last executing test programs: 7.879165853s ago: executing program 1 (id=4442): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x19e4, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000002000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000010b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2f24634e311b994dbb0c2cdd3851", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.819136435s ago: executing program 1 (id=4443): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611063000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000a5640000000000000000000218120040", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0ee0ffff030000db48019e0008e2cc8cfe8b1f0580034b6ac8b808c4a9e73ad8f6fd02e984cbc2da87682a11fbb975976e5c0a7c82bad69f388111c448c2c1a9c88256bb42bc356ec9a22be9543914aa13fe4533c46bcb7fd4937f89d90390b2279a9ef2b4f226decd6f0a9d8a597b0b570af553fc757315ed611c0651d611d1702c17a81183f265a9503ed36762181c1d480bf60e7ca38e517ac8774f0aa96a3f14a6c95bf388f43716e1e899333f5a5601546d619d777df1020a1d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x10, &(0x7f0000000040), 0x4) 7.406640715s ago: executing program 1 (id=4447): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x1fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007bfdffff000000001e00000095006420413c3400000000000049385bf01bf20fa10c3be66359e966371ca44894d74eb04ae9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 7.18834083s ago: executing program 1 (id=4451): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="fdffffff73657420"], 0x8) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618256000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 5.598708117s ago: executing program 2 (id=4471): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611063000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000a5640000000000000000000218120040", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0ee0ffff030000db48019e0008e2cc8cfe8b1f0580034b6ac8b808c4a9e73ad8f6fd02e984cbc2da87682a11fbb975976e5c0a7c82bad69f388111c448c2c1a9c88256bb42bc356ec9a22be9543914aa13fe4533c46bcb7fd4937f89d90390b2279a9ef2b4f226decd6f0a9d8a597b0b570af553fc757315ed611c0651d611d1702c17a81183f265a9503ed36762181c1d480bf60e7ca38e517ac8774f0aa96a3f14a6c95bf388f43716e1e899333f5a5601546d619d777df1020a1d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x10, &(0x7f0000000040), 0x4) 5.527914679s ago: executing program 0 (id=4473): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x3d, r0}, 0x38) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0x45a713842ab9b591, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740), &(0x7f00000005c0)=[0x0], 0x0, 0xcc, &(0x7f0000000940), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000840), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1f000000865a0000000400000400000090bd0000", @ANYRES32, @ANYBLOB='P\n\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000000050000000500"/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 5.444905821s ago: executing program 0 (id=4474): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x7c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffe2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x400a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcd, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x3e, 0x0, 0x30, 0x5f, 0x2e]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x5d9}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 5.08255421s ago: executing program 0 (id=4475): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x1fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007bfdffff000000001e00000095006420413c3400000000000049385bf01bf20fa10c3be66359e966371ca44894d74eb04ae9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 4.987516792s ago: executing program 0 (id=4476): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891f, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000a5640000000000000000000218120040", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x10, &(0x7f0000000040), 0x4) 4.880060765s ago: executing program 0 (id=4477): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x101, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0xef}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.769432847s ago: executing program 0 (id=4478): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x10}) 4.765939707s ago: executing program 3 (id=4479): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x2, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x37, 0x1, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001100)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200061019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r6, 0x12) r9 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, r4, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=ANY=[@ANYBLOB="05000000040000000200000007"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000001000000b70400000000000085000000c3000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff033168acb89e14f008000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b985", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x4}, 0x120) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) recvmsg$kcm(r13, 0x0, 0x80) 4.672351819s ago: executing program 2 (id=4480): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x1fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007bfdffff000000001e00000095006420413c3400000000000049385bf01bf20fa10c3be66359e966371ca44894d74eb04ae9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 4.500734873s ago: executing program 3 (id=4481): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400, 0x7}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x17008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000fc0)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/net\x00') 4.500074084s ago: executing program 2 (id=4482): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10fb83, 0x3, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000200004030000000060000009500007b000000008500000013000000950000000000000000000000000000000b00000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x70}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x200) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r6, 0x4) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r2) r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x2, 0x1ec08dbe01458576}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) socket$kcm(0x18, 0x0, 0x0) 4.21756144s ago: executing program 3 (id=4483): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10fb83, 0x3, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) 4.097417203s ago: executing program 1 (id=4484): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x1fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007bfdffff000000001e00000095006420413c3400000000000049385bf01bf20fa10c3be66359e966371ca44894d74eb04ae9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 3.786745931s ago: executing program 1 (id=4485): r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x100208, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x13bb711e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x13, 0x0, &(0x7f0000000180)="5486bbac43bbf8e44dcdd0e6b689f0ca471909", 0xfffffffffffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}, 0x1f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="9daaac999f69c48373a1ee570000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r8}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) r9 = syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000058000000580000000300babe046b000002000013040000000300000009000000060000000e00000001000000ff0f0000000000000500000d0000000000040000000d0000000100000000000000050000000b0000000500000000305f00305f00"/119], &(0x7f0000000280), 0x77, 0x0, 0x0, 0xa}, 0x28) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.747417391s ago: executing program 3 (id=4486): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891f, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000a5640000000000000000000218120040", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x10, &(0x7f0000000040), 0x4) 3.533659256s ago: executing program 2 (id=4487): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x101, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0xef}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.36948676s ago: executing program 3 (id=4488): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000003ac0)=""/4108, 0x100c}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x7}, 0x20) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1a000}, 0x0) 2.990979149s ago: executing program 3 (id=4489): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611063000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000a5640000000000000000000218120040", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0ee0ffff030000db48019e0008e2cc8cfe8b1f0580034b6ac8b808c4a9e73ad8f6fd02e984cbc2da87682a11fbb975976e5c0a7c82bad69f388111c448c2c1a9c88256bb42bc356ec9a22be9543914aa13fe4533c46bcb7fd4937f89d90390b2279a9ef2b4f226decd6f0a9d8a597b0b570af553fc757315ed611c0651d611d1702c17a81183f265a9503ed36762181c1d480bf60e7ca38e517ac8774f0aa96a3f14a6c95bf388f43716e1e899333f5a5601546d619d777df1020a1d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x10, &(0x7f0000000040), 0x4) 2.988520579s ago: executing program 2 (id=4497): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x1fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007bfdffff000000001e00000095006420413c3400000000000049385bf01bf20fa10c3be66359e966371ca44894d74eb04ae9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 0s ago: executing program 2 (id=4490): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x22, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x2000000000000001, r1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r4}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, &(0x7f0000000200)) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24008000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sendmsg$inet(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 000000000000001 [ 420.648778][T13750] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 420.656763][T13750] [ 420.687841][T13752] __nla_validate_parse: 4 callbacks suppressed [ 420.687904][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 420.690651][T13750] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.837900][T13757] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3017'. [ 422.976014][T13769] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3021'. [ 422.988199][T13769] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3021'. [ 423.125942][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'. [ 423.229833][T13781] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3025'. [ 423.433044][T13788] syzkaller0: entered promiscuous mode [ 423.447348][T13788] syzkaller0: entered allmulticast mode [ 425.628728][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 425.643489][T13810] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3036'. [ 425.861556][T13828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3041'. [ 425.948280][T13824] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3039'. [ 426.353130][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 428.033930][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 428.067470][T13874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3059'. [ 428.300372][T13880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3062'. [ 428.731580][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 428.860196][T13900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3070'. [ 429.371789][T13911] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3076'. [ 429.391414][T13911] netlink: get zone limit has 4 unknown bytes [ 429.455797][T13918] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.3079'. [ 429.766475][T13928] FAULT_INJECTION: forcing a failure. [ 429.766475][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.786334][T13928] CPU: 1 PID: 13928 Comm: syz.3.3083 Not tainted syzkaller #0 [ 429.793856][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 429.803942][T13928] Call Trace: [ 429.807238][T13928] [ 429.810193][T13928] dump_stack_lvl+0x18c/0x250 [ 429.814914][T13928] ? show_regs_print_info+0x20/0x20 [ 429.820159][T13928] ? load_image+0x420/0x420 [ 429.824699][T13928] ? __lock_acquire+0x7d80/0x7d80 [ 429.829753][T13928] should_fail_ex+0x394/0x4c0 [ 429.834476][T13928] _copy_from_user+0x2f/0xe0 [ 429.839099][T13928] bpf_prog_test_run_skb+0x267/0x18f0 [ 429.844502][T13928] ? __fget_files+0x28/0x460 [ 429.849123][T13928] ? __fget_files+0x3fc/0x460 [ 429.853848][T13928] ? cpu_online+0x60/0x60 [ 429.858204][T13928] bpf_prog_test_run+0x31f/0x390 [ 429.863173][T13928] __sys_bpf+0x49d/0x890 [ 429.867463][T13928] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.872885][T13928] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.879087][T13928] __x64_sys_bpf+0x7c/0x90 [ 429.883536][T13928] do_syscall_64+0x55/0xb0 [ 429.887966][T13928] ? clear_bhb_loop+0x40/0x90 [ 429.892646][T13928] ? clear_bhb_loop+0x40/0x90 [ 429.897329][T13928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.903248][T13928] RIP: 0033:0x7f090eb9de99 [ 429.907682][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.927297][T13928] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.935715][T13928] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 429.943687][T13928] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 429.951659][T13928] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 429.959626][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.967599][T13928] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 429.975597][T13928] [ 430.873557][T13958] __nla_validate_parse: 2 callbacks suppressed [ 430.873577][T13958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 431.036343][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3096'. [ 431.259465][T13970] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3100'. [ 431.332789][T13974] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3101'. [ 431.890213][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 432.030979][T14007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3110'. [ 435.783978][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 436.074517][T14046] raw_sendmsg: syz.2.3126 forgot to set AF_INET. Fix it! [ 436.387927][T14053] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3128'. [ 436.804552][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 436.911714][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3137'. [ 436.943349][T14075] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.3138'. [ 437.763665][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 438.405589][T14113] netlink: 'syz.1.3153': attribute type 2 has an invalid length. [ 438.417438][T14113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3153'. [ 438.941959][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 439.171122][T14134] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3162'. [ 439.265367][T14140] netlink: 'syz.3.3163': attribute type 2 has an invalid length. [ 439.286662][T14140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3163'. [ 439.913531][T14150] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3168'. [ 440.073375][T14152] FAULT_INJECTION: forcing a failure. [ 440.073375][T14152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.111708][T14152] CPU: 0 PID: 14152 Comm: syz.2.3169 Not tainted syzkaller #0 [ 440.119242][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 440.129328][T14152] Call Trace: [ 440.132631][T14152] [ 440.135580][T14152] dump_stack_lvl+0x18c/0x250 [ 440.140299][T14152] ? show_regs_print_info+0x20/0x20 [ 440.145544][T14152] ? load_image+0x420/0x420 [ 440.150083][T14152] ? __lock_acquire+0x7d80/0x7d80 [ 440.155143][T14152] ? snprintf+0xe9/0x140 [ 440.159427][T14152] should_fail_ex+0x394/0x4c0 [ 440.164149][T14152] _copy_to_user+0x2f/0xa0 [ 440.168593][T14152] simple_read_from_buffer+0xe7/0x150 [ 440.174002][T14152] proc_fail_nth_read+0x1e8/0x260 [ 440.179066][T14152] ? proc_fault_inject_write+0x360/0x360 [ 440.184740][T14152] ? fsnotify_perm+0x271/0x5e0 [ 440.189537][T14152] ? proc_fault_inject_write+0x360/0x360 [ 440.195223][T14152] vfs_read+0x298/0x990 [ 440.199413][T14152] ? kernel_read+0x1e0/0x1e0 [ 