7129] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.371'. [ 169.247507][ T7131] validate_nla: 17 callbacks suppressed [ 169.247524][ T7131] netlink: 'syz.0.380': attribute type 39 has an invalid length. [ 169.419544][ T7131] netlink: 'syz.0.380': attribute type 3 has an invalid length. [ 169.436996][ T7131] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.380'. [ 170.045258][ T7151] netlink: 128 bytes leftover after parsing attributes in process `syz.2.374'. [ 170.074972][ T7151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.118585][ T7151] tap0: tun_chr_ioctl cmd 1074025676 [ 170.123961][ T7151] tap0: owner set to 776 [ 170.150116][ T7153] netlink: 'syz.1.381': attribute type 2 has an invalid length. [ 170.161052][ T7153] netlink: 'syz.1.381': attribute type 8 has an invalid length. [ 170.171474][ T7153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.381'. [ 170.256158][ T7159] netlink: 128 bytes leftover after parsing attributes in process `syz.3.382'. [ 170.288755][ T7159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.353516][ T7159] netlink: 128 bytes leftover after parsing attributes in process `syz.3.382'. [ 170.368251][ T7159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.555643][ T7173] netlink: 'syz.3.385': attribute type 39 has an invalid length. [ 170.644472][ T7173] netlink: 'syz.3.385': attribute type 3 has an invalid length. [ 170.665452][ T7173] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.385'. [ 171.298823][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.312472][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.348231][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.368879][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.224499][ T7205] netlink: 'syz.2.392': attribute type 10 has an invalid length. [ 172.235349][ T7205] team0: Device ipvlan1 failed to register rx_handler [ 172.314152][ T7207] netlink: 'syz.1.394': attribute type 8 has an invalid length. [ 172.329443][ T7207] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.394'. [ 172.436119][ T7212] FAULT_INJECTION: forcing a failure. [ 172.436119][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 172.449985][ T7210] netlink: 'syz.0.395': attribute type 39 has an invalid length. [ 172.492216][ T7212] CPU: 0 PID: 7212 Comm: syz.3.396 Not tainted syzkaller #0 [ 172.499687][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.509796][ T7212] Call Trace: [ 172.513122][ T7212] [ 172.516101][ T7212] dump_stack_lvl+0x18c/0x250 [ 172.520837][ T7212] ? show_regs_print_info+0x20/0x20 [ 172.526094][ T7212] ? load_image+0x420/0x420 [ 172.530670][ T7212] ? __might_sleep+0xe0/0xe0 [ 172.535319][ T7212] ? __lock_acquire+0x7d80/0x7d80 [ 172.540411][ T7212] should_fail_ex+0x394/0x4c0 [ 172.545152][ T7212] should_failslab+0x9/0x20 [ 172.549711][ T7212] slab_pre_alloc_hook+0x59/0x300 [ 172.554799][ T7212] ? __lock_acquire+0x7d80/0x7d80 [ 172.559905][ T7212] kmem_cache_alloc_node+0x5e/0x310 [ 172.565164][ T7212] ? __alloc_skb+0x103/0x2c0 [ 172.569816][ T7212] __alloc_skb+0x103/0x2c0 [ 172.574303][ T7212] netlink_sendmsg+0x66a/0xbf0 [ 172.579116][ T7212] ? netlink_getsockopt+0x590/0x590 [ 172.584400][ T7212] ? apparmor_socket_sendmsg+0x8e/0x330 [ 172.590001][ T7212] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 172.595353][ T7212] ? security_socket_sendmsg+0x80/0xa0 [ 172.600860][ T7212] ? netlink_getsockopt+0x590/0x590 [ 172.606094][ T7212] ____sys_sendmsg+0x61b/0x980 [ 172.610912][ T7212] ? __asan_memset+0x22/0x40 [ 172.615549][ T7212] ? __sys_sendmsg_sock+0x30/0x30 [ 172.620618][ T7212] ? __import_iovec+0x5f2/0x850 [ 172.625518][ T7212] ? import_iovec+0x73/0xa0 [ 172.630059][ T7212] ___sys_sendmsg+0x2a6/0x360 [ 172.634775][ T7212] ? __sys_sendmsg+0x2b0/0x2b0 [ 172.639598][ T7212] ? __lock_acquire+0x7d80/0x7d80 [ 172.644671][ T7212] __se_sys_sendmsg+0x1d0/0x2c0 [ 172.649560][ T7212] ? __x64_sys_sendmsg+0x80/0x80 [ 172.654557][ T7212] ? lockdep_hardirqs_on+0x98/0x150 [ 172.659792][ T7212] do_syscall_64+0x55/0xb0 [ 172.664242][ T7212] ? clear_bhb_loop+0x40/0x90 [ 172.668971][ T7212] ? clear_bhb_loop+0x40/0x90 [ 172.673731][ T7212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.679668][ T7212] RIP: 0033:0x7f1086d9e159 [ 172.684115][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.703759][ T7212] RSP: 002b:00007f1087cff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.712210][ T7212] RAX: ffffffffffffffda RBX: 00007f1087025fa0 RCX: 00007f1086d9e159 [ 172.720218][ T7212] RDX: 0000000001000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.728230][ T7212] RBP: 00007f1087cff090 R08: 0000000000000000 R09: 0000000000000000 [ 172.736229][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.744244][ T7212] R13: 00007f1087026038 R14: 00007f1087025fa0 R15: 00007fffd5a00e18 [ 172.752259][ T7212] [ 172.830813][ T7218] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 172.869822][ T7218] team0: Device ipvlan1 failed to register rx_handler [ 172.880220][ T7210] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.395'. [ 173.824315][ T7221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.400'. [ 173.835693][ T7221] FAULT_INJECTION: forcing a failure. [ 173.835693][ T7221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.851948][ T7221] CPU: 0 PID: 7221 Comm: syz.3.400 Not tainted syzkaller #0 [ 173.859293][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.869388][ T7221] Call Trace: [ 173.872708][ T7221] [ 173.875678][ T7221] dump_stack_lvl+0x18c/0x250 [ 173.880406][ T7221] ? show_regs_print_info+0x20/0x20 [ 173.885641][ T7221] ? load_image+0x420/0x420 [ 173.890181][ T7221] ? __lock_acquire+0x7d80/0x7d80 [ 173.895253][ T7221] ? __mutex_trylock_common+0x160/0x270 [ 173.900868][ T7221] should_fail_ex+0x394/0x4c0 [ 173.905602][ T7221] prepare_alloc_pages+0x1e1/0x5b0 [ 173.910762][ T7221] __alloc_pages+0x134/0x460 [ 173.915422][ T7221] ? zone_statistics+0x170/0x170 [ 173.920521][ T7221] ? aa_file_perm+0x11b/0xee0 [ 173.925246][ T7221] pipe_write+0x52a/0x1b20 [ 173.929741][ T7221] ? pipe_read+0x1330/0x1330 [ 173.934376][ T7221] ? end_current_label_crit_section+0x149/0x170 [ 173.940678][ T7221] ? common_file_perm+0x198/0x1f0 [ 173.945736][ T7221] vfs_write+0x474/0x9a0 [ 173.950025][ T7221] ? file_end_write+0x250/0x250 [ 173.954953][ T7221] ? __fget_files+0x3fc/0x460 [ 173.959685][ T7221] ? __fdget_pos+0x1d8/0x330 [ 173.964314][ T7221] ? ksys_write+0x74/0x260 [ 173.968784][ T7221] ksys_write+0x151/0x260 [ 173.973162][ T7221] ? __ia32_sys_read+0x90/0x90 [ 173.977974][ T7221] ? lockdep_hardirqs_on+0x98/0x150 [ 173.983212][ T7221] do_syscall_64+0x55/0xb0 [ 173.987662][ T7221] ? clear_bhb_loop+0x40/0x90 [ 173.992368][ T7221] ? clear_bhb_loop+0x40/0x90 [ 173.997075][ T7221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.003022][ T7221] RIP: 0033:0x7f1086d5e98e [ 174.007477][ T7221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.027122][ T7221] RSP: 002b:00007f1087cfece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.035564][ T7221] RAX: ffffffffffffffda RBX: 00007f1087cff6c0 RCX: 00007f1086d5e98e [ 174.043592][ T7221] RDX: 0000000000000029 RSI: 00007f1087cfee90 RDI: 0000000000000002 [ 174.051612][ T7221] RBP: 00007f1087cfee90 R08: 0000000000000000 R09: 0000000000000000 [ 174.059621][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 174.067633][ T7221] R13: 00007f1086ff27a0 R14: 00007f1086fe94a0 R15: 0000000000000001 [ 174.075864][ T7221] [ 175.238120][ T7243] netlink: 10 bytes leftover after parsing attributes in process `syz.2.407'. [ 175.820154][ T7258] validate_nla: 3 callbacks suppressed [ 175.820173][ T7258] netlink: 'syz.2.412': attribute type 39 has an invalid length. [ 175.921266][ T7258] netlink: 'syz.2.412': attribute type 3 has an invalid length. [ 175.946660][ T7258] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.412'. [ 176.112508][ T7265] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 176.166287][ T7265] veth1_vlan: entered allmulticast mode [ 177.524018][ T7283] FAULT_INJECTION: forcing a failure. [ 177.524018][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 177.537150][ T7283] CPU: 1 PID: 7283 Comm: syz.0.419 Not tainted syzkaller #0 [ 177.544483][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.554573][ T7283] Call Trace: [ 177.557899][ T7283] [ 177.560854][ T7283] dump_stack_lvl+0x18c/0x250 [ 177.565585][ T7283] ? show_regs_print_info+0x20/0x20 [ 177.570823][ T7283] ? load_image+0x420/0x420 [ 177.575362][ T7283] ? verify_lock_unused+0x140/0x140 [ 177.580616][ T7283] should_fail_ex+0x394/0x4c0 [ 177.585353][ T7283] should_failslab+0x9/0x20 [ 177.589898][ T7283] slab_pre_alloc_hook+0x59/0x300 [ 177.594961][ T7283] ? verify_lock_unused+0x140/0x140 [ 177.600190][ T7283] ? ___neigh_create+0x6f4/0x23d0 [ 177.605248][ T7283] ? ___neigh_create+0x6f4/0x23d0 [ 177.610302][ T7283] __kmem_cache_alloc_node+0x53/0x250 [ 177.615715][ T7283] ? ___neigh_create+0x6f4/0x23d0 [ 177.620778][ T7283] __kmalloc+0xa7/0x240 [ 177.624978][ T7283] ___neigh_create+0x6f4/0x23d0 [ 177.629889][ T7283] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 177.635753][ T7283] ip6_finish_output2+0x15b9/0x1690 [ 177.640999][ T7283] ? ip6_finish_output2+0x71a/0x1690 [ 177.646316][ T7283] ? nf_hook+0x390/0x390 [ 177.650592][ T7283] ? ip6_mtu+0x321/0x3f0 [ 177.654881][ T7283] ? ip6_finish_output+0x567/0x7f0 [ 177.660025][ T7283] ? ip6_send_skb+0x10a/0x380 [ 177.664737][ T7283] ip6_send_skb+0x1cd/0x380 [ 177.669278][ T7283] icmp6_send+0x1449/0x1b60 [ 177.673818][ T7283] ? check_path+0x40/0x40 [ 177.678173][ T7283] ? icmp6_send+0x236/0x1b60 [ 177.682811][ T7283] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 177.688743][ T7283] ? lockdep_unlock+0x146/0x2e0 [ 177.693660][ T7283] ? __up_read+0x380/0x6b0 [ 177.698104][ T7283] ? __asan_memset+0x22/0x40 [ 177.702732][ T7283] ? __xfrm_sk_clone_policy+0x850/0x850 [ 177.708326][ T7283] ip6_link_failure+0x3b/0x4c0 [ 177.713120][ T7283] ? ip6_negative_advice+0x310/0x310 [ 177.718426][ T7283] vti6_tnl_xmit+0x135f/0x19c0 [ 177.723226][ T7283] ? vti6_dev_uninit+0x120/0x120 [ 177.728207][ T7283] dev_hard_start_xmit+0x269/0x790 [ 177.733369][ T7283] __dev_queue_xmit+0x1be8/0x37e0 [ 177.738422][ T7283] ? __dev_queue_xmit+0x272/0x37e0 [ 177.743574][ T7283] ? read_seqbegin+0x126/0x250 [ 177.748372][ T7283] ? read_seqbegin+0x1b6/0x250 [ 177.753158][ T7283] ? neigh_event_send+0x110/0x110 [ 177.758206][ T7283] ? netdev_core_pick_tx+0x370/0x370 [ 177.763530][ T7283] ? ___neigh_create+0x1dab/0x23d0 [ 177.768682][ T7283] ? neigh_connected_output+0x3b7/0x460 [ 177.774301][ T7283] ip6_finish_output2+0xf7a/0x1690 [ 177.779518][ T7283] ? ip6_finish_output2+0x71a/0x1690 [ 177.784841][ T7283] ? ip6_mtu+0x7d/0x3f0 [ 177.789035][ T7283] ? nf_hook+0x390/0x390 [ 177.793307][ T7283] ? ip6_mtu+0x321/0x3f0 [ 177.797605][ T7283] ? ip6_finish_output+0x567/0x7f0 [ 177.802769][ T7283] ? ip6_send_skb+0x10a/0x380 [ 177.807512][ T7283] ip6_send_skb+0x1cd/0x380 [ 177.812060][ T7283] udp_v6_send_skb+0xbd8/0x1810 [ 177.816967][ T7283] udp_v6_push_pending_frames+0x133/0x220 [ 177.822720][ T7283] udpv6_sendmsg+0xdd8/0x2350 [ 177.827499][ T7283] ? udpv6_sendmsg+0x2350/0x2350 [ 177.832466][ T7283] ? __might_sleep+0xe0/0xe0 [ 177.837091][ T7283] ? udp_v6_early_demux+0xf90/0xf90 [ 177.842405][ T7283] ? aa_af_perm+0x330/0x330 [ 177.846953][ T7283] ? sock_rps_record_flow+0x19/0x3f0 [ 177.852290][ T7283] ? inet_send_prepare+0x5b/0x250 [ 177.857352][ T7283] ? inet6_sendmsg+0x5f/0xd0 [ 177.861978][ T7283] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 177.867217][ T7283] ____sys_sendmsg+0x61b/0x980 [ 177.872028][ T7283] ? __asan_memset+0x22/0x40 [ 177.876657][ T7283] ? __sys_sendmsg_sock+0x30/0x30 [ 177.881713][ T7283] ? __import_iovec+0x3fa/0x850 [ 177.886618][ T7283] ? import_iovec+0x73/0xa0 [ 177.891165][ T7283] ___sys_sendmsg+0x2a6/0x360 [ 177.895881][ T7283] ? get_pid_task+0x20/0x1e0 [ 177.900518][ T7283] ? __sys_sendmsg+0x2b0/0x2b0 [ 177.905367][ T7283] ? __lock_acquire+0x7d80/0x7d80 [ 177.910457][ T7283] __se_sys_sendmsg+0x1d0/0x2c0 [ 177.915364][ T7283] ? __x64_sys_sendmsg+0x80/0x80 [ 177.920352][ T7283] ? lockdep_hardirqs_on+0x98/0x150 [ 177.925586][ T7283] do_syscall_64+0x55/0xb0 [ 177.930033][ T7283] ? clear_bhb_loop+0x40/0x90 [ 177.934764][ T7283] ? clear_bhb_loop+0x40/0x90 [ 177.939502][ T7283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.945431][ T7283] RIP: 0033:0x7fc91879e159 [ 177.949882][ T7283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.969524][ T7283] RSP: 002b:00007fc9196dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.977972][ T7283] RAX: ffffffffffffffda RBX: 00007fc918a25fa0 RCX: 00007fc91879e159 [ 177.985963][ T7283] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 177.993953][ T7283] RBP: 00007fc9196dc090 R08: 0000000000000000 R09: 0000000000000000 [ 178.001941][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.009937][ T7283] R13: 00007fc918a26038 R14: 00007fc918a25fa0 R15: 00007ffeab2ffb28 [ 178.017957][ T7283] [ 178.220950][ T7294] netlink: set zone limit has 8 unknown bytes [ 178.235594][ T7288] netlink: 'syz.3.421': attribute type 49 has an invalid length. [ 178.294090][ T7302] netlink: 'syz.0.424': attribute type 39 has an invalid length. [ 178.331216][ T7295] FAULT_INJECTION: forcing a failure. [ 178.331216][ T7295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.345501][ T7295] CPU: 1 PID: 7295 Comm: syz.1.423 Not tainted syzkaller #0 [ 178.352841][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.362946][ T7295] Call Trace: [ 178.366269][ T7295] [ 178.369240][ T7295] dump_stack_lvl+0x18c/0x250 [ 178.373978][ T7295] ? show_regs_print_info+0x20/0x20 [ 178.374252][ T7302] netlink: 'syz.0.424': attribute type 3 has an invalid length. [ 178.379207][ T7295] ? load_image+0x420/0x420 [ 178.379234][ T7295] ? __lock_acquire+0x7d80/0x7d80 [ 178.379261][ T7295] ? snprintf+0xe9/0x140 [ 178.379285][ T7295] should_fail_ex+0x394/0x4c0 [ 178.379320][ T7295] _copy_to_user+0x2f/0xa0 [ 178.379348][ T7295] simple_read_from_buffer+0xe7/0x150 [ 178.379376][ T7295] proc_fail_nth_read+0x1e8/0x260 [ 178.379423][ T7295] ? proc_fault_inject_write+0x360/0x360 [ 178.379460][ T7295] ? fsnotify_perm+0x271/0x5e0 [ 178.379490][ T7295] ? proc_fault_inject_write+0x360/0x360 [ 178.379523][ T7295] vfs_read+0x298/0x990 [ 178.379562][ T7295] ? kernel_read+0x1e0/0x1e0 [ 178.379594][ T7295] ? __fget_files+0x28/0x460 [ 178.379625][ T7295] ? __fget_files+0x3fc/0x460 [ 178.379665][ T7295] ? __fdget_pos+0x2a3/0x330 [ 178.379694][ T7295] ? ksys_read+0x74/0x260 [ 178.379729][ T7295] ksys_read+0x151/0x260 [ 178.468132][ T7295] ? vfs_write+0x9a0/0x9a0 [ 178.472604][ T7295] ? lockdep_hardirqs_on+0x98/0x150 [ 178.477846][ T7295] do_syscall_64+0x55/0xb0 [ 178.482298][ T7295] ? clear_bhb_loop+0x40/0x90 [ 178.486994][ T7295] ? clear_bhb_loop+0x40/0x90 [ 178.491691][ T7295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.497603][ T7295] RIP: 0033:0x7fd81695e98e [ 178.502058][ T7295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.521681][ T7295] RSP: 002b:00007fd8178fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.530117][ T7295] RAX: ffffffffffffffda RBX: 00007fd8179006c0 RCX: 00007fd81695e98e [ 178.538122][ T7295] RDX: 000000000000000f RSI: 00007fd8179000a0 RDI: 0000000000000005 [ 178.546111][ T7295] RBP: 00007fd817900090 R08: 0000000000000000 R09: 0000000000000000 [ 178.554108][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.562106][ T7295] R13: 00007fd816c26038 R14: 00007fd816c25fa0 R15: 00007ffc20d7e118 [ 178.570133][ T7295] [ 178.577489][ T7302] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.424'. [ 178.932962][ T7315] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 178.960746][ T7315] netlink: 'syz.0.429': attribute type 8 has an invalid length. [ 178.984042][ T7315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.429'. [ 188.565974][ T7343] netlink: 'syz.2.435': attribute type 39 has an invalid length. [ 188.575811][ T7345] syz.0.433[7345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.576077][ T7345] syz.0.433[7345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.635916][ T7343] netlink: 'syz.2.435': attribute type 3 has an invalid length. [ 188.671451][ T7343] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.435'. [ 191.689685][ T7357] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 191.727818][ T7359] netlink: 128 bytes leftover after parsing attributes in process `syz.3.438'. [ 191.746018][ T7359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.805188][ T7359] tap0: tun_chr_ioctl cmd 1074025676 [ 191.810684][ T7359] tap0: owner set to 776 [ 191.949300][ T7364] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.441'. [ 192.172059][ T7365] netlink: 144 bytes leftover after parsing attributes in process `syz.2.442'. [ 192.199744][ T7365] team0: Port device team_slave_0 removed [ 192.206442][ T7365] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 194.282593][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289078][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.859504][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.872193][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.881173][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.893052][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.902027][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.910189][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.390040][ T7373] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 195.608214][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 195.728601][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.735860][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.743549][ T7370] bridge_slave_0: entered allmulticast mode [ 195.751429][ T7370] bridge_slave_0: entered promiscuous mode [ 195.760484][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.768158][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.776334][ T7370] bridge_slave_1: entered allmulticast mode [ 195.784371][ T7370] bridge_slave_1: entered promiscuous mode [ 195.821431][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.834391][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.886414][ T7370] team0: Port device team_slave_0 added [ 195.909757][ T7370] team0: Port device team_slave_1 added [ 195.995675][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.002995][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.040506][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.068936][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.076624][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.162932][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.244923][ T7391] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 196.393540][ T7370] hsr_slave_0: entered promiscuous mode [ 196.488051][ T7370] hsr_slave_1: entered promiscuous mode [ 196.532128][ T7370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.574094][ T7370] Cannot create hsr debugfs directory [ 196.707518][ T7402] netlink: 'syz.2.453': attribute type 39 has an invalid length. [ 196.800235][ T7400] netlink: 'syz.2.453': attribute type 3 has an invalid length. [ 196.829410][ T7400] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.453'. [ 196.996975][ T5082] Bluetooth: hci4: command tx timeout [ 197.089782][ T7407] netlink: 144 bytes leftover after parsing attributes in process `syz.0.454'. [ 197.639782][ T7407] team0: Port device team_slave_0 removed [ 197.691500][ T7407] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 197.736644][ T7414] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 197.853666][ T7370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.884900][ T7370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.907709][ T7370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.940502][ T7370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.121460][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.153130][ T7422] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 198.253570][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.305757][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.312964][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.374046][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.381286][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.526647][ T7426] netlink: 'syz.3.461': attribute type 10 has an invalid length. [ 198.781320][ T7433] netlink: 'syz.2.463': attribute type 39 has an invalid length. [ 198.794435][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.851031][ T7433] netlink: 'syz.2.463': attribute type 3 has an invalid length. [ 198.874384][ T7433] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.463'. [ 199.068707][ T7445] Driver unsupported XDP return value 0 on prog (id 503) dev N/A, expect packet loss! [ 199.079530][ T5082] Bluetooth: hci4: command tx timeout [ 199.339528][ T7370] veth0_vlan: entered promiscuous mode [ 199.366711][ T7370] veth1_vlan: entered promiscuous mode [ 199.438525][ T7370] veth0_macvtap: entered promiscuous mode [ 199.462492][ T7370] veth1_macvtap: entered promiscuous mode [ 199.495264][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.523176][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.560399][ T7370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.585726][ T7370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.606625][ T7370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.623199][ T7370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.679693][ T7455] netlink: 144 bytes leftover after parsing attributes in process `syz.3.466'. [ 199.756312][ T7455] team0: Port device team_slave_0 removed [ 199.779351][ T7455] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 199.895065][ T7458] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 200.015653][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.045140][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.116618][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.142381][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.759794][ T7475] netlink: 'syz.2.474': attribute type 39 has an invalid length. [ 200.859860][ T7476] netlink: 128 bytes leftover after parsing attributes in process `syz.4.444'. [ 200.953569][ T7476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.028368][ T7480] tap0: tun_chr_ioctl cmd 1074025676 [ 201.041673][ T7475] netlink: 'syz.2.474': attribute type 3 has an invalid length. [ 201.072168][ T7475] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.474'. [ 201.082924][ T7480] tap0: owner set to 776 [ 201.156940][ T5082] Bluetooth: hci4: command tx timeout [ 201.672210][ T7489] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 201.936392][ T7501] netlink: 128 bytes leftover after parsing attributes in process `syz.2.481'. [ 201.959176][ T7501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.022631][ T7501] tap0: tun_chr_ioctl cmd 1074025676 [ 202.035613][ T7501] tap0: owner set to 776 [ 202.041044][ T7505] netlink: 128 bytes leftover after parsing attributes in process `syz.0.482'. [ 202.064646][ T7505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.097463][ T7505] tap0: tun_chr_ioctl cmd 1074025676 [ 202.108400][ T7505] tap0: owner set to 776 [ 202.294247][ T7516] netlink: 60243 bytes leftover after parsing attributes in process `syz.4.487'. [ 202.305562][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 202.839792][ T7523] netlink: 128 bytes leftover after parsing attributes in process `syz.2.488'. [ 202.857201][ T7523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.884961][ T7523] tap0: tun_chr_ioctl cmd 1074025676 [ 202.890795][ T7523] tap0: owner set to 776 [ 203.060784][ T7529] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 203.236843][ T5082] Bluetooth: hci4: command tx timeout [ 203.422694][ T7545] netlink: 128 bytes leftover after parsing attributes in process `syz.3.496'. [ 203.441578][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.461712][ T7545] tap0: tun_chr_ioctl cmd 1074025676 [ 203.470900][ T7545] tap0: owner set to 776 [ 203.592228][ T7551] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.499'. [ 203.710720][ T7555] netlink: 128 bytes leftover after parsing attributes in process `syz.4.498'. [ 203.731251][ T7555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.761947][ T7555] tap0: tun_chr_ioctl cmd 1074025676 [ 203.772533][ T7555] tap0: owner set to 776 [ 204.053629][ T7554] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.500'. [ 204.358711][ T7568] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 204.677951][ T6409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.704806][ T7578] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.507'. [ 204.776314][ T7585] netlink: 'syz.4.508': attribute type 39 has an invalid length. [ 204.849378][ T6409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.862702][ T7589] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 204.903567][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.928210][ T7587] tap0: tun_chr_ioctl cmd 1074025676 [ 204.933842][ T7587] tap0: owner set