last executing test programs: 4.08656154s ago: executing program 1 (id=3557): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.620252068s ago: executing program 3 (id=3559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000101711034000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3.277940675s ago: executing program 3 (id=3561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x80000001, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') sendmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000700)=@in={0x2, 0x4e22, @empty}, 0x80, 0x0}, 0xc00c) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x41, 0x12, &(0x7f0000000340)="9f9d2200931dfc630f619261c07f9b96f1aff6ef85e2c760216db18ed05098f9b15fc46ce1f4d81cd08694ae7d52ec4bb38bc71da8b8017fde118f872a54c3ac75", &(0x7f00000003c0)=""/18, 0x7fff, 0x0, 0xc, 0xbe, &(0x7f0000000400)="27996e96cbcedb8f4fbe3f5a", &(0x7f0000000440)="c186dcb9a83b21923f305578f15f58f624d716bd4621957289b2aab4d1a645c6df7555b1832a77bc4aea99884275d07f4bc20c8480ba3eb30534d797eb37cb201cbff08bbc1328d66a6bd8e6ed1d0a4c4d84e23208e7cb8dacd16c9df0be8596f39a262e8267c3b0d4b386f8f8b9e893f2dc8330061e4beea8d5384ae237554a979261bd2ff95e1d98a89ef9da6f4e9d0df7be260f4576090d641db5e0ed4b194d9062ae17104be98b18afc3fdae3b4fef69f79891bd46cd6e1349653de9", 0x1, 0x0, 0x6}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r0, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001b40)=[0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000001bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) sendmsg$inet(r2, &(0x7f0000001e80)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000005c0)="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", 0xfa}, {&(0x7f00000006c0)="49efc06c0dd1d25f2920dfea247dbeb3cfc0578923d2415297d0a8118ee5163135b69e1160d425395cf6ba031e37043546fdbb528164445ff45da70eb94168063bfafa4028e40a8a690ba29228c23edfe4edf862b06c0ac9cd56a21f256e90776ff72c5e35436543f4ef98366d7e9974eea2efb5f867cbaa5c253c127902f3cc5255ba9560b758e7beaa63e202651c6cd1f8415d103b29fe7594f839c1194297ed5c1a85d6603b0a9f5838689eb160fe24b8ab9caa040d60b381c6ca4cd58437b9c7c925f1e7abe42d9bba71d4ffcc5e0a587c15b070c456113b1d4c3f3d7ec2c052cecc6a399c5e3ade2958327289514d1973e0d0020c244b4103651a0b1aa1a68b4302862057f1f0b6b4dd0d4771f91a33d2615ecc47a29480f8908682ea70a1142e57c107059087fe66e1fc83f85e539dbcaf1472965bf815d60e289ae0f6bbcbed51399ebd154d92fdb1a6327cf73545474c77f11d7b7464aa3d897b709085df407b0c09527cad7202925d3ad3c181d1daae9623ebd036db65173923e685a1baf90036abe6107c58810c7b41214c7e8b7177077c8998bb7643d762a3ef3a5675e7268b2061447f017a3675c097db6c556d85d45c0e090d643c04565ece5ba812d19d12a3de082509afde2390e56420d0dbbe7154259c095c99ebb6a9e58ed3474cf94d232945267492cab6f03dbcd1f9dbaa2543d10ecb14cf094b93a5827753d0dec70233262765b9256359cc288239894d2a3a47d56074e2dd71206e9220e44cb0c3f8af8960c3278c704f68ceefd0727036f8339d43d623734d98f0248619202f598aa6c71374a5c9790643bdfe6f62a5b191feb6835d3031d9390fc5e7f5b1541d4a50479b534ecfbb472f4051dc68644e4d5cea4c56839078736c09781fe33a82bc5c48c6f0df844e3d592c835c0c7a657b0ada6d23673a4ee4485d4678cc995c1107f3a45d096c99a083d4284fd8989295ea2f9a2220a0a5063707d299b3a2c83a9f02f8a59aaa83efd3bdfe97c7c904dd4d3a2e621b28e0175c37b9da663b75ca3be4476d3f9b51d216b78614a45d3476229eda1eae53e4f8882b18eb7eb20a604d7166037d6ebbab91c93b23ef7ae3d562e6a7ed2f05fbe79186ef4b5e7a34d61e74711be6b6dc3e7e79ea9df9fc20884fc0c47d0f66caee122921be9cdcaad3566d7b6d2e55e6d6ea3d3df9faf13265aef10817dac0d493a7ea494172e9c60883ef6c373b3d794a332af9b956102164ece5c793e4d552a5b7d0557f332a6b53dee3e8b3387f1370d1c0a734cef7ac1917555d9dff071e2f3415f871ad45192291586c6ad40d6ccadb7da28dc4448a798c7c574e9b92e70a3108b368cae4a2e51197a19cb57ddb79c7b8d9ad474ac5b40ad6dd5ebdd3ce69757477f797fe75ebedc993af6e966a0263dbc32a526db8ff62f75a8a44a13e400d6d2c6e3b2f7e95baa2a0545523137cd3f4808571530f19695bd5a308d4cc890739db0cc1011ec1dd88ef57cc5395e04bb156cb0ad0cf5a7228d10a069c60c2cc52c03796461f49cd76355648c55707abe322fd68c11f7be122824b7779e88b5961910ed8c1f3668cd657c13c3d1aa1bc2923d38f9c230ddee3634e15ac5de8dd540e45691a09d0ed4da9ee205424bb74a7a0c7ef69229ef021b90c268518049558d9c764278153e12bc90266780d62ec32845b175ed717d814b69d9cae477c90c27354e2e18fdbc028d0a51e56da174a82e41ccc1832fecf5eed252c2df147823fd8bce8ca0621fdd1c6bce20b112796f9d18371fd797fc55aecfbe9bc7ab35faa5390c4ae7ec0f2065464f7de41c11535bc0507cec568c454c4c0f5fa294a83a68e34283a8daf1c6101704d8bc3a04705d1a3d6c5df6bfc0bea0b80ac6bf218058cbc077f9a0b3eb99610a5576f767953676495cbbd42e8a794e4a92dbedf32c4cfa1af73226dec4725ffb932257a5594858189bb97564c34c487c63725ab27ac75824ec37242824ffe4a04f1ebdc61c8f208418aa25990b2cbb954ea4336e495653da4993d790c6b8ee8610c5b0242d252d4b9978d3044e942a3c33b0cb44d3674f644dd675a07444bf1da15f97aa6897bca6503467bc087bcb47a70fc92e89f011847386b11e2b81125a5409dc2072974a6b395e41e765a6fc6c4013b453d8f6b7fc98a1f0ad832c5c10856875531023818d54f270b3c4955eff6dee873cac99d87eaa9b3d70066f1793ed074f1035c54d57fedef9885f9c0be441bf53915befc69a14bb1cc3490bb59a1ebafcecddc2fde2ac07ffd029944dab1e4987ce3a6c2a293136078e488fcea08bda992d4b24a41f5be8c8bc9c2ea2ed486bc2db431a04683a77c74de3c8c90db5c18715d7e777f521d1de56b535905e665b4b72e21ff884f61d470cfc608147fabf2ee1a0793ceffc4151e9b8eb606614a98b563d3e02a95acfd19069bab7fe1dddcc9de7009039368ea463d6b93609e38fdd6ceb4cee5e56fd433c96976dd099f2b71398867f18269d75c329cc438abbd44321ae1f1d8ce35e8c54a405dd53fd2632877c1ea82dda0a2f81f8ed061704fd31718a4571af9642ae7330cee7346d0f633f5aee66a9f1da88335ed8b1da62f18f630db193ca0850fec6a4cb6a2ca55438c33e6426e661bcb7727218ba5161c9f0e78206df38ca880710456fd3cb8f3a6adb2a0abc970587c25cda849f1e432082d3962e7727c836da8edca3338ba9726033286d4770c62127880c9480d3c464f3176e93b7fffed285c9f0163ff5c56db2d0b958595540ca4bc1864aab2413d8b24b2eaa9424121310265c18e703887c5ed49e95469e52d03494dcb2272b70688037553f357c706ab6d953cb5985289145f9ec1bd107087c864e59422cac84cd610069fc60b8bbfe3e3c7c184264507bf87056cb5aa6f5c652caf8de320104b87b05eecb82f6045faa93d6a80aa7769ca79a1936ebd1e40e0eb6fefc069e44362ded3f7c72da20b2e8a3b4713315e44f22020a482ccd185a48647d9127ba3059a801b9f650bf88626a3a9ece393fc9d72d011b0394242b4b4bcbb5946f41aa166707750279672242f7c8cbe2288c259230b898d3866606b1bf2a2ad887754afd13bc12fef75c2bd2f47093c22e9f8ec141c0da6c8653f7eea2bf6e4db14e4f5d2bfd3cd3819a9b5858844144eb26febd05fd7fc2c9e01ceadfac450ef62f6f4b4791eea30d71161a1e186d95bfecfd077e582ecd34574e5eb16c0ef419cfd064143809e490c7244f8972beea8a176ba3af0179a6dc6cfa0dd7e727ec7e670ddbc235ae6964b576c756cc85b0cc4fded14652167ef4b974b8b3814d0cb1fe37540992e7079532cf273a955e5cdca080fb49c673ae8499779676126ff80beeea3760d01127d5101b94beec6a5af514d062d1242052143ac9a7e4532794e54e3cfb58a7468cb33a66d9ce8c8aacd8dc411d55b1f5dbac7b31aa7656a18dcc8b8da5053e7a2cad8ec6f58863e594f52cc973b0522049d56908e34566994e1380697fa8d3d7a99540dbff0ee82f32094088aa3855f7f96a87225da52318e0633e478180ac1be6ea8216e779bc4f888a9fa1cf7e7fff3613c3a23da22abcee698441e01edcfbd6cd2329d418b1723ee9ef2d9344cd806349d18160010fbd6a0eadf02deeddbc0dcafe801a2433f01ef006d36cb050caf507c785ab6c337ebcdc4cb85f189b914bfb65143b82175c9691da9f8d4df5aeb81e9dbf457593d78b09516de1fbb3b2e4573097a5c2f22ab25c5c6ae2a7c7ab7bdedad67e6fa7baac5bf9dd4b78bfffa348289a743bbb0b324c6bead48561ee325e97386580bd88913b1d027efa852e68a5cd2e1a5e2ad7e493b0caafa70f86a6f9c5d90f5a05f51d4f357671856a4880f96dcb732de424d28ddd579670c3d76bcdc09c27cab48c8e83b366efb1ad5871508cda2a267115316c88c0883a297f925cf143d611a484d6fdd59cc58b917ef6924fa696be35ecdb8df84583a0f939722ab511dc9376ff338d293c5980819111fdd539e9f4525498810d5b061b6e9075fdd7e96fb67942f64e5f422afeaf03d8761dd1a3c3d9c92e99c95426b73768c5a349b3d597810b6656624ea3b547ea4f7f32dd38c8247e61a274f51cf3755a9f41514e6f8cfaeea9196a382d184621103145a23d4ae56886fc3adb13ad9f3ee46cccd15df578c7bd2083bfe4677c6973652dce630aef1a5531cc184c357e23b3022d63942cce12e3d37de83b8fc8376bb7155a87fbc450fa221fa857a5b5cc5ccbb305afc645890a10bac8a03dc7508a9634aa5aa45551655ac4c0bca1a778f4ec92374080d7fee1ccea3dc5b6b4562d2113e6dc3a07398a03b7494d17bbdb545fab22fbfd4774005bf777fe577892dec306b410c4b2b8f88405d364af888b0ba92032df0d1d32c7d6d88edba237458b0814cf631c05f1dd85e02ec0aafdd5279c185b83de70c832b2dbb96303a30e25f8dd1ddc8719cfe5557405937145bb242100a2de48859e8d0f9292e3eabf83159dd16b72a38d09deaffcc6e88de34b38d7c6f11e60b9a234d3a499e3bf3edb2a5980f85365520f5997b0010dea16247811246333f6e26a23a6afbe13fff8528ae399c3368657707f303e5080032b4406369d93ca3fa660acf3ff6b1107956904856637316ac187d565fb8f5e122bf9af21ceaa3b182cf69c825d43cb31d0102ec20aac957b58bc82929799d4d54d5b5fe30a2340d23f1488bf8a38deb7504cd4b21b1e40d0222a01ddb38df8b23ee460af5f2e7ed541314cbbeae5850207f9db98734a6950224eaf509750c90521d9a27c5beae10790ecffa312b5ba5219f4677742bf09b9cb5c463af86f5a5c3d1538eb0aa9a153865d4d1e81dd86151257b9095afa9730ad2e1f8a6a98be427b2570fd773121ebe673482df217c59781bbb156b96ac4e839e83c0e27db411b28048e641d569fe470c865cbe663c655c455a3baee6d3b6875540c98abbca1994a87a3dc32095021750089d9785b78d6243b755bd8cadebf983d6cd7cf1308b03689c5d156b42cba228ea85925eff6ca7b9f6edce031a51a22723868aaa979496583225c25aed9539e3c80008ac319ad0ca912654d921f15233936a857d1de8473bd0897b7cad496692c3abca663cbb002c97aa549b9c2d436b69c018ca7973c8b0ce67dcfb3db314f041b898e5d178d5b4f0ab6632824e8411ae0b6fc6fdd663d7e44029a3eac513dcba84da2e6c6d2ff1be83f9f2b7e641c8ed152e1e67d0e901df0d94c39f7a46364f4f819364ae598063d85bcda4d37edc409384cb2c2b36ca957d9a23d4935a07c9b17b78adef4295dfd5b81e9edb9a4661de9c179e50c00f876b45dccb5b0f6f2539f2b8f97511c60257537a4bcdd2b43a086a050d95c216d133c5ce73b8851dd010171a2c2479b50d346d9aa298ec98c16686a33ca0cfef3a08330242897745618d816be99719be076bc1f5c3530d40d7cbe510ac644e112efb00907d1b585d02d361378d973ed88327ecef935a61e3e92364bf475e7b9b1eb494f74c1ffcac338f95547e9675cb9cee11a653f33edc196a323633264e8ab2204d9b3fa640cc9da6aefcb172da302206f20eb0ece7b3fa96bcbaba8f5c76fbb376e1df0cfa5593acc4876f875087ba67423a58a29f302c58c58e24b6ccf3a7289709de1de14dd672bfdf714ecb7d4109a88bbf70481f6a7937711e71c0952390805334d6406f1749fb7578ef763ba01c1aef4fd52df167cbe37e9d212868d5d9ca6598093507361a29e65e86b17e2b", 0x1000}, {&(0x7f00000016c0)="1df65709deb28dcb2bdfa4c19c4e0ad798eaa472f47fcdc20898e52a2be9ee07b9c9deb70eec484c847d4093fbca8c57f8daa316de6e519d9e0fa70566eb88ad7c779f2e2b7ec491c291ffdb3599932fbb35824c697c81642cef187188edb7af49ef461f32bd392de914eea7f15f49ff3c", 0x71}, {&(0x7f0000001740)="dc221763d003", 0x6}, {&(0x7f0000001780)="06fa6e8c92d9d4372323cce5f9aeabb99e839f58177fab5fc4fcf875babbf320504e130f22776316ab763dfb38381eee97627fed6c92e1e9c43e9606fa6abc9f0e5b1958622f90584538bcb6d525afbe6bac9350d34d03a345a8a3df4e627e181d823739759e2e854668634561f1554934dfba6a960c7c41e95f482df7a18c4131a76e3817e6769abbe65512955146fbc6609f0577fd21ba5a2b3bba6d748397546da8b23330055091966b12c8a86d9670", 0xb1}, {&(0x7f0000001840)="c83904f101a442c1954442eb4e44d725ca8ede1e48745e33612679392cbafb6601946f3f4298f1b63c470c10a33335c7a7ce44b3ef1fbd05fbdf527abcf0fa39c034a8adb42923c402d2f513b2550c5249ccaed2c232c4c71e141fdbb197778ae4ef", 0x62}, {&(0x7f00000018c0)="5ab16324d132d2a68d16f9bafa69cec3834457f156daa7b5489b320bcfaaf3ab00f5d37004d40d003db5732b48ac4b1bfa71bd54841dddeca99bbf982fcd360742ea2e910547b6b07a5d7f3787479960ff62333bc45e328eff614333ca31db49cdd8eb96e9abbc8b6e375d0ac738d4067784fef9ea48b5d83b858c1a65bce8599a57a4dd139350a4511f0f4e97689af2cb4aac7b03971318", 0x98}, {&(0x7f0000001980)="f3a3474e4c060f5b88044889b160158f8fbaa1cfd57f4263eafe191bb5b3dde15ad2c5f8482ed3e4e4df52b5049dd7f2bd0b7322cd0dc4d05afde35b1a7acc1f6b1ac3c480b12856ea260a3c69c3a9c417784294f500aea10496cdc09f0a4de7f560aa1d2360d1d46f237b0b635f13ee29121a5a6c2a1d4262ff06cb65d548", 0x7f}, {&(0x7f0000001a00)="63e65028af33", 0x6}], 0x9, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}], 0x50}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) 3.252276399s ago: executing program 1 (id=3562): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 3.012034799s ago: executing program 1 (id=3566): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x5, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/246, 0xf6, 0x0, &(0x7f00000004c0)=""/14, 0xe}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x7ff, 0x40, &(0x7f0000000240)=""/64, 0x41000, 0x2, '\x00', r2, @fallback=0x24, r3, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0xdd}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r5, r6], &(0x7f0000000700)=[{0x1, 0x1, 0x3, 0x4}, {0x3, 0x5, 0x2, 0x6}, {0x5, 0x4, 0x4, 0x6}, {0x0, 0x4, 0x4, 0xa}], 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 2.913406505s ago: executing program 3 (id=3568): socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0, 0x3e, 0x0, 0x1}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x45, 0x0, 0x128}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.811469422s ago: executing program 0 (id=3569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x80000001, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x0, 0x5, 0x2, 0x4}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') sendmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000700)=@in={0x2, 0x4e22, @empty}, 0x80, 0x0}, 0xc00c) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x41, 0x12, &(0x7f0000000340)="9f9d2200931dfc630f619261c07f9b96f1aff6ef85e2c760216db18ed05098f9b15fc46ce1f4d81cd08694ae7d52ec4bb38bc71da8b8017fde118f872a54c3ac75", &(0x7f00000003c0)=""/18, 0x7fff, 0x0, 0xc, 0xbe, &(0x7f0000000400)="27996e96cbcedb8f4fbe3f5a", &(0x7f0000000440)="c186dcb9a83b21923f305578f15f58f624d716bd4621957289b2aab4d1a645c6df7555b1832a77bc4aea99884275d07f4bc20c8480ba3eb30534d797eb37cb201cbff08bbc1328d66a6bd8e6ed1d0a4c4d84e23208e7cb8dacd16c9df0be8596f39a262e8267c3b0d4b386f8f8b9e893f2dc8330061e4beea8d5384ae237554a979261bd2ff95e1d98a89ef9da6f4e9d0df7be260f4576090d641db5e0ed4b194d9062ae17104be98b18afc3fdae3b4fef69f79891bd46cd6e1349653de9", 0x1, 0x0, 0x6}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r0, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001b40)=[0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000001bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) sendmsg$inet(r2, &(0x7f0000001e80)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000005c0)="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", 0xfa}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="1df65709deb28dcb2bdfa4c19c4e0ad798eaa472f47fcdc20898e52a2be9ee07b9c9deb70eec484c847d4093fbca8c57f8daa316de6e519d9e0fa70566eb88ad7c779f2e2b7ec491c291ffdb3599932fbb35824c697c81642cef187188edb7af49ef461f32bd392de914eea7f15f49ff3c", 0x71}, {&(0x7f0000001740)="dc221763d003", 0x6}, {&(0x7f0000001780)="06fa6e8c92d9d4372323cce5f9aeabb99e839f58177fab5fc4fcf875babbf320504e130f22776316ab763dfb38381eee97627fed6c92e1e9c43e9606fa6abc9f0e5b1958622f90584538bcb6d525afbe6bac9350d34d03a345a8a3df4e627e181d823739759e2e854668634561f1554934dfba6a960c7c41e95f482df7a18c4131a76e3817e6769abbe65512955146fbc6609f0577fd21ba5a2b3bba6d748397546da8b23330055091966b12c8a86d9670", 0xb1}, {&(0x7f0000001840)="c83904f101a442c1954442eb4e44d725ca8ede1e48745e33612679392cbafb6601946f3f4298f1b63c470c10a33335c7a7ce44b3ef1fbd05fbdf527abcf0fa39c034a8adb42923c402d2f513b2550c5249ccaed2c232c4c71e141fdbb197778ae4ef", 0x62}, {&(0x7f00000018c0)="5ab16324d132d2a68d16f9bafa69cec3834457f156daa7b5489b320bcfaaf3ab00f5d37004d40d003db5732b48ac4b1bfa71bd54841dddeca99bbf982fcd360742ea2e910547b6b07a5d7f3787479960ff62333bc45e328eff614333ca31db49cdd8eb96e9abbc8b6e375d0ac738d4067784fef9ea48b5d83b858c1a65bce8599a57a4dd139350a4511f0f4e97689af2cb4aac7b03971318", 0x98}, {&(0x7f0000001980)="f3a3474e4c060f5b88044889b160158f8fbaa1cfd57f4263eafe191bb5b3dde15ad2c5f8482ed3e4e4df52b5049dd7f2bd0b7322cd0dc4d05afde35b1a7acc1f6b1ac3c480b12856ea260a3c69c3a9c417784294f500aea10496cdc09f0a4de7f560aa1d2360d1d46f237b0b635f13ee29121a5a6c2a1d4262ff06cb65d548", 0x7f}, {&(0x7f0000001a00)="63e65028af33", 0x6}], 0x9, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}], 0x50}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) 2.756195932s ago: executing program 1 (id=3570): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/225, 0xe1}], 0x8}, 0x0) 2.636601781s ago: executing program 2 (id=3571): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000150097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000009000000ed5000000800000000000000", @ANYRES32, @ANYBLOB="03000000000000000000000000130000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000040800000006"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000a40)="f9b5cf3136c2", &(0x7f0000000a80), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000380)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="1698248621a738bbb6749ad61eef22c684851ccd69c43af20b8ea6d3cdcecc599d7ff62d2343673066de2cd7102f6b9d7da3c2802dcbcc53cdc9e5b581014786ac765bedf94abe3a703c2274d56b7b3263ea2ac3b5254f21d5b4f060bff4b978168be94bf7c68164a259bdfb4e093267288308d0a32ffee9dac18bf5a7efea8f3e1263abbac245ec21fff1aa1d5ff485ba4c7b9cd9462065e3091a008c825459683063800ad71422835c626f39aa7b5dd95abfac278a2308cb8791dd4038ed2efe", 0xc1}, {&(0x7f0000000400)="31a925aaac91a00320b7edf3b20dc2fd90", 0x11}, {&(0x7f0000000680)="a8a3871ee801965c09a8584da6cb7e93ecc96811d0455c37c03af19eafacbdf264613b7049647aaf50c7b9b4e8052686fdc5a9ce7fa4ca89d77135b453b8980ec6604ae3e679071f1a0278514dd9ccf621d6b6b96b83a0bf4e5cbe3bba96fb99b6cad028124a49e906dcb193fdf8451517f9c290babe823536f364942dd2b682cfc8f1c4cc4d07cfff1b2a032d18217c2e3032af3f664d021fb7a0dbeea172c94d65e0d2dca332a05ce20bf16d8466e232976ef4adbb2a7a3e3c1e23709a938b858d0d97a804a6f38957ae90cf1c629f98a3dd82b1f93867b2c75ae20b27c2336df6304bb4c9de0fd19664bd60a6d8dfb533daf70dc1af91238f3f122112", 0xfe}, {&(0x7f0000000440)="286dbbe4722e494e", 0x8}], 0x4, &(0x7f00000007c0)=[{0xa0, 0x388644903e2eee52, 0x9, "c0c76e7043ff9c7ab4866d94a46a2a7d4ed9b9d8940fb5ba9ac96b88782ca47ad5fcdd7d13285e444c1f2b10b34b4045a828283ddbfcda8c8293ec91e7d6c0d5c3c8399d105b087f42cb6092e88ebc37bf6509ab3c3c7fc91d0279d5d39a507e5d9896c022498eaf64657175aeebdef2da8099cd5a7a863c658d6cf66a9f0fb4ef148c541ce993c767"}, {0x100, 0x6, 0x2, "8116e4c31f55d1d9a8793cf1014840b0441e6239bd39d834ac184ceff6f441d6f19a29186e2fd504c7a802e202233709deb41b63b61f3d375389039c766a724ef39b1252a88c8c658c2bf27e55e7310692da6607ec5f8fb3a1412881e6f751eda4873afad567feb407fad28a1ad8f8e896ca9fe4610cf5caf8238edd31dd192f9fd3c40a748ed709caf614a3d4f9acb31397413740dea395f219566ddd6804fa9a9b2559076af6ccbdb1b66bf8339bdb36ffd88c1e99803b8f1905bfc16b1fd2e2f65e01d4fdd6b82afbfa5f0294f726439ddaeb2b871067db1144e3b5f80ce95d7ad73294d5ea62361f7d"}, {0x88, 0xff, 