440.204041][T14152] ? __fget_files+0x28/0x460 [ 440.208664][T14152] ? __fget_files+0x3fc/0x460 [ 440.213378][T14152] ? __fdget_pos+0x2a3/0x330 [ 440.218015][T14152] ? ksys_read+0x74/0x260 [ 440.222381][T14152] ksys_read+0x151/0x260 [ 440.226708][T14152] ? vfs_write+0x9a0/0x9a0 [ 440.231154][T14152] ? lockdep_hardirqs_on+0x98/0x150 [ 440.236381][T14152] do_syscall_64+0x55/0xb0 [ 440.240824][T14152] ? clear_bhb_loop+0x40/0x90 [ 440.245520][T14152] ? clear_bhb_loop+0x40/0x90 [ 440.250226][T14152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.256167][T14152] RIP: 0033:0x7f533b35e6ce [ 440.260610][T14152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.280241][T14152] RSP: 002b:00007f533c22dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 440.288678][T14152] RAX: ffffffffffffffda RBX: 00007f533c22e6c0 RCX: 00007f533b35e6ce [ 440.296663][T14152] RDX: 000000000000000f RSI: 00007f533c22e0a0 RDI: 0000000000000008 [ 440.304640][T14152] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 440.312628][T14152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.320616][T14152] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 440.328612][T14152] [ 440.352383][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.358727][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.806943][T14194] __nla_validate_parse: 7 callbacks suppressed [ 441.806987][T14194] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3185'. [ 442.152873][T14203] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3196'. [ 442.195348][T14205] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3188'. [ 442.325239][T14213] netlink: 'syz.2.3193': attribute type 8 has an invalid length. [ 442.336017][T14213] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3193'. [ 442.486035][T14217] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3195'. [ 442.532463][T14219] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3197'. [ 442.885543][T14232] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3201'. [ 443.609069][T14247] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3207'. [ 443.746446][T14249] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3208'. [ 444.043712][T14260] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3221'. [ 445.017148][T14289] FAULT_INJECTION: forcing a failure. [ 445.017148][T14289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.038814][T14289] CPU: 1 PID: 14289 Comm: syz.3.3227 Not tainted syzkaller #0 [ 445.046331][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 445.056408][T14289] Call Trace: [ 445.059703][T14289] [ 445.062655][T14289] dump_stack_lvl+0x18c/0x250 [ 445.067369][T14289] ? show_regs_print_info+0x20/0x20 [ 445.072600][T14289] ? load_image+0x420/0x420 [ 445.077142][T14289] ? __might_fault+0xaa/0x120 [ 445.081850][T14289] ? __lock_acquire+0x7d80/0x7d80 [ 445.086904][T14289] should_fail_ex+0x394/0x4c0 [ 445.091611][T14289] _copy_from_user+0x2f/0xe0 [ 445.096223][T14289] __sys_bpf+0x23e/0x890 [ 445.100497][T14289] ? bpf_link_show_fdinfo+0x390/0x390 [ 445.105904][T14289] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.112101][T14289] __x64_sys_bpf+0x7c/0x90 [ 445.116543][T14289] do_syscall_64+0x55/0xb0 [ 445.120987][T14289] ? clear_bhb_loop+0x40/0x90 [ 445.125683][T14289] ? clear_bhb_loop+0x40/0x90 [ 445.130387][T14289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.136307][T14289] RIP: 0033:0x7f090eb9de99 [ 445.140742][T14289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.160394][T14289] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.168842][T14289] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 445.176850][T14289] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 445.184840][T14289] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 445.192832][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.200822][T14289] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 445.208830][T14289] [ 447.773982][T14347] __nla_validate_parse: 13 callbacks suppressed [ 447.774017][T14347] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3248'. [ 447.897999][T14356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3251'. [ 448.557971][T14371] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3257'. [ 449.348347][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 451.401135][T14390] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3262'. [ 451.423088][T14393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3264'. [ 451.637412][T14397] netlink: 'syz.3.3267': attribute type 7 has an invalid length. [ 451.649514][T14402] FAULT_INJECTION: forcing a failure. [ 451.649514][T14402] name failslab, interval 1, probability 0, space 0, times 0 [ 451.663801][T14397] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3267'. [ 451.673177][T14402] CPU: 0 PID: 14402 Comm: syz.2.3268 Not tainted syzkaller #0 [ 451.680689][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 451.690785][T14402] Call Trace: [ 451.694116][T14402] [ 451.697088][T14402] dump_stack_lvl+0x18c/0x250 [ 451.701841][T14402] ? show_regs_print_info+0x20/0x20 [ 451.707102][T14402] ? load_image+0x420/0x420 [ 451.711666][T14402] ? __might_sleep+0xe0/0xe0 [ 451.716311][T14402] ? __lock_acquire+0x7d80/0x7d80 [ 451.721394][T14402] ? tcp_current_mss+0x6e0/0x6e0 [ 451.726386][T14402] should_fail_ex+0x394/0x4c0 [ 451.731128][T14402] should_failslab+0x9/0x20 [ 451.735673][T14402] slab_pre_alloc_hook+0x59/0x300 [ 451.740749][T14402] ? trace_call_bpf+0xc3/0x6c0 [ 451.745578][T14402] kmem_cache_alloc_node+0x5e/0x310 [ 451.750830][T14402] ? __alloc_skb+0x103/0x2c0 [ 451.755485][T14402] __alloc_skb+0x103/0x2c0 [ 451.759962][T14402] tcp_stream_alloc_skb+0x3d/0x330 [ 451.765132][T14402] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 451.770321][T14402] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 451.777004][T14402] ? mark_lock+0x94/0x320 [ 451.781392][T14402] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 451.787455][T14402] ? tcp_set_state+0x6c0/0x6c0 [ 451.792319][T14402] tcp_sendmsg+0x2f/0x50 [ 451.796604][T14402] ? inet_send_prepare+0x250/0x250 [ 451.801758][T14402] ____sys_sendmsg+0x61b/0x980 [ 451.806613][T14402] ? __sys_sendmsg_sock+0x30/0x30 [ 451.811689][T14402] ? __import_iovec+0x5f2/0x850 [ 451.816619][T14402] ? import_iovec+0x73/0xa0 [ 451.821186][T14402] ___sys_sendmsg+0x2a6/0x360 [ 451.826018][T14402] ? get_pid_task+0x20/0x1e0 [ 451.830670][T14402] ? __sys_sendmsg+0x2b0/0x2b0 [ 451.835552][T14402] ? __lock_acquire+0x7d80/0x7d80 [ 451.840701][T14402] __se_sys_sendmsg+0x1d0/0x2c0 [ 451.845617][T14402] ? __x64_sys_sendmsg+0x80/0x80 [ 451.850668][T14402] ? lockdep_hardirqs_on+0x98/0x150 [ 451.855940][T14402] do_syscall_64+0x55/0xb0 [ 451.860405][T14402] ? clear_bhb_loop+0x40/0x90 [ 451.865126][T14402] ? clear_bhb_loop+0x40/0x90 [ 451.869837][T14402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.875764][T14402] RIP: 0033:0x7f533b39de99 [ 451.880240][T14402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.899893][T14402] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.908368][T14402] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 451.916391][T14402] RDX: 0000000004000081 RSI: 00002000000000c0 RDI: 0000000000000003 [ 451.924410][T14402] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.932426][T14402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.940447][T14402] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 451.948476][T14402] [ 451.970101][T14406] netlink: 'syz.0.3269': attribute type 10 has an invalid length. [ 452.023836][T14406] team0: Device wg1 is of different type [ 452.314152][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 452.448721][T14425] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3271'. [ 452.565708][T14429] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3276'. [ 452.611344][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 453.345530][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 453.817092][T14448] netlink: 'syz.3.3285': attribute type 10 has an invalid length. [ 453.928685][T14448] team0: Device wg1 is of different type [ 453.969199][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3287'. [ 453.990309][T14454] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3288'. [ 454.157665][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 454.269741][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 454.702609][T14480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3299'. [ 454.849563][T14485] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3300'. [ 454.954968][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 455.156521][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 455.654080][T14510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3311'. [ 456.570188][T14526] FAULT_INJECTION: forcing a failure. [ 456.570188][T14526] name failslab, interval 1, probability 0, space 0, times 0 [ 456.631671][T14526] CPU: 1 PID: 14526 Comm: syz.3.3318 Not tainted syzkaller #0 [ 456.639194][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 456.649263][T14526] Call Trace: [ 456.652550][T14526] [ 456.655473][T14526] dump_stack_lvl+0x18c/0x250 [ 456.660161][T14526] ? show_regs_print_info+0x20/0x20 [ 456.665386][T14526] ? load_image+0x420/0x420 [ 456.669919][T14526] ? __might_sleep+0xe0/0xe0 [ 456.674537][T14526] ? __lock_acquire+0x7d80/0x7d80 [ 456.679590][T14526] should_fail_ex+0x394/0x4c0 [ 456.684300][T14526] should_failslab+0x9/0x20 [ 456.688831][T14526] slab_pre_alloc_hook+0x59/0x300 [ 456.693891][T14526] ? __get_vm_area_node+0x125/0x370 [ 456.699113][T14526] __kmem_cache_alloc_node+0x53/0x250 [ 456.704518][T14526] ? __get_vm_area_node+0x125/0x370 [ 456.709747][T14526] kmalloc_node_trace+0x26/0xe0 [ 456.714626][T14526] __get_vm_area_node+0x125/0x370 [ 456.719677][T14526] ? __perf_event_account_interrupt+0x187/0x280 [ 456.725947][T14526] __vmalloc_node_range+0x36f/0x1320 [ 456.731258][T14526] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 456.736828][T14526] ? perf_trace_preemptirq_template+0x269/0x330 [ 456.743094][T14526] ? perf_trace_preemptirq_template+0xac/0x330 [ 456.749275][T14526] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 456.755282][T14526] ? free_vm_area+0x50/0x50 [ 456.759790][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.765943][T14526] ? lockdep_hardirqs_on+0x98/0x150 [ 456.771138][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.777297][T14526] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 456.782845][T14526] __vmalloc+0x7a/0x90 [ 456.786935][T14526] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 456.792494][T14526] bpf_prog_alloc_no_stats+0x46/0x430 [ 456.797879][T14526] bpf_prog_alloc+0x3d/0x1a0 [ 456.802475][T14526] bpf_prog_load+0x6b2/0x1610 [ 456.807163][T14526] ? map_freeze+0x420/0x420 [ 456.811679][T14526] ? __might_fault+0xaa/0x120 [ 456.816360][T14526] ? __lock_acquire+0x7d80/0x7d80 [ 456.821382][T14526] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 456.827187][T14526] ? __might_fault+0xaa/0x120 [ 456.831856][T14526] ? __might_fault+0xc6/0x120 [ 456.836522][T14526] ? __might_fault+0xaa/0x120 [ 456.841193][T14526] ? bpf_lsm_bpf+0x9/0x10 [ 456.845524][T14526] ? security_bpf+0x7e/0xa0 [ 456.850021][T14526] __sys_bpf+0x5ba/0x890 [ 456.854289][T14526] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.859665][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.865829][T14526] __x64_sys_bpf+0x7c/0x90 [ 456.870240][T14526] do_syscall_64+0x55/0xb0 [ 456.874658][T14526] ? clear_bhb_loop+0x40/0x90 [ 456.879329][T14526] ? clear_bhb_loop+0x40/0x90 [ 456.884001][T14526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.889891][T14526] RIP: 0033:0x7f090eb9de99 [ 456.894303][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.913904][T14526] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.922311][T14526] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 456.930275][T14526] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 456.938240][T14526] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 456.946209][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.954187][T14526] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 456.962174][T14526] [ 456.996319][T14526] syz.3.3318: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 457.018161][T14526] CPU: 0 PID: 14526 Comm: syz.3.3318 Not tainted syzkaller #0 [ 457.025669][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 457.035775][T14526] Call Trace: [ 457.039061][T14526] [ 457.042002][T14526] dump_stack_lvl+0x18c/0x250 [ 457.046714][T14526] ? show_regs_print_info+0x20/0x20 [ 457.051936][T14526] ? load_image+0x420/0x420 [ 457.056468][T14526] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 457.062904][T14526] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 457.069418][T14526] warn_alloc+0x246/0x340 [ 457.073764][T14526] ? __get_vm_area_node+0x125/0x370 [ 457.078991][T14526] ? zone_watermark_ok_safe+0x230/0x230 [ 457.084559][T14526] ? rcu_is_watching+0x15/0xb0 [ 457.089342][T14526] ? __get_vm_area_node+0x356/0x370 [ 457.094575][T14526] __vmalloc_node_range+0x394/0x1320 [ 457.099889][T14526] ? perf_trace_preemptirq_template+0x269/0x330 [ 457.106151][T14526] ? perf_trace_preemptirq_template+0xac/0x330 [ 457.112332][T14526] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 457.118338][T14526] ? free_vm_area+0x50/0x50 [ 457.122864][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.129032][T14526] ? lockdep_hardirqs_on+0x98/0x150 [ 457.134250][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.140428][T14526] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 457.145996][T14526] __vmalloc+0x7a/0x90 [ 457.150091][T14526] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 457.155659][T14526] bpf_prog_alloc_no_stats+0x46/0x430 [ 457.161060][T14526] bpf_prog_alloc+0x3d/0x1a0 [ 457.165936][T14526] bpf_prog_load+0x6b2/0x1610 [ 457.170641][T14526] ? map_freeze+0x420/0x420 [ 457.175139][T14526] ? __might_fault+0xaa/0x120 [ 457.179814][T14526] ? __lock_acquire+0x7d80/0x7d80 [ 457.184831][T14526] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 457.190546][T14526] ? __might_fault+0xaa/0x120 [ 457.195213][T14526] ? __might_fault+0xc6/0x120 [ 457.199876][T14526] ? __might_fault+0xaa/0x120 [ 457.204542][T14526] ? bpf_lsm_bpf+0x9/0x10 [ 457.208884][T14526] ? security_bpf+0x7e/0xa0 [ 457.213390][T14526] __sys_bpf+0x5ba/0x890 [ 457.217653][T14526] ? bpf_link_show_fdinfo+0x390/0x390 [ 457.223047][T14526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.229206][T14526] __x64_sys_bpf+0x7c/0x90 [ 457.233624][T14526] do_syscall_64+0x55/0xb0 [ 457.238055][T14526] ? clear_bhb_loop+0x40/0x90 [ 457.242742][T14526] ? clear_bhb_loop+0x40/0x90 [ 457.247409][T14526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.253311][T14526] RIP: 0033:0x7f090eb9de99 [ 457.257912][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.277527][T14526] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.286379][T14526] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 457.294364][T14526] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 457.302373][T14526] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 457.310342][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.318309][T14526] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 457.326288][T14526] [ 457.340470][T14526] Mem-Info: [ 457.352884][T14526] active_anon:5672 inactive_anon:0 isolated_anon:0 [ 457.352884][T14526] active_file:11751 inactive_file:40109 isolated_file:0 [ 457.352884][T14526] unevictable:768 dirty:116 writeback:0 [ 457.352884][T14526] slab_reclaimable:10354 slab_unreclaimable:96607 [ 457.352884][T14526] mapped:24997 shmem:1361 pagetables:602 [ 457.352884][T14526] sec_pagetables:0 bounce:0 [ 457.352884][T14526] kernel_misc_reclaimable:0 [ 457.352884][T14526] free:1343574 free_pcp:14048 free_cma:0 [ 457.407007][T14526] Node 0 active_anon:22588kB inactive_anon:0kB active_file:47004kB inactive_file:160232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99988kB dirty:464kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11028kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no [ 457.440106][T14526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 457.488724][T14526] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.539944][T14526] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 457.546099][T14526] Node 0 DMA32 free:1461216kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22652kB inactive_anon:0kB active_file:47004kB inactive_file:159408kB