to 776 [ 204.958564][ T6409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.032172][ T6409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.320801][ T7594] netlink: 'syz.4.510': attribute type 33 has an invalid length. [ 205.498088][ T7598] FAULT_INJECTION: forcing a failure. [ 205.498088][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 205.534474][ T7598] CPU: 0 PID: 7598 Comm: syz.2.512 Not tainted syzkaller #0 [ 205.541839][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.551946][ T7598] Call Trace: [ 205.555266][ T7598] [ 205.558231][ T7598] dump_stack_lvl+0x18c/0x250 [ 205.562969][ T7598] ? show_regs_print_info+0x20/0x20 [ 205.568210][ T7598] ? load_image+0x420/0x420 [ 205.572739][ T7598] ? __might_sleep+0xe0/0xe0 [ 205.577365][ T7598] ? __lock_acquire+0x7d80/0x7d80 [ 205.582439][ T7598] should_fail_ex+0x394/0x4c0 [ 205.587292][ T7598] should_failslab+0x9/0x20 [ 205.591834][ T7598] slab_pre_alloc_hook+0x59/0x300 [ 205.596895][ T7598] ? __get_vm_area_node+0x125/0x370 [ 205.602129][ T7598] __kmem_cache_alloc_node+0x53/0x250 [ 205.607547][ T7598] ? __get_vm_area_node+0x125/0x370 [ 205.612776][ T7598] kmalloc_node_trace+0x26/0xe0 [ 205.617673][ T7598] __get_vm_area_node+0x125/0x370 [ 205.622768][ T7598] __vmalloc_node_range+0x36f/0x1320 [ 205.628095][ T7598] ? netlink_sendmsg+0x602/0xbf0 [ 205.633064][ T7598] ? netlink_insert+0x1094/0x1390 [ 205.638138][ T7598] ? netlink_insert+0x2ba/0x1390 [ 205.643116][ T7598] ? free_vm_area+0x50/0x50 [ 205.647676][ T7598] ? netlink_sendmsg+0x602/0xbf0 [ 205.652654][ T7598] vmalloc+0x79/0x90 [ 205.656595][ T7598] ? netlink_sendmsg+0x602/0xbf0 [ 205.661585][ T7598] netlink_sendmsg+0x602/0xbf0 [ 205.666418][ T7598] ? netlink_getsockopt+0x590/0x590 [ 205.671657][ T7598] ? apparmor_socket_sendmsg+0x8e/0x330 [ 205.677227][ T7598] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.682560][ T7598] ? security_socket_sendmsg+0x80/0xa0 [ 205.688068][ T7598] sock_write_iter+0x2dc/0x420 [ 205.692883][ T7598] ? sock_read_iter+0x3f0/0x3f0 [ 205.697793][ T7598] ? common_file_perm+0x198/0x1f0 [ 205.702902][ T7598] vfs_write+0x474/0x9a0 [ 205.707209][ T7598] ? file_end_write+0x250/0x250 [ 205.712112][ T7598] ? __fget_files+0x3fc/0x460 [ 205.716852][ T7598] ? __fdget_pos+0x1d8/0x330 [ 205.721483][ T7598] ? ksys_write+0x74/0x260 [ 205.725949][ T7598] ksys_write+0x151/0x260 [ 205.730359][ T7598] ? __ia32_sys_read+0x90/0x90 [ 205.735176][ T7598] ? lockdep_hardirqs_on+0x98/0x150 [ 205.740423][ T7598] do_syscall_64+0x55/0xb0 [ 205.744880][ T7598] ? clear_bhb_loop+0x40/0x90 [ 205.749600][ T7598] ? clear_bhb_loop+0x40/0x90 [ 205.754344][ T7598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.760288][ T7598] RIP: 0033:0x7fce02d9e159 [ 205.764745][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.784450][ T7598] RSP: 002b:00007fce03bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.792936][ T7598] RAX: ffffffffffffffda RBX: 00007fce03026090 RCX: 00007fce02d9e159 [ 205.800938][ T7598] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007 [ 205.808941][ T7598] RBP: 00007fce03bde090 R08: 0000000000000000 R09: 0000000000000000 [ 205.816945][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.824943][ T7598] R13: 00007fce03026128 R14: 00007fce03026090 R15: 00007ffe8b6c1308 [ 205.832961][ T7598] [ 205.872722][ T7598] syz.2.512: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 205.890963][ T7598] CPU: 0 PID: 7598 Comm: syz.2.512 Not tainted syzkaller #0 [ 205.898431][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.908516][ T7598] Call Trace: [ 205.911830][ T7598] [ 205.914805][ T7598] dump_stack_lvl+0x18c/0x250 [ 205.919541][ T7598] ? show_regs_print_info+0x20/0x20 [ 205.924790][ T7598] ? load_image+0x420/0x420 [ 205.929331][ T7598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.935794][ T7598] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 205.942340][ T7598] warn_alloc+0x246/0x340 [ 205.946707][ T7598] ? __get_vm_area_node+0x125/0x370 [ 205.952004][ T7598] ? zone_watermark_ok_safe+0x230/0x230 [ 205.957606][ T7598] ? rcu_is_watching+0x15/0xb0 [ 205.962433][ T7598] ? __get_vm_area_node+0x356/0x370 [ 205.967710][ T7598] __vmalloc_node_range+0x394/0x1320 [ 205.973039][ T7598] ? netlink_insert+0x1094/0x1390 [ 205.978117][ T7598] ? netlink_insert+0x2ba/0x1390 [ 205.983097][ T7598] ? free_vm_area+0x50/0x50 [ 205.987671][ T7598] ? netlink_sendmsg+0x602/0xbf0 [ 205.992642][ T7598] vmalloc+0x79/0x90 [ 205.996578][ T7598] ? netlink_sendmsg+0x602/0xbf0 [ 206.001559][ T7598] netlink_sendmsg+0x602/0xbf0 [ 206.006378][ T7598] ? netlink_getsockopt+0x590/0x590 [ 206.011619][ T7598] ? apparmor_socket_sendmsg+0x8e/0x330 [ 206.017199][ T7598] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.022517][ T7598] ? security_socket_sendmsg+0x80/0xa0 [ 206.028008][ T7598] sock_write_iter+0x2dc/0x420 [ 206.032809][ T7598] ? sock_read_iter+0x3f0/0x3f0 [ 206.037712][ T7598] ? common_file_perm+0x198/0x1f0 [ 206.042778][ T7598] vfs_write+0x474/0x9a0 [ 206.047069][ T7598] ? file_end_write+0x250/0x250 [ 206.051976][ T7598] ? __fget_files+0x3fc/0x460 [ 206.056706][ T7598] ? __fdget_pos+0x1d8/0x330 [ 206.061332][ T7598] ? ksys_write+0x74/0x260 [ 206.065820][ T7598] ksys_write+0x151/0x260 [ 206.070208][ T7598] ? __ia32_sys_read+0x90/0x90 [ 206.075024][ T7598] ? lockdep_hardirqs_on+0x98/0x150 [ 206.080278][ T7598] do_syscall_64+0x55/0xb0 [ 206.084770][ T7598] ? clear_bhb_loop+0x40/0x90 [ 206.089518][ T7598] ? clear_bhb_loop+0x40/0x90 [ 206.094275][ T7598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.100215][ T7598] RIP: 0033:0x7fce02d9e159 [ 206.104668][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.124310][ T7598] RSP: 002b:00007fce03bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.132762][ T7598] RAX: ffffffffffffffda RBX: 00007fce03026090 RCX: 00007fce02d9e159 [ 206.140768][ T7598] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007 [ 206.148782][ T7598] RBP: 00007fce03bde090 R08: 0000000000000000 R09: 0000000000000000 [ 206.156804][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.164816][ T7598] R13: 00007fce03026128 R14: 00007fce03026090 R15: 00007ffe8b6c1308 [ 206.172844][ T7598] [ 206.180738][ T7598] Mem-Info: [ 206.183903][ T7598] active_anon:5518 inactive_anon:0 isolated_anon:0 [ 206.183903][ T7598] active_file:11566 inactive_file:39999 isolated_file:0 [ 206.183903][ T7598] unevictable:768 dirty:415 writeback:0 [ 206.183903][ T7598] slab_reclaimable:10313 slab_unreclaimable:92600 [ 206.183903][ T7598] mapped:25860 shmem:1365 pagetables:560 [ 206.183903][ T7598] sec_pagetables:0 bounce:0 [ 206.183903][ T7598] kernel_misc_reclaimable:0 [ 206.183903][ T7598] free:1352844 free_pcp:9549 free_cma:0 [ 206.254318][ T7598] Node 0 active_anon:22172kB inactive_anon:0kB active_file:46264kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103440kB dirty:1660kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no [ 206.318432][ T7607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.343705][ T7598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 206.379360][ T7613] tap0: tun_chr_ioctl cmd 1074025676 [ 206.384756][ T7613] tap0: owner set to 776 [ 206.391508][ T7598] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.425026][ T7598] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 206.433564][ T7598] Node 0 DMA32 free:1505572kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22336kB inactive_anon:0kB active_file:46264kB inactive_file:158964kB unevictable:1536kB writepending:1660kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:17880kB local_pcp:2784kB free_cma:0kB [ 206.490378][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 206.495400][ T7598] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.550327][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 206.555261][ T7598] Node 1 Normal free:3890212kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19872kB local_pcp:12992kB free_cma:0kB [ 206.597133][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 206.604373][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 206.608894][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 206.626089][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 206.632278][ T7598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.648226][ T7598] Node 0 DMA32: 1015*4kB (UM) 538*8kB (UM) 750*16kB (UM) 514*32kB (UME) 1081*64kB (UM) 386*128kB (UM) 79*256kB (UME) 20*512kB (UME) 8*1024kB (UME) 2*2048kB (UM) 319*4096kB (UM) = 1504780kB [ 206.707285][ T7598] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 206.743355][ T7598] Node 1 Normal: 253*4kB (UME) 56*8kB (UME) 35*16kB (UME) 86*32kB (UME) 22*64kB (UME) 10*128kB (UME) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (ME) = 3890212kB [ 206.793872][ T7598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.803869][ T7598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.813841][ T7598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.823813][ T7598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.833896][ T7598] 52930 total pagecache pages [ 206.839040][ T7598] 0 pages in swap cache [ 206.843228][ T7598] Free swap = 124996kB [ 206.847873][ T7598] Total swap = 124996kB [ 206.852074][ T7598] 2097051 pages RAM [ 206.855905][ T7598] 0 pages HighMem/MovableOnly [ 206.861281][ T7598] 416960 pages reserved [ 206.871114][ T7598] 0 pages cma reserved [ 207.002919][ T7618] netlink: 'syz.3.516': attribute type 21 has an invalid length. [ 207.039735][ T7618] netlink: 'syz.3.516': attribute type 12 has an invalid length. [ 207.056950][ T7618] netlink: 'syz.3.516': attribute type 13 has an invalid length. [ 207.071156][ T7618] netlink: 'syz.3.516': attribute type 14 has an invalid length. [ 207.091893][ T7618] netlink: 'syz.3.516': attribute type 15 has an invalid length. [ 207.120711][ T7618] netlink: 'syz.3.516': attribute type 16 has an invalid length. [ 207.158208][ T7618] netlink: 'syz.3.516': attribute type 19 has an invalid length. [ 207.194072][ T7618] netlink: 'syz.3.516': attribute type 21 has an invalid length. [ 207.208806][ T7618] netlink: 'syz.3.516': attribute type 22 has an invalid length. [ 207.219611][ T7618] __nla_validate_parse: 4 callbacks suppressed [ 207.219628][ T7618] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.516'. [ 207.243139][ T7620] netlink: 14 bytes leftover after parsing attributes in process `syz.3.516'. [ 210.131116][ T7630] vcan0: entered allmulticast mode [ 210.222572][ T7633] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 210.308757][ T7633] veth0_macvtap: left promiscuous mode [ 210.493997][ T7645] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.523'. [ 211.014666][ T7669] netlink: 128 bytes leftover after parsing attributes in process `syz.4.529'. [ 211.107123][ T7669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.178248][ T7669] tap0: tun_chr_ioctl cmd 1074025676 [ 211.183690][ T7669] tap0: owner set to 776 [ 211.368384][ T7672] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.527'. [ 214.298107][ T7690] validate_nla: 2 callbacks suppressed [ 214.298124][ T7690] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 214.694191][ T6409] hsr_slave_0: left promiscuous mode [ 214.736040][ T6409] hsr_slave_1: left promiscuous mode [ 214.821620][ T6409] veth1_macvtap: left promiscuous mode [ 214.843378][ T6409] veth0_vlan: left promiscuous mode [ 218.464765][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.513764][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.740342][ T6409] bond0 (unregistering): Released all slaves [ 218.774642][ T7701] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.536'. [ 218.784067][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 218.799072][ T7714] netlink: 128 bytes leftover after parsing attributes in process `syz.4.544'. [ 218.814439][ T7714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.856341][ T7719] tap0: tun_chr_ioctl cmd 1074025676 [ 218.862881][ T7719] tap0: owner set to 776 [ 219.097435][ T7743] netlink: 'syz.3.542': attribute type 39 has an invalid length. [ 219.145118][ T7743] netlink: 'syz.3.542': attribute type 3 has an invalid length. [ 219.153629][ T7743] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.542'. [ 219.472844][ T7750] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 222.708135][ T7783] pim6reg1: entered promiscuous mode [ 222.713529][ T7783] pim6reg1: entered allmulticast mode [ 223.027442][ T7788] delete_channel: no stack [ 223.053295][ T7797] netlink: 128 bytes leftover after parsing attributes in process `syz.2.552'. [ 223.079756][ T7797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.135651][ T7797] tap0: tun_chr_ioctl cmd 1074025676 [ 223.146755][ T7797] tap0: owner set to 776 [ 224.010281][ T7805] delete_channel: no stack [ 224.238757][ T7803] syz.4.554 (7803) used obsolete PPPIOCDETACH ioctl [ 228.092108][ T7898] FAULT_INJECTION: forcing a failure. [ 228.092108][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.148122][ T7898] CPU: 1 PID: 7898 Comm: syz.4.567 Not tainted syzkaller #0 [ 228.155476][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.165559][ T7898] Call Trace: [ 228.168862][ T7898] [ 228.171827][ T7898] dump_stack_lvl+0x18c/0x250 [ 228.176560][ T7898] ? show_regs_print_info+0x20/0x20 [ 228.181797][ T7898] ? load_image+0x420/0x420 [ 228.186333][ T7898] ? __might_fault+0xaa/0x120 [ 228.191079][ T7898] ? __lock_acquire+0x7d80/0x7d80 [ 228.196142][ T7898] ? __might_fault+0xaa/0x120 [ 228.200856][ T7898] should_fail_ex+0x394/0x4c0 [ 228.205585][ T7898] _copy_from_iter+0x1cd/0x1290 [ 228.210492][ T7898] ? __might_fault+0xaa/0x120 [ 228.215200][ T7898] ? copyout_mc+0x70/0x70 [ 228.219554][ T7898] ? copyout_mc+0x70/0x70 [ 228.223908][ T7898] ? __virt_addr_valid+0x10c/0x380 [ 228.229052][ T7898] ? page_copy_sane+0x16a/0x270 [ 228.233935][ T7898] copy_page_from_iter+0x7b/0x100 [ 228.238988][ T7898] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 228.244821][ T7898] tun_get_user+0xc84/0x3d70 [ 228.249438][ T7898] ? aa_file_perm+0x3e3/0xee0 [ 228.254159][ T7898] ? rcu_read_unlock+0xa0/0xa0 [ 228.258956][ T7898] ? tun_get+0x1c/0x2e0 [ 228.263137][ T7898] ? __lock_acquire+0x7d80/0x7d80 [ 228.268204][ T7898] ? tun_get+0x1c/0x2e0 [ 228.272393][ T7898] tun_chr_write_iter+0x119/0x200 [ 228.277445][ T7898] vfs_write+0x474/0x9a0 [ 228.281718][ T7898] ? file_end_write+0x250/0x250 [ 228.286598][ T7898] ? __fget_files+0x3fc/0x460 [ 228.291302][ T7898] ? __fdget_pos+0x1d8/0x330 [ 228.295918][ T7898] ? ksys_write+0x74/0x260 [ 228.300369][ T7898] ksys_write+0x151/0x260 [ 228.304729][ T7898] ? __ia32_sys_read+0x90/0x90 [ 228.309525][ T7898] ? lockdep_hardirqs_on+0x98/0x150 [ 228.314757][ T7898] do_syscall_64+0x55/0xb0 [ 228.319198][ T7898] ? clear_bhb_loop+0x40/0x90 [ 228.323896][ T7898] ? clear_bhb_loop+0x40/0x90 [ 228.328592][ T7898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.334501][ T7898] RIP: 0033:0x7fe7a559e159 [ 228.338934][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.358572][ T7898] RSP: 002b:00007fe7a64f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.367000][ T7898] RAX: ffffffffffffffda RBX: 00007fe7a5826090 RCX: 00007fe7a559e159 [ 228.374991][ T7898] RDX: 000000000000ffdd RSI: 0000200000000740 RDI: 0000000000000003 [ 228.382980][ T7898] RBP: 00007fe7a64f6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.390967][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.398952][ T7898] R13: 00007fe7a5826128 R14: 00007fe7a5826090 R15: 00007ffc0f4af188 [ 228.406956][ T7898] [ 228.472884][ T7895] syzkaller0: entered promiscuous mode [ 228.481081][ T7895] syzkaller0: entered allmulticast mode [ 230.321434][ T7900] netlink: 128 bytes leftover after parsing attributes in process `syz.3.565'. [ 230.338497][ T7900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.354361][ T7912] tap0: tun_chr_ioctl cmd 1074025676 [ 230.361642][ T7912] tap0: owner set to 776 [ 233.918116][ T7951] syzkaller0: entered promiscuous mode [ 233.937003][ T7951] syzkaller0: entered allmulticast mode [ 233.991337][ T7957] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 235.773654][ T7971] mac80211_hwsim hwsim13 ..ãc¤±: renamed from wlan1 (while UP) [ 235.797100][ T7981] netlink: 128 bytes leftover after parsing attributes in process `syz.0.582'. [ 235.838021][ T7981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.905154][ T7983] tap0: tun_chr_ioctl cmd 1074025676 [ 235.934738][ T7983] tap0: owner set to 776 [ 236.030187][ T7995] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.584'. [ 236.836019][ T7992] delete_channel: no stack [ 241.926287][ T8056] netlink: 128 bytes leftover after parsing attributes in process `syz.3.596'. [ 241.956606][ T8056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.998294][ T8056] tap0: tun_chr_ioctl cmd 1074025676 [ 242.003756][ T8056] tap0: owner set to 776 [ 245.445149][ T8092] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 249.070529][ T8132] netlink: 128 bytes leftover after parsing attributes in process `syz.0.610'. [ 249.148335][ T8132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.193777][ T8135] tap0: tun_chr_ioctl cmd 1074025676 [ 249.227243][ T8135] tap0: owner set to 776 [ 251.914926][ T8234] netlink: 'syz.0.650': attribute type 39 has an invalid length. [ 252.037447][ T8234] netlink: 'syz.0.650': attribute type 3 has an invalid length. [ 252.069433][ T8234] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.650'. [ 252.151801][ T8244] netlink: 128 bytes leftover after parsing attributes in process `syz.4.649'. [ 252.187581][ T8244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.244728][ T8244] tap0: tun_chr_ioctl cmd 1074025676 [ 252.251918][ T8244] tap0: owner set to 776 [ 255.729599][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.736126][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.757410][ T8301] netlink: 'syz.2.662': attribute type 39 has an invalid length. [ 257.108433][ T8305] netlink: 'syz.2.662': attribute type 3 has an invalid length. [ 257.200949][ T8305] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.662'. [ 260.250938][ T8335] netlink: 128 bytes leftover after parsing attributes in process `syz.0.669'. [ 260.347215][ T8335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.406589][ T8341] tap0: tun_chr_ioctl cmd 1074025676 [ 260.425153][ T8341] tap0: owner set to 776 [ 263.217476][ T8349] netlink: 'syz.4.675': attribute type 39 has an invalid length. [ 263.350531][ T8349] netlink: 'syz.4.675': attribute type 3 has an invalid length. [ 263.361079][ T8349] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.675'. [ 263.402690][ T8355] netlink: 'syz.2.674': attribute type 39 has an invalid length. [ 263.475568][ T8356] netlink: 'syz.2.674': attribute type 3 has an invalid length. [ 263.484453][ T8356] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.674'. [ 267.811157][ T8389] netlink: 128 bytes leftover after parsing attributes in process `syz.3.685'. [ 267.828378][ T8389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.850922][ T8389] tap0: tun_chr_ioctl cmd 1074025676 [ 267.856365][ T8389] tap0: owner set to 776 [ 268.682473][ T8393] netlink: 'syz.2.688': attribute type 39 has an invalid length. [ 268.766329][ T8393] netlink: 'syz.2.688': attribute type 3 has an invalid length. [ 268.788240][ T8393] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.688'. [ 268.810353][ T8397] netlink: 'syz.0.690': attribute type 39 has an invalid length. [ 268.960630][ T8397] netlink: 'syz.0.690': attribute type 3 has an invalid length. [ 268.997272][ T8397] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.690'. [ 269.070336][ T8409] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.693'. [ 272.541308][ T8432] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.700'. [ 272.609045][ T8438] netlink: 'syz.4.701': attribute type 39 has an invalid length. [ 272.640150][ T8439] netlink: 128 bytes leftover after parsing attributes in process `syz.3.699'. [ 272.667192][ T8439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.686342][ T8439] tap0: tun_chr_ioctl cmd 1074025676 [ 272.695048][ T8439] tap0: owner set to 776 [ 272.735150][ T8438] netlink: 'syz.4.701': attribute type 3 has an invalid length. [ 272.746968][ T8438] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.701'. [ 273.794644][ T8456] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.707'. [ 273.871165][ T8455] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 273.999651][ T8464] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.710'. [ 274.471059][ T8480] netlink: 'syz.4.716': attribute type 39 has an invalid length. [ 274.544404][ T8480] netlink: 'syz.4.716': attribute type 3 has an invalid length. [ 274.555451][ T8480] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.716'. [ 274.559571][ T8484] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.719'. [ 274.645502][ T8489] netlink: 128 bytes leftover after parsing attributes in process `syz.2.717'. [ 274.670654][ T8489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.708945][ T8489] tap0: tun_chr_ioctl cmd 1074025676 [ 274.718028][ T8489] tap0: owner set to 776 [ 280.883606][ T8518] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.728'. [ 281.124266][ T8526] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 281.135503][ T8528] netlink: 'syz.3.732': attribute type 39 has an invalid length. [ 281.311185][ T8528] netlink: 'syz.3.732': attribute type 3 has an invalid length. [ 281.334701][ T8528] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.732'. [ 281.542439][ T8541] netlink: 128 bytes leftover after parsing attributes in process `syz.2.734'. [ 281.576417][ T8541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.596078][ T8545] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.737'. [ 281.607436][ T8541] tap0: tun_chr_ioctl cmd 1074025676 [ 281.612866][ T8541] tap0: owner set to 776 [ 282.602133][ T8553] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.740'. [ 282.760195][ T8558] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.742'. [ 282.840107][ T8561] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 282.955627][ T8564] netlink: 'syz.4.744': attribute type 39 has an invalid length. [ 283.094995][ T8564] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 283.113913][ T8564] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.744'. [ 283.500188][ T8580] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.749'. [ 283.777613][ T8586] netlink: 128 bytes leftover after parsing attributes in process `syz.3.751'. [ 283.807141][ T8586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.856887][ T8587] tap0: tun_chr_ioctl cmd 1074025676 [ 283.875498][ T8587] tap0: owner set to 776 [ 286.689161][ T8591] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 286.990642][ T8605] netlink: 'syz.2.756': attribute type 39 has an invalid length. [ 287.094658][ T8605] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 287.103243][ T8605] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.756'. [ 287.200911][ T8612] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.757'. [ 287.213505][ T8611] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.759'. [ 287.412181][ T8618] netlink: 128 bytes leftover after parsing attributes in process `syz.4.762'. [ 287.451324][ T8618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.861594][ T8630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.763'. [ 287.918073][ T8630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.032279][ T8632] tap0: tun_chr_ioctl cmd 1074025676 [ 288.052065][ T8632] tap0: owner set to 776 [ 288.519721][ T8635] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 289.447311][ T8654] netlink: 'syz.4.770': attribute type 39 has an invalid length. [ 289.525388][ T8655] netlink: 'syz.4.770': attribute type 3 has an invalid length. [ 289.545836][ T8655] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.770'. [ 290.595285][ T8657] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.771'. [ 290.833492][ T8668] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 290.887336][ T8669] netlink: 128 bytes leftover after parsing attributes in process `syz.4.774'. [ 290.905105][ T8669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.930085][ T8669] tap0: tun_chr_ioctl cmd 1074025676 [ 290.935534][ T8669] tap0: owner set to 776 [ 294.805753][ T8699] netlink: 'syz.0.782': attribute type 39 has an invalid length. [ 294.835824][ T8701] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.783'. [ 295.017054][ T8699] netlink: 'syz.0.782': attribute type 3 has an invalid length. [ 295.025013][ T8699] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.782'. [ 295.212837][ T8713] netlink: 'syz.0.787': attribute type 10 has an invalid length. [ 295.821960][ T8715] netlink: 128 bytes leftover after parsing attributes in process `syz.3.786'. [ 295.833541][ T8715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.909373][ T8715] tap0: tun_chr_ioctl cmd 1074025676 [ 295.914767][ T8715] tap0: owner set to 776 [ 296.300879][ T8723] warning: `syz.0.791' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 296.590791][ T8737] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.794'. [ 296.739230][ T8740] netlink: 'syz.2.796': attribute type 39 has an invalid length. [ 296.872975][ T8740] netlink: 'syz.2.796': attribute type 3 has an invalid length. [ 296.913029][ T8740] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.796'. [ 297.053041][ T8743] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 299.819879][ T8752] netlink: 180 bytes leftover after parsing attributes in process `syz.0.801'. [ 299.931726][ T8754] netlink: 128 bytes leftover after parsing attributes in process `syz.4.800'. [ 299.954422][ T8754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.972718][ T8754] tap0: tun_chr_ioctl cmd 1074025676 [ 299.980636][ T8754] tap0: owner set to 776 [ 301.030247][ T8769] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.805'. [ 301.239426][ T8775] netlink: 'syz.2.807': attribute type 39 has an invalid length. [ 301.313640][ T8775] netlink: 'syz.2.807': attribute type 3 has an invalid length. [ 301.323598][ T8775] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.807'. [ 301.434878][ T8778] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 301.621242][ T8784] netlink: 180 bytes leftover after parsing attributes in process `syz.2.812'. [ 301.910157][ T8790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.813'. [ 301.959341][ T8790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.023540][ T8790] tap0: tun_chr_ioctl cmd 1074025676 [ 302.046736][ T8790] tap0: owner set to 776 [ 304.795507][ T8796] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.816'. [ 308.392102][ T8817] netlink: 180 bytes leftover after parsing attributes in process `syz.2.822'. [ 308.435821][ T8818] netlink: 'syz.4.820': attribute type 39 has an invalid length. [ 308.543727][ T8818] netlink: 'syz.4.820': attribute type 3 has an invalid length. [ 308.567177][ T8818] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.820'. [ 308.632208][ T8820] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 308.763745][ T8829] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.828'. [ 308.788759][ T8832] netlink: 180 bytes leftover after parsing attributes in process `syz.2.829'. [ 308.890928][ T8833] netlink: 128 bytes leftover after parsing attributes in process `syz.3.825'. [ 308.911931][ T8833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.933193][ T8833] tap0: tun_chr_ioctl cmd 1074025676 [ 308.939212][ T8833] tap0: owner set to 776 [ 312.045097][ T8850] netlink: 180 bytes leftover after parsing attributes in process `syz.4.833'. [ 312.178883][ T8858] netlink: 'syz.3.836': attribute type 39 has an invalid length. [ 312.367484][ T8858] netlink: 'syz.3.836': attribute type 3 has an invalid length. [ 312.375691][ T8858] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.836'. [ 312.812488][ T8867] raw_sendmsg: syz.3.838 forgot to set AF_INET. Fix it! [ 312.885149][ T8868] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.838'. [ 313.030477][ T8876] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.840'. [ 313.081356][ T8873] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 313.418982][ T8888] netlink: 128 bytes leftover after parsing attributes in process `syz.3.843'. [ 313.439155][ T8888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.483324][ T8888] tap0: tun_chr_ioctl cmd 1074025676 [ 313.490254][ T8888] tap0: owner set to 776 [ 316.429192][ T8892] netlink: 180 bytes leftover after parsing attributes in process `syz.4.845'. [ 316.567486][ T8901] netlink: 'syz.2.848': attribute type 39 has an invalid length. [ 316.636687][ T8905] netlink: 'syz.2.848': attribute type 3 has an invalid length. [ 316.648242][ T8905] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.848'. [ 317.174829][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.181592][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.241515][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 319.664283][ T8909] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.850'. [ 319.784844][ T8916] netlink: 128 bytes leftover after parsing attributes in process `syz.3.851'. [ 319.828609][ T8916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.868854][ T8921] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 319.894886][ T8916] tap0: tun_chr_ioctl cmd 1074025676 [ 319.907829][ T8916] tap0: owner set to 776 [ 320.053375][ T8925] netlink: 180 bytes leftover after parsing attributes in process `syz.2.857'. [ 320.239574][ T8932] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 323.097789][ T8932] macvlan0: entered promiscuous mode [ 323.125800][ T8932] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 323.347501][ T8948] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.863'. [ 323.389753][ T8950] netlink: 'syz.0.862': attribute type 39 has an invalid length. [ 323.486040][ T8954] netlink: 'syz.0.862': attribute type 3 has an invalid length. [ 323.501936][ T8954] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.862'. [ 323.734139][ T8962] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 326.440012][ T8966] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.866'. [ 326.493549][ T8968] netlink: 'syz.3.868': attribute type 46 has an invalid length. [ 326.537740][ T8968] netlink: 'syz.3.868': attribute type 46 has an invalid length. [ 327.265255][ T8982] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.873'. [ 327.557396][ T8984] netlink: 'syz.3.874': attribute type 39 has an invalid length. [ 327.777273][ T8984] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 327.785954][ T8984] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.874'. [ 330.348931][ T8999] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.878'. [ 330.392667][ T9001] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 333.408491][ T9017] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.882'. [ 333.497458][ T9019] netlink: 'syz.4.881': attribute type 21 has an invalid length. [ 333.517132][ T9019] netlink: 152 bytes leftover after parsing attributes in process `syz.4.881'. [ 333.763002][ T9029] netlink: 'syz.2.886': attribute type 39 has an invalid length. [ 333.972000][ T9029] netlink: 'syz.2.886': attribute type 3 has an invalid length. [ 333.982769][ T9029] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.886'. [ 334.299220][ T9036] netlink: 128 bytes leftover after parsing attributes in process `syz.3.888'. [ 334.386270][ T9036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.456548][ T9036] tap0: tun_chr_ioctl cmd 1074025676 [ 334.473799][ T9036] tap0: owner set to 776 [ 336.991092][ T9047] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 337.045375][ T9052] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.892'. [ 341.038332][ T9067] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.897'. [ 341.261909][ T9075] netlink: 'syz.3.900': attribute type 39 has an invalid length. [ 341.679825][ T9083] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 341.689188][ T9083] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.900'. [ 343.464128][ T9079] sit0: entered allmulticast mode [ 343.588705][ T9085] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.901'. [ 343.951173][ T9096] netlink: 'syz.2.903': attribute type 10 has an invalid length. [ 344.372679][ T9102] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.908'. [ 344.534174][ T9113] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.910'. [ 347.399320][ T9124] netlink: 'syz.2.912': attribute type 39 has an invalid length. [ 347.494212][ T9124] netlink: 'syz.2.912': attribute type 3 has an invalid length. [ 347.507906][ T9124] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.912'. [ 348.094074][ T9146] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.920'. [ 348.144412][ T9142] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 348.235411][ T9151] netlink: 'syz.3.922': attribute type 46 has an invalid length. [ 348.243864][ T9151] netlink: 'syz.3.922': attribute type 46 has an invalid length. [ 348.870111][ T9159] netlink: 'syz.3.927': attribute type 39 has an invalid length. [ 348.911709][ T9162] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.921'. [ 349.026171][ T9159] netlink: 'syz.3.927': attribute type 3 has an invalid length. [ 349.036980][ T9159] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.927'. [ 351.673076][ T9166] netlink: 'syz.0.936': attribute type 39 has an invalid length. [ 351.940480][ T9166] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 351.997435][ T9166] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.936'. [ 352.127259][ T9178] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.931'. [ 352.451305][ T9187] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 353.474863][ T9203] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.941'. [ 353.505258][ T9204] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.939'. [ 354.053283][ T9210] FAULT_INJECTION: forcing a failure. [ 354.053283][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 354.087630][ T9210] CPU: 1 PID: 9210 Comm: syz.2.943 Not tainted syzkaller #0 [ 354.095013][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.105148][ T9210] Call Trace: [ 354.108544][ T9210] [ 354.111600][ T9210] dump_stack_lvl+0x18c/0x250 [ 354.116532][ T9210] ? show_regs_print_info+0x20/0x20 [ 354.121829][ T9210] ? load_image+0x420/0x420 [ 354.126400][ T9210] ? __might_sleep+0xe0/0xe0 [ 354.131094][ T9210] ? __lock_acquire+0x7d80/0x7d80 [ 354.136205][ T9210] should_fail_ex+0x394/0x4c0 [ 354.140975][ T9210] should_failslab+0x9/0x20 [ 354.145552][ T9210] slab_pre_alloc_hook+0x59/0x300 [ 354.150660][ T9210] ? __lock_acquire+0x7d80/0x7d80 [ 354.155769][ T9210] kmem_cache_alloc_node+0x5e/0x310 [ 354.161060][ T9210] ? __alloc_skb+0x103/0x2c0 [ 354.165763][ T9210] __alloc_skb+0x103/0x2c0 [ 354.170235][ T9210] netlink_sendmsg+0x66a/0xbf0 [ 354.175168][ T9210] ? netlink_getsockopt+0x590/0x590 [ 354.180431][ T9210] ? apparmor_socket_sendmsg+0x8e/0x330 [ 354.186094][ T9210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.191449][ T9210] ? security_socket_sendmsg+0x80/0xa0 [ 354.196980][ T9210] ? netlink_getsockopt+0x590/0x590 [ 354.202230][ T9210] ____sys_sendmsg+0x61b/0x980 [ 354.207118][ T9210] ? __asan_memset+0x22/0x40 [ 354.211846][ T9210] ? __sys_sendmsg_sock+0x30/0x30 [ 354.216917][ T9210] ? __import_iovec+0x5f2/0x850 [ 354.221866][ T9210] ? import_iovec+0x73/0xa0 [ 354.226433][ T9210] ___sys_sendmsg+0x2a6/0x360 [ 354.231168][ T9210] ? get_pid_task+0x20/0x1e0 [ 354.235817][ T9210] ? __sys_sendmsg+0x2b0/0x2b0 [ 354.240657][ T9210] ? __lock_acquire+0x7d80/0x7d80 [ 354.245764][ T9210] __se_sys_sendmsg+0x1d0/0x2c0 [ 354.250677][ T9210] ? __x64_sys_sendmsg+0x80/0x80 [ 354.255700][ T9210] ? lockdep_hardirqs_on+0x98/0x150 [ 354.260987][ T9210] do_syscall_64+0x55/0xb0 [ 354.265453][ T9210] ? clear_bhb_loop+0x40/0x90 [ 354.270323][ T9210] ? clear_bhb_loop+0x40/0x90 [ 354.275065][ T9210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.281010][ T9210] RIP: 0033:0x7fce02d9e159 [ 354.285570][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.305299][ T9210] RSP: 002b:00007fce03bde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.313770][ T9210] RAX: ffffffffffffffda RBX: 00007fce03026090 RCX: 00007fce02d9e159 [ 354.321790][ T9210] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 354.329830][ T9210] RBP: 00007fce03bde090 R08: 0000000000000000 R09: 0000000000000000 [ 354.337845][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.345858][ T9210] R13: 00007fce03026128 R14: 00007fce03026090 R15: 00007ffe8b6c1308 [ 354.353897][ T9210] [ 356.158722][ T9215] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 356.253996][ T9225] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.950'. [ 356.746532][ T9246] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.953'. [ 359.716946][ T9259] FAULT_INJECTION: forcing a failure. [ 359.716946][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 359.749315][ T9259] CPU: 0 PID: 9259 Comm: syz.3.959 Not tainted syzkaller #0 [ 359.756734][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.766851][ T9259] Call Trace: [ 359.770168][ T9259] [ 359.773149][ T9259] dump_stack_lvl+0x18c/0x250 [ 359.777900][ T9259] ? show_regs_print_info+0x20/0x20 [ 359.783160][ T9259] ? load_image+0x420/0x420 [ 359.787728][ T9259] ? __might_sleep+0xe0/0xe0 [ 359.792378][ T9259] ? __lock_acquire+0x7d80/0x7d80 [ 359.797646][ T9259] should_fail_ex+0x394/0x4c0 [ 359.802393][ T9259] should_failslab+0x9/0x20 [ 359.806957][ T9259] slab_pre_alloc_hook+0x59/0x300 [ 359.812053][ T9259] ? __lock_acquire+0x7d80/0x7d80 [ 359.817147][ T9259] ? kvmalloc_node+0x70/0x180 [ 359.821886][ T9259] ? kvmalloc_node+0x70/0x180 [ 359.826616][ T9259] __kmem_cache_alloc_node+0x53/0x250 [ 359.832040][ T9259] ? __schedule_delayed_monitor_work+0x200/0x200 [ 359.838433][ T9259] ? kvmalloc_node+0x70/0x180 [ 359.843174][ T9259] __kmalloc_node+0xa6/0x240 [ 359.847832][ T9259] kvmalloc_node+0x70/0x180 [ 359.852401][ T9259] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 359.857870][ T9259] ? 