0x8000, "54cd404e8589bb0e2f8ecd6d376d945d2c03c18f70831ecb0f473f519e5a1bef88a378a14f3c4b32478df5b26031024ff02e6ea807ae792a77ca552e57ea24b1a4ccb86cce3009f2372408b8487bd79b6b6886394203c46c9105947701f31b56d9cb6dfdce2187878de99dccd38c5341c14a0f36"}], 0x228}, 0x840) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fc, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 2.558665305s ago: executing program 3 (id=3572): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.327981373s ago: executing program 0 (id=3573): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0xad, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000b000000072740200f6ffffffdd06300000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000950000004800000095000000000000000000000000000000802f107c6eefc99cd12c63f1059c0d423a0f9e0003628409c3e383eb6901e7d0cd1d7e429f36576bc8dfd816a157390735c8ff7fffffffffffff157a8220b67b6cc40eb50662a246c5f7ed904653b317bec368fdc8b26b706cb5d8085a791b71a9ac38af41bbd5fa9cebc525ce8c0bc88151e830f3f8b28d2ab50a169f3c44783a"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x7, 0x73, 0x4, 0x2, 0x0, 0xe, 0x40c44, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3fffe, 0x8}, 0x10060, 0x349b, 0x20000003, 0x6, 0x40007, 0xffff, 0xf0, 0x0, 0x6b, 0x0, 0x4}) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x34, 0x1, 0x10001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc", 0x29}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.564468s ago: executing program 1 (id=3574): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0xd552, 0x35, 0x43a1bd76, 0x3, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b", 0x7}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0xffffffff, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@fallback=r1, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x5, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5ef}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @ldst={0x3, 0x2, 0x4, 0xa, 0x0, 0xfffffffffffffff8}], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r0, r2, r0], 0x0, 0x10, 0xffff}, 0x94) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='b 75:'], 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffeffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x1, 0x1, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002a40)}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1.56377275s ago: executing program 0 (id=3575): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x8, 0x4, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\a\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8902, &(0x7f0000000040)) close(r3) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b40)=ANY=[@ANYRES8=r5, @ANYRES32=0x1, @ANYRESHEX=r5], 0xfffffd0f) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0, r1}, 0xc) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x0, 0x300) 1.287939066s ago: executing program 2 (id=3576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x80000001, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') sendmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000700)=@in={0x2, 0x4e22, @empty}, 0x80, 0x0}, 0xc00c) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x41, 0x12, &(0x7f0000000340)="9f9d2200931dfc630f619261c07f9b96f1aff6ef85e2c760216db18ed05098f9b15fc46ce1f4d81cd08694ae7d52ec4bb38bc71da8b8017fde118f872a54c3ac75", &(0x7f00000003c0)=""/18, 0x7fff, 0x0, 0xc, 0xbe, &(0x7f0000000400)="27996e96cbcedb8f4fbe3f5a", &(0x7f0000000440)="c186dcb9a83b21923f305578f15f58f624d716bd4621957289b2aab4d1a645c6df7555b1832a77bc4aea99884275d07f4bc20c8480ba3eb30534d797eb37cb201cbff08bbc1328d66a6bd8e6ed1d0a4c4d84e23208e7cb8dacd16c9df0be8596f39a262e8267c3b0d4b386f8f8b9e893f2dc8330061e4beea8d5384ae237554a979261bd2ff95e1d98a89ef9da6f4e9d0df7be260f4576090d641db5e0ed4b194d9062ae17104be98b18afc3fdae3b4fef69f79891bd46cd6e1349653de9", 0x1, 0x0, 0x6}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r0, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001b40)=[0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000001bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) sendmsg$inet(r2, &(0x7f0000001e80)={&(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000005c0)="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", 0xfa}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="1df65709deb28dcb2bdfa4c19c4e0ad798eaa472f47fcdc20898e52a2be9ee07b9c9deb70eec484c847d4093fbca8c57f8daa316de6e519d9e0fa70566eb88ad7c779f2e2b7ec491c291ffdb3599932fbb35824c697c81642cef187188edb7af49ef461f32bd392de914eea7f15f49ff3c", 0x71}, {&(0x7f0000001740)="dc221763d003", 0x6}, {&(0x7f0000001780)="06fa6e8c92d9d4372323cce5f9aeabb99e839f58177fab5fc4fcf875babbf320504e130f22776316ab763dfb38381eee97627fed6c92e1e9c43e9606fa6abc9f0e5b1958622f90584538bcb6d525afbe6bac9350d34d03a345a8a3df4e627e181d823739759e2e854668634561f1554934dfba6a960c7c41e95f482df7a18c4131a76e3817e6769abbe65512955146fbc6609f0577fd21ba5a2b3bba6d748397546da8b23330055091966b12c8a86d9670", 0xb1}, {&(0x7f0000001840)="c83904f101a442c1954442eb4e44d725ca8ede1e48745e33612679392cbafb6601946f3f4298f1b63c470c10a33335c7a7ce44b3ef1fbd05fbdf527abcf0fa39c034a8adb42923c402d2f513b2550c5249ccaed2c232c4c71e141fdbb197778ae4ef", 0x62}, {&(0x7f00000018c0)="5ab16324d132d2a68d16f9bafa69cec3834457f156daa7b5489b320bcfaaf3ab00f5d37004d40d003db5732b48ac4b1bfa71bd54841dddeca99bbf982fcd360742ea2e910547b6b07a5d7f3787479960ff62333bc45e328eff614333ca31db49cdd8eb96e9abbc8b6e375d0ac738d4067784fef9ea48b5d83b858c1a65bce8599a57a4dd139350a4511f0f4e97689af2cb4aac7b03971318", 0x98}, {&(0x7f0000001980)="f3a3474e4c060f5b88044889b160158f8fbaa1cfd57f4263eafe191bb5b3dde15ad2c5f8482ed3e4e4df52b5049dd7f2bd0b7322cd0dc4d05afde35b1a7acc1f6b1ac3c480b12856ea260a3c69c3a9c417784294f500aea10496cdc09f0a4de7f560aa1d2360d1d46f237b0b635f13ee29121a5a6c2a1d4262ff06cb65d548", 0x7f}, {&(0x7f0000001a00)="63e65028af33", 0x6}], 0x9, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}], 0x50}, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) 1.01735298s ago: executing program 3 (id=3577): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x8}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdb, 0xdb, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xff3}, {0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8d, 0x10}], "b00ef3"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xfa, 0x1000, 0x1, 0x7}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) ioctl$TUNGETVNETLE(r8, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 998.999084ms ago: executing program 2 (id=3578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1, 0x0, 0x241}, 0x408c4) 901.36797ms ago: executing program 0 (id=3579): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002120) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69da}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xf, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x3, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000980)=[r7, r2, r3, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001500000008000000400000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r8, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 899.92644ms ago: executing program 1 (id=3580): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000061bb000000000040000000006100d86bdb00840e50c30785f825922dc8f4c5df56002434f0"], 0x0, 0x2d}, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb6", 0x2f}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 552.023178ms ago: executing program 2 (id=3581): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d290470869bccf810800", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000100"/28], 0x50) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x7a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x4d, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x28, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x748e}, @call={0x85, 0x0, 0x0, 0x93}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x84, &(0x7f0000000700)=""/132, 0x40f00, 0x14, '\x00', r5, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xd, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, r4, r4], &(0x7f0000000880), 0x10, 0x5}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000006, 0x0) recvmsg$kcm(r7, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711034000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 483.555549ms ago: executing program 0 (id=3582): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910bc00000000001500"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 224.573472ms ago: executing program 0 (id=3583): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000032c0)=""/4111, 0x100f}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) (fail_nth: 5) 108.349322ms ago: executing program 2 (id=3584): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8912, &(0x7f0000000000)) 64.09639ms ago: executing program 3 (id=3585): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x20840, 0x2, 0xfffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000017c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r5, 0x8) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r9}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=3586): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): er_hwframe+0x68/0xd2 [ 889.370583][T14772] RIP: 0033:0x7ffb1259c819 [ 889.375022][T14772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.394987][T14772] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.403532][T14772] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 889.411512][T14772] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 889.419654][T14772] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 889.427730][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.435825][T14772] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 889.443882][T14772] [ 889.463337][T14772] syzkaller0: refused to change device tx_queue_len [ 889.918946][T14790] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2895'. [ 889.951880][T14790] bridge_slave_1: default FDB implementation only supports local addresses [ 890.279183][T14799] netlink: 'syz.0.2899': attribute type 10 has an invalid length. [ 890.341456][T14801] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2900'. [ 890.378004][T14801] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.2900'. [ 890.793816][T14806] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 891.409850][T14820] netlink: 'syz.0.2913': attribute type 10 has an invalid length. [ 891.463466][T14820] __nla_validate_parse: 2 callbacks suppressed [ 891.463484][T14820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2913'. [ 892.314003][T14836] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2909'. [ 892.506525][T14842] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2911'. [ 892.529518][T14842] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.2911'. [ 892.688222][T14850] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2915'. [ 892.718604][T14850] bridge_slave_1: default FDB implementation only supports local addresses [ 892.810156][T14855] netlink: 'syz.2.2916': attribute type 10 has an invalid length. [ 893.014614][T14857] netlink: 'syz.0.2917': attribute type 9 has an invalid length. [ 893.044525][T14857] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2917'. [ 893.101755][T14864] netlink: 'syz.0.2917': attribute type 9 has an invalid length. [ 893.113288][T14864] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2917'. [ 893.285231][T14868] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2919'. [ 893.333585][T14868] netlink: 22828 bytes leftover after parsing attributes in process `syz.1.2919'. [ 893.429694][T14867] netlink: 'syz.3.2920': attribute type 10 has an invalid length. [ 893.450725][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2920'. [ 893.616983][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 894.003435][T14877] FAULT_INJECTION: forcing a failure. [ 894.003435][T14877] name failslab, interval 1, probability 0, space 0, times 0 [ 894.091580][T14877] CPU: 0 PID: 14877 Comm: syz.1.2923 Not tainted syzkaller #0 [ 894.099129][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 894.109320][T14877] Call Trace: [ 894.112634][T14877] [ 894.115618][T14877] dump_stack_lvl+0x18c/0x250 [ 894.120358][T14877] ? show_regs_print_info+0x20/0x20 [ 894.125790][T14877] ? load_image+0x420/0x420 [ 894.130396][T14877] should_fail_ex+0x39d/0x4d0 [ 894.135386][T14877] should_failslab+0x9/0x20 [ 894.139940][T14877] slab_pre_alloc_hook+0x59/0x310 [ 894.145008][T14877] ? perf_trace_lock_acquire+0x34f/0x410 [ 894.150751][T14877] ? ___neigh_create+0x6d2/0x2440 [ 894.155836][T14877] ? ___neigh_create+0x6d2/0x2440 [ 894.160921][T14877] __kmem_cache_alloc_node+0x53/0x250 [ 894.166395][T14877] ? ___neigh_create+0x6d2/0x2440 [ 894.171476][T14877] __kmalloc+0xa4/0x230 [ 894.175758][T14877] ___neigh_create+0x6d2/0x2440 [ 894.180860][T14877] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 894.186978][T14877] ip6_finish_output2+0x1581/0x1630 [ 894.192338][T14877] ? ip6_finish_output2+0x645/0x1630 [ 894.197658][T14877] ? ip6_mtu+0x7d/0x3f0 [ 894.201830][T14877] ? nf_hook+0x390/0x390 [ 894.206269][T14877] ? ip6_finish_output+0x57b/0x820 [ 894.211410][T14877] rawv6_send_hdrinc+0xd9e/0x1640 [ 894.216530][T14877] ? txopt_get+0x3f0/0x3f0 [ 894.221080][T14877] ? txopt_get+0x344/0x3f0 [ 894.225517][T14877] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 894.231420][T14877] ? fl6_sock_lookup+0xc0/0xc0 [ 894.236825][T14877] rawv6_sendmsg+0x12cc/0x1770 [ 894.241821][T14877] ? compat_rawv6_ioctl+0x70/0x70 [ 894.246994][T14877] ? aa_sk_perm+0x83c/0x970 [ 894.251566][T14877] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 894.258101][T14877] ? inet_sendmsg+0x7c/0x2f0 [ 894.262701][T14877] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 894.267997][T14877] ? security_socket_sendmsg+0x80/0xa0 [ 894.273462][T14877] ? inet_send_prepare+0x260/0x260 [ 894.278717][T14877] ____sys_sendmsg+0x5ba/0x960 [ 894.283602][T14877] ? __lock_acquire+0x7d40/0x7d40 [ 894.288829][T14877] ? __asan_memset+0x22/0x40 [ 894.293435][T14877] ? __sys_sendmsg_sock+0x30/0x30 [ 894.298637][T14877] ? __import_iovec+0x5f2/0x850 [ 894.303512][T14877] ? import_iovec+0x73/0xa0 [ 894.308033][T14877] ___sys_sendmsg+0x2a6/0x360 [ 894.312723][T14877] ? get_pid_task+0x20/0x1e0 [ 894.317378][T14877] ? __sys_sendmsg+0x2a0/0x2a0 [ 894.322210][T14877] ? __lock_acquire+0x7d40/0x7d40 [ 894.327301][T14877] __se_sys_sendmsg+0x1c2/0x2b0 [ 894.332167][T14877] ? __x64_sys_sendmsg+0x80/0x80 [ 894.337154][T14877] ? lockdep_hardirqs_on+0x98/0x150 [ 894.342462][T14877] do_syscall_64+0x55/0xa0 [ 894.346884][T14877] ? clear_bhb_loop+0x40/0x90 [ 894.351863][T14877] ? clear_bhb_loop+0x40/0x90 [ 894.356598][T14877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.362543][T14877] RIP: 0033:0x7ffb1259c819 [ 894.366983][T14877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.386949][T14877] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.395486][T14877] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 894.403477][T14877] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 894.411555][T14877] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 894.419620][T14877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.427714][T14877] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 894.435838][T14877] [ 895.027603][T14896] FAULT_INJECTION: forcing a failure. [ 895.027603][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 895.075119][T14896] CPU: 0 PID: 14896 Comm: syz.3.2930 Not tainted syzkaller #0 [ 895.082664][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 895.092955][T14896] Call Trace: [ 895.096316][T14896] [ 895.099394][T14896] dump_stack_lvl+0x18c/0x250 [ 895.104136][T14896] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 895.110435][T14896] ? show_regs_print_info+0x20/0x20 [ 895.115722][T14896] ? load_image+0x420/0x420 [ 895.120333][T14896] should_fail_ex+0x39d/0x4d0 [ 895.125074][T14896] should_failslab+0x9/0x20 [ 895.129637][T14896] slab_pre_alloc_hook+0x59/0x310 [ 895.134740][T14896] kmem_cache_alloc_node+0x60/0x320 [ 895.139982][T14896] ? __alloc_skb+0x103/0x2c0 [ 895.144630][T14896] __alloc_skb+0x103/0x2c0 [ 895.149094][T14896] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 895.154452][T14896] rtmsg_ifinfo+0x8c/0x1a0 [ 895.158941][T14896] netdev_state_change+0xfe/0x170 [ 895.164011][T14896] ? netdev_features_change+0xd0/0xd0 [ 895.169559][T14896] do_setlink+0x84a/0x4130 [ 895.174063][T14896] ? radix_tree_cpu_dead+0x160/0x160 [ 895.179472][T14896] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 895.185665][T14896] ? rcu_is_watching+0x15/0xb0 [ 895.190488][T14896] ? do_trace_netlink_extack+0x7e/0x1a0 [ 895.196167][T14896] ? __nla_validate+0x50/0x50 [ 895.200885][T14896] ? __nla_validate_parse+0x262c/0x2ea0 [ 895.206562][T14896] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 895.212361][T14896] ? mark_lock+0x94/0x320 [ 895.216733][T14896] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 895.222770][T14896] ? __nla_parse+0x40/0x50 [ 895.227364][T14896] ? inet_validate_link_af+0x18d/0x410 [ 895.232845][T14896] ? inet_validate_link_af+0x34a/0x410 [ 895.238352][T14896] ? inet_get_link_af_size+0xe0/0xe0 [ 895.243708][T14896] ? validate_linkmsg+0x77e/0x910 [ 895.248797][T14896] rtnl_newlink+0x17da/0x20a0 [ 895.253516][T14896] ? rtnl_newlink+0x441/0x20a0 [ 895.258323][T14896] ? rtnl_setlink+0x4e0/0x4e0 [ 895.263020][T14896] ? trace_raw_output_contention_end+0xd0/0xd0 [ 895.269238][T14896] ? rcu_is_watching+0x15/0xb0 [ 895.274026][T14896] ? trace_contention_end+0x39/0xe0 [ 895.279323][T14896] ? __mutex_lock+0x315/0xcc0 [ 895.284067][T14896] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 895.289197][T14896] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 895.294318][T14896] ? rtnl_setlink+0x4e0/0x4e0 [ 895.299006][T14896] rtnetlink_rcv_msg+0x869/0xfa0 [ 895.304065][T14896] ? rtnetlink_bind+0x80/0x80 [ 895.308867][T14896] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 895.315049][T14896] ? lockdep_hardirqs_on+0x98/0x150 [ 895.320271][T14896] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 895.326476][T14896] ? __dev_queue_xmit+0x265/0x3660 [ 895.331633][T14896] ? __local_bh_enable_ip+0x142/0x1c0 [ 