unevictable:1536kB writepending:464kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:40652kB local_pcp:21464kB free_cma:0kB [ 457.595404][T14526] lowmem_reserve[]: 0 0 0 0 0 [ 457.600365][T14526] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 457.639554][T14526] lowmem_reserve[]: 0 0 0 0 0 [ 457.644487][T14526] Node 1 Normal free:3897720kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15660kB local_pcp:7404kB free_cma:0kB [ 457.695825][T14526] lowmem_reserve[]: 0 0 0 0 0 [ 457.700609][T14526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 457.717943][T14526] Node 0 DMA32: 404*4kB (M) 724*8kB (ME) 365*16kB (ME) 323*32kB (UME) 370*64kB (UME) 33*128kB (UME) 26*256kB (UM) 20*512kB (UME) 10*1024kB (UME) 3*2048kB (M) 336*4096kB (M) = 1461024kB [ 457.737182][T14526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.753673][T14526] Node 1 Normal: 246*4kB (UM) 58*8kB (UME) 41*16kB (UME) 60*32kB (UME) 17*64kB (UME) 9*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897720kB [ 457.815583][T14526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.836586][T14526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.871331][T14526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.888125][T14526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.898088][T14526] 53223 total pagecache pages [ 457.910369][T14526] 0 pages in swap cache [ 457.919578][T14526] Free swap = 124996kB [ 457.924385][T14526] Total swap = 124996kB [ 457.928784][T14526] 2097051 pages RAM [ 457.972476][T14526] 0 pages HighMem/MovableOnly [ 457.981356][T14526] 416953 pages reserved [ 457.995922][T14526] 0 pages cma reserved [ 458.428528][T14548] __nla_validate_parse: 5 callbacks suppressed [ 458.428565][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3328'. [ 458.609073][T14556] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3332'. [ 458.755179][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 458.985758][T14573] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3336'. [ 459.008798][T14573] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3336'. [ 459.044858][T14575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3341'. [ 459.222672][T14581] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3344'. [ 459.334709][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 459.413748][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 459.896846][T14600] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3352'. [ 462.851245][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 463.486797][T14710] __nla_validate_parse: 19 callbacks suppressed [ 463.486814][T14710] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3397'. [ 463.512023][T14701] netlink: 56855 bytes leftover after parsing attributes in process `syz.2.3397'. [ 463.526309][T14709] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3400'. [ 463.698725][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3404'. [ 463.979737][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 464.100790][T14729] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3408'. [ 464.211215][T14731] FAULT_INJECTION: forcing a failure. [ 464.211215][T14731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.241749][T14731] CPU: 1 PID: 14731 Comm: syz.3.3409 Not tainted syzkaller #0 [ 464.249258][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 464.259334][T14731] Call Trace: [ 464.262627][T14731] [ 464.265564][T14731] dump_stack_lvl+0x18c/0x250 [ 464.270265][T14731] ? show_regs_print_info+0x20/0x20 [ 464.275486][T14731] ? load_image+0x420/0x420 [ 464.280001][T14731] ? __might_fault+0xaa/0x120 [ 464.284692][T14731] ? __lock_acquire+0x7d80/0x7d80 [ 464.289732][T14731] ? __local_bh_enable_ip+0x13a/0x1c0 [ 464.295122][T14731] ? _local_bh_enable+0xa0/0xa0 [ 464.299983][T14731] should_fail_ex+0x394/0x4c0 [ 464.304677][T14731] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 464.310253][T14731] ? arch_do_signal_or_restart+0xc2/0x7b0 [ 464.316009][T14731] ? exit_to_user_mode_loop+0x70/0x110 [ 464.321488][T14731] ? exit_to_user_mode_prepare+0xee/0x180 [ 464.327222][T14731] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 464.332965][T14731] ? fpregs_set+0x370/0x370 [ 464.337510][T14731] ? fpu__alloc_mathframe+0xa7/0x120 [ 464.342811][T14731] get_sigframe+0x5de/0x7d0 [ 464.347331][T14731] ? load_gs_index+0x1a0/0x1a0 [ 464.352114][T14731] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 464.358104][T14731] ? get_signal+0x1197/0x1390 [ 464.362799][T14731] x64_setup_rt_frame+0x164/0xc30 [ 464.367928][T14731] ? lockdep_hardirqs_on+0x98/0x150 [ 464.373137][T14731] ? perf_trace_preemptirq_template+0xac/0x330 [ 464.379305][T14731] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 464.385292][T14731] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 464.390850][T14731] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 464.396672][T14731] arch_do_signal_or_restart+0x411/0x7b0 [ 464.402321][T14731] ? get_sigframe_size+0x20/0x20 [ 464.407289][T14731] ? exit_to_user_mode_loop+0x3b/0x110 [ 464.412760][T14731] exit_to_user_mode_loop+0x70/0x110 [ 464.418052][T14731] exit_to_user_mode_prepare+0xee/0x180 [ 464.423609][T14731] syscall_exit_to_user_mode+0x1a/0x50 [ 464.429078][T14731] do_syscall_64+0x61/0xb0 [ 464.433506][T14731] ? clear_bhb_loop+0x40/0x90 [ 464.438188][T14731] ? clear_bhb_loop+0x40/0x90 [ 464.442869][T14731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.448767][T14731] RIP: 0033:0x7f090eb9de97 [ 464.453187][T14731] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 464.472800][T14731] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 464.481219][T14731] RAX: 000000000000002f RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 464.489192][T14731] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000006 [ 464.497169][T14731] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 464.505141][T14731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.513113][T14731] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 464.521101][T14731] [ 464.572209][T14734] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3411'. [ 465.193699][T14748] syz.0.3416[14748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.194071][T14748] syz.0.3416[14748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.209256][T14746] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3415'. [ 465.412325][T14750] netlink: 'syz.2.3417': attribute type 10 has an invalid length. [ 466.091001][T14759] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3419'. [ 466.277822][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 466.518675][T14770] netlink: 'syz.3.3421': attribute type 19 has an invalid length. [ 467.748604][T14784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.756010][T14784] IPv6: NLM_F_CREATE should be set when creating new route [ 467.763347][T14784] IPv6: NLM_F_CREATE should be set when creating new route [ 467.770601][T14784] IPv6: NLM_F_CREATE should be set when creating new route [ 468.498787][T14818] __nla_validate_parse: 6 callbacks suppressed [ 468.498807][T14818] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3438'. [ 468.833909][T14821] netlink: 'syz.2.3435': attribute type 19 has an invalid length. [ 468.851984][T14821] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3435'. [ 469.348716][T14831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3442'. [ 469.376481][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 469.415004][T14835] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3444'. [ 469.430009][T14835] openvswitch: netlink: Flow actions attr not present in new flow. [ 472.879118][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'. [ 473.094129][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 473.129540][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'. [ 474.243541][T14873] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3459'. [ 474.310041][T14873] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.669237][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 475.090448][T14896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3467'. [ 475.277784][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 475.774303][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 475.974849][T14919] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3477'. [ 475.988218][T14921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3478'. [ 476.010933][T14919] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.546341][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 476.652365][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 476.929597][T14948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3488'. [ 476.942453][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'. [ 477.387469][T14959] netlink: 'syz.0.3493': attribute type 3 has an invalid length. [ 478.825009][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 2 [ 479.462340][T15019] __nla_validate_parse: 9 callbacks suppressed [ 479.464960][T15019] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3521'. [ 479.563481][T15027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3524'. [ 479.622520][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 479.894040][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'. [ 480.277259][T15048] netlink: 'syz.0.3533': attribute type 21 has an invalid length. [ 482.936695][T15051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3536'. [ 482.989002][T15053] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3534'. [ 483.331416][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 483.416645][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3544'. [ 483.468693][T15069] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3542'. [ 483.643624][T15074] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3546'. [ 483.646297][T15076] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3547'. [ 483.706448][T15079] tap0: tun_chr_ioctl cmd 1074820166 [ 483.869072][T15085] netlink: 'syz.3.3551': attribute type 29 has an invalid length. [ 483.884375][T15085] netlink: 'syz.3.3551': attribute type 29 has an invalid length. [ 483.898030][T15085] netlink: 'syz.3.3551': attribute type 29 has an invalid length. [ 483.976093][T15091] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 484.325478][T15091] geneve0: entered promiscuous mode [ 484.389665][T15091] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 484.550621][T15101] __nla_validate_parse: 5 callbacks suppressed [ 484.550666][T15101] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3557'. [ 484.609256][T15103] netlink: 'syz.1.3558': attribute type 21 has an invalid length. [ 484.680884][T15105] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3559'. [ 484.706011][T15107] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3560'. [ 484.879894][T15115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3565'. [ 484.898524][T15115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3565'. [ 484.918922][T15115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3565'. [ 484.933175][T15115] FAULT_INJECTION: forcing a failure. [ 484.933175][T15115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.969828][T15115] CPU: 0 PID: 15115 Comm: syz.1.3565 Not tainted syzkaller #0 [ 484.977347][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 484.987430][T15115] Call Trace: [ 484.990737][T15115] [ 484.993683][T15115] dump_stack_lvl+0x18c/0x250 [ 484.998399][T15115] ? show_regs_print_info+0x20/0x20 [ 485.003633][T15115] ? load_image+0x420/0x420 [ 485.008166][T15115] ? __might_fault+0xaa/0x120 [ 485.012872][T15115] ? __lock_acquire+0x7d80/0x7d80 [ 485.017931][T15115] should_fail_ex+0x394/0x4c0 [ 485.022640][T15115] _copy_from_user+0x2f/0xe0 [ 485.027257][T15115] ___sys_recvmsg+0x174/0x590 [ 485.031969][T15115] ? __sys_recvmsg+0x2a0/0x2a0 [ 485.036757][T15115] ? ksys_write+0x1d2/0x260 [ 485.041302][T15115] ? __fget_files+0x3fc/0x460 [ 485.046017][T15115] __x64_sys_recvmsg+0x21e/0x2f0 [ 485.050967][T15115] ? ___sys_recvmsg+0x590/0x590 [ 485.055842][T15115] ? lockdep_hardirqs_on+0x98/0x150 [ 485.061064][T15115] do_syscall_64+0x55/0xb0 [ 485.065476][T15115] ? clear_bhb_loop+0x40/0x90 [ 485.070139][T15115] ? clear_bhb_loop+0x40/0x90 [ 485.074810][T15115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.080699][T15115] RIP: 0033:0x7f3b62b9de99 [ 485.085117][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.104738][T15115] RSP: 002b:00007f3b63b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 485.113199][T15115] RAX: ffffffffffffffda RBX: 00007f3b62e25fa0 RCX: 00007f3b62b9de99 [ 485.121193][T15115] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 485.129173][T15115] RBP: 00007f3b63b09090 R08: 0000000000000000 R09: 0000000000000000 [ 485.137137][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.145100][T15115] R13: 00007f3b62e26038 R14: 00007f3b62e25fa0 R15: 00007ffc37538da8 [ 485.153073][T15115] [ 485.171002][T15123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3566'. [ 485.325610][T15129] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3568'. [ 485.333899][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3567'. [ 485.450275][T15133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3578'. [ 486.025281][T15153] FAULT_INJECTION: forcing a failure. [ 486.025281][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.045345][T15153] CPU: 1 PID: 15153 Comm: syz.1.3577 Not tainted syzkaller #0 [ 486.052869][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 486.062942][T15153] Call Trace: [ 486.066231][T15153] [ 486.069176][T15153] dump_stack_lvl+0x18c/0x250 [ 486.073873][T15153] ? show_regs_print_info+0x20/0x20 [ 486.079084][T15153] ? load_image+0x420/0x420 [ 486.083594][T15153] ? __might_fault+0xaa/0x120 [ 486.088270][T15153] ? __lock_acquire+0x7d80/0x7d80 [ 486.093296][T15153] should_fail_ex+0x394/0x4c0 [ 486.097975][T15153] _copy_from_user+0x2f/0xe0 [ 486.102566][T15153] ___sys_sendmsg+0x1c7/0x360 [ 486.107244][T15153] ? get_pid_task+0x20/0x1e0 [ 486.111844][T15153] ? __sys_sendmsg+0x2b0/0x2b0 [ 486.116653][T15153] ? __lock_acquire+0x7d80/0x7d80 [ 486.121706][T15153] __se_sys_sendmsg+0x1d0/0x2c0 [ 486.126558][T15153] ? __x64_sys_sendmsg+0x80/0x80 [ 486.131527][T15153] ? lockdep_hardirqs_on+0x98/0x150 [ 486.136752][T15153] do_syscall_64+0x55/0xb0 [ 486.141194][T15153] ? clear_bhb_loop+0x40/0x90 [ 486.145883][T15153] ? clear_bhb_loop+0x40/0x90 [ 486.150562][T15153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.156483][T15153] RIP: 0033:0x7f3b62b9de99 [ 486.160907][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.180608][T15153] RSP: 002b:00007f3b63b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.189023][T15153] RAX: ffffffffffffffda RBX: 00007f3b62e25fa0 RCX: 00007f3b62b9de99 [ 486.196996][T15153] RDX: e07e872420dfefdb RSI: 0000200000000780 RDI: 0000000000000003 [ 486.204967][T15153] RBP: 00007f3b63b09090 R08: 0000000000000000 R09: 0000000000000000 [ 486.212948][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.220923][T15153] R13: 00007f3b62e26038 R14: 00007f3b62e25fa0 R15: 00007ffc37538da8 [ 486.228917][T15153] [ 486.401953][T15159] syz.1.3582 (15159) used obsolete PPPIOCDETACH ioctl [ 486.710314][T15170] FAULT_INJECTION: forcing a failure. [ 486.710314][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.735074][T15170] CPU: 1 PID: 15170 Comm: syz.2.3589 Not tainted syzkaller #0 [ 486.742600][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 486.751930][T15168] netlink: 'syz.0.3587': attribute type 29 has an invalid length. [ 486.752716][T15170] Call Trace: [ 486.752727][T15170] [ 486.752735][T15170] dump_stack_lvl+0x18c/0x250 [ 486.762712][T15168] netlink: 'syz.0.3587': attribute type 29 has an invalid length. [ 486.763812][T15170] ? show_regs_print_info+0x20/0x20 [ 486.763845][T15170] ? load_image+0x420/0x420 [ 486.777750][T15168] netlink: 'syz.0.3587': attribute type 29 has an invalid length. [ 486.779226][T15170] ? __might_fault+0xaa/0x120 [ 486.779254][T15170] ? __lock_acquire+0x7d80/0x7d80 [ 486.779280][T15170] should_fail_ex+0x394/0x4c0 [ 486.811192][T15170] _copy_from_user+0x2f/0xe0 [ 486.815816][T15170] ___sys_sendmsg+0x1c7/0x360 [ 486.820574][T15170] ? get_pid_task+0x20/0x1e0 [ 486.825198][T15170] ? __sys_sendmsg+0x2b0/0x2b0 [ 486.829999][T15170] ? __lock_acquire+0x7d80/0x7d80 [ 486.835070][T15170] __se_sys_sendmsg+0x1d0/0x2c0 [ 486.839954][T15170] ? __x64_sys_sendmsg+0x80/0x80 [ 486.844940][T15170] ? lockdep_hardirqs_on+0x98/0x150 [ 