0xffffffffa0004740 [ 359.862074][ T9259] ? 0xffffffffa0004740 [ 359.866276][ T9259] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 359.872217][ T9259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.878429][ T9259] ? xdp_convert_md_to_buff+0x330/0x330 [ 359.884072][ T9259] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 359.890367][ T9259] ? _copy_from_user+0xa5/0xe0 [ 359.895186][ T9259] ? bpf_test_init+0x119/0x140 [ 359.899998][ T9259] ? xdp_convert_md_to_buff+0x5b/0x330 [ 359.905519][ T9259] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 359.910963][ T9259] ? __lock_acquire+0x7d80/0x7d80 [ 359.916068][ T9259] ? dev_put+0x80/0x80 [ 359.920229][ T9259] ? dev_put+0x80/0x80 [ 359.924358][ T9259] bpf_prog_test_run+0x31f/0x390 [ 359.929363][ T9259] __sys_bpf+0x49d/0x890 [ 359.933664][ T9259] ? bpf_link_show_fdinfo+0x390/0x390 [ 359.939120][ T9259] ? lock_chain_count+0x20/0x20 [ 359.944030][ T9259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 359.950082][ T9259] __x64_sys_bpf+0x7c/0x90 [ 359.954556][ T9259] do_syscall_64+0x55/0xb0 [ 359.959027][ T9259] ? clear_bhb_loop+0x40/0x90 [ 359.963752][ T9259] ? clear_bhb_loop+0x40/0x90 [ 359.968486][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.974440][ T9259] RIP: 0033:0x7f1086d9e159 [ 359.978903][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.998559][ T9259] RSP: 002b:00007f1087cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.007065][ T9259] RAX: ffffffffffffffda RBX: 00007f1087025fa0 RCX: 00007f1086d9e159 [ 360.015102][ T9259] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 360.023123][ T9259] RBP: 00007f1087cff090 R08: 0000000000000000 R09: 0000000000000000 [ 360.031140][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.039231][ T9259] R13: 00007f1087026038 R14: 00007f1087025fa0 R15: 00007fffd5a00e18 [ 360.047264][ T9259] [ 360.387879][ T9265] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 360.452883][ T9269] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.963'. [ 360.936474][ T9282] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.967'. [ 363.990398][ T9297] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.973'. [ 364.024297][ T9299] FAULT_INJECTION: forcing a failure. [ 364.024297][ T9299] name failslab, interval 1, probability 0, space 0, times 0 [ 364.045341][ T9299] CPU: 1 PID: 9299 Comm: syz.4.975 Not tainted syzkaller #0 [ 364.052699][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.062784][ T9299] Call Trace: [ 364.066081][ T9299] [ 364.069060][ T9299] dump_stack_lvl+0x18c/0x250 [ 364.073761][ T9299] ? show_regs_print_info+0x20/0x20 [ 364.078982][ T9299] ? load_image+0x420/0x420 [ 364.083523][ T9299] ? __might_sleep+0xe0/0xe0 [ 364.088143][ T9299] ? __lock_acquire+0x7d80/0x7d80 [ 364.093197][ T9299] should_fail_ex+0x394/0x4c0 [ 364.097926][ T9299] should_failslab+0x9/0x20 [ 364.102459][ T9299] slab_pre_alloc_hook+0x59/0x300 [ 364.107521][ T9299] ? ethnl_default_start+0x135/0x560 [ 364.112828][ T9299] ? ethnl_default_start+0x135/0x560 [ 364.118145][ T9299] __kmem_cache_alloc_node+0x53/0x250 [ 364.123568][ T9299] ? ethnl_default_start+0x135/0x560 [ 364.128875][ T9299] __kmalloc+0xa7/0x240 [ 364.133084][ T9299] ethnl_default_start+0x135/0x560 [ 364.138283][ T9299] genl_start+0x4b4/0x6c0 [ 364.142660][ T9299] __netlink_dump_start+0x43c/0x7a0 [ 364.147894][ T9299] genl_family_rcv_msg_dumpit+0x214/0x310 [ 364.153651][ T9299] ? genl_rcv_msg+0x7a0/0x7a0 [ 364.158362][ T9299] ? genl_get_cmd+0x693/0x930 [ 364.163098][ T9299] ? genl_family_rcv_msg_doit+0x310/0x310 [ 364.168835][ T9299] ? genl_start+0x6c0/0x6c0 [ 364.173351][ T9299] ? genl_dumpit+0x1a0/0x1a0 [ 364.177967][ T9299] ? mark_lock+0x94/0x320 [ 364.182325][ T9299] genl_rcv_msg+0x5de/0x7a0 [ 364.186866][ T9299] ? genl_bind+0x360/0x360 [ 364.191309][ T9299] ? ethnl_default_doit+0xba0/0xba0 [ 364.196530][ T9299] ? ethnl_default_start+0x560/0x560 [ 364.201832][ T9299] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 364.207253][ T9299] ? lockdep_hardirqs_on+0x98/0x150 [ 364.212484][ T9299] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.218682][ T9299] netlink_rcv_skb+0x235/0x4c0 [ 364.223472][ T9299] ? genl_bind+0x360/0x360 [ 364.227910][ T9299] ? netlink_ack+0x1160/0x1160 [ 364.232714][ T9299] ? __lock_acquire+0x7d80/0x7d80 [ 364.237798][ T9299] ? down_read+0x1ac/0x2e0 [ 364.242345][ T9299] genl_rcv+0x28/0x40 [ 364.246343][ T9299] netlink_unicast+0x7b1/0x930 [ 364.251139][ T9299] netlink_sendmsg+0x8d0/0xbf0 [ 364.255935][ T9299] ? netlink_getsockopt+0x590/0x590 [ 364.261157][ T9299] ? apparmor_socket_sendmsg+0x8e/0x330 [ 364.266726][ T9299] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 364.272039][ T9299] ? security_socket_sendmsg+0x80/0xa0 [ 364.277516][ T9299] ? netlink_getsockopt+0x590/0x590 [ 364.282740][ T9299] ____sys_sendmsg+0x61b/0x980 [ 364.287533][ T9299] ? __asan_memset+0x22/0x40 [ 364.292150][ T9299] ? __sys_sendmsg_sock+0x30/0x30 [ 364.297196][ T9299] ? __import_iovec+0x5f2/0x850 [ 364.302076][ T9299] ? import_iovec+0x73/0xa0 [ 364.306608][ T9299] ___sys_sendmsg+0x2a6/0x360 [ 364.311317][ T9299] ? get_pid_task+0x20/0x1e0 [ 364.315944][ T9299] ? __sys_sendmsg+0x2b0/0x2b0 [ 364.320763][ T9299] ? __lock_acquire+0x7d80/0x7d80 [ 364.325823][ T9299] __se_sys_sendmsg+0x1d0/0x2c0 [ 364.330698][ T9299] ? __x64_sys_sendmsg+0x80/0x80 [ 364.335710][ T9299] do_syscall_64+0x55/0xb0 [ 364.340153][ T9299] ? clear_bhb_loop+0x40/0x90 [ 364.344853][ T9299] ? clear_bhb_loop+0x40/0x90 [ 364.349551][ T9299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.355466][ T9299] RIP: 0033:0x7fe7a559e159 [ 364.359909][ T9299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.379554][ T9299] RSP: 002b:00007fe7a6517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.387991][ T9299] RAX: ffffffffffffffda RBX: 00007fe7a5825fa0 RCX: 00007fe7a559e159 [ 364.395978][ T9299] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 364.403968][ T9299] RBP: 00007fe7a6517090 R08: 0000000000000000 R09: 0000000000000000 [ 364.411963][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.419958][ T9299] R13: 00007fe7a5826038 R14: 00007fe7a5825fa0 R15: 00007ffc0f4af188 [ 364.427970][ T9299] [ 364.583650][ T9301] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 364.596290][ T9306] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 364.606067][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'. [ 364.615677][ T9306] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 364.624874][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'. [ 364.634583][ T9303] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 364.643867][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'. [ 364.819376][ T9310] syzkaller0: entered promiscuous mode [ 364.826250][ T9310] syzkaller0: entered allmulticast mode [ 368.182833][ T9320] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.981'. [ 369.318557][ T9324] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.984'. [ 369.328820][ T9329] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 369.468438][ T9332] netlink: 'syz.4.986': attribute type 39 has an invalid length. [ 369.610902][ T9332] netlink: 'syz.4.986': attribute type 3 has an invalid length. [ 369.619441][ T9332] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.986'. [ 373.264378][ T9347] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 373.392005][ T9353] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.993'. [ 373.554725][ T9359] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.996'. [ 373.761466][ T9366] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 373.871812][ T9365] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 376.755768][ T9372] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 376.770885][ T9372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1000'. [ 376.809731][ T9372] batman_adv: batadv0: Adding interface: veth0_vlan [ 376.827108][ T9372] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.873095][ T9372] batman_adv: batadv0: Interface activated: veth0_vlan [ 376.928505][ T9375] netlink: 'syz.0.1001': attribute type 39 has an invalid length. [ 377.039713][ T9375] netlink: 'syz.0.1001': attribute type 3 has an invalid length. [ 377.059792][ T9375] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1001'. [ 377.438273][ T9382] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1004'. [ 377.496002][ T9386] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1007'. [ 377.662625][ T9394] netlink: 'syz.2.1008': attribute type 39 has an invalid length. [ 377.737356][ T9396] netlink: 'syz.2.1008': attribute type 3 has an invalid length. [ 377.745239][ T9396] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1008'. [ 377.844492][ T9398] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 378.600092][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.614544][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.903740][ T9411] netlink: 'syz.3.1015': attribute type 39 has an invalid length. [ 384.042935][ T9411] netlink: 'syz.3.1015': attribute type 3 has an invalid length. [ 384.071034][ T9411] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1015'. [ 387.041230][ T9427] netlink: 'syz.3.1019': attribute type 46 has an invalid length. [ 387.053390][ T9427] netlink: 'syz.3.1019': attribute type 46 has an invalid length. [ 387.265073][ T9437] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 390.298055][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.305743][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.314637][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.323913][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.336262][ T9443] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 390.345046][ T9443] batman_adv: batadv0: Removing interface: veth0_vlan [ 390.649079][ T9450] delete_channel: no stack [ 391.462211][ T9460] netlink: 'syz.2.1032': attribute type 46 has an invalid length. [ 391.477609][ T9460] netlink: 'syz.2.1032': attribute type 46 has an invalid length. [ 391.835968][ T9475] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 392.705565][ T9467] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1033'. [ 395.266253][ T9495] netlink: 'syz.3.1043': attribute type 46 has an invalid length. [ 395.276019][ T9495] netlink: 'syz.3.1043': attribute type 46 has an invalid length. [ 396.308529][ T9501] netlink: 'syz.4.1046': attribute type 39 has an invalid length. [ 396.361945][ T9504] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1048'. [ 396.438388][ T9501] netlink: 'syz.4.1046': attribute type 3 has an invalid length. [ 396.447469][ T9501] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1046'. [ 396.622843][ T9508] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 396.741494][ T9517] netlink: 'syz.0.1053': attribute type 46 has an invalid length. [ 396.749970][ T9517] netlink: 'syz.0.1053': attribute type 46 has an invalid length. [ 397.451836][ T9528] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1057'. [ 397.594366][ T9546] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 397.955625][ T9556] netlink: 'syz.4.1065': attribute type 46 has an invalid length. [ 397.964131][ T9556] netlink: 'syz.4.1065': attribute type 46 has an invalid length. [ 398.135858][ T9562] FAULT_INJECTION: forcing a failure. [ 398.135858][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 398.149013][ T9562] CPU: 1 PID: 9562 Comm: syz.2.1068 Not tainted syzkaller #0 [ 398.156476][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.166572][ T9562] Call Trace: [ 398.169912][ T9562] [ 398.172875][ T9562] dump_stack_lvl+0x18c/0x250 [ 398.177597][ T9562] ? lock_chain_count+0x20/0x20 [ 398.182485][ T9562] ? show_regs_print_info+0x20/0x20 [ 398.187734][ T9562] ? load_image+0x420/0x420 [ 398.192479][ T9562] should_fail_ex+0x394/0x4c0 [ 398.197221][ T9562] should_failslab+0x9/0x20 [ 398.201779][ T9562] slab_pre_alloc_hook+0x59/0x300 [ 398.206859][ T9562] kmem_cache_alloc+0x5a/0x2c0 [ 398.211693][ T9562] ? __inet_hash_connect+0x808/0x1870 [ 398.217169][ T9562] __inet_hash_connect+0x808/0x1870 [ 398.222419][ T9562] ? inet6_hash_connect+0xe0/0xe0 [ 398.227587][ T9562] ? inet_bhash2_reset_saddr+0x80/0x80 [ 398.233092][ T9562] ? sk_setup_caps+0x704/0x940 [ 398.237918][ T9562] ? inet6_hash_connect+0x7b/0xe0 [ 398.243065][ T9562] tcp_v6_connect+0xf50/0x1900 [ 398.247971][ T9562] ? tcp_v6_pre_connect+0xf0/0xf0 [ 398.253047][ T9562] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 398.258120][ T9562] ? do_syscall_64+0x55/0xb0 [ 398.262746][ T9562] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.268875][ T9562] __inet_stream_connect+0x254/0xdf0 [ 398.274232][ T9562] ? inet_dgram_connect+0x340/0x340 [ 398.279489][ T9562] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 398.284785][ T9562] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 398.290069][ T9562] ? mark_lock+0x94/0x320 [ 398.294466][ T9562] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 398.300503][ T9562] ? lock_chain_count+0x20/0x20 [ 398.305452][ T9562] ? tcp_set_state+0x6c0/0x6c0 [ 398.310288][ T9562] tcp_sendmsg+0x2f/0x50 [ 398.314586][ T9562] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 398.319858][ T9562] ____sys_sendmsg+0x61b/0x980 [ 398.324676][ T9562] ? __asan_memset+0x22/0x40 [ 398.329316][ T9562] ? __sys_sendmsg_sock+0x30/0x30 [ 398.334394][ T9562] ? __import_iovec+0x3fa/0x850 [ 398.339309][ T9562] ? import_iovec+0x73/0xa0 [ 398.343867][ T9562] ___sys_sendmsg+0x2a6/0x360 [ 398.348690][ T9562] ? __sys_sendmsg+0x2b0/0x2b0 [ 398.353513][ T9562] ? trace_call_bpf+0xc3/0x6c0 [ 398.358374][ T9562] __se_sys_sendmsg+0x1d0/0x2c0 [ 398.363276][ T9562] ? perf_trace_preemptirq_template+0x269/0x330 [ 398.369605][ T9562] ? __x64_sys_sendmsg+0x80/0x80 [ 398.374605][ T9562] ? lockdep_hardirqs_on+0x98/0x150 [ 398.379858][ T9562] do_syscall_64+0x55/0xb0 [ 398.384326][ T9562] ? clear_bhb_loop+0x40/0x90 [ 398.389051][ T9562] ? clear_bhb_loop+0x40/0x90 [ 398.393785][ T9562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.399725][ T9562] RIP: 0033:0x7fce02d9e159 [ 398.404182][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.423913][ T9562] RSP: 002b:00007fce03bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.432373][ T9562] RAX: ffffffffffffffda RBX: 00007fce03025fa0 RCX: 00007fce02d9e159 [ 398.440403][ T9562] RDX: 000000003600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 398.448411][ T9562] RBP: 00007fce03bff090 R08: 0000000000000000 R09: 0000000000000000 [ 398.456410][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.464432][ T9562] R13: 00007fce03026038 R14: 00007fce03025fa0 R15: 00007ffe8b6c1308 [ 398.472465][ T9562] [ 398.668506][ T9572] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1072'. [ 398.696838][ T9572] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.1072'. [ 398.915517][ T9570] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1071'. [ 399.103504][ T9582] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 399.520043][ T9590] netlink: 'syz.0.1078': attribute type 46 has an invalid length. [ 399.556703][ T9590] netlink: 'syz.0.1078': attribute type 46 has an invalid length. [ 399.842575][ T9597] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1080'. [ 399.871925][ T9597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.010868][ T9597] tap0: tun_chr_ioctl cmd 1074025676 [ 400.038051][ T9597] tap0: owner set to 776 [ 402.939393][ T9606] FAULT_INJECTION: forcing a failure. [ 402.939393][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 402.977505][ T9606] CPU: 0 PID: 9606 Comm: syz.4.1083 Not tainted syzkaller #0 [ 402.984943][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.995026][ T9606] Call Trace: [ 402.998336][ T9606] [ 403.001294][ T9606] dump_stack_lvl+0x18c/0x250 [ 403.006001][ T9606] ? show_regs_print_info+0x20/0x20 [ 403.011217][ T9606] ? load_image+0x420/0x420 [ 403.015739][ T9606] ? __might_sleep+0xe0/0xe0 [ 403.020351][ T9606] ? __lock_acquire+0x7d80/0x7d80 [ 403.025409][ T9606] should_fail_ex+0x394/0x4c0 [ 403.030129][ T9606] should_failslab+0x9/0x20 [ 403.034661][ T9606] slab_pre_alloc_hook+0x59/0x300 [ 403.039744][ T9606] kmem_cache_alloc_node+0x5e/0x310 [ 403.044981][ T9606] ? __alloc_skb+0x103/0x2c0 [ 403.049618][ T9606] __alloc_skb+0x103/0x2c0 [ 403.054075][ T9606] netlink_dump+0x1ee/0xec0 [ 403.058610][ T9606] ? rcu_is_watching+0x15/0xb0 [ 403.063398][ T9606] ? __mutex_lock+0x30d/0xc80 [ 403.068101][ T9606] ? netlink_lookup+0x200/0x200 [ 403.072987][ T9606] ? netlink_lookup+0x30/0x200 [ 403.077767][ T9606] ? netlink_lookup+0x30/0x200 [ 403.082558][ T9606] __netlink_dump_start+0x57c/0x7a0 [ 403.087775][ T9606] rtnetlink_rcv_msg+0xe19/0xf90 [ 403.092839][ T9606] ? rtnetlink_rcv_msg+0x220/0xf90 [ 403.097970][ T9606] ? rtnl_net_getid+0xa00/0xa00 [ 403.102855][ T9606] ? rtnetlink_bind+0x80/0x80 [ 403.107582][ T9606] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.113590][ T9606] ? lock_chain_count+0x20/0x20 [ 403.118468][ T9606] ? __local_bh_enable_ip+0x13a/0x1c0 [ 403.123877][ T9606] ? lockdep_hardirqs_on+0x98/0x150 [ 403.129118][ T9606] ? __local_bh_enable_ip+0x13a/0x1c0 [ 403.134507][ T9606] ? _local_bh_enable+0xa0/0xa0 [ 403.139414][ T9606] ? __dev_queue_xmit+0x272/0x37e0 [ 403.144636][ T9606] ? __dev_queue_xmit+0x1329/0x37e0 [ 403.149864][ T9606] ? __dev_queue_xmit+0x272/0x37e0 [ 403.155037][ T9606] ? rtnl_net_getid+0xa00/0xa00 [ 403.159927][ T9606] ? ref_tracker_free+0x686/0x830 [ 403.164976][ T9606] netlink_rcv_skb+0x235/0x4c0 [ 403.169761][ T9606] ? rtnetlink_bind+0x80/0x80 [ 403.174461][ T9606] ? netlink_ack+0x1160/0x1160 [ 403.179254][ T9606] ? __lock_acquire+0x7d80/0x7d80 [ 403.184304][ T9606] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.189540][ T9606] netlink_unicast+0x7b1/0x930 [ 403.194351][ T9606] netlink_sendmsg+0x8d0/0xbf0 [ 403.199156][ T9606] ? netlink_getsockopt+0x590/0x590 [ 403.204377][ T9606] ? apparmor_socket_sendmsg+0x8e/0x330 [ 403.209968][ T9606] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 403.215308][ T9606] ? security_socket_sendmsg+0x80/0xa0 [ 403.220787][ T9606] ? netlink_getsockopt+0x590/0x590 [ 403.226007][ T9606] ____sys_sendmsg+0x61b/0x980 [ 403.230841][ T9606] ? __asan_memset+0x22/0x40 [ 403.235464][ T9606] ? __sys_sendmsg_sock+0x30/0x30 [ 403.240516][ T9606] ? __import_iovec+0x5f2/0x850 [ 403.245418][ T9606] ? import_iovec+0x73/0xa0 [ 403.249956][ T9606] ___sys_sendmsg+0x2a6/0x360 [ 403.254656][ T9606] ? get_pid_task+0x20/0x1e0 [ 403.259277][ T9606] ? __sys_sendmsg+0x2b0/0x2b0 [ 403.264082][ T9606] ? __lock_acquire+0x7d80/0x7d80 [ 403.269150][ T9606] __se_sys_sendmsg+0x1d0/0x2c0 [ 403.274030][ T9606] ? __x64_sys_sendmsg+0x80/0x80 [ 403.279008][ T9606] ? lockdep_hardirqs_on+0x98/0x150 [ 403.284243][ T9606] do_syscall_64+0x55/0xb0 [ 403.288689][ T9606] ? clear_bhb_loop+0x40/0x90 [ 403.293399][ T9606] ? clear_bhb_loop+0x40/0x90 [ 403.298108][ T9606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.304029][ T9606] RIP: 0033:0x7fe7a559e159 [ 403.308463][ T9606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.328092][ T9606] RSP: 002b:00007fe7a6517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.336554][ T9606] RAX: ffffffffffffffda RBX: 00007fe7a5825fa0 RCX: 00007fe7a559e159 [ 403.344572][ T9606] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000005 [ 403.352564][ T9606] RBP: 00007fe7a6517090 R08: 0000000000000000 R09: 0000000000000000 [ 403.360735][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.368727][ T9606] R13: 00007fe7a5826038 R14: 00007fe7a5825fa0 R15: 00007ffc0f4af188 [ 403.376738][ T9606] [ 403.393021][ T9610] netlink: 'syz.3.1085': attribute type 3 has an invalid length. [ 403.401688][ T9610] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 403.419513][ T9610] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1085'. [ 403.590153][ T9614] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 403.729070][ T9607] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1084'. [ 407.232953][ T9641] netlink: 'syz.0.1094': attribute type 46 has an invalid length. [ 407.256822][ T9641] netlink: 'syz.0.1094': attribute type 46 has an invalid length. [ 407.293009][ T9643] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1093'. [ 407.317069][ T9643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.361973][ T9643] tap0: tun_chr_ioctl cmd 1074025676 [ 407.386859][ T9643] tap0: owner set to 776 [ 407.489467][ T9648] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 408.153140][ T9650] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1098'. [ 411.415050][ T9669] netlink: 'syz.0.1105': attribute type 46 has an invalid length. [ 411.423341][ T9669] netlink: 'syz.0.1105': attribute type 46 has an invalid length. [ 411.642426][ T9677] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 411.912689][ T9682] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 411.946925][ T9687] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1111'. [ 411.958275][ T9687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.018015][ T9687] tap0: tun_chr_ioctl cmd 1074025676 [ 412.023399][ T9687] tap0: owner set to 776 [ 412.109997][ T9692] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1113'. [ 413.239975][ T9698] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1112'. [ 415.513811][ T9709] netlink: 'syz.0.1117': attribute type 46 has an invalid length. [ 415.523187][ T9709] netlink: 'syz.0.1117': attribute type 46 has an invalid length. [ 415.716869][ T9718] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1123'. [ 415.803575][ T9720] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 415.848818][ T9723] FAULT_INJECTION: forcing a failure. [ 415.848818][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.863367][ T9723] CPU: 1 PID: 9723 Comm: syz.0.1124 Not tainted syzkaller #0 [ 415.870801][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.880884][ T9723] Call Trace: [ 415.884192][ T9723] [ 415.887150][ T9723] dump_stack_lvl+0x18c/0x250 [ 415.891872][ T9723] ? show_regs_print_info+0x20/0x20 [ 415.897109][ T9723] ? load_image+0x420/0x420 [ 415.901647][ T9723] ? __might_fault+0xaa/0x120 [ 415.906376][ T9723] ? __lock_acquire+0x7d80/0x7d80 [ 415.911457][ T9723] should_fail_ex+0x394/0x4c0 [ 415.916188][ T9723] _copy_from_user+0x2f/0xe0 [ 415.920813][ T9723] __sys_bpf+0x23e/0x890 [ 415.925098][ T9723] ? bpf_link_show_fdinfo+0x390/0x390 [ 415.930532][ T9723] ? lock_chain_count+0x20/0x20 [ 415.935434][ T9723] __x64_sys_bpf+0x7c/0x90 [ 415.939895][ T9723] do_syscall_64+0x55/0xb0 [ 415.944364][ T9723] ? clear_bhb_loop+0x40/0x90 [ 415.949094][ T9723] ? clear_bhb_loop+0x40/0x90 [ 415.953811][ T9723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.959746][ T9723] RIP: 0033:0x7fc91879e159 [ 415.964198][ T9723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.983842][ T9723] RSP: 002b:00007fc9196bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.992292][ T9723] RAX: ffffffffffffffda RBX: 00007fc918a26090 RCX: 00007fc91879e159 [ 416.000300][ T9723] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 416.008302][ T9723] RBP: 00007fc9196bb090 R08: 0000000000000000 R09: 0000000000000000 [ 416.016303][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.024311][ T9723] R13: 00007fc918a26128 R14: 00007fc918a26090 R15: 00007ffeab2ffb28 [ 416.032332][ T9723] [ 419.070372][ T9734] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1128'. [ 419.178858][ T9734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.342104][ T9735] tap0: tun_chr_ioctl cmd 1074025676 [ 419.386538][ T9735] tap0: owner set to 776 [ 421.975011][ T9744] netlink: 'syz.0.1131': attribute type 46 has an invalid length. [ 421.983370][ T9744] netlink: 'syz.0.1131': attribute type 46 has an invalid length. [ 422.042735][ T9746] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1132'. [ 422.160386][ T9749] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1133'. [ 422.439660][ T9755] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 425.587718][ T9767] netlink: 'syz.4.1141': attribute type 46 has an invalid length. [ 425.596462][ T9767] netlink: 'syz.4.1141': attribute type 46 has an invalid length. [ 425.633475][ T9769] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1142'. [ 425.829210][ T9776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1140'. [ 425.851305][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.868716][ T9776] tap0: tun_chr_ioctl cmd 1074025676 [ 425.874239][ T9776] tap0: owner set to 776 [ 426.292360][ T9786] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 426.301463][ T9786] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 426.325340][ T9786] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 426.347881][ T9786] netlink: 'syz.4.1149': attribute type 3 has an invalid length. [ 426.356553][ T9786] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 426.367467][ T9786] netlink: 126304 bytes leftover after parsing attributes in process `syz.4.1149'. [ 531.096567][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 531.103747][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9782/1:b..l [ 531.112082][ C0] rcu: (detected by 0, t=10502 jiffies, g=32801, q=171 ncpus=2) [ 531.119843][ C0] task:syz.3.1147 state:R running task stack:22568 pid:9782 ppid:5773 flags:0x00004002 [ 531.131399][ C0] Call Trace: [ 531.134706][ C0] [ 531.137665][ C0] __schedule+0x15ae/0x4660 [ 531.142244][ C0] ? __bpf_tx_skb+0x18f/0x260 [ 531.147051][ C0] ? asan.module_dtor+0x20/0x20 [ 531.151949][ C0] ? bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 531.157703][ C0] ? tracing_saved_cmdlines_size_write+0x1b0/0x370 [ 531.164249][ C0] ? lock_chain_count+0x20/0x20 [ 531.169134][ C0] ? preempt_schedule+0xc0/0xd0 [ 531.174048][ C0] ? bpf_test_run+0x174/0x870 [ 531.178774][ C0] preempt_schedule_common+0x82/0xc0 [ 531.184138][ C0] preempt_schedule+0xc0/0xd0 [ 531.188880][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 531.194548][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 531.200581][ C0] ? lock_chain_count+0x20/0x20 [ 531.205477][ C0] preempt_schedule_thunk+0x1a/0x30 [ 531.210763][ C0] __local_bh_enable_ip+0x14b/0x1c0 [ 531.216014][ C0] ? _local_bh_enable+0xa0/0xa0 [ 531.220896][ C0] ? bpf_test_timer_continue+0x135/0x380 [ 531.226580][ C0] ? bpf_test_run+0x174/0x870 [ 531.231292][ C0] bpf_test_run+0x3dd/0x870 [ 531.235842][ C0] ? bpf_test_run+0x174/0x870 [ 531.240564][ C0] ? dst_hold+0x70/0x70 [ 531.244772][ C0] ? eth_get_headlen+0x210/0x210 [ 531.249820][ C0] ? kasan_check_range+0x10/0x290 [ 531.254893][ C0] ? slab_build_skb+0x25a/0x3e0 [ 531.259786][ C0] ? convert___skb_to_skb+0x3d/0x590 [ 531.265112][ C0] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 531.270544][ C0] ? cpu_online+0x60/0x60 [ 531.274925][ C0] bpf_prog_test_run+0x31f/0x390 [ 531.279905][ C0] __sys_bpf+0x49d/0x890 [ 531.284203][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 531.289719][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.295939][ C0] __x64_sys_bpf+0x7c/0x90 [ 531.300406][ C0] do_syscall_64+0x55/0xb0 [ 531.304859][ C0] ? clear_bhb_loop+0x40/0x90 [ 531.309568][ C0] ? clear_bhb_loop+0x40/0x90 [ 531.314304][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.320239][ C0] RIP: 0033:0x7f1086d9e159 [ 531.324696][ C0] RSP: 002b:00007f1087cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.333146][ C0] RAX: ffffffffffffffda RBX: 00007f1087025fa0 RCX: 00007f1086d9e159 [ 531.341146][ C0] RDX: 0000000000000041 RSI: 00002000000011c0 RDI: 000000000000000a [ 531.349152][ C0] RBP: 00007f1086e35024 R08: 0000000000000000 R09: 0000000000000000 [ 531.357155][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.365148][ C0] R13: 00007f1087026038 R14: 00007f1087025fa0 R15: 00007fffd5a00e18 [ 531.373163][ C0] [ 531.376219][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10281 jiffies! g32801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 531.388569][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=21781 [ 531.396494][ C0] rcu: rcu_preempt kthread starved for 10282 jiffies! g32801 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 531.407882][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 531.417870][ C0] rcu: RCU grace-period kthread stack dump: [ 531.423789][ C0] task:rcu_preempt state:I stack:25960 pid:17 ppid:2 flags:0x00004000 [ 531.433026][ C0] Call Trace: [ 531.436336][ C0] [ 531.439299][ C0] __schedule+0x15ae/0x4660 [ 531.443851][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 531.448915][ C0] ? lock_chain_count+0x20/0x20 [ 531.453805][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 531.459039][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 531.464962][ C0] ? asan.module_dtor+0x20/0x20 [ 531.469852][ C0] ? rcu_is_watching+0x15/0xb0 [ 531.474696][ C0] schedule+0xbd/0x170 [ 531.478828][ C0] schedule_timeout+0x188/0x2d0 [ 531.483718][ C0] ? console_conditional_schedule+0x40/0x40 [ 531.489660][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 531.495673][ C0] ? update_process_times+0x1b0/0x1b0 [ 531.501077][ C0] ? prepare_to_swait_event+0x344/0x360 [ 531.506661][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 531.511568][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 531.517757][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 531.522830][ C0] ? rcu_gp_init+0x1530/0x1530 [ 531.527623][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 531.532505][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.537733][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 531.542962][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 531.547576][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 531.552712][ C0] ? __kthread_parkme+0x71/0x1c0 [ 531.557676][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 531.562736][ C0] kthread+0x2fa/0x390 [ 531.566826][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 531.571962][ C0] ? kthread_blkcg+0xd0/0xd0 [ 531.576582][ C0] ret_from_fork+0x48/0x80 [ 531.581070][ C0] ? kthread_blkcg+0xd0/0xd0 [ 531.585699][ C0] ret_from_fork_asm+0x11/0x20 [ 531.590520][ C0] [ 531.593578][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 531.599933][ C0] Sending NMI from CPU 0 to CPUs 1: [ 531.605204][ C1] NMI backtrace for cpu 1 [ 531.605214][ C1] CPU: 1 PID: 9765 Comm: syz.0.1140 Not tainted syzkaller #0 [ 531.605229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.605238][ C1] RIP: 0010:ieee80211_rx_napi+0x382/0x3c0 [ 531.605355][ C1] Code: 92 89 fe 48 8d 44 24 40 48 39 c3 0f 85 04 ff ff ff e8 92 65 7d f7 eb 0d e8 8b 65 7d f7 4c 89 f7 e8 63 df 79 fe 48 8b 44 24 18 <66> 42 c7 44 28 04 f8 f8 48 c7 44 24 20 0e 36 e0 45 4a c7 04 28 00 [ 531.605369][ C1] RSP: 0018:ffffc900001f0c20 EFLAGS: 00000246 [ 531.605382][ C1] RAX: 1ffff9200003e188 RBX: dffffc0000000000 RCX: ffff88805f601e00 [ 531.605394][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d35c0 RDI: ffffffff8b1d3580 [ 531.605404][ C1] RBP: ffffc900001f0ce0 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 531.605416][ C1] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 0000000000000000 [ 531.605427][ C1] R13: dffffc0000000000 R14: ffffc900001f0c60 R15: ffffffff8a0a1a42 [ 531.605438][ C1] FS: 00007fc9196dc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 531.605451][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.605462][ C1] CR2: 0000001b2da07ff8 CR3: 000000005ee93000 CR4: 00000000003506e0 [ 531.605476][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 531.605486][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 531.605495][ C1] Call Trace: [ 531.605501][ C1] [ 531.605508][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 531.605532][ C1] ? skb_dequeue+0x124/0x160 [ 531.605554][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 531.605620][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 531.605639][ C1] tasklet_action_common+0x2d4/0x460 [ 531.605678][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 531.605696][ C1] ? lock_chain_count+0x20/0x20 [ 531.605748][ C1] handle_softirqs+0x27d/0x820 [ 531.605764][ C1] ? read_tsc+0x9/0x20 [ 531.605796][ C1] ? ktime_get+0x24b/0x280 [ 531.605817][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 531.605835][ C1] ? do_softirq+0x1a0/0x1a0 [ 531.605854][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 531.605878][ C1] __irq_exit_rcu+0xd3/0x190 [ 531.605894][ C1] ? irq_exit_rcu+0x20/0x20 [ 531.605916][ C1] irq_exit_rcu+0x9/0x20 [ 531.605930][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 531.605954][ C1] [ 531.605958][ C1] [ 531.605970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.605991][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 531.606012][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 7c 0d 05 0d 48 89 de 5b e9 c3 b0 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 80 35 7c 7e 65 8b 15 81 35 7c [ 531.606025][ C1] RSP: 0018:ffffc900041a7310 EFLAGS: 00000287 [ 531.606038][ C1] RAX: ffffffff8ea48cf4 RBX: ffffffff8ea48cf4 RCX: ffff88805f601e00 [ 531.606050][ C1] RDX: 0000000000000000 RSI: ffffffff81e01222 RDI: ffffffff81e01287 [ 531.606061][ C1] RBP: ffffffff8ea48cd8 R08: ffffc900041a74b0 R09: 0000000000000006 [ 531.606072][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81e01287 [ 531.606082][ C1] R13: ffffffff8ea48cd8 R14: ffffffff81e01222 R15: ffffffff8ea48cf8 [ 531.606094][ C1] ? kasan_quarantine_reduce+0x142/0x160 [ 531.606118][ C1] ? srcu_read_lock+0x47/0x50 [ 531.606144][ C1] ? kasan_quarantine_reduce+0x142/0x160 [ 531.606166][ C1] ? srcu_read_lock+0x47/0x50 [ 531.606191][ C1] unwind_next_frame+0x4e2/0x2990 [ 531.606211][ C1] ? kasan_quarantine_reduce+0x142/0x160 [ 531.606235][ C1] ? kasan_quarantine_reduce+0x143/0x160 [ 531.606260][ C1] ? kasan_quarantine_reduce+0x143/0x160 [ 531.606283][ C1] ? stack_trace_save+0x100/0x100 [ 531.606303][ C1] arch_stack_walk+0x144/0x190 [ 531.606323][ C1] ? kasan_quarantine_reduce+0x143/0x160 [ 531.606350][ C1] stack_trace_save+0xaa/0x100 [ 531.606369][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 531.606395][ C1] save_stack+0x125/0x230 [ 531.606412][ C1] ? __reset_page_owner+0x190/0x190 [ 531.606426][ C1] ? free_unref_page_prepare+0x7d7/0x8f0 [ 531.606441][ C1] ? free_unref_page+0x32/0x2e0 [ 531.606454][ C1] ? __unfreeze_partials+0x1cf/0x210 [ 531.606471][ C1] ? put_cpu_partial+0x17c/0x250 [ 531.606485][ C1] ? __slab_free+0x319/0x400 [ 531.606500][ C1] ? qlist_free_all+0x75/0xd0 [ 531.606521][ C1] ? kasan_quarantine_reduce+0x143/0x160 [ 531.606548][ C1] ? page_ext_get+0x22/0x2b0 [ 531.606569][ C1] ? page_ext_get+0x1e2/0x2b0 [ 531.606590][ C1] __reset_page_owner+0x4e/0x190 [ 531.606605][ C1] ? rcu_is_watching+0x15/0xb0 [ 531.606629][ C1] free_unref_page_prepare+0x7d7/0x8f0 [ 531.606648][ C1] free_unref_page+0x32/0x2e0 [ 531.606665][ C1] __unfreeze_partials+0x1cf/0x210 [ 531.606685][ C1] put_cpu_partial+0x17c/0x250 [ 531.606700][ C1] ? put_cpu_partial+0x6e/0x250 [ 531.606717][ C1] __slab_free+0x319/0x400 [ 531.606739][ C1] qlist_free_all+0x75/0xd0 [ 531.606764][ C1] kasan_quarantine_reduce+0x143/0x160 [ 531.606790][ C1] __kasan_slab_alloc+0x22/0x80 [ 531.606810][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 531.606836][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 531.606860][ C1] kmem_cache_alloc+0x17e/0x2c0 [ 531.606898][ C1] ? taskstats_exit+0x14d/0xce0 [ 531.606915][ C1] taskstats_exit+0x14d/0xce0 [ 531.606932][ C1] ? sysctl_delayacct+0x220/0x220 [ 531.606945][ C1] ? rcu_read_lock_any_held+0xb4/0x140 [ 531.606968][ C1] ? rcu_read_lock_bh_held+0x100/0x100 [ 531.606991][ C1] do_exit+0x8fc/0x2530 [ 531.607016][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 531.607037][ C1] ? put_task_struct+0xc0/0xc0 [ 531.607060][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.607079][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 531.607101][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.607125][ C1] do_group_exit+0x22d/0x2f0 [ 531.607147][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 531.607163][ C1] get_signal+0x12a6/0x1390 [ 531.607190][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 531.607227][ C1] ? get_sigframe_size+0x20/0x20 [ 531.607248][ C1] ? perf_trace_preemptirq_template+0xac/0x330 [ 531.607280][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 531.607304][ C1] exit_to_user_mode_loop+0x70/0x110 [ 531.607326][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 531.607348][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 531.607369][ C1] do_syscall_64+0x61/0xb0 [ 531.607386][ C1] ? clear_bhb_loop+0x40/0x90 [ 531.607403][ C1] ? clear_bhb_loop+0x40/0x90 [ 531.607421][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.607438][ C1] RIP: 0033:0x7fc91879e159 [ 531.607450][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.607463][ C1] RSP: 002b:00007fc9196dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.607478][ C1] RAX: fffffffffffffe00 RBX: 00007fc918a25fa0 RCX: 00007fc91879e159 [ 531.607489][ C1] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 531.607499][ C1] RBP: 00007fc918835024 R08: 0000000000000000 R09: 0000000000000000 [ 531.607508][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.607517][ C1] R13: 00007fc918a26038 R14: 00007fc918a25fa0 R15: 00007ffeab2ffb28 [ 531.607536][ C1]