895.337110][T14896] ? _local_bh_enable+0xa0/0xa0 [ 895.341982][T14896] ? __dev_queue_xmit+0x265/0x3660 [ 895.347105][T14896] ? __dev_queue_xmit+0x265/0x3660 [ 895.352235][T14896] ? __dev_queue_xmit+0x1b2c/0x3660 [ 895.357730][T14896] ? __dev_queue_xmit+0x265/0x3660 [ 895.362852][T14896] ? __copy_skb_header+0xa3/0x4a0 [ 895.367931][T14896] ? __copy_skb_header+0xa3/0x4a0 [ 895.372986][T14896] ? ref_tracker_free+0x690/0x840 [ 895.378051][T14896] netlink_rcv_skb+0x241/0x4d0 [ 895.382833][T14896] ? rtnetlink_bind+0x80/0x80 [ 895.387526][T14896] ? netlink_ack+0x1180/0x1180 [ 895.392326][T14896] ? __lock_acquire+0x7d40/0x7d40 [ 895.397487][T14896] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.402710][T14896] netlink_unicast+0x751/0x8d0 [ 895.407625][T14896] netlink_sendmsg+0x8d0/0xbf0 [ 895.412425][T14896] ? netlink_getsockopt+0x590/0x590 [ 895.417690][T14896] ? aa_sock_msg_perm+0x94/0x150 [ 895.422674][T14896] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 895.427969][T14896] ? security_socket_sendmsg+0x80/0xa0 [ 895.433470][T14896] ? netlink_getsockopt+0x590/0x590 [ 895.438691][T14896] ____sys_sendmsg+0x5ba/0x960 [ 895.443486][T14896] ? __asan_memset+0x22/0x40 [ 895.448100][T14896] ? __sys_sendmsg_sock+0x30/0x30 [ 895.453147][T14896] ? __import_iovec+0x5f2/0x850 [ 895.458036][T14896] ? import_iovec+0x73/0xa0 [ 895.462564][T14896] ___sys_sendmsg+0x2a6/0x360 [ 895.467356][T14896] ? __sys_sendmsg+0x2a0/0x2a0 [ 895.472189][T14896] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 895.478624][T14896] __se_sys_sendmsg+0x1c2/0x2b0 [ 895.483497][T14896] ? __x64_sys_sendmsg+0x80/0x80 [ 895.488656][T14896] ? lockdep_hardirqs_on+0x98/0x150 [ 895.493984][T14896] do_syscall_64+0x55/0xa0 [ 895.498894][T14896] ? clear_bhb_loop+0x40/0x90 [ 895.503606][T14896] ? clear_bhb_loop+0x40/0x90 [ 895.508432][T14896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.514441][T14896] RIP: 0033:0x7f08b4b9c819 [ 895.518894][T14896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.538622][T14896] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.547143][T14896] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 895.555123][T14896] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 895.563194][T14896] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 895.571391][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.579386][T14896] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 895.587499][T14896] [ 895.643936][T14894] netlink: 'syz.2.2929': attribute type 10 has an invalid length. [ 896.070822][T14912] FAULT_INJECTION: forcing a failure. [ 896.070822][T14912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.109874][T14912] CPU: 1 PID: 14912 Comm: syz.3.2934 Not tainted syzkaller #0 [ 896.117437][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 896.127607][T14912] Call Trace: [ 896.130910][T14912] [ 896.133858][T14912] dump_stack_lvl+0x18c/0x250 [ 896.138564][T14912] ? show_regs_print_info+0x20/0x20 [ 896.143791][T14912] ? load_image+0x420/0x420 [ 896.148343][T14912] ? __might_fault+0xaa/0x120 [ 896.153506][T14912] ? __lock_acquire+0x7d40/0x7d40 [ 896.158568][T14912] should_fail_ex+0x39d/0x4d0 [ 896.163328][T14912] _copy_from_iter+0x1d9/0x12e0 [ 896.168197][T14912] ? rep_movs_alternative+0x4a/0x90 [ 896.173620][T14912] ? _copy_from_iter+0x24e/0x12e0 [ 896.178714][T14912] ? __virt_addr_valid+0x18c/0x540 [ 896.183921][T14912] ? __lock_acquire+0x7d40/0x7d40 [ 896.188943][T14912] ? copyout_mc+0x70/0x70 [ 896.193361][T14912] ? copyout_mc+0x70/0x70 [ 896.197804][T14912] ? __virt_addr_valid+0x18c/0x540 [ 896.202958][T14912] ? page_copy_sane+0x16a/0x270 [ 896.207957][T14912] copy_page_from_iter+0x7b/0x100 [ 896.213023][T14912] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 896.218856][T14912] tun_get_user+0x15db/0x3ca0 [ 896.223747][T14912] ? aa_file_perm+0x11b/0xee0 [ 896.228531][T14912] ? rcu_read_unlock+0xa0/0xa0 [ 896.233353][T14912] ? tun_get+0x1c/0x2e0 [ 896.237686][T14912] ? __lock_acquire+0x7d40/0x7d40 [ 896.242908][T14912] ? tun_get+0x1c/0x2e0 [ 896.247074][T14912] tun_chr_write_iter+0x119/0x200 [ 896.252126][T14912] vfs_write+0x46c/0x990 [ 896.256377][T14912] ? file_end_write+0x250/0x250 [ 896.261227][T14912] ? __fget_files+0x43d/0x4b0 [ 896.266034][T14912] ? __fdget_pos+0x1d8/0x330 [ 896.270804][T14912] ? ksys_write+0x75/0x260 [ 896.275324][T14912] ksys_write+0x150/0x260 [ 896.279656][T14912] ? __ia32_sys_read+0x90/0x90 [ 896.284513][T14912] ? lockdep_hardirqs_on+0x98/0x150 [ 896.289727][T14912] do_syscall_64+0x55/0xa0 [ 896.294158][T14912] ? clear_bhb_loop+0x40/0x90 [ 896.298863][T14912] ? clear_bhb_loop+0x40/0x90 [ 896.303931][T14912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.309837][T14912] RIP: 0033:0x7f08b4b9c819 [ 896.314254][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.334055][T14912] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.342568][T14912] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 896.350557][T14912] RDX: 000000000000cfa4 RSI: 0000200000000940 RDI: 00000000000000c8 [ 896.358552][T14912] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 896.366710][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.374700][T14912] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 896.382866][T14912] [ 897.184867][T14928] netlink: 'syz.2.2939': attribute type 10 has an invalid length. [ 897.196846][T14928] netlink: 'syz.2.2939': attribute type 9 has an invalid length. [ 897.205419][T14928] __nla_validate_parse: 7 callbacks suppressed [ 897.205434][T14928] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2939'. [ 897.507408][T14934] netlink: 'syz.1.2942': attribute type 10 has an invalid length. [ 897.624678][T14936] netlink: 'syz.3.2943': attribute type 9 has an invalid length. [ 897.675002][T14936] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2943'. [ 897.733100][T14942] netlink: 'syz.3.2943': attribute type 9 has an invalid length. [ 897.741567][T14942] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2943'. [ 897.852462][T14945] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 897.937361][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2946'. [ 897.958175][T14943] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2945'. [ 897.974127][T14943] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2945'. [ 898.736859][T14959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2949'. [ 898.747281][T14959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2949'. [ 898.759103][T14959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2949'. [ 898.850545][T14961] netlink: 'syz.2.2950': attribute type 9 has an invalid length. [ 898.858881][T14961] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2950'. [ 898.946412][T14964] netlink: 'syz.2.2950': attribute type 9 has an invalid length. [ 899.027034][T14966] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 899.077207][T14966] netlink: 'syz.0.2952': attribute type 9 has an invalid length. [ 899.811726][T14984] netlink: 'syz.3.2957': attribute type 10 has an invalid length. [ 899.833627][T14988] netlink: 'syz.0.2958': attribute type 10 has an invalid length. [ 900.059721][T14994] netlink: 'syz.2.2960': attribute type 10 has an invalid length. [ 900.331060][T15006] netlink: 'syz.0.2963': attribute type 9 has an invalid length. [ 900.373611][T15006] netlink: 'syz.0.2963': attribute type 9 has an invalid length. [ 902.237640][T15043] __nla_validate_parse: 8 callbacks suppressed [ 902.237659][T15043] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2976'. [ 903.164392][T15048] validate_nla: 6 callbacks suppressed [ 903.164411][T15048] netlink: 'syz.3.2978': attribute type 10 has an invalid length. [ 903.182078][T15048] netlink: 'syz.3.2978': attribute type 9 has an invalid length. [ 903.190706][T15048] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2978'. [ 903.283957][T15051] netlink: 'syz.2.2977': attribute type 10 has an invalid length. [ 903.740243][T15062] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2982'. [ 903.755310][T15062] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.2982'. [ 903.853248][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 905.632594][T15094] netlink: 'syz.1.2990': attribute type 10 has an invalid length. [ 905.647560][T15094] netlink: 'syz.1.2990': attribute type 9 has an invalid length. [ 905.660346][T15094] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2990'. [ 905.674981][T15100] sock: sock_timestamping_bind_phc: sock not bind to device [ 905.996928][T15104] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2994'. [ 906.020470][T15104] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.2994'. [ 906.368938][T15115] netlink: 'syz.3.2998': attribute type 9 has an invalid length. [ 906.392731][T15115] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2998'. [ 906.625649][T15117] netlink: 'syz.3.2998': attribute type 9 has an invalid length. [ 906.743019][T15117] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2998'. [ 907.505217][T15135] netlink: 'syz.3.3003': attribute type 10 has an invalid length. [ 907.542418][T15135] netlink: 'syz.3.3003': attribute type 9 has an invalid length. [ 907.568112][T15135] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3003'. [ 907.718106][T15140] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3005'. [ 907.754038][T15140] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3005'. [ 908.071301][T15148] netlink: 'syz.3.3008': attribute type 10 has an invalid length. [ 908.341393][T15154] netlink: 'syz.1.3011': attribute type 9 has an invalid length. [ 908.371481][T15154] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3011'. [ 908.673127][T15160] netlink: 'syz.1.3011': attribute type 9 has an invalid length. [ 908.680945][T15160] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3011'. [ 909.352806][T15172] FAULT_INJECTION: forcing a failure. [ 909.352806][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 909.383295][T15172] CPU: 1 PID: 15172 Comm: syz.2.3015 Not tainted syzkaller #0 [ 909.390815][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 909.400908][T15172] Call Trace: [ 909.404201][T15172] [ 909.407145][T15172] dump_stack_lvl+0x18c/0x250 [ 909.411932][T15172] ? show_regs_print_info+0x20/0x20 [ 909.417153][T15172] ? load_image+0x420/0x420 [ 909.421686][T15172] ? __might_sleep+0xe0/0xe0 [ 909.426301][T15172] ? __lock_acquire+0x7d40/0x7d40 [ 909.431344][T15172] should_fail_ex+0x39d/0x4d0 [ 909.436131][T15172] should_failslab+0x9/0x20 [ 909.440653][T15172] slab_pre_alloc_hook+0x59/0x310 [ 909.445708][T15172] kmem_cache_alloc_lru+0x4d/0x2d0 [ 909.451024][T15172] ? sock_alloc_inode+0x28/0xc0 [ 909.455990][T15172] sock_alloc_inode+0x28/0xc0 [ 909.460773][T15172] ? sockfs_init_fs_context+0xb0/0xb0 [ 909.466156][T15172] new_inode_pseudo+0x63/0x1d0 [ 909.470940][T15172] __sock_create+0x12d/0x940 [ 909.475567][T15172] mptcp_subflow_create_socket+0x10b/0xac0 [ 909.481434][T15172] ? mark_lock+0x94/0x320 [ 909.485792][T15172] ? __mptcp_subflow_connect+0x1450/0x1450 [ 909.491611][T15172] ? lock_chain_count+0x20/0x20 [ 909.496756][T15172] __mptcp_nmpc_sk+0x157/0x740 [ 909.501578][T15172] ? __local_bh_enable_ip+0x13a/0x1c0 [ 909.506964][T15172] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 909.513754][T15172] mptcp_setsockopt+0xfef/0x3390 [ 909.518710][T15172] ? __fget_files+0x28/0x4b0 [ 909.523319][T15172] ? pm_nl_exit_net+0x230/0x230 [ 909.528185][T15172] ? aa_af_perm+0x330/0x330 [ 909.532706][T15172] ? __fget_files+0x28/0x4b0 [ 909.537395][T15172] ? __fget_files+0x28/0x4b0 [ 909.542082][T15172] ? aa_sock_opt_perm+0x74/0x100 [ 909.547127][T15172] ? sock_common_setsockopt+0x36/0xc0 [ 909.552530][T15172] ? sock_common_recvmsg+0x190/0x190 [ 909.557848][T15172] do_sock_setsockopt+0x175/0x1a0 [ 909.562945][T15172] ? __fdget+0x180/0x210 [ 909.567197][T15172] __x64_sys_setsockopt+0x182/0x200 [ 909.572403][T15172] do_syscall_64+0x55/0xa0 [ 909.576826][T15172] ? clear_bhb_loop+0x40/0x90 [ 909.581511][T15172] ? clear_bhb_loop+0x40/0x90 [ 909.586199][T15172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.592099][T15172] RIP: 0033:0x7f044db9c819 [ 909.596529][T15172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.616327][T15172] RSP: 002b:00007f044ea38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 909.624759][T15172] RAX: ffffffffffffffda RBX: 00007f044de15fa0 RCX: 00007f044db9c819 [ 909.632741][T15172] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000006 [ 909.640721][T15172] RBP: 00007f044ea38090 R08: 0000000000000b00 R09: 0000000000000000 [ 909.648788][T15172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.656859][T15172] R13: 00007f044de16038 R14: 00007f044de15fa0 R15: 00007fff73a6c868 [ 909.664855][T15172] [ 909.704160][T15172] socket: no more sockets [ 909.776772][T15174] netlink: 'syz.0.3016': attribute type 10 has an invalid length. [ 909.797718][T15174] netlink: 'syz.0.3016': attribute type 9 has an invalid length. [ 909.813301][T15174] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3016'. [ 910.169344][T15194] FAULT_INJECTION: forcing a failure. [ 910.169344][T15194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.183039][T15194] CPU: 0 PID: 15194 Comm: syz.0.3023 Not tainted syzkaller #0 [ 910.190523][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 910.200690][T15194] Call Trace: [ 910.203969][T15194] [ 910.206916][T15194] dump_stack_lvl+0x18c/0x250 [ 910.211610][T15194] ? show_regs_print_info+0x20/0x20 [ 910.217184][T15194] ? load_image+0x420/0x420 [ 910.221718][T15194] ? __might_fault+0xaa/0x120 [ 910.226420][T15194] ? __lock_acquire+0x7d40/0x7d40 [ 910.231491][T15194] should_fail_ex+0x39d/0x4d0 [ 910.236212][T15194] _copy_from_user+0x2f/0xe0 [ 910.240842][T15194] __sys_bpf+0x23e/0x890 [ 910.245116][T15194] ? bpf_link_show_fdinfo+0x390/0x390 [ 910.250710][T15194] ? lock_chain_count+0x20/0x20 [ 910.255600][T15194] __x64_sys_bpf+0x7c/0x90 [ 910.260040][T15194] do_syscall_64+0x55/0xa0 [ 910.264483][T15194] ? clear_bhb_loop+0x40/0x90 [ 910.269316][T15194] ? clear_bhb_loop+0x40/0x90 [ 910.274107][T15194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.280016][T15194] RIP: 0033:0x7f13e5b9c819 [ 910.284431][T15194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.304127][T15194] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 910.312806][T15194] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 910.320788][T15194] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001b [ 910.328868][T15194] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 910.336869][T15194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.344956][T15194] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 910.352966][T15194] [ 910.961193][T15220] netlink: 'syz.3.3032': attribute type 10 has an invalid length. [ 911.032376][T15220] netlink: 'syz.3.3032': attribute type 9 has an invalid length. [ 911.053280][T15220] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3032'. [ 911.212864][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 911.248374][T15225] FAULT_INJECTION: forcing a failure. [ 911.248374][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 911.262118][T15225] CPU: 1 PID: 15225 Comm: syz.3.3033 Not tainted syzkaller #0 [ 911.269707][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 911.279790][T15225] Call Trace: [ 911.283232][T15225] [ 911.286182][T15225] dump_stack_lvl+0x18c/0x250 [ 911.290898][T15225] ? show_regs_print_info+0x20/0x20 [ 911.296136][T15225] ? load_image+0x420/0x420 [ 911.300682][T15225] ? __might_sleep+0xe0/0xe0 [ 911.305303][T15225] ? __lock_acquire+0x7d40/0x7d40 [ 911.310356][T15225] should_fail_ex+0x39d/0x4d0 [ 911.315077][T15225] should_failslab+0x9/0x20 [ 911.319608][T15225] slab_pre_alloc_hook+0x59/0x310 [ 911.324750][T15225] kmem_cache_alloc+0x5a/0x2d0 [ 911.329559][T15225] ? getname_flags+0xbb/0x500 [ 911.334269][T15225] getname_flags+0xbb/0x500 [ 911.338807][T15225] do_sys_openat2+0xda/0x1d0 [ 911.343424][T15225] ? do_sys_open+0xe0/0xe0 [ 911.347870][T15225] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 911.354141][T15225] ? lock_chain_count+0x20/0x20 [ 911.359090][T15225] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 911.365183][T15225] __x64_sys_openat+0x139/0x160 [ 911.370060][T15225] do_syscall_64+0x55/0xa0 [ 911.374538][T15225] ? clear_bhb_loop+0x40/0x90 [ 911.379263][T15225] ? clear_bhb_loop+0x40/0x90 [ 911.384125][T15225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.390021][T15225] RIP: 0033:0x7f08b4b9c819 [ 911.394436][T15225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.414139][T15225] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 911.422554][T15225] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 911.430516][T15225] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 911.438485][T15225] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 911.446465][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.454515][T15225] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 911.462524][T15225] [ 911.658349][T15232] netlink: 'syz.3.3036': attribute type 10 has an invalid length. [ 911.735657][T15238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3039'. [ 911.763284][T15238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3039'. [ 912.494983][T15245] FAULT_INJECTION: forcing a failure. [ 912.494983][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.586086][T15245] CPU: 0 PID: 15245 Comm: syz.1.3040 Not tainted syzkaller #0 [ 912.593638][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 912.603739][T15245] Call Trace: [ 912.607057][T15245] [ 912.610032][T15245] dump_stack_lvl+0x18c/0x250 [ 912.614790][T15245] ? show_regs_print_info+0x20/0x20 [ 912.620214][T15245] ? load_image+0x420/0x420 [ 912.625042][T15245] ? __might_fault+0xaa/0x120 [ 912.629760][T15245] ? __lock_acquire+0x7d40/0x7d40 [ 912.634844][T15245] should_fail_ex+0x39d/0x4d0 [ 912.639627][T15245] _copy_from_user+0x2f/0xe0 [ 912.644359][T15245] __sys_bpf+0x23e/0x890 [ 912.648649][T15245] ? bpf_link_show_fdinfo+0x390/0x390 [ 912.654111][T15245] ? lock_chain_count+0x20/0x20 [ 912.659038][T15245] __x64_sys_bpf+0x7c/0x90 [ 912.663676][T15245] do_syscall_64+0x55/0xa0 [ 912.668214][T15245] ? clear_bhb_loop+0x40/0x90 [ 912.673100][T15245] ? clear_bhb_loop+0x40/0x90 [ 912.677825][T15245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.683754][T15245] RIP: 