486.850158][T15170] do_syscall_64+0x55/0xb0 [ 486.854581][T15170] ? clear_bhb_loop+0x40/0x90 [ 486.859251][T15170] ? clear_bhb_loop+0x40/0x90 [ 486.863923][T15170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.869818][T15170] RIP: 0033:0x7f533b39de99 [ 486.874229][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.893835][T15170] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.902245][T15170] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 486.910210][T15170] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 486.918172][T15170] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 486.926134][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.934097][T15170] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 486.942078][T15170] [ 486.981816][T15173] netlink: 'syz.0.3587': attribute type 10 has an invalid length. [ 487.303662][T15185] netlink: 'syz.2.3593': attribute type 9 has an invalid length. [ 487.357113][T15173] geneve0: entered promiscuous mode [ 487.426379][T15173] geneve0: entered allmulticast mode [ 487.448893][T15173] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 487.753438][T15193] FAULT_INJECTION: forcing a failure. [ 487.753438][T15193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.811377][T15193] CPU: 1 PID: 15193 Comm: syz.3.3597 Not tainted syzkaller #0 [ 487.818903][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 487.828983][T15193] Call Trace: [ 487.832291][T15193] [ 487.835243][T15193] dump_stack_lvl+0x18c/0x250 [ 487.839992][T15193] ? show_regs_print_info+0x20/0x20 [ 487.845227][T15193] ? load_image+0x420/0x420 [ 487.849755][T15193] ? __might_fault+0xaa/0x120 [ 487.854447][T15193] ? __lock_acquire+0x7d80/0x7d80 [ 487.859481][T15193] should_fail_ex+0x394/0x4c0 [ 487.864174][T15193] _copy_from_user+0x2f/0xe0 [ 487.868768][T15193] ___sys_sendmsg+0x1c7/0x360 [ 487.873457][T15193] ? __sys_sendmsg+0x2b0/0x2b0 [ 487.878258][T15193] __se_sys_sendmsg+0x1d0/0x2c0 [ 487.883113][T15193] ? __x64_sys_sendmsg+0x80/0x80 [ 487.888062][T15193] ? syscall_enter_from_user_mode+0x2e/0x80 [ 487.893956][T15193] do_syscall_64+0x55/0xb0 [ 487.898378][T15193] ? clear_bhb_loop+0x40/0x90 [ 487.903051][T15193] ? clear_bhb_loop+0x40/0x90 [ 487.907723][T15193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.913617][T15193] RIP: 0033:0x7f090eb9de99 [ 487.918032][T15193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.937637][T15193] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.946077][T15193] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 487.954046][T15193] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000007 [ 487.962024][T15193] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 487.969989][T15193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.977968][T15193] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 487.985952][T15193] [ 488.176885][T15204] Ÿë: port 1(gretap0) entered blocking state [ 488.185100][T15204] Ÿë: port 1(gretap0) entered disabled state [ 488.192395][T15204] gretap0: entered allmulticast mode [ 488.199215][T15204] gretap0: entered promiscuous mode [ 488.301637][T15211] FAULT_INJECTION: forcing a failure. [ 488.301637][T15211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.321068][T15211] CPU: 0 PID: 15211 Comm: syz.0.3605 Not tainted syzkaller #0 [ 488.328585][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 488.338672][T15211] Call Trace: [ 488.341976][T15211] [ 488.344924][T15211] dump_stack_lvl+0x18c/0x250 [ 488.349636][T15211] ? show_regs_print_info+0x20/0x20 [ 488.354866][T15211] ? load_image+0x420/0x420 [ 488.359393][T15211] ? __might_fault+0xaa/0x120 [ 488.364155][T15211] ? __lock_acquire+0x7d80/0x7d80 [ 488.369215][T15211] should_fail_ex+0x394/0x4c0 [ 488.373923][T15211] _copy_from_user+0x2f/0xe0 [ 488.378542][T15211] __sys_bpf+0x23e/0x890 [ 488.382816][T15211] ? bpf_link_show_fdinfo+0x390/0x390 [ 488.388228][T15211] ? lock_chain_count+0x20/0x20 [ 488.393101][T15211] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 488.399116][T15211] __x64_sys_bpf+0x7c/0x90 [ 488.403554][T15211] do_syscall_64+0x55/0xb0 [ 488.407990][T15211] ? clear_bhb_loop+0x40/0x90 [ 488.412690][T15211] ? clear_bhb_loop+0x40/0x90 [ 488.417389][T15211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.423313][T15211] RIP: 0033:0x7f4b33b9de99 [ 488.427755][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.447387][T15211] RSP: 002b:00007f4b34af4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.455830][T15211] RAX: ffffffffffffffda RBX: 00007f4b33e25fa0 RCX: 00007f4b33b9de99 [ 488.463826][T15211] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 488.471825][T15211] RBP: 00007f4b34af4090 R08: 0000000000000000 R09: 0000000000000000 [ 488.479825][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.487822][T15211] R13: 00007f4b33e26038 R14: 00007f4b33e25fa0 R15: 00007ffc61aea618 [ 488.495841][T15211] [ 488.920168][T15224] validate_nla: 1 callbacks suppressed [ 488.920203][T15224] netlink: 'syz.2.3609': attribute type 29 has an invalid length. [ 488.943181][T15224] netlink: 'syz.2.3609': attribute type 29 has an invalid length. [ 488.960671][T15233] netlink: 'syz.2.3609': attribute type 29 has an invalid length. [ 489.182869][T15233] netlink: 'syz.2.3609': attribute type 10 has an invalid length. [ 489.768718][T15233] geneve0: entered promiscuous mode [ 489.789078][T15233] geneve0: entered allmulticast mode [ 489.807338][T15233] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 489.831416][T15236] __nla_validate_parse: 16 callbacks suppressed [ 489.831436][T15236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3612'. [ 490.015567][T15248] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3616'. [ 490.038499][T15250] FAULT_INJECTION: forcing a failure. [ 490.038499][T15250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.091437][T15250] CPU: 0 PID: 15250 Comm: syz.3.3618 Not tainted syzkaller #0 [ 490.098967][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 490.109088][T15250] Call Trace: [ 490.112391][T15250] [ 490.115341][T15250] dump_stack_lvl+0x18c/0x250 [ 490.120061][T15250] ? show_regs_print_info+0x20/0x20 [ 490.125300][T15250] ? load_image+0x420/0x420 [ 490.129832][T15250] ? __might_fault+0xaa/0x120 [ 490.134571][T15250] ? __lock_acquire+0x7d80/0x7d80 [ 490.139615][T15250] should_fail_ex+0x394/0x4c0 [ 490.144307][T15250] _copy_from_user+0x2f/0xe0 [ 490.148908][T15250] ___sys_sendmsg+0x1c7/0x360 [ 490.153729][T15250] ? __sys_sendmsg+0x2b0/0x2b0 [ 490.158549][T15250] __se_sys_sendmsg+0x1d0/0x2c0 [ 490.163427][T15250] ? __x64_sys_sendmsg+0x80/0x80 [ 490.168389][T15250] ? syscall_enter_from_user_mode+0x2e/0x80 [ 490.174296][T15250] do_syscall_64+0x55/0xb0 [ 490.178727][T15250] ? clear_bhb_loop+0x40/0x90 [ 490.183407][T15250] ? clear_bhb_loop+0x40/0x90 [ 490.188082][T15250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.193984][T15250] RIP: 0033:0x7f090eb9de99 [ 490.198400][T15250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.218012][T15250] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.226437][T15250] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 490.234410][T15250] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 490.242387][T15250] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 490.250357][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.258329][T15250] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 490.266319][T15250] [ 490.396264][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3620'. [ 490.485948][T15261] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3631'. [ 491.073895][T15273] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3629'. [ 491.107499][T15278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3630'. [ 491.139812][T15279] netlink: 'syz.1.3628': attribute type 29 has an invalid length. [ 491.155004][T15279] netlink: 'syz.1.3628': attribute type 29 has an invalid length. [ 491.179791][T15279] netlink: 'syz.1.3628': attribute type 29 has an invalid length. [ 491.289610][T15283] netlink: 'syz.1.3628': attribute type 10 has an invalid length. [ 491.785469][T15293] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3636'. [ 492.070826][T15283] geneve0: entered promiscuous mode [ 492.186745][T15283] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 492.447452][T15303] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3641'. [ 492.977026][T15318] FAULT_INJECTION: forcing a failure. [ 492.977026][T15318] name failslab, interval 1, probability 0, space 0, times 0 [ 493.010511][T15318] CPU: 0 PID: 15318 Comm: syz.3.3646 Not tainted syzkaller #0 [ 493.018042][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 493.028135][T15318] Call Trace: [ 493.031442][T15318] [ 493.034397][T15318] dump_stack_lvl+0x18c/0x250 [ 493.039105][T15318] ? show_regs_print_info+0x20/0x20 [ 493.044328][T15318] ? load_image+0x420/0x420 [ 493.048856][T15318] ? __might_sleep+0xe0/0xe0 [ 493.053460][T15318] ? __lock_acquire+0x7d80/0x7d80 [ 493.058520][T15318] ? perf_trace_lock+0xfc/0x3b0 [ 493.063422][T15318] should_fail_ex+0x394/0x4c0 [ 493.068100][T15318] should_failslab+0x9/0x20 [ 493.072630][T15318] slab_pre_alloc_hook+0x59/0x300 [ 493.077663][T15318] ? __get_vm_area_node+0x125/0x370 [ 493.082892][T15318] __kmem_cache_alloc_node+0x53/0x250 [ 493.088270][T15318] ? __get_vm_area_node+0x125/0x370 [ 493.093479][T15318] kmalloc_node_trace+0x26/0xe0 [ 493.098355][T15318] __get_vm_area_node+0x125/0x370 [ 493.103398][T15318] __vmalloc_node_range+0x36f/0x1320 [ 493.108681][T15318] ? netlink_sendmsg+0x602/0xbf0 [ 493.113631][T15318] ? netlink_insert+0x1094/0x1390 [ 493.118709][T15318] ? netlink_insert+0x2ba/0x1390 [ 493.123097][T15321] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3647'. [ 493.123668][T15318] ? free_vm_area+0x50/0x50 [ 493.123705][T15318] ? netlink_sendmsg+0x602/0xbf0 [ 493.123730][T15318] vmalloc+0x79/0x90 [ 493.146245][T15318] ? netlink_sendmsg+0x602/0xbf0 [ 493.151193][T15318] netlink_sendmsg+0x602/0xbf0 [ 493.155979][T15318] ? netlink_getsockopt+0x590/0x590 [ 493.161189][T15318] ? apparmor_socket_sendmsg+0x8e/0x330 [ 493.166746][T15318] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.172040][T15318] ? security_socket_sendmsg+0x80/0xa0 [ 493.177518][T15318] sock_write_iter+0x2dc/0x420 [ 493.182279][T15318] ? sock_read_iter+0x3f0/0x3f0 [ 493.187126][T15318] ? common_file_perm+0x198/0x1f0 [ 493.192147][T15318] vfs_write+0x474/0x9a0 [ 493.196390][T15318] ? file_end_write+0x250/0x250 [ 493.201249][T15318] ? __fget_files+0x3fc/0x460 [ 493.205943][T15318] ? __fdget_pos+0x1d8/0x330 [ 493.210533][T15318] ? ksys_write+0x74/0x260 [ 493.214966][T15318] ksys_write+0x151/0x260 [ 493.219311][T15318] ? __ia32_sys_read+0x90/0x90 [ 493.224158][T15318] ? lockdep_hardirqs_on+0x98/0x150 [ 493.229352][T15318] do_syscall_64+0x55/0xb0 [ 493.233778][T15318] ? clear_bhb_loop+0x40/0x90 [ 493.238449][T15318] ? clear_bhb_loop+0x40/0x90 [ 493.243117][T15318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.249010][T15318] RIP: 0033:0x7f090eb9de99 [ 493.253417][T15318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.273020][T15318] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.281429][T15318] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 493.289394][T15318] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 493.297401][T15318] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 493.305402][T15318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.313390][T15318] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 493.321394][T15318] [ 493.339924][T15318] syz.3.3646: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 493.356644][T15318] CPU: 1 PID: 15318 Comm: syz.3.3646 Not tainted syzkaller #0 [ 493.364147][T15318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 493.374220][T15318] Call Trace: [ 493.377508][T15318] [ 493.380469][T15318] dump_stack_lvl+0x18c/0x250 [ 493.385184][T15318] ? show_regs_print_info+0x20/0x20 [ 493.390417][T15318] ? load_image+0x420/0x420 [ 493.394947][T15318] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 493.401388][T15318] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 493.407912][T15318] warn_alloc+0x246/0x340 [ 493.412273][T15318] ? __get_vm_area_node+0x125/0x370 [ 493.417507][T15318] ? zone_watermark_ok_safe+0x230/0x230 [ 493.423079][T15318] ? rcu_is_watching+0x15/0xb0 [ 493.427977][T15318] ? __get_vm_area_node+0x356/0x370 [ 493.433216][T15318] __vmalloc_node_range+0x394/0x1320 [ 493.438653][T15318] ? netlink_insert+0x1094/0x1390 [ 493.443719][T15318] ? netlink_insert+0x2ba/0x1390 [ 493.448680][T15318] ? free_vm_area+0x50/0x50 [ 493.453214][T15318] ? netlink_sendmsg+0x602/0xbf0 [ 493.458184][T15318] vmalloc+0x79/0x90 [ 493.462099][T15318] ? netlink_sendmsg+0x602/0xbf0 [ 493.467064][T15318] netlink_sendmsg+0x602/0xbf0 [ 493.471855][T15318] ? netlink_getsockopt+0x590/0x590 [ 493.477073][T15318] ? apparmor_socket_sendmsg+0x8e/0x330 [ 493.482635][T15318] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.487935][T15318] ? security_socket_sendmsg+0x80/0xa0 [ 493.493413][T15318] sock_write_iter+0x2dc/0x420 [ 493.498205][T15318] ? sock_read_iter+0x3f0/0x3f0 [ 493.503078][T15318] ? common_file_perm+0x198/0x1f0 [ 493.508129][T15318] vfs_write+0x474/0x9a0 [ 493.512397][T15318] ? file_end_write+0x250/0x250 [ 493.517260][T15318] ? __fget_files+0x3fc/0x460 [ 493.521957][T15318] ? __fdget_pos+0x1d8/0x330 [ 493.526557][T15318] ? ksys_write+0x74/0x260 [ 493.530985][T15318] ksys_write+0x151/0x260 [ 493.535328][T15318] ? __ia32_sys_read+0x90/0x90 [ 493.540104][T15318] ? lockdep_hardirqs_on+0x98/0x150 [ 493.545312][T15318] do_syscall_64+0x55/0xb0 [ 493.549745][T15318] ? clear_bhb_loop+0x40/0x90 [ 493.554425][T15318] ? clear_bhb_loop+0x40/0x90 [ 493.559116][T15318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.565020][T15318] RIP: 0033:0x7f090eb9de99 [ 493.569439][T15318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.589332][T15318] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.597769][T15318] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 493.605746][T15318] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 493.613732][T15318] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 493.621714][T15318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.629687][T15318] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 493.637679][T15318] [ 493.660161][T15318] Mem-Info: [ 493.665817][T15318] active_anon:5643 inactive_anon:0 isolated_anon:0 [ 493.665817][T15318] active_file:11772 inactive_file:40123 isolated_file:0 [ 493.665817][T15318] unevictable:768 dirty:474 writeback:0 [ 493.665817][T15318] slab_reclaimable:10457 slab_unreclaimable:94735 [ 493.665817][T15318] mapped:25030 shmem:1361 pagetables:561 [ 493.665817][T15318] sec_pagetables:0 bounce:0 [ 493.665817][T15318] kernel_misc_reclaimable:0 [ 493.665817][T15318] free:1342405 free_pcp:6303 free_cma:0 [ 493.725402][T15318] Node 0 active_anon:22572kB inactive_anon:0kB active_file:47088kB inactive_file:160288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100120kB dirty:1896kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no [ 493.781911][T15318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 493.845595][T15318] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.930841][T15318] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 493.961067][T15318] Node 0 DMA32 free:1456540kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22636kB inactive_anon:0kB active_file:47088kB inactive_file:159464kB unevictable:1536kB writepending:1896kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:10052kB local_pcp:7652kB free_cma:0kB [ 494.058446][T15318] lowmem_reserve[]: 0 0 0 0 0 [ 494.086846][T15318] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 494.114867][T15318] lowmem_reserve[]: 0 0 0 0 0 [ 494.127006][T15318] Node 1 Normal free:3897720kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15692kB local_pcp:7404kB free_cma:0kB [ 494.157104][T15318] lowmem_reserve[]: 0 0 0 0 0 [ 494.162474][T15318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 494.177954][T15318] Node 0 DMA32: 1369*4kB (UME) 1527*8kB (UME) 826*16kB (UME) 247*32kB (UME) 290*64kB (ME) 57*128kB (UME) 41*256kB (UM) 32*512kB (UME) 17*1024kB (UME) 6*2048kB (UM) 326*4096kB (UM) = 1456540kB [ 494.186738][T15329] netlink: 'syz.0.3651': attribute type 29 has an invalid length. [ 494.197709][T15318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.213112][T15329] netlink: 'syz.0.3651': attribute type 29 has an invalid length. [ 494.220470][T15318] Node 1 Normal: 246*4kB (UM) 58*8kB (UME) 41*16kB (UME) 60*32kB (UME) 17*64kB (UME) 9*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897720kB [ 494.235694][T15330] netlink: 'syz.0.3651': attribute type 29 has an invalid length. [ 494.249373][T15318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.265885][T15318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.275533][T15318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.286002][T15318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.296704][T15318] 53258 total pagecache pages [ 494.313699][T15318] 0 pages in swap cache [ 494.317990][T15318] Free swap = 124996kB [ 494.322568][T15318] Total swap = 124996kB [ 494.326830][T15318] 2097051 pages RAM [ 494.331783][T15318] 0 pages HighMem/MovableOnly [ 494.336481][T15318] 416953 pages reserved [ 494.340731][T15318] 0 pages cma reserved [ 494.839591][T15341] FAULT_INJECTION: forcing a failure. [ 494.839591][T15341] name failslab, interval 1, probability 0, space 0, times 0 [ 494.923702][T15341] CPU: 1 PID: 15341 Comm: syz.1.3655 Not tainted syzkaller #0 [ 494.931236][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.941316][T15341] Call Trace: [ 494.944619][T15341] [ 494.947572][T15341] dump_stack_lvl+0x18c/0x250 [ 494.952285][T15341] ? show_regs_print_info+0x20/0x20 [ 494.957516][T15341] ? load_image+0x420/0x420 [ 494.962054][T15341] ? __might_sleep+0xe0/0xe0 [ 494.966669][T15341] ? __lock_acquire+0x7d80/0x7d80 [ 494.971719][T15341] ? perf_trace_lock+0xfc/0x3b0 [ 494.976609][T15341] should_fail_ex+0x394/0x4c0 [ 494.981318][T15341] should_failslab+0x9/0x20 [ 494.985856][T15341] slab_pre_alloc_hook+0x59/0x300 [ 494.990911][T15341] ? __get_vm_area_node+0x125/0x370 [ 494.996140][T15341] __kmem_cache_alloc_node+0x53/0x250 [ 495.001550][T15341] ? __get_vm_area_node+0x125/0x370 [ 495.006791][T15341] kmalloc_node_trace+0x26/0xe0 [ 495.011677][T15341] __get_vm_area_node+0x125/0x370 [ 495.016739][T15341] __vmalloc_node_range+0x36f/0x1320 [ 495.022085][T15341] ? netlink_sendmsg+0x602/0xbf0 [ 495.027058][T15341] ? netlink_insert+0x1094/0x1390 [ 495.032127][T15341] ? netlink_insert+0x2ba/0x1390 [ 495.037101][T15341] ? free_vm_area+0x50/0x50 [ 495.041643][T15341] ? netlink_sendmsg+0x602/0xbf0 [ 495.046609][T15341] vmalloc+0x79/0x90 [ 495.050539][T15341] ? netlink_sendmsg+0x602/0xbf0 [ 495.055506][T15341] netlink_sendmsg+0x602/0xbf0 [ 495.060310][T15341] ? netlink_getsockopt+0x590/0x590 [ 495.065542][T15341] ? apparmor_socket_sendmsg+0x8e/0x330 [ 495.071118][T15341] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 495.076434][T15341] ? security_socket_sendmsg+0x80/0xa0 [ 495.081937][T15341] sock_write_iter+0x2dc/0x420 [ 495.086734][T15341] ? sock_read_iter+0x3f0/0x3f0 [ 495.091625][T15341] ? lockdep_hardirqs_on+0x98/0x150 [ 495.096860][T15341] ? file_start_write+0x5c/0x250 [ 495.101838][T15341] vfs_write+0x474/0x9a0 [ 495.106115][T15341] ? file_end_write+0x250/0x250 [ 495.110998][T15341] ? __fget_files+0x3fc/0x460 [ 495.115710][T15341] ? __fdget_pos+0x1d8/0x330 [ 495.120327][T15341] ? ksys_write+0x74/0x260 [ 495.124791][T15341] ksys_write+0x151/0x260 [ 495.129155][T15341] ? __ia32_sys_read+0x90/0x90 [ 495.133952][T15341] ? lockdep_hardirqs_on+0x98/0x150 [ 495.139182][T15341] do_syscall_64+0x55/0xb0 [ 495.143624][T15341] ? clear_bhb_loop+0x40/0x90 [ 495.148317][T15341] ? clear_bhb_loop+0x40/0x90 [ 495.153022][T15341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.158946][T15341] RIP: 0033:0x7f3b62b9de99 [ 495.163385][T15341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.183019][T15341] RSP: 002b:00007f3b63b09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.191449][T15341] RAX: ffffffffffffffda RBX: 00007f3b62e25fa0 RCX: 00007f3b62b9de99 [ 495.199418][T15341] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 495.207382][T15341] RBP: 00007f3b63b09090 R08: 0000000000000000 R09: 0000000000000000 [ 495.215347][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.223310][T15341] R13: 00007f3b62e26038 R14: 00007f3b62e25fa0 R15: 00007ffc37538da8 [ 495.231299][T15341] [ 496.549743][T15369] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3664'. [ 496.583813][T15372] netlink: 56855 bytes leftover after parsing attributes in process `syz.2.3664'. [ 496.596077][T15371] netlink: 'syz.1.3665': attribute type 29 has an invalid length. [ 496.605955][T15371] netlink: 'syz.1.3665': attribute type 29 has an invalid length. [ 496.650362][T15371] netlink: 'syz.1.3665': attribute type 29 has an invalid length. [ 497.672272][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3672'. [ 497.986705][T15408] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3678'. [ 498.020619][T15408] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.3678'. [ 498.357362][T15414] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 498.367375][T15414] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 498.381925][T15414] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 498.916379][T15426] FAULT_INJECTION: forcing a failure. [ 498.916379][T15426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.933697][T15425] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3685'. [ 498.964635][T15426] CPU: 0 PID: 15426 Comm: syz.1.3683 Not tainted syzkaller #0 [ 498.972175][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 498.982277][T15426] Call Trace: [ 498.985591][T15426] [ 498.988562][T15426] dump_stack_lvl+0x18c/0x250 [ 498.993310][T15426] ? show_regs_print_info+0x20/0x20 [ 498.998580][T15426] ? load_image+0x420/0x420 [ 499.003144][T15426] ? __lock_acquire+0x7d80/0x7d80 [ 499.008235][T15426] ? snprintf+0xe9/0x140 [ 499.012547][T15426] should_fail_ex+0x394/0x4c0 [ 499.017293][T15426] _copy_to_user+0x2f/0xa0 [ 499.021762][T15426] simple_read_from_buffer+0xe7/0x150 [ 499.027197][T15426] proc_fail_nth_read+0x1e8/0x260 [ 499.032276][T15426] ? proc_fault_inject_write+0x360/0x360 [ 499.037968][T15426] ? fsnotify_perm+0x271/0x5e0 [ 499.042784][T15426] ? proc_fault_inject_write+0x360/0x360 [ 499.048471][T15426] vfs_read+0x298/0x990 [ 499.052697][T15426] ? kernel_read+0x1e0/0x1e0 [ 499.057345][T15426] ? __fget_files+0x28/0x460 [ 499.061984][T15426] ? __fget_files+0x3fc/0x460 [ 499.066733][T15426] ? __fdget_pos+0x2a3/0x330 [ 499.071366][T15426] ? ksys_read+0x74/0x260 [ 499.075763][T15426] ksys_read+0x151/0x260 [ 499.080061][T15426] ? vfs_write+0x9a0/0x9a0 [ 499.084539][T15426] ? lockdep_hardirqs_on+0x98/0x150 [ 499.089794][T15426] do_syscall_64+0x55/0xb0 [ 499.094252][T15426] ? clear_bhb_loop+0x40/0x90 [ 499.098971][T15426] ? clear_bhb_loop+0x40/0x90 [ 499.103710][T15426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.109665][T15426] RIP: 0033:0x7f3b62b5e6ce [ 499.114128][T15426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.133783][T15426] RSP: 002b:00007f3b63ae7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.142266][T15426] RAX: ffffffffffffffda RBX: 00007f3b63ae86c0 RCX: 00007f3b62b5e6ce [ 499.150276][T15426] RDX: 000000000000000f RSI: 00007f3b63ae80a0 RDI: 000000000000000a [ 499.158294][T15426] RBP: 00007f3b63ae8090 R08: 0000000000000000 R09: 0000000000000000 [ 499.166321][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.174339][T15426] R13: 00007f3b62e26128 R14: 00007f3b62e26090 R15: 00007ffc37538da8 [ 499.182431][T15426] [ 499.268149][T15428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3687'. [ 499.380358][T15430] netlink: 'syz.2.3689': attribute type 5 has an invalid length. [ 499.473551][T15434] netlink: 'syz.1.3690': attribute type 3 has an invalid length. [ 499.485278][T15430] netlink: 'syz.2.3689': attribute type 21 has an invalid length. [ 499.503178][T15434] netlink: 'syz.1.3690': attribute type 4 has an invalid length. [ 499.523184][T15430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3689'. [ 499.565015][T15434] netlink: 'syz.1.3690': attribute type 7 has an invalid length. [ 499.576739][T15438] netlink: 'syz.3.3691': attribute type 9 has an invalid length. [ 499.601438][T15438] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3691'. [ 499.667119][T15434] netlink: 'syz.1.3690': attribute type 8 has an invalid length. [ 499.740892][T15434] netlink: 'syz.1.3690': attribute type 7 has an invalid length. [ 499.796625][T15434] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.3690'. [ 500.412561][T15459] netlink: 'syz.0.3699': attribute type 21 has an invalid length. [ 501.636943][T15490] __nla_validate_parse: 1 callbacks suppressed [ 501.636981][T15490] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3711'. [ 501.748876][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.755316][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.073396][T15504] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3716'. [ 502.279209][T15509] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3726'. [ 502.398736][T15517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3720'. [ 502.784036][T15527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3732'. [ 503.126053][T15537] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3725'. [ 503.186836][T15536] netlink: 'syz.1.3728': attribute type 29 has an invalid length. [ 503.335836][T15540] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3730'. [ 503.854221][T15562] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3739'. [ 504.032933][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3740'. [ 504.272492][T15571] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3743'. [ 504.485241][T15575] validate_nla: 5 callbacks suppressed [ 504.485275][T15575] netlink: 'syz.0.3746': attribute type 3 has an invalid length. [ 504.520053][T15575] netlink: 'syz.0.3746': attribute type 4 has an invalid length. [ 504.594148][T15575] netlink: 'syz.0.3746': attribute type 7 has an invalid length. [ 504.607841][T15575] netlink: 'syz.0.3746': attribute type 8 has an invalid length. [ 504.627200][T15575] netlink: 'syz.0.3746': attribute type 7 has an invalid length. [ 505.155229][T15595] netlink: 'syz.3.3752': attribute type 29 has an invalid length. [ 505.179354][T15595] netlink: 'syz.3.3752': attribute type 29 has an invalid length. [ 505.210149][T15595] netlink: 'syz.3.3752': attribute type 29 has an invalid length. [ 505.905768][T15617] netlink: 'syz.2.3763': attribute type 3 has an invalid length. [ 505.918340][T15617] netlink: 'syz.2.3763': attribute type 4 has an invalid length. [ 507.229062][T15653] __nla_validate_parse: 7 callbacks suppressed [ 507.229100][T15653] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3777'. [ 507.464871][T15662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3782'. [ 507.614090][T15669] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3781'. [ 507.653990][T15669] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.3781'. [ 507.693593][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 508.325409][T15689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3793'. [ 508.601040][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 509.744707][T15717] validate_nla: 12 callbacks suppressed [ 509.744745][T15717] netlink: 'syz.1.3801': attribute type 29 has an invalid length. [ 509.776611][T15717] netlink: 'syz.1.3801': attribute type 29 has an invalid length. [ 509.793880][T15720] netlink: 'syz.1.3801': attribute type 29 has an invalid length. [ 509.806355][T15722] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3802'. [ 509.828410][T15722] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3802'. [ 509.870852][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3803'. [ 512.531524][T15787] __nla_validate_parse: 10 callbacks suppressed [ 512.531546][T15787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3829'. [ 513.226120][T15796] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3831'. [ 513.443847][T15803] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3834'. [ 513.571085][T15808] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3836'. [ 513.586557][T15808] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3836'. [ 514.443971][T15816] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3846'. [ 514.460052][T15816] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.3846'. [ 514.902482][T15820] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3840'. [ 516.043272][T15841] netlink: 'syz.3.3849': attribute type 29 has an invalid length. [ 516.088696][T15841] netlink: 'syz.3.3849': attribute type 29 has an invalid length. [ 516.127610][T15842] netlink: 'syz.3.3849': attribute type 29 has an invalid length. [ 516.847511][T15852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3859'. [ 517.183612][T15859] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3855'. [ 517.413698][T15866] FAULT_INJECTION: forcing a failure. [ 517.413698][T15866] name failslab, interval 1, probability 0, space 0, times 0 [ 517.440180][T15866] CPU: 0 PID: 15866 Comm: syz.0.3857 Not tainted syzkaller #0 [ 517.447704][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 517.457787][T15866] Call Trace: [ 517.461087][T15866] [ 517.464050][T15866] dump_stack_lvl+0x18c/0x250 [ 517.468761][T15866] ? sctp_sendmsg+0x1519/0x27b0 [ 517.473637][T15866] ? ___sys_sendmsg+0x2a6/0x360 [ 517.478520][T15866] ? show_regs_print_info+0x20/0x20 [ 517.483750][T15866] ? load_image+0x420/0x420 [ 517.488312][T15866] should_fail_ex+0x394/0x4c0 [ 517.493027][T15866] should_failslab+0x9/0x20 [ 517.497556][T15866] slab_pre_alloc_hook+0x59/0x300 [ 517.502611][T15866] ? sctp_add_bind_addr+0x8c/0x360 [ 517.507748][T15866] __kmem_cache_alloc_node+0x53/0x250 [ 517.513156][T15866] ? sctp_add_bind_addr+0x8c/0x360 [ 517.518294][T15866] kmalloc_trace+0x2a/0xe0 [ 517.522743][T15866] sctp_add_bind_addr+0x8c/0x360 [ 517.527716][T15866] sctp_copy_local_addr_list+0x31b/0x4e0 [ 517.533380][T15866] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 517.539133][T15866] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 517.545228][T15866] ? sctp_v6_is_any+0x64/0x70 [ 517.549938][T15866] ? sctp_copy_one_addr+0x8c/0x350 [ 517.555084][T15866] sctp_bind_addr_copy+0xb3/0x3c0 [ 517.560135][T15866] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 517.566500][T15866] sctp_connect_new_asoc+0x2f9/0x6a0 [ 517.571816][T15866] ? __sctp_connect+0xd80/0xd80 [ 517.576686][T15866] ? __local_bh_enable_ip+0x13a/0x1c0 [ 517.582098][T15866] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 517.587668][T15866] ? security_sctp_bind_connect+0x89/0xb0 [ 517.593424][T15866] sctp_sendmsg+0x1519/0x27b0 [ 517.598161][T15866] ? sctp_getsockopt+0xb60/0xb60 [ 517.603140][T15866] ? aa_af_perm+0x330/0x330 [ 517.607680][T15866] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 517.614134][T15866] ? sock_rps_record_flow+0x19/0x3f0 [ 517.619462][T15866] ? inet_sendmsg+0xce/0x2a0 [ 517.624076][T15866] ? inet_send_prepare+0x250/0x250 [ 517.629217][T15866] ____sys_sendmsg+0x61b/0x980 [ 517.634031][T15866] ? __asan_memset+0x22/0x40 [ 517.638652][T15866] ? __sys_sendmsg_sock+0x30/0x30 [ 517.643702][T15866] ? __import_iovec+0x5f2/0x850 [ 517.648604][T15866] ? import_iovec+0x73/0xa0 [ 517.653141][T15866] ___sys_sendmsg+0x2a6/0x360 [ 517.657858][T15866] ? __sys_sendmsg+0x2b0/0x2b0 [ 517.662698][T15866] ? __lock_acquire+0x7d80/0x7d80 [ 517.667809][T15866] __se_sys_sendmsg+0x1d0/0x2c0 [ 517.672694][T15866] ? __x64_sys_sendmsg+0x80/0x80 [ 517.677692][T15866] ? lockdep_hardirqs_on+0x98/0x150 [ 517.682923][T15866] do_syscall_64+0x55/0xb0 [ 517.687363][T15866] ? clear_bhb_loop+0x40/0x90 [ 517.692061][T15866] ? clear_bhb_loop+0x40/0x90 [ 517.696772][T15866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.702700][T15866] RIP: 0033:0x7f4b33b9de99 [ 517.707139][T15866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.726788][T15866] RSP: 002b:00007f4b34af4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.735213][T15866] RAX: ffffffffffffffda RBX: 00007f4b33e25fa0 RCX: 00007f4b33b9de99 [ 517.743203][T15866] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 517.751191][T15866] RBP: 00007f4b34af4090 R08: 0000000000000000 R09: 0000000000000000 [ 517.759183][T15866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.767162][T15866] R13: 00007f4b33e26038 R14: 00007f4b33e25fa0 R15: 00007ffc61aea618 [ 517.775172][T15866] [ 518.254721][T15877] netlink: 'syz.2.3862': attribute type 29 has an invalid length. [ 518.273070][T15877] netlink: 'syz.2.3862': attribute type 29 has an invalid length. [ 518.318055][T15877] netlink: 'syz.2.3862': attribute type 29 has an invalid length. [ 