0033:0x7ffb1259c819 [ 912.688230][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.708144][T15245] RSP: 002b:00007ffb134bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.716811][T15245] RAX: ffffffffffffffda RBX: 00007ffb12816090 RCX: 00007ffb1259c819 [ 912.724852][T15245] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001b [ 912.732878][T15245] RBP: 00007ffb134bc090 R08: 0000000000000000 R09: 0000000000000000 [ 912.741330][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.749452][T15245] R13: 00007ffb12816128 R14: 00007ffb12816090 R15: 00007fffd7148cb8 [ 912.757689][T15245] [ 912.946318][T15248] netlink: 'syz.0.3041': attribute type 10 has an invalid length. [ 912.971347][T15248] netlink: 'syz.0.3041': attribute type 9 has an invalid length. [ 912.980423][T15248] __nla_validate_parse: 2 callbacks suppressed [ 912.980450][T15248] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3041'. [ 913.120319][T15253] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3042'. [ 913.136279][T15253] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3042'. [ 913.254037][T15257] FAULT_INJECTION: forcing a failure. [ 913.254037][T15257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.363258][T15257] CPU: 0 PID: 15257 Comm: syz.0.3044 Not tainted syzkaller #0 [ 913.370823][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 913.380919][T15257] Call Trace: [ 913.384343][T15257] [ 913.387296][T15257] dump_stack_lvl+0x18c/0x250 [ 913.392196][T15257] ? show_regs_print_info+0x20/0x20 [ 913.397432][T15257] ? load_image+0x420/0x420 [ 913.401973][T15257] ? __might_fault+0xaa/0x120 [ 913.406776][T15257] ? __lock_acquire+0x7d40/0x7d40 [ 913.411852][T15257] should_fail_ex+0x39d/0x4d0 [ 913.416584][T15257] _copy_from_user+0x2f/0xe0 [ 913.421333][T15257] __sys_bpf+0x23e/0x890 [ 913.425792][T15257] ? bpf_link_show_fdinfo+0x390/0x390 [ 913.431462][T15257] ? lock_chain_count+0x20/0x20 [ 913.436380][T15257] __x64_sys_bpf+0x7c/0x90 [ 913.440921][T15257] do_syscall_64+0x55/0xa0 [ 913.445403][T15257] ? clear_bhb_loop+0x40/0x90 [ 913.450287][T15257] ? clear_bhb_loop+0x40/0x90 [ 913.455148][T15257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.461082][T15257] RIP: 0033:0x7f13e5b9c819 [ 913.465529][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.485349][T15257] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.493985][T15257] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 913.502254][T15257] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001b [ 913.510290][T15257] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 913.518296][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.526615][T15257] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 913.534915][T15257] [ 914.103567][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 915.436189][T15296] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 915.496360][T15292] netlink: 'syz.0.3053': attribute type 9 has an invalid length. [ 915.531031][T15298] netlink: 'syz.2.3062': attribute type 3 has an invalid length. [ 915.539562][T15292] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3053'. [ 915.553167][T15298] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3062'. [ 915.842425][T15313] FAULT_INJECTION: forcing a failure. [ 915.842425][T15313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.859362][T15311] netlink: 'syz.2.3059': attribute type 9 has an invalid length. [ 915.881256][T15311] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3059'. [ 915.893276][T15313] CPU: 0 PID: 15313 Comm: syz.3.3060 Not tainted syzkaller #0 [ 915.900826][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 915.911162][T15313] Call Trace: [ 915.914453][T15313] [ 915.917408][T15313] dump_stack_lvl+0x18c/0x250 [ 915.922149][T15313] ? show_regs_print_info+0x20/0x20 [ 915.927381][T15313] ? load_image+0x420/0x420 [ 915.931903][T15313] ? __might_fault+0xaa/0x120 [ 915.936765][T15313] ? __lock_acquire+0x7d40/0x7d40 [ 915.942085][T15313] should_fail_ex+0x39d/0x4d0 [ 915.946809][T15313] _copy_from_user+0x2f/0xe0 [ 915.951513][T15313] __sys_bpf+0x23e/0x890 [ 915.955764][T15313] ? bpf_link_show_fdinfo+0x390/0x390 [ 915.961262][T15313] ? lock_chain_count+0x20/0x20 [ 915.966149][T15313] __x64_sys_bpf+0x7c/0x90 [ 915.970625][T15313] do_syscall_64+0x55/0xa0 [ 915.975225][T15313] ? clear_bhb_loop+0x40/0x90 [ 915.979914][T15313] ? clear_bhb_loop+0x40/0x90 [ 915.984799][T15313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.990814][T15313] RIP: 0033:0x7f08b4b9c819 [ 915.995414][T15313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.015120][T15313] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.023734][T15313] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 916.031722][T15313] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 916.031741][T15313] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 916.031757][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.031766][T15313] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 916.031791][T15313] [ 916.111204][T15315] netlink: 'syz.2.3059': attribute type 9 has an invalid length. [ 916.129573][T15315] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3059'. [ 916.308260][T15321] FAULT_INJECTION: forcing a failure. [ 916.308260][T15321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.363728][T15321] CPU: 0 PID: 15321 Comm: syz.0.3064 Not tainted syzkaller #0 [ 916.371255][T15321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 916.381330][T15321] Call Trace: [ 916.384633][T15321] [ 916.387583][T15321] dump_stack_lvl+0x18c/0x250 [ 916.392305][T15321] ? show_regs_print_info+0x20/0x20 [ 916.397558][T15321] ? load_image+0x420/0x420 [ 916.402096][T15321] ? __might_fault+0xaa/0x120 [ 916.406801][T15321] ? __lock_acquire+0x7d40/0x7d40 [ 916.411850][T15321] should_fail_ex+0x39d/0x4d0 [ 916.416641][T15321] _copy_from_user+0x2f/0xe0 [ 916.421278][T15321] __sys_bpf+0x23e/0x890 [ 916.425574][T15321] ? bpf_link_show_fdinfo+0x390/0x390 [ 916.430985][T15321] ? lock_chain_count+0x20/0x20 [ 916.436041][T15321] __x64_sys_bpf+0x7c/0x90 [ 916.440475][T15321] do_syscall_64+0x55/0xa0 [ 916.445207][T15321] ? clear_bhb_loop+0x40/0x90 [ 916.449995][T15321] ? clear_bhb_loop+0x40/0x90 [ 916.454774][T15321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.460681][T15321] RIP: 0033:0x7f13e5b9c819 [ 916.465104][T15321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.485421][T15321] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.493851][T15321] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 916.502191][T15321] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001b [ 916.510267][T15321] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 916.518354][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.526511][T15321] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 916.534701][T15321] [ 916.681136][T15328] netlink: 'syz.0.3066': attribute type 10 has an invalid length. [ 916.714778][T15328] netlink: 'syz.0.3066': attribute type 9 has an invalid length. [ 916.737298][T15328] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3066'. [ 916.845793][T15335] netlink: 'syz.1.3068': attribute type 9 has an invalid length. [ 916.862406][T15335] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3068'. [ 916.956497][T15336] netlink: 'syz.1.3068': attribute type 9 has an invalid length. [ 916.973278][T15336] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3068'. [ 917.080773][T15334] netlink: 'syz.2.3069': attribute type 9 has an invalid length. [ 918.047854][T15375] __nla_validate_parse: 6 callbacks suppressed [ 918.047870][T15375] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3084'. [ 918.107474][T15381] FAULT_INJECTION: forcing a failure. [ 918.107474][T15381] name failslab, interval 1, probability 0, space 0, times 0 [ 918.115416][T15378] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3093'. [ 918.187198][T15381] CPU: 0 PID: 15381 Comm: syz.3.3087 Not tainted syzkaller #0 [ 918.195241][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 918.205448][T15381] Call Trace: [ 918.208866][T15381] [ 918.211863][T15381] dump_stack_lvl+0x18c/0x250 [ 918.216603][T15381] ? show_regs_print_info+0x20/0x20 [ 918.221824][T15381] ? load_image+0x420/0x420 [ 918.226335][T15381] ? mark_lock+0x94/0x320 [ 918.230673][T15381] should_fail_ex+0x39d/0x4d0 [ 918.235353][T15381] should_failslab+0x9/0x20 [ 918.239950][T15381] slab_pre_alloc_hook+0x59/0x310 [ 918.244977][T15381] kmem_cache_alloc+0x5a/0x2d0 [ 918.249946][T15381] ? skb_clone+0x1eb/0x370 [ 918.254383][T15381] skb_clone+0x1eb/0x370 [ 918.258995][T15381] __netlink_deliver_tap+0x41c/0x830 [ 918.264318][T15381] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.269559][T15381] netlink_deliver_tap+0x19c/0x1b0 [ 918.274701][T15381] netlink_dump+0x94b/0xe50 [ 918.279226][T15381] ? netlink_lookup+0x200/0x200 [ 918.284075][T15381] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 918.289941][T15381] ? skb_copy_datagram_iter+0x200/0x200 [ 918.295507][T15381] ? refcount_dec_and_test+0x4f/0x70 [ 918.300797][T15381] netlink_recvmsg+0x693/0xe60 [ 918.305562][T15381] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 918.311299][T15381] ? netlink_sendmsg+0xbf0/0xbf0 [ 918.316253][T15381] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 918.322322][T15381] ? aa_af_perm+0x330/0x330 [ 918.326915][T15381] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 918.332213][T15381] ? security_socket_recvmsg+0x89/0xb0 [ 918.337937][T15381] ? netlink_sendmsg+0xbf0/0xbf0 [ 918.342882][T15381] ____sys_recvmsg+0x2ce/0x5e0 [ 918.348013][T15381] ? __sys_recvmsg_sock+0x50/0x50 [ 918.353065][T15381] ? import_iovec+0x73/0xa0 [ 918.357614][T15381] ___sys_recvmsg+0x216/0x590 [ 918.362302][T15381] ? __sys_recvmsg+0x2a0/0x2a0 [ 918.367166][T15381] ? ksys_write+0x1c4/0x260 [ 918.371682][T15381] ? __fget_files+0x43d/0x4b0 [ 918.376367][T15381] __x64_sys_recvmsg+0x20c/0x2e0 [ 918.381393][T15381] ? ___sys_recvmsg+0x590/0x590 [ 918.386274][T15381] ? syscall_enter_from_user_mode+0x2e/0x80 [ 918.392197][T15381] do_syscall_64+0x55/0xa0 [ 918.396808][T15381] ? clear_bhb_loop+0x40/0x90 [ 918.401484][T15381] ? clear_bhb_loop+0x40/0x90 [ 918.406187][T15381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.412187][T15381] RIP: 0033:0x7f08b4b9c819 [ 918.416775][T15381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.436495][T15381] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 918.444910][T15381] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 918.453202][T15381] RDX: 0000000000002042 RSI: 0000200000000040 RDI: 0000000000000003 [ 918.461629][T15381] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 918.469795][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.477946][T15381] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 918.486536][T15381] [ 918.680164][T15387] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3089'. [ 918.698990][T15387] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3089'. [ 918.808194][T15392] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3090'. [ 918.926354][T15395] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3090'. [ 919.580303][T15412] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3098'. [ 919.646912][T15416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3098'. [ 919.647314][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 919.828552][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 920.114743][T15439] FAULT_INJECTION: forcing a failure. [ 920.114743][T15439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.134410][T15439] CPU: 0 PID: 15439 Comm: syz.3.3109 Not tainted syzkaller #0 [ 920.141922][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 920.152188][T15439] Call Trace: [ 920.155533][T15439] [ 920.158557][T15439] dump_stack_lvl+0x18c/0x250 [ 920.163409][T15439] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 920.169570][T15439] ? show_regs_print_info+0x20/0x20 [ 920.174773][T15439] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 920.180932][T15439] should_fail_ex+0x39d/0x4d0 [ 920.185616][T15439] _copy_from_user+0x2f/0xe0 [ 920.190200][T15439] __sys_bpf+0x23e/0x890 [ 920.194441][T15439] ? bpf_link_show_fdinfo+0x390/0x390 [ 920.199994][T15439] ? lock_chain_count+0x20/0x20 [ 920.204835][T15439] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 920.210960][T15439] __x64_sys_bpf+0x7c/0x90 [ 920.215380][T15439] do_syscall_64+0x55/0xa0 [ 920.219878][T15439] ? clear_bhb_loop+0x40/0x90 [ 920.224639][T15439] ? clear_bhb_loop+0x40/0x90 [ 920.229303][T15439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.235193][T15439] RIP: 0033:0x7f08b4b9c819 [ 920.239598][T15439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.259219][T15439] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 920.267724][T15439] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 920.275790][T15439] RDX: 0000000000000090 RSI: 0000200000000a00 RDI: 0000000000000005 [ 920.283762][T15439] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 920.291748][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.299714][T15439] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 920.307722][T15439] [ 920.683321][T15454] validate_nla: 19 callbacks suppressed [ 920.683340][T15454] netlink: 'syz.3.3112': attribute type 9 has an invalid length. [ 920.745205][T15455] netlink: 'syz.3.3112': attribute type 9 has an invalid length. [ 921.296361][T15470] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 921.317273][T15470] netlink: 'syz.3.3119': attribute type 9 has an invalid length. [ 921.493742][T15477] ksmbd: Unknown IPC event: 0, ignore. [ 921.611454][T15484] pim6reg1: entered promiscuous mode [ 921.631206][T15484] pim6reg1: entered allmulticast mode [ 921.663748][T15484] netlink: 'syz.2.3124': attribute type 17 has an invalid length. [ 921.667475][T15481] netlink: 'syz.3.3121': attribute type 3 has an invalid length. [ 921.672389][T15484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.859634][T15492] netlink: 'syz.1.3125': attribute type 9 has an invalid length. [ 921.969468][T15494] netlink: 'syz.1.3125': attribute type 9 has an invalid length. [ 922.045528][T15498] netlink: set zone limit has 8 unknown bytes [ 922.557914][T15505] netlink: 'syz.1.3130': attribute type 10 has an invalid length. [ 922.581474][T15505] netlink: 'syz.1.3130': attribute type 9 has an invalid length. [ 923.143568][T15526] FAULT_INJECTION: forcing a failure. [ 923.143568][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 923.170261][T15526] CPU: 1 PID: 15526 Comm: syz.1.3140 Not tainted syzkaller #0 [ 923.177779][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 923.187848][T15526] Call Trace: [ 923.191404][T15526] [ 923.194338][T15526] dump_stack_lvl+0x18c/0x250 [ 923.199112][T15526] ? show_regs_print_info+0x20/0x20 [ 923.204335][T15526] ? load_image+0x420/0x420 [ 923.208881][T15526] ? __might_sleep+0xe0/0xe0 [ 923.213583][T15526] ? __lock_acquire+0x7d40/0x7d40 [ 923.218622][T15526] should_fail_ex+0x39d/0x4d0 [ 923.223313][T15526] should_failslab+0x9/0x20 [ 923.227830][T15526] slab_pre_alloc_hook+0x59/0x310 [ 923.232863][T15526] ? tomoyo_encode+0x28b/0x540 [ 923.237705][T15526] ? tomoyo_encode+0x28b/0x540 [ 923.242550][T15526] __kmem_cache_alloc_node+0x53/0x250 [ 923.247920][T15526] ? tomoyo_encode+0x28b/0x540 [ 923.252674][T15526] __kmalloc+0xa4/0x230 [ 923.256826][T15526] tomoyo_encode+0x28b/0x540 [ 923.261583][T15526] tomoyo_realpath_from_path+0x592/0x5d0 [ 923.267230][T15526] tomoyo_path_number_perm+0x248/0x620 [ 923.272688][T15526] ? tomoyo_path_number_perm+0x217/0x620 [ 923.278489][T15526] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 923.283961][T15526] ? ksys_write+0x1c4/0x260 [ 923.288579][T15526] ? __fget_files+0x28/0x4b0 [ 923.293174][T15526] ? __fget_files+0x28/0x4b0 [ 923.297770][T15526] security_file_ioctl+0x70/0xa0 [ 923.302704][T15526] __se_sys_ioctl+0x48/0x170 [ 923.307295][T15526] do_syscall_64+0x55/0xa0 [ 923.311981][T15526] ? clear_bhb_loop+0x40/0x90 [ 923.316735][T15526] ? clear_bhb_loop+0x40/0x90 [ 923.321405][T15526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.327343][T15526] RIP: 0033:0x7ffb1259c819 [ 923.331755][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.351616][T15526] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.360039][T15526] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 923.368176][T15526] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000046 [ 923.376227][T15526] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 923.384191][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.392502][T15526] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 923.400481][T15526] [ 923.408200][T15526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 923.458204][T15533] __nla_validate_parse: 17 callbacks suppressed [ 923.458231][T15533] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3143'. [ 923.705742][T15538] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3144'. [ 923.724745][T15538] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3144'. [ 924.335873][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 924.388757][T15561] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3155'. [ 924.413681][T15561] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.3155'. [ 924.427552][T15558] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3153'. [ 924.956512][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 925.030885][T15579] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3159'. [ 925.284793][T15586] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.3162'. [ 925.445948][T15591] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3164'. [ 925.468851][T15591] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.3164'. [ 925.811294][T15602] FAULT_INJECTION: forcing a failure. [ 925.811294][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.845969][T15602] CPU: 0 PID: 15602 Comm: syz.1.3168 Not tainted syzkaller #0 [ 925.853503][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.863736][T15602] Call Trace: [ 925.867009][T15602] [ 925.869945][T15602] dump_stack_lvl+0x18c/0x250 [ 925.874627][T15602] ? show_regs_print_info+0x20/0x20 [ 925.879907][T15602] ? load_image+0x420/0x420 [ 925.884510][T15602] ? __lock_acquire+0x7d40/0x7d40 [ 