518.855183][T15883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3864'. [ 519.018010][T15887] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3866'. [ 520.011865][T15907] netlink: 'syz.1.3874': attribute type 29 has an invalid length. [ 520.043943][T15907] netlink: 'syz.1.3874': attribute type 29 has an invalid length. [ 520.069131][T15911] netlink: 'syz.1.3874': attribute type 29 has an invalid length. [ 520.404243][T15916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3875'. [ 520.840745][T15923] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3877'. [ 520.856133][T15923] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3877'. [ 520.951005][T15926] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3879'. [ 522.783797][T15951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3886'. [ 522.935122][T15954] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3887'. [ 523.132661][T15963] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3892'. [ 523.146088][T15963] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.3892'. [ 524.400477][T15979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3899'. [ 524.816348][T15985] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3901'. [ 524.934251][T15990] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3902'. [ 524.978166][T15990] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.3902'. [ 525.543017][T16004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3909'. [ 525.938301][T16011] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3912'. [ 526.553948][T16027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3918'. [ 526.739002][T16034] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3919'. [ 526.749898][T16034] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.3919'. [ 527.338398][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3928'. [ 530.032719][T16104] __nla_validate_parse: 3 callbacks suppressed [ 530.032739][T16104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3948'. [ 530.056046][T16107] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3947'. [ 530.074767][T16107] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.3947'. [ 531.199237][T16135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3959'. [ 532.247786][T16154] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3966'. [ 532.262078][T16154] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.3966'. [ 532.269928][T16153] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3967'. [ 532.542864][T16162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3971'. [ 533.018502][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 533.040639][T16176] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3976'. [ 534.994164][T16216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.000675][T16216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 535.135541][T16222] __nla_validate_parse: 7 callbacks suppressed [ 535.135561][T16222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3996'. [ 535.425113][T16224] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3997'. [ 535.584467][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3998'. [ 535.727858][T16239] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4000'. [ 535.753036][T16239] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.4000'. [ 536.678723][T16255] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4007'. [ 536.817781][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 537.012601][T16263] FAULT_INJECTION: forcing a failure. [ 537.012601][T16263] name failslab, interval 1, probability 0, space 0, times 0 [ 537.025745][T16263] CPU: 1 PID: 16263 Comm: syz.1.4011 Not tainted syzkaller #0 [ 537.033238][T16263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 537.043315][T16263] Call Trace: [ 537.046615][T16263] [ 537.049566][T16263] dump_stack_lvl+0x18c/0x250 [ 537.054285][T16263] ? show_regs_print_info+0x20/0x20 [ 537.059515][T16263] ? load_image+0x420/0x420 [ 537.064077][T16263] should_fail_ex+0x394/0x4c0 [ 537.068809][T16263] should_failslab+0x9/0x20 [ 537.073350][T16263] slab_pre_alloc_hook+0x59/0x300 [ 537.078473][T16263] kmem_cache_alloc_node+0x5e/0x310 [ 537.083714][T16263] ? __alloc_skb+0x103/0x2c0 [ 537.088356][T16263] __alloc_skb+0x103/0x2c0 [ 537.092821][T16263] fdb_notify+0xa6/0x160 [ 537.097105][T16263] fdb_delete+0xdd6/0x1060 [ 537.101558][T16263] ? __vlan_flush+0x3e0/0x3e0 [ 537.106272][T16263] ? fdb_delete+0x33a/0x1060 [ 537.110903][T16263] ? fdb_notify+0x160/0x160 [ 537.115472][T16263] br_fdb_find_delete_local+0x122/0x140 [ 537.121056][T16263] nbp_vlan_delete+0x183/0x210 [ 537.125859][T16263] br_vlan_info+0x13e/0x460 [ 537.130415][T16263] ? br_process_vlan_info+0x8a0/0x8a0 [ 537.135841][T16263] br_process_vlan_info+0x316/0x8a0 [ 537.141088][T16263] ? br_getlink+0x180/0x180 [ 537.145639][T16263] br_afspec+0x399/0x5f0 [ 537.149937][T16263] ? br_setport+0x1680/0x1680 [ 537.154644][T16263] ? __mutex_trylock_common+0x160/0x270 [ 537.160247][T16263] br_dellink+0x214/0x2b0 [ 537.164616][T16263] ? br_afspec+0x5f0/0x5f0 [ 537.169081][T16263] ? mutex_is_locked+0x12/0x40 [ 537.173879][T16263] rtnl_bridge_dellink+0x489/0x6f0 [ 537.179032][T16263] ? rtnl_bridge_getlink+0xd30/0xd30 [ 537.184375][T16263] ? rtnl_bridge_getlink+0xd30/0xd30 [ 537.189706][T16263] rtnetlink_rcv_msg+0x843/0xf90 [ 537.194671][T16263] ? rtnetlink_rcv_msg+0x220/0xf90 [ 537.199820][T16263] ? rtnetlink_bind+0x80/0x80 [ 537.204527][T16263] ? perf_trace_preemptirq_template+0xac/0x330 [ 537.210710][T16263] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 537.216546][T16263] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 537.222615][T16263] ? __dev_queue_xmit+0x275/0x3630 [ 537.227771][T16263] ? __dev_queue_xmit+0x275/0x3630 [ 537.232932][T16263] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 537.238691][T16263] ? perf_trace_lock+0x303/0x3b0 [ 537.243682][T16263] netlink_rcv_skb+0x235/0x4c0 [ 537.248477][T16263] ? rtnetlink_bind+0x80/0x80 [ 537.253184][T16263] ? netlink_ack+0x1160/0x1160 [ 537.258006][T16263] ? __lock_acquire+0x7d80/0x7d80 [ 537.263077][T16263] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.268317][T16263] netlink_unicast+0x7b1/0x930 [ 537.273133][T16263] netlink_sendmsg+0x8d0/0xbf0 [ 537.277945][T16263] ? netlink_getsockopt+0x590/0x590 [ 537.283182][T16263] ? apparmor_socket_sendmsg+0x8e/0x330 [ 537.288764][T16263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 537.294075][T16263] ? security_socket_sendmsg+0x80/0xa0 [ 537.299562][T16263] ? netlink_getsockopt+0x590/0x590 [ 537.304790][T16263] ____sys_sendmsg+0x61b/0x980 [ 537.309597][T16263] ? __asan_memset+0x22/0x40 [ 537.314216][T16263] ? __sys_sendmsg_sock+0x30/0x30 [ 537.319268][T16263] ? __import_iovec+0x3fa/0x850 [ 537.324165][T16263] ? import_iovec+0x73/0xa0 [ 537.328705][T16263] ___sys_sendmsg+0x2a6/0x360 [ 537.333453][T16263] ? __sys_sendmsg+0x2b0/0x2b0 [ 537.338294][T16263] ? __lock_acquire+0x7d80/0x7d80 [ 537.343403][T16263] __se_sys_sendmsg+0x1d0/0x2c0 [ 537.348295][T16263] ? __x64_sys_sendmsg+0x80/0x80 [ 537.353293][T16263] ? lockdep_hardirqs_on+0x98/0x150 [ 537.358532][T16263] do_syscall_64+0x55/0xb0 [ 537.362972][T16263] ? clear_bhb_loop+0x40/0x90 [ 537.367668][T16263] ? clear_bhb_loop+0x40/0x90 [ 537.372373][T16263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.378302][T16263] RIP: 0033:0x7f3b62b9de99 [ 537.382746][T16263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.402388][T16263] RSP: 002b:00007f3b63b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.410833][T16263] RAX: ffffffffffffffda RBX: 00007f3b62e25fa0 RCX: 00007f3b62b9de99 [ 537.418828][T16263] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 537.426825][T16263] RBP: 00007f3b63b09090 R08: 0000000000000000 R09: 0000000000000000 [ 537.434818][T16263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.442807][T16263] R13: 00007f3b62e26038 R14: 00007f3b62e25fa0 R15: 00007ffc37538da8 [ 537.450841][T16263] [ 537.908054][T16274] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4016'. [ 537.968476][T16274] netlink: 56855 bytes leftover after parsing attributes in process `syz.2.4016'. [ 538.087136][T16280] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4018'. [ 539.261275][T16307] netlink: 'syz.0.4030': attribute type 10 has an invalid length. [ 539.286596][T16307] hsr0: entered promiscuous mode [ 539.308302][T16307] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 539.363543][T16307] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 539.409696][T16307] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 539.459996][T16307] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 540.355647][T16337] __nla_validate_parse: 8 callbacks suppressed [ 540.355682][T16337] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4039'. [ 540.930782][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4043'. [ 540.957044][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'. [ 541.668314][T16365] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4049'. [ 541.682012][T16365] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.4049'. [ 541.829116][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4052'. [ 541.924583][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 544.056018][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 545.403108][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 545.784472][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4078'. [ 546.457625][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 546.718190][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4087'. [ 547.269193][T16470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4092'. [ 547.485516][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 547.662539][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'. [ 547.710797][T16483] netlink: 'syz.0.4098': attribute type 10 has an invalid length. [ 547.830980][T16483] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4098'. [ 548.020377][T16492] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4101'. [ 548.139207][T16496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4103'. [ 550.335062][T16554] netlink: 'syz.2.4128': attribute type 10 has an invalid length. [ 550.610567][T16560] __nla_validate_parse: 8 callbacks suppressed [ 550.610615][T16560] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4130'. [ 550.680958][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 550.934743][T16567] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4134'. [ 550.950638][T16567] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4134'. [ 551.227521][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 551.505123][T16588] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4141'. [ 551.570912][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 551.790598][T16600] netlink: 'syz.2.4145': attribute type 10 has an invalid length. [ 551.840282][T16600] hsr0: entered promiscuous mode [ 551.855305][T16600] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 551.880693][T16600] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 551.891596][T16600] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 551.906345][T16600] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 551.914145][T16603] netlink: 'syz.2.4145': attribute type 2 has an invalid length. [ 551.931072][T16604] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4147'. [ 551.944561][T16604] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.4147'. [ 552.067241][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 552.690343][T16618] netlink: 'syz.3.4154': attribute type 10 has an invalid length. [ 552.713924][T16618] team0: Port device syz_tun added [ 553.792853][T16635] FAULT_INJECTION: forcing a failure. [ 553.792853][T16635] name failslab, interval 1, probability 0, space 0, times 0 [ 553.814085][T16635] CPU: 1 PID: 16635 Comm: syz.2.4160 Not tainted syzkaller #0 [ 553.821614][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 553.831718][T16635] Call Trace: [ 553.835008][T16635] [ 553.837935][T16635] dump_stack_lvl+0x18c/0x250 [ 553.842616][T16635] ? sctp_sendmsg+0x1519/0x27b0 [ 553.847461][T16635] ? ___sys_sendmsg+0x2a6/0x360 [ 553.852312][T16635] ? show_regs_print_info+0x20/0x20 [ 553.857508][T16635] ? load_image+0x420/0x420 [ 553.862015][T16635] should_fail_ex+0x394/0x4c0 [ 553.866698][T16635] should_failslab+0x9/0x20 [ 553.871198][T16635] slab_pre_alloc_hook+0x59/0x300 [ 553.876222][T16635] ? sctp_add_bind_addr+0x8c/0x360 [ 553.881328][T16635] __kmem_cache_alloc_node+0x53/0x250 [ 553.886705][T16635] ? sctp_add_bind_addr+0x8c/0x360 [ 553.891809][T16635] kmalloc_trace+0x2a/0xe0 [ 553.896227][T16635] sctp_add_bind_addr+0x8c/0x360 [ 553.901162][T16635] sctp_copy_local_addr_list+0x31b/0x4e0 [ 553.906795][T16635] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 553.912507][T16635] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 553.918569][T16635] ? sctp_v6_is_any+0x64/0x70 [ 553.923245][T16635] ? sctp_copy_one_addr+0x8c/0x350 [ 553.928358][T16635] sctp_bind_addr_copy+0xb3/0x3c0 [ 553.933376][T16635] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 553.939702][T16635] sctp_connect_new_asoc+0x2f9/0x6a0 [ 553.944984][T16635] ? __sctp_connect+0xd80/0xd80 [ 553.949827][T16635] ? __local_bh_enable_ip+0x13a/0x1c0 [ 553.955196][T16635] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 553.960735][T16635] ? security_sctp_bind_connect+0x89/0xb0 [ 553.966486][T16635] sctp_sendmsg+0x1519/0x27b0 [ 553.971185][T16635] ? sctp_getsockopt+0xb60/0xb60 [ 553.976130][T16635] ? aa_af_perm+0x330/0x330 [ 553.980639][T16635] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 553.987063][T16635] ? sock_rps_record_flow+0x19/0x3f0 [ 553.992357][T16635] ? inet_sendmsg+0xce/0x2a0 [ 553.996951][T16635] ? inet_send_prepare+0x250/0x250 [ 554.002067][T16635] ____sys_sendmsg+0x61b/0x980 [ 554.006849][T16635] ? __asan_memset+0x22/0x40 [ 554.011455][T16635] ? __sys_sendmsg_sock+0x30/0x30 [ 554.016484][T16635] ? __import_iovec+0x5f2/0x850 [ 554.021345][T16635] ? import_iovec+0x73/0xa0 [ 554.025869][T16635] ___sys_sendmsg+0x2a6/0x360 [ 554.030550][T16635] ? get_pid_task+0x20/0x1e0 [ 554.035143][T16635] ? __sys_sendmsg+0x2b0/0x2b0 [ 554.039940][T16635] ? __lock_acquire+0x7d80/0x7d80 [ 554.044987][T16635] __se_sys_sendmsg+0x1d0/0x2c0 [ 554.049841][T16635] ? __x64_sys_sendmsg+0x80/0x80 [ 554.054797][T16635] ? lockdep_hardirqs_on+0x98/0x150 [ 554.059999][T16635] do_syscall_64+0x55/0xb0 [ 554.064416][T16635] ? clear_bhb_loop+0x40/0x90 [ 554.069086][T16635] ? clear_bhb_loop+0x40/0x90 [ 554.073762][T16635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.079653][T16635] RIP: 0033:0x7f533b39de99 [ 554.084063][T16635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.103665][T16635] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.112079][T16635] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 554.120045][T16635] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 554.128008][T16635] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 554.135971][T16635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.143939][T16635] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 554.151917][T16635] [ 554.647884][T16654] netlink: 'syz.3.4167': attribute type 10 has an invalid length. [ 554.664390][T16654] batman_adv: batadv0: Adding interface: virt_wifi0 [ 554.677171][T16654] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.711474][T16654] batman_adv: batadv0: Interface activated: virt_wifi0 [ 555.510084][T16682] FAULT_INJECTION: forcing a failure. [ 555.510084][T16682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.529723][T16682] CPU: 0 PID: 16682 Comm: syz.3.4181 Not tainted syzkaller #0 [ 555.537223][T16682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 555.547293][T16682] Call Trace: [ 555.550586][T16682] [ 555.553529][T16682] dump_stack_lvl+0x18c/0x250 [ 555.558239][T16682] ? show_regs_print_info+0x20/0x20 [ 555.563461][T16682] ? load_image+0x420/0x420 [ 555.567989][T16682] ? __might_fault+0xaa/0x120 [ 555.572688][T16682] ? __lock_acquire+0x7d80/0x7d80 [ 555.577725][T16682] ? __virt_addr_valid+0x10c/0x380 [ 555.582857][T16682] should_fail_ex+0x394/0x4c0 [ 555.587562][T16682] _copy_from_user+0x2f/0xe0 [ 555.592174][T16682] generic_map_update_batch+0x53e/0x800 [ 555.597755][T16682] ? rcu_read_unlock+0xa0/0xa0 [ 555.602554][T16682] ? __fdget+0x180/0x210 [ 555.606817][T16682] ? rcu_read_unlock+0xa0/0xa0 [ 555.611601][T16682] bpf_map_do_batch+0x3f2/0x600 [ 