925.889529][T15602] ? snprintf+0xe9/0x140 [ 925.893837][T15602] should_fail_ex+0x39d/0x4d0 [ 925.898520][T15602] _copy_to_user+0x2f/0xa0 [ 925.903109][T15602] simple_read_from_buffer+0xe7/0x150 [ 925.908576][T15602] proc_fail_nth_read+0x1e8/0x260 [ 925.913607][T15602] ? proc_fault_inject_write+0x360/0x360 [ 925.919349][T15602] ? fsnotify_perm+0x271/0x5e0 [ 925.924117][T15602] ? proc_fault_inject_write+0x360/0x360 [ 925.929753][T15602] vfs_read+0x28b/0x970 [ 925.933934][T15602] ? kernel_read+0x1e0/0x1e0 [ 925.938519][T15602] ? __fget_files+0x28/0x4b0 [ 925.943117][T15602] ? __fget_files+0x28/0x4b0 [ 925.947701][T15602] ? __fget_files+0x43d/0x4b0 [ 925.952379][T15602] ? __fdget_pos+0x2a3/0x330 [ 925.957055][T15602] ? ksys_read+0x75/0x260 [ 925.961475][T15602] ksys_read+0x150/0x260 [ 925.965807][T15602] ? vfs_write+0x990/0x990 [ 925.970480][T15602] ? lockdep_hardirqs_on+0x98/0x150 [ 925.975768][T15602] do_syscall_64+0x55/0xa0 [ 925.980177][T15602] ? clear_bhb_loop+0x40/0x90 [ 925.984937][T15602] ? clear_bhb_loop+0x40/0x90 [ 925.989619][T15602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.995522][T15602] RIP: 0033:0x7ffb1255d04e [ 926.000019][T15602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.019720][T15602] RSP: 002b:00007ffb134dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.028151][T15602] RAX: ffffffffffffffda RBX: 00007ffb134dd6c0 RCX: 00007ffb1255d04e [ 926.036138][T15602] RDX: 000000000000000f RSI: 00007ffb134dd0a0 RDI: 0000000000000004 [ 926.044211][T15602] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 926.052342][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.060311][T15602] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 926.069131][T15602] [ 926.354604][T15606] validate_nla: 7 callbacks suppressed [ 926.354624][T15606] netlink: 'syz.1.3170': attribute type 9 has an invalid length. [ 926.495958][T15609] ksmbd: Unknown IPC event: 0, ignore. [ 926.780154][T15615] FAULT_INJECTION: forcing a failure. [ 926.780154][T15615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.817930][T15615] CPU: 1 PID: 15615 Comm: syz.3.3181 Not tainted syzkaller #0 [ 926.825458][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 926.835529][T15615] Call Trace: [ 926.838825][T15615] [ 926.841957][T15615] dump_stack_lvl+0x18c/0x250 [ 926.846679][T15615] ? show_regs_print_info+0x20/0x20 [ 926.851898][T15615] ? load_image+0x420/0x420 [ 926.856543][T15615] ? __lock_acquire+0x7d40/0x7d40 [ 926.861577][T15615] ? snprintf+0xe9/0x140 [ 926.865863][T15615] should_fail_ex+0x39d/0x4d0 [ 926.870585][T15615] _copy_to_user+0x2f/0xa0 [ 926.875033][T15615] simple_read_from_buffer+0xe7/0x150 [ 926.880436][T15615] proc_fail_nth_read+0x1e8/0x260 [ 926.885990][T15615] ? proc_fault_inject_write+0x360/0x360 [ 926.891865][T15615] ? fsnotify_perm+0x271/0x5e0 [ 926.896686][T15615] ? proc_fault_inject_write+0x360/0x360 [ 926.902456][T15615] vfs_read+0x28b/0x970 [ 926.906656][T15615] ? kernel_read+0x1e0/0x1e0 [ 926.911290][T15615] ? __fget_files+0x28/0x4b0 [ 926.915913][T15615] ? __fget_files+0x28/0x4b0 [ 926.920636][T15615] ? __fget_files+0x43d/0x4b0 [ 926.925364][T15615] ? __fdget_pos+0x2a3/0x330 [ 926.929997][T15615] ? ksys_read+0x75/0x260 [ 926.934374][T15615] ksys_read+0x150/0x260 [ 926.938653][T15615] ? vfs_write+0x990/0x990 [ 926.943153][T15615] ? lockdep_hardirqs_on+0x98/0x150 [ 926.948390][T15615] do_syscall_64+0x55/0xa0 [ 926.952924][T15615] ? clear_bhb_loop+0x40/0x90 [ 926.957623][T15615] ? clear_bhb_loop+0x40/0x90 [ 926.962329][T15615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.968244][T15615] RIP: 0033:0x7f08b4b5d04e [ 926.972678][T15615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.992400][T15615] RSP: 002b:00007f08b5aeffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 927.000851][T15615] RAX: ffffffffffffffda RBX: 00007f08b5af06c0 RCX: 00007f08b4b5d04e [ 927.008850][T15615] RDX: 000000000000000f RSI: 00007f08b5af00a0 RDI: 0000000000000004 [ 927.016838][T15615] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 927.024832][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 927.032919][T15615] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 927.040945][T15615] [ 927.355041][T15625] netlink: 'syz.1.3177': attribute type 9 has an invalid length. [ 927.451705][T15626] netlink: 'syz.1.3177': attribute type 9 has an invalid length. [ 927.628594][T15630] netlink: 'syz.3.3178': attribute type 10 has an invalid length. [ 927.648242][T15630] netlink: 'syz.3.3178': attribute type 9 has an invalid length. [ 927.845419][T15634] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 927.908203][T15634] netlink: 'syz.2.3180': attribute type 9 has an invalid length. [ 928.135389][T15644] bridge_slave_1: default FDB implementation only supports local addresses [ 928.390839][T15652] FAULT_INJECTION: forcing a failure. [ 928.390839][T15652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.453271][T15652] CPU: 1 PID: 15652 Comm: syz.3.3188 Not tainted syzkaller #0 [ 928.460403][T15654] netlink: 'syz.2.3189': attribute type 2 has an invalid length. [ 928.461502][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 928.479786][T15652] Call Trace: [ 928.483170][T15652] [ 928.486105][T15652] dump_stack_lvl+0x18c/0x250 [ 928.490976][T15652] ? show_regs_print_info+0x20/0x20 [ 928.496659][T15652] ? load_image+0x420/0x420 [ 928.501341][T15652] ? __lock_acquire+0x7d40/0x7d40 [ 928.506477][T15652] ? snprintf+0xe9/0x140 [ 928.510902][T15652] should_fail_ex+0x39d/0x4d0 [ 928.515936][T15652] _copy_to_user+0x2f/0xa0 [ 928.520366][T15652] simple_read_from_buffer+0xe7/0x150 [ 928.525742][T15652] proc_fail_nth_read+0x1e8/0x260 [ 928.530862][T15652] ? proc_fault_inject_write+0x360/0x360 [ 928.536496][T15652] ? fsnotify_perm+0x271/0x5e0 [ 928.541345][T15652] ? proc_fault_inject_write+0x360/0x360 [ 928.547000][T15652] vfs_read+0x28b/0x970 [ 928.551169][T15652] ? kernel_read+0x1e0/0x1e0 [ 928.555753][T15652] ? __fget_files+0x28/0x4b0 [ 928.560338][T15652] ? __fget_files+0x28/0x4b0 [ 928.565093][T15652] ? __fget_files+0x43d/0x4b0 [ 928.569856][T15652] ? __fdget_pos+0x2a3/0x330 [ 928.574620][T15652] ? ksys_read+0x75/0x260 [ 928.579001][T15652] ksys_read+0x150/0x260 [ 928.583241][T15652] ? vfs_write+0x990/0x990 [ 928.588046][T15652] ? lockdep_hardirqs_on+0x98/0x150 [ 928.593332][T15652] do_syscall_64+0x55/0xa0 [ 928.597738][T15652] ? clear_bhb_loop+0x40/0x90 [ 928.602507][T15652] ? clear_bhb_loop+0x40/0x90 [ 928.607269][T15652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.613251][T15652] RIP: 0033:0x7f08b4b5d04e [ 928.617760][T15652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.637796][T15652] RSP: 002b:00007f08b5aeffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.646535][T15652] RAX: ffffffffffffffda RBX: 00007f08b5af06c0 RCX: 00007f08b4b5d04e [ 928.654589][T15652] RDX: 000000000000000f RSI: 00007f08b5af00a0 RDI: 0000000000000004 [ 928.662638][T15652] RBP: 00007f08b5af0090 R08: 0000000000000000 R09: 0000000000000000 [ 928.670610][T15652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 928.678668][T15652] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 928.687167][T15652] [ 928.703395][T15654] __nla_validate_parse: 13 callbacks suppressed [ 928.703411][T15654] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.3189'. [ 928.956209][T15659] netlink: 'syz.0.3191': attribute type 10 has an invalid length. [ 928.977020][T15659] netlink: 'syz.0.3191': attribute type 9 has an invalid length. [ 928.989650][T15659] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3191'. [ 929.248318][T15673] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3194'. [ 929.385643][T15680] FAULT_INJECTION: forcing a failure. [ 929.385643][T15680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.420212][T15680] CPU: 0 PID: 15680 Comm: syz.1.3196 Not tainted syzkaller #0 [ 929.427834][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.438062][T15680] Call Trace: [ 929.441408][T15680] [ 929.444475][T15680] dump_stack_lvl+0x18c/0x250 [ 929.449224][T15680] ? show_regs_print_info+0x20/0x20 [ 929.454533][T15680] ? load_image+0x420/0x420 [ 929.459114][T15680] ? __might_fault+0xaa/0x120 [ 929.463857][T15680] ? __lock_acquire+0x7d40/0x7d40 [ 929.468929][T15680] ? mark_lock+0x94/0x320 [ 929.473511][T15680] should_fail_ex+0x39d/0x4d0 [ 929.478359][T15680] _copy_from_user+0x2f/0xe0 [ 929.483123][T15680] get_user_ifreq+0x6b/0x180 [ 929.487776][T15680] inet_ioctl+0x3ed/0x560 [ 929.492162][T15680] ? tomoyo_path_number_perm+0x217/0x620 [ 929.497862][T15680] ? inet_shutdown+0x370/0x370 [ 929.502678][T15680] ? slab_free_freelist_hook+0x130/0x1a0 [ 929.508562][T15680] ? tomoyo_path_number_perm+0x500/0x620 [ 929.514474][T15680] ? __kmem_cache_free+0xba/0x1e0 [ 929.519594][T15680] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 929.525130][T15680] ? packet_ioctl+0x254/0x340 [ 929.529926][T15680] sock_do_ioctl+0xfc/0x310 [ 929.534590][T15680] ? sock_show_fdinfo+0xb0/0xb0 [ 929.539550][T15680] sock_ioctl+0x5ba/0x7e0 [ 929.543943][T15680] ? sock_poll+0x3e0/0x3e0 [ 929.548538][T15680] ? bpf_lsm_file_ioctl+0x9/0x10 [ 929.553526][T15680] ? security_file_ioctl+0x80/0xa0 [ 929.558770][T15680] ? sock_poll+0x3e0/0x3e0 [ 929.563252][T15680] __se_sys_ioctl+0xfd/0x170 [ 929.567990][T15680] do_syscall_64+0x55/0xa0 [ 929.572436][T15680] ? clear_bhb_loop+0x40/0x90 [ 929.577154][T15680] ? clear_bhb_loop+0x40/0x90 [ 929.581967][T15680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.587896][T15680] RIP: 0033:0x7ffb1259c819 [ 929.592337][T15680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.612337][T15680] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.620875][T15680] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 929.628861][T15680] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000006 [ 929.636850][T15680] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 929.644921][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.653046][T15680] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 929.661062][T15680] [ 929.969891][T15683] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3197'. [ 930.301655][T15688] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3199'. [ 930.323795][T15688] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3199'. [ 930.580153][T15701] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3202'. [ 932.125830][T15729] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3211'. [ 932.135528][T15729] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3211'. [ 932.328428][T15742] validate_nla: 5 callbacks suppressed [ 932.328448][T15742] netlink: 'syz.2.3216': attribute type 9 has an invalid length. [ 932.349929][T15742] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3216'. [ 932.471605][T15743] netlink: 'syz.2.3216': attribute type 9 has an invalid length. [ 932.492797][T15745] FAULT_INJECTION: forcing a failure. [ 932.492797][T15745] name failslab, interval 1, probability 0, space 0, times 0 [ 932.523486][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.529876][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.543142][T15745] CPU: 1 PID: 15745 Comm: syz.0.3218 Not tainted syzkaller #0 [ 932.550659][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 932.560747][T15745] Call Trace: [ 932.564131][T15745] [ 932.567082][T15745] dump_stack_lvl+0x18c/0x250 [ 932.571788][T15745] ? show_regs_print_info+0x20/0x20 [ 932.577088][T15745] ? load_image+0x420/0x420 [ 932.581634][T15745] ? __might_sleep+0xe0/0xe0 [ 932.586256][T15745] ? __lock_acquire+0x7d40/0x7d40 [ 932.591307][T15745] ? trace_contention_end+0x39/0xe0 [ 932.596551][T15745] should_fail_ex+0x39d/0x4d0 [ 932.601455][T15745] should_failslab+0x9/0x20 [ 932.605984][T15745] slab_pre_alloc_hook+0x59/0x310 [ 932.611036][T15745] ? mutex_lock_nested+0x20/0x20 [ 932.615973][T15745] ? rxrpc_lookup_local+0x579/0x1610 [ 932.621259][T15745] __kmem_cache_alloc_node+0x53/0x250 [ 932.626634][T15745] ? rxrpc_lookup_local+0x579/0x1610 [ 932.631949][T15745] kmalloc_trace+0x2a/0xe0 [ 932.636369][T15745] rxrpc_lookup_local+0x579/0x1610 [ 932.641510][T15745] ? rxrpc_local_dont_fragment+0x70/0x70 [ 932.647163][T15745] ? __local_bh_enable_ip+0x13a/0x1c0 [ 932.652538][T15745] ? lockdep_hardirqs_on+0x98/0x150 [ 932.657744][T15745] ? __local_bh_enable_ip+0x13a/0x1c0 [ 932.663200][T15745] ? _local_bh_enable+0xa0/0xa0 [ 932.668061][T15745] rxrpc_sendmsg+0x30a/0x5b0 [ 932.672653][T15745] ? rxrpc_getsockopt+0x150/0x150 [ 932.677752][T15745] ____sys_sendmsg+0x5ba/0x960 [ 932.682531][T15745] ? __lock_acquire+0x7d40/0x7d40 [ 932.687676][T15745] ? __sys_sendmsg_sock+0x30/0x30 [ 932.692703][T15745] ? __import_iovec+0x3fa/0x850 [ 932.697569][T15745] ? import_iovec+0x73/0xa0 [ 932.702063][T15745] ___sys_sendmsg+0x2a6/0x360 [ 932.706732][T15745] ? get_pid_task+0x20/0x1e0 [ 932.711352][T15745] ? __sys_sendmsg+0x2a0/0x2a0 [ 932.716126][T15745] ? __lock_acquire+0x7d40/0x7d40 [ 932.721158][T15745] __se_sys_sendmsg+0x1c2/0x2b0 [ 932.726008][T15745] ? __x64_sys_sendmsg+0x80/0x80 [ 932.731193][T15745] ? lockdep_hardirqs_on+0x98/0x150 [ 932.736399][T15745] do_syscall_64+0x55/0xa0 [ 932.740813][T15745] ? clear_bhb_loop+0x40/0x90 [ 932.745494][T15745] ? clear_bhb_loop+0x40/0x90 [ 932.750194][T15745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.756083][T15745] RIP: 0033:0x7f13e5b9c819 [ 932.760503][T15745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.780479][T15745] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.788998][T15745] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 932.797003][T15745] RDX: 00000000200088c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 932.804987][T15745] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 932.813058][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.821026][T15745] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 932.829122][T15745] [ 932.929068][T15750] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 934.001424][T15772] __nla_validate_parse: 3 callbacks suppressed [ 934.001444][T15772] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3226'. [ 934.019826][T15772] bridge_slave_1: default FDB implementation only supports local addresses [ 934.314672][T15784] netlink: 'syz.1.3237': attribute type 10 has an invalid length. [ 934.356140][T15786] netlink: 'syz.0.3230': attribute type 9 has an invalid length. [ 934.390676][T15786] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3230'. [ 934.510634][T15790] netlink: 'syz.0.3230': attribute type 9 has an invalid length. [ 934.543359][T15790] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3230'. [ 935.325660][T15810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3238'. [ 935.368598][T15806] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3235'. [ 935.415901][T15806] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.3235'. [ 935.486166][T15810] netlink: 'syz.1.3238': attribute type 27 has an invalid length. [ 935.518588][T15810] netlink: 'syz.1.3238': attribute type 4 has an invalid length. [ 935.567203][T15810] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3238'. [ 935.865673][T15824] netlink: 'syz.3.3241': attribute type 9 has an invalid length. [ 935.880295][T15824] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3241'. [ 936.021329][T15823] netlink: 'syz.3.3241': attribute type 10 has an invalid length. [ 936.147669][T15825] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3241'. [ 936.868938][T15847] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3249'. [ 937.041457][T15855] FAULT_INJECTION: forcing a failure. [ 937.041457][T15855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.063851][T15855] CPU: 0 PID: 15855 Comm: syz.1.3251 Not tainted syzkaller #0 [ 937.071549][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 937.081897][T15855] Call Trace: [ 937.085280][T15855] [ 937.088220][T15855] dump_stack_lvl+0x18c/0x250 [ 937.092941][T15855] ? show_regs_print_info+0x20/0x20 [ 937.098163][T15855] ? load_image+0x420/0x420 [ 937.102717][T15855] ? __lock_acquire+0x7d40/0x7d40 [ 937.107742][T15855] ? snprintf+0xe9/0x140 [ 937.111985][T15855] should_fail_ex+0x39d/0x4d0 [ 937.116666][T15855] _copy_to_user+0x2f/0xa0 [ 937.121091][T15855] simple_read_from_buffer+0xe7/0x150 [ 937.126724][T15855] proc_fail_nth_read+0x1e8/0x260 [ 937.131756][T15855] ? proc_fault_inject_write+0x360/0x360 [ 937.137395][T15855] ? fsnotify_perm+0x271/0x5e0 [ 937.142254][T15855] ? proc_fault_inject_write+0x360/0x360 [ 937.147891][T15855] vfs_read+0x28b/0x970 [ 937.152063][T15855] ? kernel_read+0x1e0/0x1e0 [ 937.156915][T15855] ? __fget_files+0x28/0x4b0 [ 937.161505][T15855] ? __fget_files+0x28/0x4b0 [ 937.166099][T15855] ? __fget_files+0x43d/0x4b0 [ 937.170782][T15855] ? __fdget_pos+0x2a3/0x330 [ 937.175366][T15855] ? ksys_read+0x75/0x260 [ 937.179782][T15855] ksys_read+0x150/0x260 [ 937.184064][T15855] ? vfs_write+0x990/0x990 [ 937.188483][T15855] ? lockdep_hardirqs_on+0x98/0x150 [ 937.193866][T15855] do_syscall_64+0x55/0xa0 [ 937.198283][T15855] ? clear_bhb_loop+0x40/0x90 [ 937.203046][T15855] ? clear_bhb_loop+0x40/0x90 [ 937.207719][T15855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.213608][T15855] RIP: 0033:0x7ffb1255d04e [ 937.218045][T15855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 937.238012][T15855] RSP: 002b:00007ffb134dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 937.246519][T15855] RAX: ffffffffffffffda RBX: 00007ffb134dd6c0 RCX: 00007ffb1255d04e [ 937.254518][T15855] RDX: 000000000000000f RSI: 00007ffb134dd0a0 RDI: 000000000000000d [ 937.262483][T15855] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 937.270541][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.278857][T15855] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 937.286835][T15855] [ 937.557036][T15872] FAULT_INJECTION: forcing a failure. [ 937.557036][T15872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.619169][T15872] CPU: 0 PID: 15872 Comm: syz.1.3256 Not tainted syzkaller #0 [ 937.626874][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 937.637047][T15872] Call Trace: [ 937.640556][T15872] [ 937.643613][T15872] dump_stack_lvl+0x18c/0x250 [ 937.648338][T15872] ? show_regs_print_info+0x20/0x20 [ 937.653576][T15872] ? load_image+0x420/0x420 [ 937.658123][T15872] ? __might_fault+0xaa/0x120 [ 937.662916][T15872] ? __lock_acquire+0x7d40/0x7d40 [ 937.667971][T15872] should_fail_ex+0x39d/0x4d0 [ 937.672695][T15872] _copy_from_user+0x2f/0xe0 [ 937.677347][T15872] __sys_bpf+0x23e/0x890 [ 937.681731][T15872] ? bpf_link_show_fdinfo+0x390/0x390 [ 937.687324][T15872] ? lock_chain_count+0x20/0x20 [ 937.692226][T15872] __x64_sys_bpf+0x7c/0x90 [ 937.696684][T15872] do_syscall_64+0x55/0xa0 [ 937.701142][T15872] ? clear_bhb_loop+0x40/0x90 [ 937.705945][T15872] ? clear_bhb_loop+0x40/0x90 [ 937.710842][T15872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.716858][T15872] RIP: 0033:0x7ffb1259c819 [ 937.721293][T15872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.740908][T15872] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 937.749324][T15872] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 937.757291][T15872] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 937.765437][T15872] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 937.773592][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.781595][T15872] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 937.789695][T15872] [ 938.363727][T15890] validate_nla: 2 callbacks suppressed [ 938.363760][T15890] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 938.754096][T15896] netlink: 'syz.2.3266': attribute type 10 has an invalid length. [ 939.703997][T15911] FAULT_INJECTION: forcing a failure. [ 939.703997][T15911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.732782][T15911] CPU: 1 PID: 15911 Comm: syz.1.3268 Not tainted syzkaller #0 [ 939.740299][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 939.750447][T15911] Call Trace: [ 939.753726][T15911] [ 939.756655][T15911] dump_stack_lvl+0x18c/0x250 [ 939.761363][T15911] ? show_regs_print_info+0x20/0x20 [ 939.766606][T15911] ? load_image+0x420/0x420 [ 939.771199][T15911] ? __might_fault+0xaa/0x120 [ 939.775895][T15911] ? __lock_acquire+0x7d40/0x7d40 [ 939.780922][T15911] should_fail_ex+0x39d/0x4d0 [ 939.785653][T15911] _copy_from_user+0x2f/0xe0 [ 939.790338][T15911] ___sys_sendmsg+0x1c7/0x360 [ 939.795010][T15911] ? get_pid_task+0x20/0x1e0 [ 939.799594][T15911] ? __sys_sendmsg+0x2a0/0x2a0 [ 939.804358][T15911] ? __lock_acquire+0x7d40/0x7d40 [ 939.809400][T15911] __se_sys_sendmsg+0x1c2/0x2b0 [ 939.814271][T15911] ? __x64_sys_sendmsg+0x80/0x80 [ 939.819220][T15911] ? lockdep_hardirqs_on+0x98/0x150 [ 939.824445][T15911] do_syscall_64+0x55/0xa0 [ 939.828858][T15911] ? clear_bhb_loop+0x40/0x90 [ 939.833621][T15911] ? clear_bhb_loop+0x40/0x90 [ 939.838292][T15911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.844190][T15911] RIP: 0033:0x7ffb1259c819 [ 939.848592][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.868201][T15911] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.876610][T15911] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 939.884745][T15911] RDX: 00000000200088c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 939.892798][T15911] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 939.900780][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.908741][T15911] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 939.916856][T15911] [ 940.001552][T15913] netlink: 'syz.3.3270': attribute type 10 has an invalid length. [ 940.031600][T15913] __nla_validate_parse: 7 callbacks suppressed [ 940.031618][T15913] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3270'. [ 940.176335][T15918] netlink: 'syz.3.3270': attribute type 58 has an invalid length. [ 940.191119][T15918] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3270'. [ 940.540890][T15924] FAULT_INJECTION: forcing a failure. [ 940.540890][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.588445][T15924] CPU: 1 PID: 15924 Comm: syz.0.3274 Not tainted syzkaller #0 [ 940.595968][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 940.606099][T15924] Call Trace: [ 940.609564][T15924] [ 940.612505][T15924] dump_stack_lvl+0x18c/0x250 [ 940.617208][T15924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 940.623397][T15924] ? show_regs_print_info+0x20/0x20 [ 940.628622][T15924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 940.634819][T15924] should_fail_ex+0x39d/0x4d0 [ 940.639530][T15924] _copy_from_user+0x2f/0xe0 [ 940.644152][T15924] __sys_bpf+0x23e/0x890 [ 940.648424][T15924] ? bpf_link_show_fdinfo+0x390/0x390 [ 940.653947][T15924] ? lock_chain_count+0x20/0x20 [ 940.658843][T15924] __x64_sys_bpf+0x7c/0x90 [ 940.663280][T15924] do_syscall_64+0x55/0xa0 [ 940.667717][T15924] ? clear_bhb_loop+0x40/0x90 [ 940.672426][T15924] ? clear_bhb_loop+0x40/0x90 [ 940.677726][T15924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.683637][T15924] RIP: 0033:0x7f13e5b9c819 [ 940.688321][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.708060][T15924] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.716537][T15924] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 940.724628][T15924] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 940.732629][T15924] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 940.740711][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.748712][T15924] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 940.756818][T15924] [ 940.799158][T15926] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3275'. [ 940.833223][T15926] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3275'. [ 941.313486][T15940] netlink: 'syz.2.3278': attribute type 10 has an invalid length. [ 942.209240][T15943] netlink: 'syz.1.3280': attribute type 10 has an invalid length. [ 942.365532][T15943] netlink: 'syz.1.3280': attribute type 9 has an invalid length. [ 942.409780][T15943] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3280'. [ 942.625329][T15951] netlink: 'syz.0.3282': attribute type 10 has an invalid length. [ 942.806816][T15953] netlink: 'syz.3.3281': attribute type 10 has an invalid length. [ 942.840669][T15953] netlink: 'syz.3.3281': attribute type 9 has an invalid length. [ 942.873904][T15953] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3281'. [ 942.926394][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 943.600985][T15972] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3288'. [ 943.613944][T15972] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3288'. [ 944.220682][T15985] netlink: 'syz.1.3291': attribute type 10 has an invalid length. [ 944.307326][T15985] netlink: 'syz.1.3291': attribute type 9 has an invalid length. [ 944.354469][T15985] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3291'. [ 944.559264][T15994] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 944.567262][T15994] pim6reg0: persist enabled [ 944.917352][T16005] netlink: 'syz.1.3298': attribute type 10 has an invalid length. [ 944.932670][T16005] netlink: 'syz.1.3298': attribute type 9 has an invalid length. [ 944.953260][T16005] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3298'. [ 945.011559][T16009] netlink: 'syz.0.3299': attribute type 10 has an invalid length. [ 945.104515][T16009] netlink: 'syz.0.3299': attribute type 9 has an invalid length. [ 945.153064][T16009] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3299'. [ 945.288473][T16017] netlink: 'syz.0.3299': attribute type 9 has an invalid length. [ 945.307214][T16019] netlink: 'syz.3.3303': attribute type 10 has an invalid length. [ 945.340182][T16017] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3299'. [ 945.361726][T16019] netlink: 'syz.3.3303': attribute type 9 has an invalid length. [ 945.371450][T16019] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3303'. [ 945.494079][T16025] netlink: 'syz.3.3303': attribute type 9 has an invalid length. [ 945.502244][T16025] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3303'. [ 945.528705][T16027] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3306'. [ 945.575604][T16031] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3307'. [ 946.066443][T16052] FAULT_INJECTION: forcing a failure. [ 946.066443][T16052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 946.103249][T16052] CPU: 1 PID: 16052 Comm: syz.0.3312 Not tainted syzkaller #0 [ 946.110878][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 946.121075][T16052] Call Trace: [ 946.124383][T16052] [ 946.127428][T16052] dump_stack_lvl+0x18c/0x250 [ 946.132156][T16052] ? show_regs_print_info+0x20/0x20 [ 946.137384][T16052] ? load_image+0x420/0x420 [ 946.141927][T16052] ? __lock_acquire+0x7d40/0x7d40 [ 946.147180][T16052] should_fail_ex+0x39d/0x4d0 [ 946.151906][T16052] prepare_alloc_pages+0x1e2/0x5f0 [ 946.157498][T16052] __alloc_pages+0x134/0x460 [ 946.162132][T16052] ? zone_statistics+0x170/0x170 [ 946.167141][T16052] __pmd_alloc+0x9a/0x8b0 [ 946.172001][T16052] ? mt_find+0x169/0x650 [ 946.176303][T16052] ? __lock_acquire+0x7d40/0x7d40 [ 946.181462][T16052] ? __pud_alloc+0x1f0/0x1f0 [ 946.186178][T16052] ? hugepage_vma_check+0x488/0x5a0 [ 946.191449][T16052] handle_mm_fault+0xb5d/0x4c00 [ 946.196356][T16052] ? handle_mm_fault+0xe7/0x4c00 [ 946.201604][T16052] ? numa_migrate_prep+0x350/0x350 [ 946.206946][T16052] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 946.212544][T16052] do_user_addr_fault+0x730/0x12c0 [ 946.217993][T16052] exc_page_fault+0x64/0x100 [ 946.222728][T16052] asm_exc_page_fault+0x26/0x30 [ 946.228152][T16052] RIP: 0010:__get_user_4+0x11/0x20 [ 946.233393][T16052] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 946.253468][T16052] RSP: 0018:ffffc90002eb7ab8 EFLAGS: 00050202 [ 946.259657][T16052] RAX: 000000110e22fff2 RBX: ffffffff8d266800 RCX: f5926a6ae3e7d600 [ 946.267751][T16052] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 946.273273][T16046] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3313'. [ 946.276252][T16052] RBP: ffffc90002eb7ed8 R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 946.293098][T16046] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3313'. [ 946.293769][T16052] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: 000000110e22fff2 [ 946.311712][T16052] R13: 0000000040086602 R14: fffff520005d6f5c R15: ffff88805db66468 [ 946.319746][T16052] do_vfs_ioctl+0xb9c/0x1cc0 [ 946.324467][T16052] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 946.330264][T16052] ? tomoyo_path_number_perm+0x217/0x620 [ 946.336025][T16052] ? __lock_acquire+0x7d40/0x7d40 [ 946.341168][T16052] ? slab_free_freelist_hook+0x130/0x1a0 [ 946.346856][T16052] ? tomoyo_path_number_perm+0x500/0x620 [ 946.352921][T16052] ? __kmem_cache_free+0xba/0x1e0 [ 946.358107][T16052] ? tomoyo_path_number_perm+0x5b4/0x620 [ 946.363818][T16052] ? tomoyo_path_number_perm+0x217/0x620 [ 946.369499][T16052] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 946.375305][T16052] ? __fget_files+0x28/0x4b0 [ 946.380455][T16052] ? __fget_files+0x28/0x4b0 [ 946.385213][T16052] ? bpf_lsm_file_ioctl+0x9/0x10 [ 946.390397][T16052] ? security_file_ioctl+0x80/0xa0 [ 946.395538][T16052] __se_sys_ioctl+0x83/0x170 [ 946.400247][T16052] do_syscall_64+0x55/0xa0 [ 946.405368][T16052] ? clear_bhb_loop+0x40/0x90 [ 946.410172][T16052] ? clear_bhb_loop+0x40/0x90 [ 946.415014][T16052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.421298][T16052] RIP: 0033:0x7f13e5b9c819 [ 946.425854][T16052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.446087][T16052] RSP: 002b:00007f13e6af3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.454633][T16052] RAX: ffffffffffffffda RBX: 00007f13e5e16090 RCX: 00007f13e5b9c819 [ 946.462815][T16052] RDX: 000000110e22fff2 RSI: 0000000040086602 RDI: 000000000000000b [ 946.471139][T16052] RBP: 00007f13e6af3090 R08: 0000000000000000 R09: 0000000000000000 [ 946.479226][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.487412][T16052] R13: 00007f13e5e16128 R14: 00007f13e5e16090 R15: 00007ffc16afbe08 [ 946.495941][T16052] [ 946.636484][T16057] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3316'. [ 946.778389][T16059] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3316'. [ 947.381580][T16067] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 947.383645][T16073] sock: sock_timestamping_bind_phc: sock not bind to device [ 949.739798][T16140] macvlan1: entered promiscuous mode [ 949.796339][T16143] validate_nla: 26 callbacks suppressed [ 949.796361][T16143] netlink: 'syz.0.3343': attribute type 10 has an invalid length. [ 949.825422][T16137] netlink: 'syz.0.3343': attribute type 9 has an invalid length. [ 950.283214][T16152] netlink: 'syz.3.3348': attribute type 10 has an invalid length. [ 950.312216][T16152] netlink: 'syz.3.3348': attribute type 9 has an invalid length. [ 950.343343][T16152] __nla_validate_parse: 17 callbacks suppressed [ 950.343362][T16152] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3348'. [ 950.398519][T16154] netlink: 'syz.0.3356': attribute type 10 has an invalid length. [ 950.447885][T16157] netlink: 'syz.3.3348': attribute type 9 has an invalid length. [ 950.490975][T16157] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3348'. [ 950.500719][T16161] netlink: 'syz.2.3350': attribute type 10 has an invalid length. [ 950.517408][T16154] netlink: 'syz.0.3356': attribute type 9 has an invalid length. [ 950.526439][T16154] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3356'. [ 950.608878][T16161] netlink: 'syz.2.3350': attribute type 9 has an invalid length. [ 950.645041][T16161] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3350'. [ 950.823661][T16163] netlink: 'syz.2.3350': attribute type 9 has an invalid length. [ 950.862555][T16163] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3350'. [ 951.292218][T16179] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3358'. [ 951.834633][T16189] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3363'. [ 952.604988][T16207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3367'. [ 952.636017][T16207] veth0_macvtap: left promiscuous mode [ 952.687134][T16205] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3368'. [ 953.182157][T16205] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3368'. [ 953.235685][T16219] team0: Device ipvlan1 failed to register rx_handler [ 955.267207][T16263] validate_nla: 8 callbacks suppressed [ 955.267219][T16263] netlink: 'syz.0.3385': attribute type 10 has an invalid length. [ 955.338459][T16263] netlink: 'syz.0.3385': attribute type 9 has an invalid length. [ 955.783717][T16274] netlink: 'syz.1.3388': attribute type 10 has an invalid length. [ 955.829645][T16274] netlink: 'syz.1.3388': attribute type 9 has an invalid length. [ 955.838005][T16274] __nla_validate_parse: 5 callbacks suppressed [ 955.838019][T16274] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3388'. [ 956.671501][T16285] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 956.822497][T16298] FAULT_INJECTION: forcing a failure. [ 956.822497][T16298] name failslab, interval 1, probability 0, space 0, times 0 [ 956.845568][T16298] CPU: 0 PID: 16298 Comm: syz.1.3394 Not tainted syzkaller #0 [ 956.853276][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 956.863429][T16298] Call Trace: [ 956.867018][T16298] [ 956.869959][T16298] dump_stack_lvl+0x18c/0x250 [ 956.874746][T16298] ? show_regs_print_info+0x20/0x20 [ 956.880046][T16298] ? load_image+0x420/0x420 [ 956.884556][T16298] ? __might_sleep+0xe0/0xe0 [ 956.889242][T16298] ? __lock_acquire+0x7d40/0x7d40 [ 956.894268][T16298] should_fail_ex+0x39d/0x4d0 [ 956.898953][T16298] should_failslab+0x9/0x20 [ 956.903470][T16298] slab_pre_alloc_hook+0x59/0x310 [ 956.908503][T16298] ? __get_vm_area_node+0x125/0x370 [ 956.913782][T16298] __kmem_cache_alloc_node+0x53/0x250 [ 956.919253][T16298] ? __get_vm_area_node+0x125/0x370 [ 956.924448][T16298] kmalloc_node_trace+0x26/0xe0 [ 956.929387][T16298] __get_vm_area_node+0x125/0x370 [ 956.934410][T16298] __vmalloc_node_range+0x36e/0x1330 [ 956.939708][T16298] ? netlink_sendmsg+0x602/0xbf0 [ 956.944822][T16298] ? netlink_insert+0x109f/0x13a0 [ 956.949851][T16298] ? netlink_data_ready+0x10/0x10 [ 956.954960][T16298] ? free_vm_area+0x50/0x50 [ 956.959475][T16298] ? netlink_sendmsg+0x602/0xbf0 [ 956.964515][T16298] vmalloc+0x79/0x90 [ 956.968490][T16298] ? netlink_sendmsg+0x602/0xbf0 [ 956.973420][T16298] netlink_sendmsg+0x602/0xbf0 [ 956.978181][T16298] ? netlink_getsockopt+0x590/0x590 [ 956.983392][T16298] ? aa_sock_msg_perm+0x94/0x150 [ 956.988409][T16298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 956.993699][T16298] ? security_socket_sendmsg+0x80/0xa0 [ 956.999239][T16298] ? netlink_getsockopt+0x590/0x590 [ 957.004434][T16298] ____sys_sendmsg+0x5ba/0x960 [ 957.009195][T16298] ? __asan_memset+0x22/0x40 [ 957.013782][T16298] ? __sys_sendmsg_sock+0x30/0x30 [ 957.018995][T16298] ? __import_iovec+0x5f2/0x850 [ 957.023848][T16298] ? import_iovec+0x73/0xa0 [ 957.028369][T16298] ___sys_sendmsg+0x2a6/0x360 [ 957.033050][T16298] ? get_pid_task+0x20/0x1e0 [ 957.037634][T16298] ? __sys_sendmsg+0x2a0/0x2a0 [ 957.042398][T16298] ? __lock_acquire+0x7d40/0x7d40 [ 957.047441][T16298] __se_sys_sendmsg+0x1c2/0x2b0 [ 957.052294][T16298] ? __x64_sys_sendmsg+0x80/0x80 [ 957.057311][T16298] ? lockdep_hardirqs_on+0x98/0x150 [ 957.062510][T16298] do_syscall_64+0x55/0xa0 [ 957.066914][T16298] ? clear_bhb_loop+0x40/0x90 [ 957.071594][T16298] ? clear_bhb_loop+0x40/0x90 [ 957.076353][T16298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.082240][T16298] RIP: 0033:0x7ffb1259c819 [ 957.086770][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.106476][T16298] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.114901][T16298] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 957.122867][T16298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 957.130843][T16298] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 957.138806][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.146856][T16298] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 957.154867][T16298] [ 957.174576][T16298] syz.1.3394: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 957.191446][T16298] CPU: 0 PID: 16298 Comm: syz.1.3394 Not tainted syzkaller #0 [ 957.198938][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 957.209173][T16298] Call Trace: [ 957.212449][T16298] [ 957.215394][T16298] dump_stack_lvl+0x18c/0x250 [ 957.220151][T16298] ? show_regs_print_info+0x20/0x20 [ 957.225349][T16298] ? load_image+0x420/0x420 [ 957.229853][T16298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 957.236270][T16298] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 