555.616473][T16682] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 555.622843][T16682] __sys_bpf+0x381/0x890 [ 555.627118][T16682] ? bpf_link_show_fdinfo+0x390/0x390 [ 555.632528][T16682] ? lock_chain_count+0x20/0x20 [ 555.637405][T16682] __x64_sys_bpf+0x7c/0x90 [ 555.641840][T16682] do_syscall_64+0x55/0xb0 [ 555.646282][T16682] ? clear_bhb_loop+0x40/0x90 [ 555.650974][T16682] ? clear_bhb_loop+0x40/0x90 [ 555.655670][T16682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.661587][T16682] RIP: 0033:0x7f090eb9de99 [ 555.666022][T16682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.685647][T16682] RSP: 002b:00007f090f9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.694084][T16682] RAX: ffffffffffffffda RBX: 00007f090ee25fa0 RCX: 00007f090eb9de99 [ 555.702071][T16682] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 555.710059][T16682] RBP: 00007f090f9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 555.718047][T16682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.726031][T16682] R13: 00007f090ee26038 R14: 00007f090ee25fa0 R15: 00007fffd5b2ec28 [ 555.734032][T16682] [ 555.820610][T16690] __nla_validate_parse: 7 callbacks suppressed [ 555.820653][T16690] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4185'. [ 555.900251][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4186'. [ 556.122368][T16701] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4190'. [ 556.503518][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'. [ 556.570424][T16716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'. [ 556.683044][T16720] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4199'. [ 556.758799][T16724] FAULT_INJECTION: forcing a failure. [ 556.758799][T16724] name failslab, interval 1, probability 0, space 0, times 0 [ 556.787956][T16724] CPU: 1 PID: 16724 Comm: syz.2.4201 Not tainted syzkaller #0 [ 556.795464][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 556.805522][T16724] Call Trace: [ 556.808805][T16724] [ 556.811738][T16724] dump_stack_lvl+0x18c/0x250 [ 556.816432][T16724] ? show_regs_print_info+0x20/0x20 [ 556.821632][T16724] ? load_image+0x420/0x420 [ 556.826156][T16724] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 556.832167][T16724] ? lock_chain_count+0x20/0x20 [ 556.837051][T16724] should_fail_ex+0x394/0x4c0 [ 556.841757][T16724] should_failslab+0x9/0x20 [ 556.846279][T16724] slab_pre_alloc_hook+0x59/0x300 [ 556.851334][T16724] kmem_cache_alloc+0x5a/0x2c0 [ 556.856119][T16724] ? skb_clone+0x1eb/0x370 [ 556.860555][T16724] skb_clone+0x1eb/0x370 [ 556.864819][T16724] __netlink_deliver_tap+0x411/0x7f0 [ 556.870142][T16724] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.875364][T16724] netlink_deliver_tap+0x19c/0x1b0 [ 556.880501][T16724] netlink_unicast+0x77b/0x930 [ 556.885297][T16724] netlink_sendmsg+0x8d0/0xbf0 [ 556.890095][T16724] ? netlink_getsockopt+0x590/0x590 [ 556.895315][T16724] ? apparmor_socket_sendmsg+0x170/0x330 [ 556.900963][T16724] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 556.906265][T16724] ? security_socket_sendmsg+0x80/0xa0 [ 556.911746][T16724] ? netlink_getsockopt+0x590/0x590 [ 556.916970][T16724] ____sys_sendmsg+0x61b/0x980 [ 556.921759][T16724] ? lockdep_hardirqs_on+0x98/0x150 [ 556.926987][T16724] ? __asan_memset+0x22/0x40 [ 556.931609][T16724] ? __sys_sendmsg_sock+0x30/0x30 [ 556.936649][T16724] ? __import_iovec+0x5f2/0x850 [ 556.941524][T16724] ? import_iovec+0x73/0xa0 [ 556.946048][T16724] ___sys_sendmsg+0x2a6/0x360 [ 556.950754][T16724] ? __sys_sendmsg+0x2b0/0x2b0 [ 556.955564][T16724] ? ktime_get+0x7f/0x280 [ 556.959923][T16724] ? trace_call_bpf+0xc3/0x6c0 [ 556.964737][T16724] __se_sys_sendmsg+0x1d0/0x2c0 [ 556.969614][T16724] ? perf_trace_preemptirq_template+0x269/0x330 [ 556.975890][T16724] ? __x64_sys_sendmsg+0x80/0x80 [ 556.980877][T16724] ? lockdep_hardirqs_on+0x98/0x150 [ 556.986108][T16724] do_syscall_64+0x55/0xb0 [ 556.990547][T16724] ? clear_bhb_loop+0x40/0x90 [ 556.995240][T16724] ? clear_bhb_loop+0x40/0x90 [ 556.999944][T16724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.005865][T16724] RIP: 0033:0x7f533b39de99 [ 557.010299][T16724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.029936][T16724] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.038377][T16724] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 557.046372][T16724] RDX: 00000000240000c0 RSI: 00002000000000c0 RDI: 0000000000000009 [ 557.054360][T16724] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 557.062347][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.070345][T16724] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 557.078352][T16724] [ 557.111319][T16724] netlink: 'syz.2.4201': attribute type 10 has an invalid length. [ 557.119412][T16724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4201'. [ 557.149590][T16724] batman_adv: batadv0: Adding interface: virt_wifi0 [ 557.157081][T16724] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.189772][T16724] batman_adv: batadv0: Interface activated: virt_wifi0 [ 557.258284][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 557.297973][T16738] netlink: 'syz.2.4206': attribute type 10 has an invalid length. [ 557.306982][T16738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4206'. [ 558.160013][T16748] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4209'. [ 558.644008][T16764] FAULT_INJECTION: forcing a failure. [ 558.644008][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 558.662868][T16764] CPU: 0 PID: 16764 Comm: syz.2.4216 Not tainted syzkaller #0 [ 558.670368][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 558.680443][T16764] Call Trace: [ 558.683731][T16764] [ 558.686669][T16764] dump_stack_lvl+0x18c/0x250 [ 558.691371][T16764] ? show_regs_print_info+0x20/0x20 [ 558.696590][T16764] ? load_image+0x420/0x420 [ 558.701112][T16764] ? __might_sleep+0xe0/0xe0 [ 558.705722][T16764] ? __lock_acquire+0x7d80/0x7d80 [ 558.710774][T16764] should_fail_ex+0x394/0x4c0 [ 558.715479][T16764] should_failslab+0x9/0x20 [ 558.720006][T16764] slab_pre_alloc_hook+0x59/0x300 [ 558.725051][T16764] ? vmemdup_user+0x49/0x1e0 [ 558.729660][T16764] ? vmemdup_user+0x49/0x1e0 [ 558.734271][T16764] ? vmemdup_user+0x49/0x1e0 [ 558.738883][T16764] __kmem_cache_alloc_node+0x53/0x250 [ 558.744289][T16764] ? vmemdup_user+0x49/0x1e0 [ 558.748900][T16764] __kmalloc_node+0xa6/0x240 [ 558.753519][T16764] vmemdup_user+0x49/0x1e0 [ 558.757956][T16764] map_get_next_key+0x220/0x620 [ 558.762825][T16764] ? bpf_lsm_bpf+0x9/0x10 [ 558.767186][T16764] __sys_bpf+0x715/0x890 [ 558.771457][T16764] ? bpf_link_show_fdinfo+0x390/0x390 [ 558.776860][T16764] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 558.783048][T16764] __x64_sys_bpf+0x7c/0x90 [ 558.787480][T16764] do_syscall_64+0x55/0xb0 [ 558.791916][T16764] ? clear_bhb_loop+0x40/0x90 [ 558.796602][T16764] ? clear_bhb_loop+0x40/0x90 [ 558.801303][T16764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.807218][T16764] RIP: 0033:0x7f533b39de99 [ 558.811820][T16764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.831448][T16764] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.839887][T16764] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 558.847873][T16764] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 558.855863][T16764] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 558.863843][T16764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.871821][T16764] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 558.879824][T16764] [ 559.243243][T16782] FAULT_INJECTION: forcing a failure. [ 559.243243][T16782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.273707][T16782] CPU: 1 PID: 16782 Comm: syz.0.4224 Not tainted syzkaller #0 [ 559.281231][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 559.291308][T16782] Call Trace: [ 559.294622][T16782] [ 559.297565][T16782] dump_stack_lvl+0x18c/0x250 [ 559.302272][T16782] ? show_regs_print_info+0x20/0x20 [ 559.307468][T16782] ? load_image+0x420/0x420 [ 559.311970][T16782] ? __might_fault+0xaa/0x120 [ 559.316647][T16782] ? __lock_acquire+0x7d80/0x7d80 [ 559.321667][T16782] should_fail_ex+0x394/0x4c0 [ 559.326356][T16782] _copy_from_user+0x2f/0xe0 [ 559.330941][T16782] ___sys_sendmsg+0x1c7/0x360 [ 559.335619][T16782] ? __sys_sendmsg+0x2b0/0x2b0 [ 559.340409][T16782] __se_sys_sendmsg+0x1d0/0x2c0 [ 559.345253][T16782] ? __x64_sys_sendmsg+0x80/0x80 [ 559.350192][T16782] ? syscall_enter_from_user_mode+0x2e/0x80 [ 559.356082][T16782] do_syscall_64+0x55/0xb0 [ 559.360493][T16782] ? clear_bhb_loop+0x40/0x90 [ 559.365165][T16782] ? clear_bhb_loop+0x40/0x90 [ 559.369838][T16782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.375754][T16782] RIP: 0033:0x7f4b33b9de99 [ 559.380204][T16782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.399810][T16782] RSP: 002b:00007f4b34af4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.408249][T16782] RAX: ffffffffffffffda RBX: 00007f4b33e25fa0 RCX: 00007f4b33b9de99 [ 559.416231][T16782] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 559.424216][T16782] RBP: 00007f4b34af4090 R08: 0000000000000000 R09: 0000000000000000 [ 559.432185][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.440152][T16782] R13: 00007f4b33e26038 R14: 00007f4b33e25fa0 R15: 00007ffc61aea618 [ 559.448127][T16782] [ 562.360544][T16812] __nla_validate_parse: 8 callbacks suppressed [ 562.360580][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'. [ 562.367697][T16813] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4237'. [ 563.176090][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.189437][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.327900][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 564.415716][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4248'. [ 565.010395][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 565.355044][T16870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4262'. [ 565.977101][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4269'. [ 566.075908][T16894] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4270'. [ 566.095989][T16894] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.4270'. [ 566.208182][T16897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4272'. [ 567.307481][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.313326][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.319010][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.324926][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.330740][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.336618][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.342537][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.348440][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.354442][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.360471][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.366500][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.373661][T16922] netpci0: tun_chr_ioctl cmd 1074025673 [ 567.380668][T16923] netpci0: tun_chr_ioctl cmd 1074025694 [ 567.387220][T16925] netlink: 'syz.0.4282': attribute type 10 has an invalid length. [ 567.482387][T16925] team0: Device veth1_vlan failed to register rx_handler [ 567.835700][T16937] netlink: 'syz.1.4287': attribute type 10 has an invalid length. [ 567.855390][T16937] hsr0: entered promiscuous mode [ 567.866735][T16937] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 567.915308][T16938] __nla_validate_parse: 2 callbacks suppressed [ 567.915325][T16938] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4286'. [ 567.943302][T16938] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.4286'. [ 568.132314][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'. [ 568.194925][T16947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4292'. [ 570.412510][T16980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4302'. [ 570.434160][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 570.876174][T16994] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4307'. [ 570.892262][T16994] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.4307'. [ 571.055782][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4315'. [ 571.262711][T17003] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4309'. [ 572.940776][T17050] __nla_validate_parse: 6 callbacks suppressed [ 572.940792][T17050] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4330'. [ 572.963508][T17050] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.4330'. [ 574.514401][T17065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4338'. [ 574.604451][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4339'. [ 575.167870][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 575.232099][T17087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4348'. [ 575.445806][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4349'. [ 575.929327][T17103] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4355'. [ 576.090150][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 576.232132][T17109] netlink: 'syz.0.4358': attribute type 29 has an invalid length. [ 576.240372][T17109] netlink: 'syz.0.4358': attribute type 29 has an invalid length. [ 576.355617][T17112] netlink: 'syz.0.4358': attribute type 29 has an invalid length. [ 576.471966][T17114] netlink: 'syz.2.4359': attribute type 10 has an invalid length. [ 576.495536][T17114] team0: Device ipvlan1 failed to register rx_handler [ 576.559941][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4360'. [ 576.946219][T17133] FAULT_INJECTION: forcing a failure. [ 576.946219][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.959963][T17133] CPU: 1 PID: 17133 Comm: syz.0.4368 Not tainted syzkaller #0 [ 576.967460][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 576.977539][T17133] Call Trace: [ 576.980840][T17133] [ 576.983792][T17133] dump_stack_lvl+0x18c/0x250 [ 576.988502][T17133] ? show_regs_print_info+0x20/0x20 [ 576.993737][T17133] ? load_image+0x420/0x420 [ 576.998324][T17133] ? __might_fault+0xaa/0x120 [ 577.003042][T17133] ? __lock_acquire+0x7d80/0x7d80 [ 577.008087][T17133] should_fail_ex+0x394/0x4c0 [ 577.012794][T17133] _copy_from_user+0x2f/0xe0 [ 577.017422][T17133] ___sys_sendmsg+0x1c7/0x360 [ 577.022125][T17133] ? get_pid_task+0x20/0x1e0 [ 577.026745][T17133] ? __sys_sendmsg+0x2b0/0x2b0 [ 577.031552][T17133] ? __lock_acquire+0x7d80/0x7d80 [ 577.036585][T17133] __se_sys_sendmsg+0x1d0/0x2c0 [ 577.041464][T17133] ? __x64_sys_sendmsg+0x80/0x80 [ 577.046418][T17133] ? lockdep_hardirqs_on+0x98/0x150 [ 577.051633][T17133] do_syscall_64+0x55/0xb0 [ 577.056109][T17133] ? clear_bhb_loop+0x40/0x90 [ 577.060845][T17133] ? clear_bhb_loop+0x40/0x90 [ 577.065581][T17133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.071547][T17133] RIP: 0033:0x7f4b33b9de99 [ 577.075968][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.095577][T17133] RSP: 002b:00007f4b34af4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.104002][T17133] RAX: ffffffffffffffda RBX: 00007f4b33e25fa0 RCX: 00007f4b33b9de99 [ 577.111980][T17133] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 577.119992][T17133] RBP: 00007f4b34af4090 R08: 0000000000000000 R09: 0000000000000000 [ 577.128056][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.136052][T17133] R13: 00007f4b33e26038 R14: 00007f4b33e25fa0 R15: 00007ffc61aea618 [ 577.144033][T17133] [ 577.234082][T17139] mac80211_hwsim hwsim13 ..ãc¤±: renamed from wlan1 (while UP) [ 577.532966][T17149] netlink: 'syz.0.4374': attribute type 10 has an invalid length. [ 577.544953][T17149] team0: Device ipvlan1 failed to register rx_handler [ 578.714292][T17177] __nla_validate_parse: 8 callbacks suppressed [ 578.714331][T17177] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4394'. [ 578.793273][T17180] netlink: 'syz.3.4387': attribute type 10 has an invalid length. [ 578.825760][T17180] team0: Device ipvlan1 failed to register rx_handler [ 578.898834][T17177] netlink: 'syz.1.4394': attribute type 4 has an invalid length. [ 578.926301][T17177] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4394'. [ 579.182491][T17191] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4390'. [ 579.223037][T17191] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.4390'. [ 579.349849][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4391'. [ 579.628172][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'. [ 579.765311][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4397'. [ 579.846054][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4398'. [ 580.006697][T17209] netlink: 'syz.3.4400': attribute type 29 has an invalid length. [ 580.014940][T17209] netlink: 'syz.3.4400': attribute type 29 has an invalid length. [ 580.047746][T17209] netlink: 'syz.3.4400': attribute type 29 has an invalid length. [ 580.060919][T17210] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4408'. [ 580.074140][T17210] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.4408'. [ 581.313073][T17239] validate_nla: 1 callbacks suppressed [ 581.313089][T17239] netlink: 'syz.2.4412': attribute type 29 has an invalid length. [ 581.329609][T17239] netlink: 'syz.2.4412': attribute type 29 has an invalid length. [ 581.395148][T17239] netlink: 'syz.2.4412': attribute type 29 has an invalid length. [ 581.429457][T17245] netlink: 'syz.0.4415': attribute type 4 has an invalid length. [ 581.499840][T17245] bridge0: port 3(bond0) entered disabled state [ 581.757774][T17254] mac80211_hwsim hwsim17 ..