957.242811][T16298] warn_alloc+0x246/0x340 [ 957.247181][T16298] ? __get_vm_area_node+0x125/0x370 [ 957.252410][T16298] ? zone_watermark_ok_safe+0x230/0x230 [ 957.258096][T16298] ? rcu_is_watching+0x15/0xb0 [ 957.263055][T16298] ? __get_vm_area_node+0x356/0x370 [ 957.268373][T16298] __vmalloc_node_range+0x393/0x1330 [ 957.273665][T16298] ? netlink_insert+0x109f/0x13a0 [ 957.278707][T16298] ? netlink_data_ready+0x10/0x10 [ 957.283815][T16298] ? free_vm_area+0x50/0x50 [ 957.288321][T16298] ? netlink_sendmsg+0x602/0xbf0 [ 957.293269][T16298] vmalloc+0x79/0x90 [ 957.297170][T16298] ? netlink_sendmsg+0x602/0xbf0 [ 957.302187][T16298] netlink_sendmsg+0x602/0xbf0 [ 957.306959][T16298] ? netlink_getsockopt+0x590/0x590 [ 957.312240][T16298] ? aa_sock_msg_perm+0x94/0x150 [ 957.317170][T16298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 957.322626][T16298] ? security_socket_sendmsg+0x80/0xa0 [ 957.328090][T16298] ? netlink_getsockopt+0x590/0x590 [ 957.333297][T16298] ____sys_sendmsg+0x5ba/0x960 [ 957.338068][T16298] ? __asan_memset+0x22/0x40 [ 957.342661][T16298] ? __sys_sendmsg_sock+0x30/0x30 [ 957.347931][T16298] ? __import_iovec+0x5f2/0x850 [ 957.352871][T16298] ? import_iovec+0x73/0xa0 [ 957.357545][T16298] ___sys_sendmsg+0x2a6/0x360 [ 957.362217][T16298] ? get_pid_task+0x20/0x1e0 [ 957.366893][T16298] ? __sys_sendmsg+0x2a0/0x2a0 [ 957.371694][T16298] ? __lock_acquire+0x7d40/0x7d40 [ 957.376814][T16298] __se_sys_sendmsg+0x1c2/0x2b0 [ 957.381756][T16298] ? __x64_sys_sendmsg+0x80/0x80 [ 957.386871][T16298] ? lockdep_hardirqs_on+0x98/0x150 [ 957.392070][T16298] do_syscall_64+0x55/0xa0 [ 957.396483][T16298] ? clear_bhb_loop+0x40/0x90 [ 957.401240][T16298] ? clear_bhb_loop+0x40/0x90 [ 957.405933][T16298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.411816][T16298] RIP: 0033:0x7ffb1259c819 [ 957.416355][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.436156][T16298] RSP: 002b:00007ffb134dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.444658][T16298] RAX: ffffffffffffffda RBX: 00007ffb12815fa0 RCX: 00007ffb1259c819 [ 957.452709][T16298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 957.461466][T16298] RBP: 00007ffb134dd090 R08: 0000000000000000 R09: 0000000000000000 [ 957.470067][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.478143][T16298] R13: 00007ffb12816038 R14: 00007ffb12815fa0 R15: 00007fffd7148cb8 [ 957.486135][T16298] [ 957.505020][T16298] Mem-Info: [ 957.508545][T16298] active_anon:15667 inactive_anon:0 isolated_anon:0 [ 957.508545][T16298] active_file:19510 inactive_file:40184 isolated_file:0 [ 957.508545][T16298] unevictable:768 dirty:356 writeback:0 [ 957.508545][T16298] slab_reclaimable:11858 slab_unreclaimable:100076 [ 957.508545][T16298] mapped:25138 shmem:1361 pagetables:602 [ 957.508545][T16298] sec_pagetables:0 bounce:0 [ 957.508545][T16298] kernel_misc_reclaimable:0 [ 957.508545][T16298] free:1330081 free_pcp:7509 free_cma:0 [ 957.572225][T16298] Node 0 active_anon:62568kB inactive_anon:0kB active_file:78040kB inactive_file:160536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100552kB dirty:1424kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10080kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 957.624633][T16298] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 957.670207][T16298] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 957.803078][T16298] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 957.867886][T16298] Node 0 DMA32 free:1410080kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62696kB inactive_anon:0kB active_file:78040kB inactive_file:159712kB unevictable:1536kB writepending:1440kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:9728kB local_pcp:6076kB free_cma:0kB [ 958.040034][T16298] lowmem_reserve[]: 0 0 0 0 0 [ 958.047763][T16298] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 958.098288][T16301] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 958.118455][T16298] lowmem_reserve[]: 0 0 0 0 0 [ 958.136284][T16298] Node 1 Normal free:3894884kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20004kB local_pcp:11040kB free_cma:0kB [ 958.273250][T16298] lowmem_reserve[]: 0 0 0 0 0 [ 958.278508][T16298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 958.292439][T16298] Node 0 DMA32: 1456*4kB (UME) 870*8kB (UM) 713*16kB (UM) 851*32kB (UME) 2049*64kB (UME) 729*128kB (UME) 155*256kB (UM) 20*512kB (UM) 4*1024kB (ME) 5*2048kB (UM) 261*4096kB (UM) = 1409184kB [ 958.369363][T16298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 958.412110][T16298] Node 1 Normal: 217*4kB (UM) 42*8kB (UME) 35*16kB (UME) 62*32kB (UME) 25*64kB (UME) 9*128kB (UME) 1*256kB (M) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894884kB [ 958.467760][T16298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 958.486040][T16298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 958.497388][T16298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 958.507927][T16298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 958.518229][T16298] 61055 total pagecache pages [ 958.523957][T16298] 0 pages in swap cache [ 958.528238][T16298] Free swap = 124996kB [ 958.532551][T16298] Total swap = 124996kB [ 958.537377][T16298] 2097051 pages RAM [ 958.541661][T16298] 0 pages HighMem/MovableOnly [ 958.547441][T16298] 416927 pages reserved [ 958.551731][T16298] 0 pages cma reserved [ 958.884928][T16326] netlink: 'syz.0.3404': attribute type 10 has an invalid length. [ 959.958662][T16341] netlink: 'syz.0.3409': attribute type 10 has an invalid length. [ 959.972345][T16341] netlink: 'syz.0.3409': attribute type 9 has an invalid length. [ 959.985568][T16341] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3409'. [ 960.349996][T16352] netlink: 'syz.3.3414': attribute type 10 has an invalid length. [ 960.370588][T16352] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 960.413758][T16356] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 960.826651][T16366] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 963.955453][T16381] netlink: 'syz.1.3423': attribute type 10 has an invalid length. [ 964.009044][T16381] netlink: 'syz.1.3423': attribute type 9 has an invalid length. [ 964.037434][T16381] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3423'. [ 964.103816][T16387] netlink: 'syz.0.3425': attribute type 10 has an invalid length. [ 964.111705][T16387] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 964.500643][T16395] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3428'. [ 964.512040][T16397] netlink: 'syz.0.3427': attribute type 19 has an invalid length. [ 964.521395][T16397] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3427'. [ 964.532458][T16395] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.3428'. [ 964.804553][T16400] netlink: 'syz.2.3430': attribute type 10 has an invalid length. [ 965.615240][T16415] netlink: 'syz.2.3434': attribute type 10 has an invalid length. [ 965.645667][T16415] netlink: 'syz.2.3434': attribute type 9 has an invalid length. [ 965.653228][T16418] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 965.682670][T16418] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 965.690329][T16415] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3434'. [ 965.842522][T16422] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3438'. [ 965.879616][T16422] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.3438'. [ 966.026583][T16425] netlink: 'syz.2.3439': attribute type 10 has an invalid length. [ 966.059662][T16425] netlink: 'syz.2.3439': attribute type 9 has an invalid length. [ 966.080328][T16425] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3439'. [ 966.247655][T16431] netlink: 'syz.3.3440': attribute type 10 has an invalid length. [ 966.542508][T16436] netlink: 'syz.0.3442': attribute type 9 has an invalid length. [ 966.572747][T16436] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3442'. [ 966.595906][T16427] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 966.606059][T16427] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 966.789039][T16444] netlink: 'syz.2.3444': attribute type 10 has an invalid length. [ 967.351382][T16457] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3450'. [ 967.658624][T16468] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 968.085841][T16480] FAULT_INJECTION: forcing a failure. [ 968.085841][T16480] name failslab, interval 1, probability 0, space 0, times 0 [ 968.128286][T16480] CPU: 0 PID: 16480 Comm: syz.0.3457 Not tainted syzkaller #0 [ 968.135902][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 968.146166][T16480] Call Trace: [ 968.149565][T16480] [ 968.152523][T16480] dump_stack_lvl+0x18c/0x250 [ 968.157250][T16480] ? show_regs_print_info+0x20/0x20 [ 968.162564][T16480] ? load_image+0x420/0x420 [ 968.167098][T16480] ? __might_sleep+0xe0/0xe0 [ 968.171809][T16480] ? __lock_acquire+0x7d40/0x7d40 [ 968.177403][T16480] ? perf_trace_lock+0xfc/0x3b0 [ 968.182396][T16480] should_fail_ex+0x39d/0x4d0 [ 968.187121][T16480] should_failslab+0x9/0x20 [ 968.191827][T16480] slab_pre_alloc_hook+0x59/0x310 [ 968.196909][T16480] ? __get_vm_area_node+0x125/0x370 [ 968.200641][T16473] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 968.202124][T16480] __kmem_cache_alloc_node+0x53/0x250 [ 968.202161][T16480] ? __get_vm_area_node+0x125/0x370 [ 968.202184][T16480] kmalloc_node_trace+0x26/0xe0 [ 968.202211][T16480] __get_vm_area_node+0x125/0x370 [ 968.202240][T16480] __vmalloc_node_range+0x36e/0x1330 [ 968.202263][T16480] ? netlink_sendmsg+0x602/0xbf0 [ 968.202288][T16480] ? netlink_insert+0x109f/0x13a0 [ 968.202330][T16480] ? netlink_data_ready+0x10/0x10 [ 968.202364][T16480] ? free_vm_area+0x50/0x50 [ 968.202395][T16480] ? netlink_sendmsg+0x602/0xbf0 [ 968.202418][T16480] vmalloc+0x79/0x90 [ 968.266116][T16480] ? netlink_sendmsg+0x602/0xbf0 [ 968.271182][T16480] netlink_sendmsg+0x602/0xbf0 [ 968.275998][T16480] ? netlink_getsockopt+0x590/0x590 [ 968.281378][T16480] ? aa_sock_msg_perm+0x94/0x150 [ 968.286404][T16480] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 968.291939][T16480] ? security_socket_sendmsg+0x80/0xa0 [ 968.297435][T16480] ? netlink_getsockopt+0x590/0x590 [ 968.303115][T16480] ____sys_sendmsg+0x5ba/0x960 [ 968.308004][T16480] ? __asan_memset+0x22/0x40 [ 968.312628][T16480] ? __sys_sendmsg_sock+0x30/0x30 [ 968.317784][T16480] ? __import_iovec+0x5f2/0x850 [ 968.322651][T16480] ? import_iovec+0x73/0xa0 [ 968.327250][T16480] ___sys_sendmsg+0x2a6/0x360 [ 968.331931][T16480] ? __sys_sendmsg+0x2a0/0x2a0 [ 968.336732][T16480] ? __lock_acquire+0x7d40/0x7d40 [ 968.341804][T16480] __se_sys_sendmsg+0x1c2/0x2b0 [ 968.346681][T16480] ? __x64_sys_sendmsg+0x80/0x80 [ 968.351826][T16480] ? lockdep_hardirqs_on+0x98/0x150 [ 968.357164][T16480] do_syscall_64+0x55/0xa0 [ 968.361759][T16480] ? clear_bhb_loop+0x40/0x90 [ 968.366627][T16480] ? clear_bhb_loop+0x40/0x90 [ 968.371513][T16480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.377650][T16480] RIP: 0033:0x7f13e5b9c819 [ 968.382167][T16480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.402218][T16480] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.410720][T16480] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 968.418694][T16480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 968.426684][T16480] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 968.434666][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.442724][T16480] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 968.450980][T16480] [ 968.611785][T16480] syz.0.3457: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 968.663189][T16480] CPU: 1 PID: 16480 Comm: syz.0.3457 Not tainted syzkaller #0 [ 968.670719][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 968.680887][T16480] Call Trace: [ 968.684236][T16480] [ 968.687190][T16480] dump_stack_lvl+0x18c/0x250 [ 968.692162][T16480] ? show_regs_print_info+0x20/0x20 [ 968.697449][T16480] ? load_image+0x420/0x420 [ 968.701983][T16480] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 968.708519][T16480] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 968.715064][T16480] warn_alloc+0x246/0x340 [ 968.719430][T16480] ? __get_vm_area_node+0x125/0x370 [ 968.724744][T16480] ? zone_watermark_ok_safe+0x230/0x230 [ 968.730411][T16480] ? rcu_is_watching+0x15/0xb0 [ 968.735240][T16480] ? __get_vm_area_node+0x356/0x370 [ 968.740503][T16480] __vmalloc_node_range+0x393/0x1330 [ 968.745830][T16480] ? netlink_insert+0x109f/0x13a0 [ 968.751011][T16480] ? netlink_data_ready+0x10/0x10 [ 968.756084][T16480] ? free_vm_area+0x50/0x50 [ 968.760653][T16480] ? netlink_sendmsg+0x602/0xbf0 [ 968.765606][T16480] vmalloc+0x79/0x90 [ 968.769522][T16480] ? netlink_sendmsg+0x602/0xbf0 [ 968.774504][T16480] netlink_sendmsg+0x602/0xbf0 [ 968.779761][T16480] ? netlink_getsockopt+0x590/0x590 [ 968.784980][T16480] ? aa_sock_msg_perm+0x94/0x150 [ 968.789935][T16480] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 968.795248][T16480] ? security_socket_sendmsg+0x80/0xa0 [ 968.800813][T16480] ? netlink_getsockopt+0x590/0x590 [ 968.806045][T16480] ____sys_sendmsg+0x5ba/0x960 [ 968.810849][T16480] ? __asan_memset+0x22/0x40 [ 968.815575][T16480] ? __sys_sendmsg_sock+0x30/0x30 [ 968.820865][T16480] ? __import_iovec+0x5f2/0x850 [ 968.825918][T16480] ? import_iovec+0x73/0xa0 [ 968.830541][T16480] ___sys_sendmsg+0x2a6/0x360 [ 968.835345][T16480] ? __sys_sendmsg+0x2a0/0x2a0 [ 968.840274][T16480] ? __lock_acquire+0x7d40/0x7d40 [ 968.845449][T16480] __se_sys_sendmsg+0x1c2/0x2b0 [ 968.850339][T16480] ? __x64_sys_sendmsg+0x80/0x80 [ 968.855325][T16480] ? lockdep_hardirqs_on+0x98/0x150 [ 968.860674][T16480] do_syscall_64+0x55/0xa0 [ 968.865165][T16480] ? clear_bhb_loop+0x40/0x90 [ 968.869993][T16480] ? clear_bhb_loop+0x40/0x90 [ 968.874882][T16480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.881055][T16480] RIP: 0033:0x7f13e5b9c819 [ 968.885511][T16480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.905385][T16480] RSP: 002b:00007f13e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.913947][T16480] RAX: ffffffffffffffda RBX: 00007f13e5e15fa0 RCX: 00007f13e5b9c819 [ 968.921986][T16480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 968.930151][T16480] RBP: 00007f13e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 968.938295][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.946474][T16480] R13: 00007f13e5e16038 R14: 00007f13e5e15fa0 R15: 00007ffc16afbe08 [ 968.954505][T16480] [ 969.005230][T16480] Mem-Info: [ 969.008516][T16480] active_anon:15576 inactive_anon:0 isolated_anon:0 [ 969.008516][T16480] active_file:19510 inactive_file:40188 isolated_file:0 [ 969.008516][T16480] unevictable:768 dirty:172 writeback:0 [ 969.008516][T16480] slab_reclaimable:11626 slab_unreclaimable:101363 [ 969.008516][T16480] mapped:25132 shmem:1361 pagetables:578 [ 969.008516][T16480] sec_pagetables:0 bounce:0 [ 969.008516][T16480] kernel_misc_reclaimable:0 [ 969.008516][T16480] free:1325380 free_pcp:10800 free_cma:0 [ 969.098317][T16480] Node 0 active_anon:62304kB inactive_anon:0kB active_file:78040kB inactive_file:160552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100528kB dirty:688kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no [ 969.253983][T16480] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 969.466461][T16480] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 969.497070][T16480] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 969.503766][T16480] Node 0 DMA32 free:1390772kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62368kB inactive_anon:0kB active_file:78040kB inactive_file:159728kB unevictable:1536kB writepending:688kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:22732kB local_pcp:18792kB free_cma:0kB [ 969.603021][T16480] lowmem_reserve[]: 0 0 0 0 0 [ 969.607953][T16480] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 969.687741][T16480] lowmem_reserve[]: 0 0 0 0 0 [ 969.692770][T16480] Node 1 Normal free:3894884kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20004kB local_pcp:11040kB free_cma:0kB [ 969.763070][T16480] lowmem_reserve[]: 0 0 0 0 0 [ 969.768091][T16480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 969.803606][T16480] Node 0 DMA32: 4*4kB (UME) 588*8kB (UM) 713*16kB (UM) 738*32kB (UM) 2048*64kB (UM) 723*128kB (UM) 155*256kB (UM) 19*512kB (M) 4*1024kB (ME) 4*2048kB (M) 260*4096kB (UM) = 1390016kB [ 969.844924][T16480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 969.874560][T16480] Node 1 Normal: 217*4kB (UM) 42*8kB (UME) 35*16kB (UME) 62*32kB (UME) 25*64kB (UME) 9*128kB (UME) 1*256kB (M) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894884kB [ 969.925183][T16480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.951755][T16480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 969.964466][T16480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.977182][T16480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 969.990535][T16480] 61061 total pagecache pages [ 969.996498][T16480] 0 pages in swap cache [ 970.001489][T16480] Free swap = 124996kB [ 970.016821][T16480] Total swap = 124996kB [ 970.021277][T16480] 2097051 pages RAM [ 970.036128][T16480] 0 pages HighMem/MovableOnly [ 970.044632][T16480] 416927 pages reserved [ 970.053531][T16480] 0 pages cma reserved [ 970.467984][T16511] __nla_validate_parse: 5 callbacks suppressed [ 970.468020][T16511] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3468'. [ 970.787034][T16519] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3472'. [ 970.832700][T16519] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.3472'. [ 970.859312][T16509] validate_nla: 6 callbacks suppressed [ 970.859335][T16509] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 970.967881][T16509] team0: Device ipvlan1 failed to register rx_handler [ 971.414389][T16509] syz.2.3469 (16509) used greatest stack depth: 17576 bytes left [ 971.476251][T16528] netlink: 'syz.1.3474': attribute type 9 has an invalid length. [ 971.518058][T16528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3474'. [ 971.625377][T16533] netlink: 'syz.2.3476': attribute type 10 has an invalid length. [ 972.575289][T16559] FAULT_INJECTION: forcing a failure. [ 972.575289][T16559] name failslab, interval 1, probability 0, space 0, times 0 [ 972.588376][T16559] CPU: 0 PID: 16559 Comm: syz.2.3485 Not tainted syzkaller #0 [ 972.596229][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 972.606340][T16559] Call Trace: [ 972.609636][T16559] [ 972.612579][T16559] dump_stack_lvl+0x18c/0x250 [ 972.617376][T16559] ? show_regs_print_info+0x20/0x20 [ 972.622691][T16559] ? load_image+0x420/0x420 [ 972.627429][T16559] should_fail_ex+0x39d/0x4d0 [ 972.632146][T16559] should_failslab+0x9/0x20 [ 972.636688][T16559] slab_pre_alloc_hook+0x59/0x310 [ 972.641847][T16559] kmem_cache_alloc+0x5a/0x2d0 [ 972.646994][T16559] ? __nf_conntrack_alloc+0x99/0x380 [ 972.652316][T16559] __nf_conntrack_alloc+0x99/0x380 [ 972.657527][T16559] init_conntrack+0x177/0xf10 [ 972.662593][T16559] ? early_drop+0x7f0/0x7f0 [ 972.667136][T16559] ? nf_conntrack_find_get+0x650/0x650 [ 972.672714][T16559] ? __local_bh_enable_ip+0x13a/0x1c0 [ 972.678140][T16559] ? __siphash_unaligned+0x22e/0x3a0 [ 972.683737][T16559] nf_conntrack_in+0xc06/0x15c0 [ 972.688722][T16559] ? nf_ct_pernet+0x270/0x270 [ 972.693526][T16559] ? ipt_do_table+0x2c1/0x15e0 [ 972.698505][T16559] ? read_lock_is_recursive+0x20/0x20 [ 972.703996][T16559] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 972.709693][T16559] ? ipv4_conntrack_local+0x123/0x200 [ 972.715142][T16559] ? ipv4_conntrack_in+0x20/0x20 [ 972.720201][T16559] nf_hook_slow+0xbd/0x200 [ 972.724734][T16559] ? nf_hook+0x390/0x390 [ 972.729222][T16559] nf_hook+0x228/0x390 [ 972.733422][T16559] ? nf_hook+0xa2/0x390 [ 972.737808][T16559] ? __ip_local_out+0x5f0/0x5f0 [ 972.742951][T16559] ? nf_hook+0x390/0x390 [ 972.747264][T16559] ? __asan_memset+0x22/0x40 [ 972.752031][T16559] ? ip_fast_csum+0x1ee/0x2b0 [ 972.756914][T16559] __ip_local_out+0x4db/0x5f0 [ 972.762143][T16559] ? nf_hook+0x390/0x390 [ 972.766507][T16559] ip_local_out+0x2a/0x130 [ 972.770961][T16559] iptunnel_xmit+0x4f0/0x920 [ 972.775592][T16559] ip_tunnel_xmit+0x1cbc/0x2410 [ 972.780490][T16559] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 972.785534][T16559] ? kmem_cache_free+0xf8/0x270 [ 972.790421][T16559] ? gre_build_header+0x25b/0x990 [ 972.795487][T16559] ipgre_xmit+0x7a6/0xb20 [ 972.799939][T16559] dev_hard_start_xmit+0x246/0x740 [ 972.805092][T16559] __dev_queue_xmit+0x19a3/0x3660 [ 972.810162][T16559] ? __dev_queue_xmit+0x265/0x3660 [ 972.815308][T16559] ? netdev_core_pick_tx+0x340/0x340 [ 972.820622][T16559] ? skb_release_data+0x1cf/0x800 [ 972.825685][T16559] ? pskb_expand_head+0xbfe/0x1230 [ 972.830842][T16559] __bpf_tx_skb+0x189/0x250 [ 972.835371][T16559] bpf_clone_redirect+0x30f/0x4a0 [ 972.840436][T16559] bpf_prog_c08ef512837047f4+0x61/0x66 [ 972.846264][T16559] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 972.852533][T16559] ? lock_chain_count+0x20/0x20 [ 972.857514][T16559] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 972.863969][T16559] ? lockdep_softirqs_on+0x580/0x580 [ 972.869366][T16559] ? ktime_get+0x7f/0x280 [ 972.873810][T16559] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 972.880163][T16559] ? ktime_get_real_ts64+0x440/0x440 [ 972.885472][T16559] ? __x64_sys_bpf+0x7c/0x90 [ 972.890085][T16559] ? __local_bh_disable_ip+0x108/0x1a0 [ 972.896022][T16559] ? __cant_sleep+0x220/0x220 [ 972.900825][T16559] ? read_tsc+0x9/0x20 [ 972.904908][T16559] ? ktime_get+0x24b/0x280 [ 972.909349][T16559] ? bpf_test_run+0x174/0x870 [ 972.914133][T16559] bpf_test_run+0x2df/0x870 [ 972.918761][T16559] ? bpf_test_run+0x174/0x870 [ 972.923466][T16559] ? convert___skb_to_skb+0x590/0x590 [ 972.929039][T16559] ? eth_get_headlen+0x210/0x210 [ 972.934097][T16559] ? slab_build_skb+0x25f/0x3f0 [ 972.939062][T16559] ? convert___skb_to_skb+0x3d/0x590 [ 972.944377][T16559] bpf_prog_test_run_skb+0xad2/0x12b0 [ 972.949797][T16559] ? cpu_online+0x60/0x60 [ 972.954232][T16559] bpf_prog_test_run+0x321/0x390 [ 972.959215][T16559] __sys_bpf+0x49d/0x890 [ 972.963750][T16559] ? bpf_link_show_fdinfo+0x390/0x390 [ 972.969349][T16559] ? lock_chain_count+0x20/0x20 [ 972.974235][T16559] __x64_sys_bpf+0x7c/0x90 [ 972.978853][T16559] do_syscall_64+0x55/0xa0 [ 972.983379][T16559] ? clear_bhb_loop+0x40/0x90 [ 972.988177][T16559] ? clear_bhb_loop+0x40/0x90 [ 972.992972][T16559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.998925][T16559] RIP: 0033:0x7f044db9c819 [ 973.003357][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.023257][T16559] RSP: 002b:00007f044ea38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.031705][T16559] RAX: ffffffffffffffda RBX: 00007f044de15fa0 RCX: 00007f044db9c819 [ 973.039898][T16559] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 973.048329][T16559] RBP: 00007f044ea38090 R08: 0000000000000000 R09: 0000000000000000 [ 973.056628][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.064806][T16559] R13: 00007f044de16038 R14: 00007f044de15fa0 R15: 00007fff73a6c868 [ 973.072976][T16559] [ 973.482791][T16573] netlink: 'syz.2.3488': attribute type 10 has an invalid length. [ 973.598885][T16579] netlink: 'syz.3.3489': attribute type 9 has an invalid length. [ 973.621212][T16579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3489'. [ 974.330178][T16591] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3495'. [ 974.344241][T16591] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.3495'. [ 974.471775][T16594] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 974.892032][T16596] netlink: 'syz.3.3499': attribute type 10 has an invalid length. [ 974.970717][T16596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3499'. [ 975.911725][T16609] netlink: 'syz.2.3500': attribute type 9 has an invalid length. [ 975.936259][T16609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3500'. [ 976.110464][T16615] netlink: 'syz.1.3502': attribute type 10 has an invalid length. [ 977.153236][T16642] FAULT_INJECTION: forcing a failure. [ 977.153236][T16642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.170703][T16642] CPU: 0 PID: 16642 Comm: syz.2.3514 Not tainted syzkaller #0 [ 977.178279][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 977.188705][T16642] Call Trace: [ 977.192088][T16642] [ 977.195129][T16642] dump_stack_lvl+0x18c/0x250 [ 977.200029][T16642] ? show_regs_print_info+0x20/0x20 [ 977.206837][T16642] ? load_image+0x420/0x420 [ 977.211873][T16642] ? __lock_acquire+0x7d40/0x7d40 [ 977.217338][T16642] ? snprintf+0xe9/0x140 [ 977.221713][T16642] should_fail_ex+0x39d/0x4d0 [ 977.226520][T16642] _copy_to_user+0x2f/0xa0 [ 977.230968][T16642] simple_read_from_buffer+0xe7/0x150 [ 977.236394][T16642] proc_fail_nth_read+0x1e8/0x260 [ 977.241654][T16642] ? proc_fault_inject_write+0x360/0x360 [ 977.247516][T16642] ? fsnotify_perm+0x271/0x5e0 [ 977.252504][T16642] ? proc_fault_inject_write+0x360/0x360 [ 977.258254][T16642] vfs_read+0x28b/0x970 [ 977.262498][T16642] ? kernel_read+0x1e0/0x1e0 [ 977.267294][T16642] ? __fget_files+0x28/0x4b0 [ 977.272331][T16642] ? __fget_files+0x28/0x4b0 [ 977.277573][T16642] ? __fget_files+0x43d/0x4b0 [ 977.282286][T16642] ? __fdget_pos+0x2a3/0x330 [ 977.287031][T16642] ? ksys_read+0x75/0x260 [ 977.291406][T16642] ksys_read+0x150/0x260 [ 977.295991][T16642] ? vfs_write+0x990/0x990 [ 977.300439][T16642] ? lockdep_hardirqs_on+0x98/0x150 [ 977.305845][T16642] do_syscall_64+0x55/0xa0 [ 977.310871][T16642] ? clear_bhb_loop+0x40/0x90 [ 977.315582][T16642] ? clear_bhb_loop+0x40/0x90 [ 977.320297][T16642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.326382][T16642] RIP: 0033:0x7f044db5d04e [ 977.330814][T16642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 977.351058][T16642] RSP: 002b:00007f044ea37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 977.359491][T16642] RAX: ffffffffffffffda RBX: 00007f044ea386c0 RCX: 00007f044db5d04e [ 977.367725][T16642] RDX: 000000000000000f RSI: 00007f044ea380a0 RDI: 000000000000000b [ 977.375815][T16642] RBP: 00007f044ea38090 R08: 0000000000000000 R09: 0000000000000000 [ 977.383805][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.391838][T16642] R13: 00007f044de16038 R14: 00007f044de15fa0 R15: 00007fff73a6c868 [ 977.399871][T16642] [ 977.641630][T16640] netlink: 'syz.1.3512': attribute type 10 has an invalid length. [ 977.675406][T16640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3512'. [ 978.573695][T16673] netlink: 'syz.3.3521': attribute type 10 has an invalid length. [ 978.684967][T16652] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 978.721387][T16652] team0: Device ipvlan1 failed to register rx_handler [ 979.027976][T16679] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3522'. [ 979.095973][T16681] netlink: 'syz.2.3523': attribute type 10 has an invalid length. [ 979.117690][T16681] netlink: 'syz.2.3523': attribute type 9 has an invalid length. [ 979.141659][T16681] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3523'. [ 979.703781][T16696] netlink: 'syz.2.3528': attribute type 10 has an invalid length. [ 979.711834][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3528'. [ 980.874481][T16716] netlink: 'syz.0.3534': attribute type 10 has an invalid length. [ 981.085000][T16717] netlink: 'syz.3.3533': attribute type 10 has an invalid length. [ 981.114112][T16717] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 981.132463][T16724] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 981.151418][T16724] netlink: 'syz.1.3536': attribute type 9 has an invalid length. [ 981.159502][T16724] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3536'. [ 981.403149][T16731] delete_channel: no stack [ 981.507659][T16734] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3541'. [ 981.526994][T16734] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3541'. [ 981.844896][T16744] delete_channel: no stack [ 982.085567][T16756] netlink: 'syz.3.3549': attribute type 9 has an invalid length. [ 982.085627][T16753] netlink: 'syz.2.3546': attribute type 10 has an invalid length. [ 982.093758][T16756] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3549'. [ 982.397257][T16749] netlink: 'syz.1.3547': attribute type 10 has an invalid length. [ 982.423968][T16749] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 982.615162][T16766] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 982.649809][T16766] netlink: 'syz.3.3550': attribute type 9 has an invalid length. [ 982.669700][T16766] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3550'. [ 982.717832][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 982.734992][T16773] veth0_vlan: left promiscuous mode [ 982.746893][T16773] veth0_vlan: entered promiscuous mode [ 982.831836][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 982.859033][T16771] netlink: 'syz.1.3551': attribute type 1 has an invalid length. [ 982.924305][T16771] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3551'. [ 982.957062][T16771] bridge_slave_1: default FDB implementation only supports local addresses [ 982.967443][T16775] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3551'. [ 982.977634][T16775] bridge_slave_1: default FDB implementation only supports local addresses [ 983.610010][T16789] netlink: 'syz.1.3557': attribute type 10 has an invalid length. [ 983.639000][T16789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3557'. [ 983.786129][T16796] delete_channel: no stack [ 983.790878][T16796] delete_channel: no stack [ 984.599812][T16801] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 986.404703][T16839] __nla_validate_parse: 4 callbacks suppressed [ 986.404738][T16839] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3574'. [ 986.451395][T16839] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.3574'. [ 986.782294][T16852] validate_nla: 8 callbacks suppressed [ 986.782308][T16852] netlink: 'syz.0.3579': attribute type 4 has an invalid length. [ 986.835189][T16852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3579'. [ 986.849945][T16851] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 987.016384][T16848] netlink: 'syz.3.3577': attribute type 10 has an invalid length. [ 987.067973][T16848] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 987.534713][ C1] [ 987.534723][ C1] ================================ [ 987.534728][ C1] WARNING: inconsistent lock state [ 987.534757][ C1] syzkaller #0 Not tainted [ 987.534766][ C1] -------------------------------- [ 987.534771][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 987.534779][ C1] syz.3.3585/16866 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 987.534798][ C1] ffff88805f667220 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 987.534850][ C1] {INITIAL USE} state was registered at: [ 987.534861][ C1] lock_acquire+0x19e/0x420 [ 987.534879][ C1] _raw_spin_lock+0x2e/0x40 [ 987.534896][ C1] htab_lock_bucket+0x17d/0x300 [ 987.534910][ C1] htab_lru_map_update_elem+0x2c6/0x990 [ 987.534925][ C1] bpf_map_update_value+0x660/0x720 [ 987.534940][ C1] map_update_elem+0x57b/0x700 [ 987.534955][ C1] __sys_bpf+0x6b5/0x890 [ 987.534969][ C1] __x64_sys_bpf+0x7c/0x90 [ 987.534983][ C1] do_syscall_64+0x55/0xa0 [ 987.534998][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.535022][ C1] irq event stamp: 2196 [ 987.535028][ C1] hardirqs last enabled at (2195): [] ___slab_alloc+0x10ef/0x12f0 [ 987.535061][ C1] hardirqs last disabled at (2196): [] exc_debug+0x73/0x140 [ 987.535081][ C1] softirqs last enabled at (2166): [] bpf_prog_load+0x1266/0x1670 [ 987.535102][ C1] softirqs last disabled at (2164): [] bpf_ksym_add+0x2d/0x340 [ 987.535125][ C1] [ 987.535125][ C1] other info that might help us debug this: [ 987.535130][ C1] Possible unsafe locking scenario: [ 987.535130][ C1] [ 987.535134][ C1] CPU0 [ 987.535138][ C1] ---- [ 987.535141][ C1] lock(&htab->lockdep_key); [ 987.535152][ C1] [ 987.535155][ C1] lock(&htab->lockdep_key); [ 987.535165][ C1] [ 987.535165][ C1] *** DEADLOCK *** [ 987.535165][ C1] [ 987.535169][ C1] no locks held by syz.3.3585/16866. [ 987.535177][ C1] [ 987.535177][ C1] stack backtrace: [ 987.535183][ C1] CPU: 1 PID: 16866 Comm: syz.3.3585 Not tainted syzkaller #0 [ 987.535199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 987.535208][ C1] Call Trace: [ 987.535215][ C1] <#DB> [ 987.535224][ C1] dump_stack_lvl+0x18c/0x250 [ 987.535258][ C1] ? show_regs_print_info+0x20/0x20 [ 987.535299][ C1] ? print_usage_bug+0x475/0x690 [ 987.535320][ C1] ? verify_lock_unused+0x18/0x140 [ 987.535350][ C1] lock_acquire+0x2c2/0x420 [ 987.535385][ C1] ? htab_lock_bucket+0x17d/0x300 [ 987.535410][ C1] ? read_lock_is_recursive+0x20/0x20 [ 987.535460][ C1] _raw_spin_lock+0x2e/0x40 [ 987.535477][ C1] ? htab_lock_bucket+0x17d/0x300 [ 987.535496][ C1] htab_lock_bucket+0x17d/0x300 [ 987.535523][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 987.535552][ C1] ? verify_lock_unused+0x18/0x140 [ 987.535577][ C1] ? jhash+0x34e/0x740 [ 987.535602][ C1] htab_lru_map_delete_elem+0x1a4/0x650 [ 987.535635][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 987.535652][ C1] ? perf_trace_lock+0x198/0x3b0 [ 987.535669][ C1] ? perf_callchain+0x220/0x220 [ 987.535706][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 987.535731][ C1] bpf_overflow_handler+0x43f/0x510 [ 987.535763][ C1] ? bpf_overflow_handler+0xde/0x510 [ 987.535787][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 987.535808][ C1] ? lock_release+0xb5/0x8c0 [ 987.535842][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 987.535874][ C1] __perf_event_overflow+0x447/0x630 [ 987.535910][ C1] perf_swevent_event+0x319/0x570 [ 987.535938][ C1] ? perf_tp_event+0x1520/0x1520 [ 987.535985][ C1] perf_bp_event+0x319/0x430 [ 987.536024][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 987.536110][ C1] ? lock_acquire+0x2c2/0x420 [ 987.536148][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 987.536183][ C1] notifier_call_chain+0x197/0x380 [ 987.536212][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 987.536239][ C1] atomic_notifier_call_chain+0xda/0x180 [ 987.536267][ C1] notify_die+0x145/0x1a0 [ 987.536295][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 987.536336][ C1] ? rcu_is_watching+0x15/0xb0 [ 987.536365][ C1] notify_debug+0x2e/0x50 [ 987.536384][ C1] exc_debug+0xde/0x140 [ 987.536409][ C1] asm_exc_debug+0x1e/0x40 [ 987.536427][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 987.536449][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 987.536467][ C1] RSP: 0018:ffffc9000329fb48 EFLAGS: 00050206 [ 987.536481][ C1] RAX: ffffffff842a2101 RBX: 0000000000000b68 RCX: 0000000000000858 [ 987.536493][ C1] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffff88802ff90480 [ 987.536505][ C1] RBP: 0000000000000170 R08: ffff88802ff90cd7 R09: 1ffff11005ff219a [ 987.536518][ C1] R10: dffffc0000000000 R11: ffffed1005ff219b R12: 0000200000000b68 [ 987.536530][ C1] R13: 0000000000000d80 R14: ffff88802ff90170 R15: 0000200000000000 [ 987.536558][ C1] ? _copy_from_user+0x31/0xe0 [ 987.536593][ C1] [ 987.536598][ C1] [ 987.536603][ C1] _copy_from_user+0x8b/0xe0 [ 987.536628][ C1] bpf_test_init+0xde/0x140 [ 987.536658][ C1] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 987.536710][ C1] ? dev_put+0x80/0x80 [ 987.536753][ C1] ? dev_put+0x80/0x80 [ 987.536774][ C1] bpf_prog_test_run+0x321/0x390 [ 987.536799][ C1] __sys_bpf+0x49d/0x890 [ 987.536819][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 987.536867][ C1] ? lock_chain_count+0x20/0x20 [ 987.536903][ C1] __x64_sys_bpf+0x7c/0x90 [ 987.536924][ C1] do_syscall_64+0x55/0xa0 [ 987.536938][ C1] ? clear_bhb_loop+0x40/0x90 [ 987.536956][ C1] ? clear_bhb_loop+0x40/0x90 [ 987.536981][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.537000][ C1] RIP: 0033:0x7f08b4b9c819 [ 987.537023][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.537036][ C1] RSP: 002b:00007f08b5af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 987.537051][ C1] RAX: ffffffffffffffda RBX: 00007f08b4e15fa0 RCX: 00007f08b4b9c819 [ 987.537063][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 987.537074][ C1] RBP: 00007f08b4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 987.537084][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.537094][ C1] R13: 00007f08b4e16038 R14: 00007f08b4e15fa0 R15: 00007ffd2f574ad8 [ 987.537137][ C1] [ 988.242946][T16869] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 988.251439][T16869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3586'. [ 993.935679][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.942051][ T1287] ieee802154 phy1 wpan1: encryption failed: -22