ãc¤±: renamed from wlan1 (while UP) [ 582.610323][T17267] netlink: 'syz.3.4425': attribute type 4 has an invalid length. [ 584.086352][T17297] netlink: 'syz.1.4436': attribute type 29 has an invalid length. [ 584.094662][T17297] netlink: 'syz.1.4436': attribute type 29 has an invalid length. [ 584.104507][T17297] netlink: 'syz.1.4436': attribute type 29 has an invalid length. [ 584.113184][T17297] netlink: 'syz.1.4436': attribute type 29 has an invalid length. [ 584.249482][T17303] __nla_validate_parse: 14 callbacks suppressed [ 584.249532][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4438'. [ 585.045473][T17316] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4445'. [ 585.393138][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4447'. [ 585.461936][T17330] FAULT_INJECTION: forcing a failure. [ 585.461936][T17330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.498372][T17330] CPU: 1 PID: 17330 Comm: syz.2.4450 Not tainted syzkaller #0 [ 585.505898][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 585.506226][T17333] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4449'. [ 585.515964][T17330] Call Trace: [ 585.515977][T17330] [ 585.515985][T17330] dump_stack_lvl+0x18c/0x250 [ 585.516017][T17330] ? show_regs_print_info+0x20/0x20 [ 585.516042][T17330] ? load_image+0x420/0x420 [ 585.545805][T17330] ? __lock_acquire+0x7d80/0x7d80 [ 585.550860][T17330] should_fail_ex+0x394/0x4c0 [ 585.555562][T17330] _copy_from_user+0x2f/0xe0 [ 585.560156][T17330] __copy_msghdr+0x388/0x560 [ 585.564750][T17330] ___sys_sendmsg+0x214/0x360 [ 585.569426][T17330] ? get_pid_task+0x20/0x1e0 [ 585.574026][T17330] ? __sys_sendmsg+0x2b0/0x2b0 [ 585.578803][T17330] ? __lock_acquire+0x7d80/0x7d80 [ 585.583841][T17330] __se_sys_sendmsg+0x1d0/0x2c0 [ 585.588690][T17330] ? __x64_sys_sendmsg+0x80/0x80 [ 585.593635][T17330] ? lockdep_hardirqs_on+0x98/0x150 [ 585.598831][T17330] do_syscall_64+0x55/0xb0 [ 585.603250][T17330] ? clear_bhb_loop+0x40/0x90 [ 585.607921][T17330] ? clear_bhb_loop+0x40/0x90 [ 585.612590][T17330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.618493][T17330] RIP: 0033:0x7f533b39de99 [ 585.622905][T17330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.642509][T17330] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.650917][T17330] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 585.658884][T17330] RDX: 0000000000000080 RSI: 00002000000004c0 RDI: 0000000000000003 [ 585.666846][T17330] RBP: 00007f533c22e090 R08: 0000000000000000 R09: 0000000000000000 [ 585.674811][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.682775][T17330] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 585.690753][T17330] [ 585.702191][T17332] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.4451'. [ 585.728013][T17332] mac80211_hwsim hwsim15 ..ãc¤±: renamed from wlan1 (while UP) [ 585.916471][T17340] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4454'. [ 585.956000][T17342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4455'. [ 586.074421][T17348] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4455'. [ 586.328288][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'. [ 586.573362][T17365] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4464'. [ 586.934690][T17375] netlink: 'syz.2.4469': attribute type 40 has an invalid length. [ 587.291602][T17394] netlink: 'syz.0.4474': attribute type 25 has an invalid length. [ 587.299512][T17394] netlink: 'syz.0.4474': attribute type 9 has an invalid length. [ 589.358321][T17423] __nla_validate_parse: 10 callbacks suppressed [ 589.358343][T17423] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4485'. [ 589.383951][T17423] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 589.507854][T17432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4488'. [ 589.545046][T17432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4488'. [ 589.570428][T17431] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4488'. [ 589.872377][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4497'. [ 694.951180][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 694.957922][ C1] rcu: 1-...!: (10499 ticks this GP) idle=fb6c/1/0x4000000000000000 softirq=62399/62399 fqs=86 [ 694.969457][ C1] rcu: (t=10500 jiffies g=84353 q=523 ncpus=2) [ 694.975724][ C1] rcu: rcu_preempt kthread starved for 10123 jiffies! g84353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 694.986934][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 694.996914][ C1] rcu: RCU grace-period kthread stack dump: [ 695.002821][ C1] task:rcu_preempt state:R running task stack:26920 pid:17 ppid:2 flags:0x00004000 [ 695.013634][ C1] Call Trace: [ 695.016928][ C1] [ 695.019876][ C1] __schedule+0x15ae/0x4660 [ 695.024412][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 695.029458][ C1] ? lock_chain_count+0x20/0x20 [ 695.034335][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 695.039563][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 695.045481][ C1] ? asan.module_dtor+0x20/0x20 [ 695.050353][ C1] ? rcu_is_watching+0x15/0xb0 [ 695.055171][ C1] schedule+0xbd/0x170 [ 695.059259][ C1] schedule_timeout+0x188/0x2d0 [ 695.064131][ C1] ? console_conditional_schedule+0x40/0x40 [ 695.070049][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 695.075966][ C1] ? update_process_times+0x1b0/0x1b0 [ 695.081368][ C1] ? prepare_to_swait_event+0x344/0x360 [ 695.086941][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 695.091829][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 695.098008][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 695.103054][ C1] ? rcu_gp_init+0x1530/0x1530 [ 695.107831][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 695.112705][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 695.117920][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 695.123139][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 695.127744][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 695.132874][ C1] ? __kthread_parkme+0x71/0x1c0 [ 695.137835][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 695.142907][ C1] kthread+0x2fa/0x390 [ 695.146989][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 695.152121][ C1] ? kthread_blkcg+0xd0/0xd0 [ 695.156729][ C1] ret_from_fork+0x48/0x80 [ 695.161160][ C1] ? kthread_blkcg+0xd0/0xd0 [ 695.165766][ C1] ret_from_fork_asm+0x11/0x20 [ 695.170569][ C1] [ 695.173612][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 695.179949][ C1] Sending NMI from CPU 1 to CPUs 0: [ 695.185171][ C0] NMI backtrace for cpu 0 [ 695.185180][ C0] CPU: 0 PID: 17441 Comm: syz.2.4490 Not tainted syzkaller #0 [ 695.185195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 695.185203][ C0] RIP: 0010:perf_prepare_sample+0xbac/0x1db0 [ 695.185225][ C0] Code: 4c 24 20 80 3c 01 00 74 09 48 8d 7b 10 e8 bc 67 31 00 4c 01 6b 10 49 bd 00 00 00 00 00 fc ff df 48 8b 44 24 28 42 80 3c 28 00 <4c> 8b 64 24 18 74 08 48 89 df e8 95 67 31 00 80 4b 01 20 4c 89 fe [ 695.185237][ C0] RSP: 0018:ffffc90000006cc0 EFLAGS: 00000046 [ 695.185250][ C0] RAX: 1ffff92000000df8 RBX: ffffc90000006fc0 RCX: 1ffff92000000dfa [ 695.185261][ C0] RDX: ffff88804c55da00 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.185271][ C0] RBP: ffffc90000006db0 R08: ffff88804c55da07 R09: 1ffff110098abb40 [ 695.185282][ C0] R10: dffffc0000000000 R11: ffffed10098abb41 R12: 0000000000000000 [ 695.185292][ C0] R13: dffffc0000000000 R14: ffffc90000007058 R15: 000000000002b040 [ 695.185303][ C0] FS: 00007f533c22e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 695.185316][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.185327][ C0] CR2: 00007f533c1a9ff8 CR3: 0000000044e0f000 CR4: 00000000003506f0 [ 695.185340][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 695.185349][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 695.185359][ C0] Call Trace: [ 695.185363][ C0] [ 695.185379][ C0] ? perf_callchain+0x220/0x220 [ 695.185406][ C0] perf_event_output_forward+0x187/0x3e0 [ 695.185425][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 695.185441][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 695.185456][ C0] ? mark_lock+0x94/0x320 [ 695.185475][ C0] ? verify_lock_unused+0x140/0x140 [ 695.185490][ C0] ? __lock_acquire+0x1336/0x7d80 [ 695.185514][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 695.185535][ C0] __perf_event_overflow+0x461/0x660 [ 695.185559][ C0] perf_swevent_hrtimer+0x437/0x610 [ 695.185581][ C0] ? cpu_clock_event_read+0x40/0x40 [ 695.185594][ C0] ? __hrtimer_run_queues+0x426/0xc10 [ 695.185636][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 695.185658][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 695.185678][ C0] ? _raw_spin_unlock+0x40/0x40 [ 695.185703][ C0] ? cpu_clock_event_read+0x40/0x40 [ 695.185719][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 695.185734][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 695.185750][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 695.185786][ C0] ? hrtimer_interrupt+0x980/0x980 [ 695.185802][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 695.185828][ C0] hrtimer_interrupt+0x39d/0x980 [ 695.185867][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 695.185889][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 695.185907][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.185929][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 695.185946][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 87 05 0d 48 89 de 5b e9 23 a7 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d c0 d2 7c 7e 65 8b 15 c1 d2 7c 7e 81 e2 00 01 ff 00 74 [ 695.185958][ C0] RSP: 0018:ffffc900000074f0 EFLAGS: 00000246 [ 695.185970][ C0] RAX: ffffffff813b24f8 RBX: 1ffff92000000eb9 RCX: ffffffff972ee403 [ 695.185981][ C0] RDX: ffff88804c55da00 RSI: 0000000000000001 RDI: 0000000000000001 [ 695.185990][ C0] RBP: ffffc90000007618 R08: ffffc90000007690 R09: 0000000000000028 [ 695.186000][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc9000505fca8 [ 695.186010][ C0] R13: ffffc900000075c8 R14: 0000000000000000 R15: dffffc0000000000 [ 695.186028][ C0] ? unwind_next_frame+0x128/0x2990 [ 695.186049][ C0] unwind_next_frame+0x128/0x2990 [ 695.186074][ C0] ? qlist_free_all+0x75/0xd0 [ 695.186101][ C0] ? qlist_free_all+0x75/0xd0 [ 695.186119][ C0] ? stack_trace_save+0x100/0x100 [ 695.186136][ C0] arch_stack_walk+0x144/0x190 [ 695.186158][ C0] ? qlist_free_all+0x75/0xd0 [ 695.186181][ C0] stack_trace_save+0xaa/0x100 [ 695.186198][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 695.186217][ C0] ? mark_lock+0x94/0x320 [ 695.186239][ C0] kasan_set_track+0x4e/0x70 [ 695.186254][ C0] ? kasan_set_track+0x4e/0x70 [ 695.186268][ C0] ? kasan_save_free_info+0x28/0x40 [ 695.186285][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 695.186300][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 695.186314][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 695.186332][ C0] ? skb_release_data+0x609/0x7f0 [ 695.186351][ C0] ? __kfree_skb+0x57/0x70 [ 695.186369][ C0] ? tcp_write_queue_purge+0x140/0x310 [ 695.186387][ C0] ? tcp_done_with_error+0x43/0xc0 [ 695.186400][ C0] ? tcp_write_timer_handler+0x666/0x910 [ 695.186417][ C0] ? tcp_write_timer+0x12a/0x280 [ 695.186433][ C0] ? call_timer_fn+0x189/0x540 [ 695.186447][ C0] ? __run_timers+0x570/0x810 [ 695.186460][ C0] ? run_timer_softirq+0x67/0xf0 [ 695.186472][ C0] ? handle_softirqs+0x27d/0x820 [ 695.186486][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 695.186499][ C0] ? irq_exit_rcu+0x9/0x20 [ 695.186511][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 695.186526][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.186546][ C0] ? deref_stack_reg+0x39/0x230 [ 695.186558][ C0] ? unwind_next_frame+0x1781/0x2990 [ 695.186571][ C0] ? arch_stack_walk+0x144/0x190 [ 695.186584][ C0] ? stack_trace_save+0xaa/0x100 [ 695.186599][ C0] ? kasan_save_stack+0x3e/0x60 [ 695.186614][ C0] ? __kasan_record_aux_stack+0xaf/0xc0 [ 695.186631][ C0] ? call_rcu+0x153/0x900 [ 695.186647][ C0] ? __schedule+0x15b6/0x4660 [ 695.186660][ C0] ? preempt_schedule_common+0x82/0xc0 [ 695.186675][ C0] ? preempt_schedule+0xc0/0xd0 [ 695.186688][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 695.186706][ C0] ? unwind_next_frame+0x201c/0x2990 [ 695.186719][ C0] ? arch_stack_walk+0x144/0x190 [ 695.186732][ C0] ? stack_trace_save+0xaa/0x100 [ 695.186747][ C0] ? kasan_set_track+0x4e/0x70 [ 695.186762][ C0] ? kasan_save_free_info+0x28/0x40 [ 695.186778][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 695.186793][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 695.186807][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 695.186825][ C0] ? __free_slab+0xbe/0x2a0 [ 695.186837][ C0] ? __slab_free+0x35a/0x400 [ 695.186849][ C0] ? qlist_free_all+0x75/0xd0 [ 695.186886][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 695.186905][ C0] kasan_save_free_info+0x28/0x40 [ 695.186923][ C0] ____kasan_slab_free+0x126/0x1f0 [ 695.186942][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 695.186961][ C0] ? skb_release_data+0x609/0x7f0 [ 695.186980][ C0] __kmem_cache_free+0xba/0x1f0 [ 695.187005][ C0] skb_release_data+0x609/0x7f0 [ 695.187036][ C0] __kfree_skb+0x57/0x70 [ 695.187055][ C0] tcp_write_queue_purge+0x140/0x310 [ 695.187079][ C0] tcp_done_with_error+0x43/0xc0 [ 695.187101][ C0] tcp_write_timer_handler+0x666/0x910 [ 695.187123][ C0] tcp_write_timer+0x12a/0x280 [ 695.187144][ C0] call_timer_fn+0x189/0x540 [ 695.187158][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 695.187175][ C0] ? call_timer_fn+0xd2/0x540 [ 695.187189][ C0] ? __run_timers+0x810/0x810 [ 695.187216][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 695.187236][ C0] __run_timers+0x570/0x810 [ 695.187267][ C0] ? detach_timer+0x2b0/0x2b0 [ 695.187279][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 695.187312][ C0] run_timer_softirq+0x67/0xf0 [ 695.187328][ C0] handle_softirqs+0x27d/0x820 [ 695.187341][ C0] ? read_tsc+0x9/0x20 [ 695.187355][ C0] ? ktime_get+0x24b/0x280 [ 695.187375][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 695.187394][ C0] ? do_softirq+0x1a0/0x1a0 [ 695.187414][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 695.187435][ C0] __irq_exit_rcu+0xd3/0x190 [ 695.187450][ C0] ? irq_exit_rcu+0x20/0x20 [ 695.187473][ C0] irq_exit_rcu+0x9/0x20 [ 695.187486][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 695.187503][ C0] [ 695.187507][ C0] [ 695.187513][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.187533][ C0] RIP: 0010:deref_stack_reg+0x39/0x230 [ 695.187546][ C0] Code: 89 54 24 10 48 89 34 24 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 27 95 4b 00 49 8d 7f 08 48 89 f8 48 c1 e8 03 48 89 44 24 08 <80> 3c 28 00 74 05 e8 ec 0c a4 00 4d 8b 77 08 49 8d 7f 10 49 89 fd [ 695.187557][ C0] RSP: 0018:ffffc9000505eda8 EFLAGS: 00000a02 [ 695.187568][ C0] RAX: 1ffff92000a0bdda RBX: ffffffff8f137e0d RCX: ffff88804c55da00 [ 695.187579][ C0] RDX: 0000000000000003 RSI: ffffc9000505eff0 RDI: ffffc9000505eed0 [ 695.187588][ C0] RBP: dffffc0000000000 R08: ffff88804c55da00 R09: 0000000000000003 [ 695.187598][ C0] R10: 0000000000000004 R11: ffffc900198bd000 R12: ffffc9000505ef60 [ 695.187608][ C0] R13: ffffc9000505eec8 R14: ffffffff8f137e0c R15: ffffc9000505eec8 [ 695.187635][ C0] ? deref_stack_reg+0x29/0x230 [ 695.187654][ C0] unwind_next_frame+0x1781/0x2990 [ 695.187679][ C0] ? stack_trace_save+0xaa/0x100 [ 695.187697][ C0] ? stack_trace_save+0xaa/0x100 [ 695.187713][ C0] ? stack_trace_save+0x100/0x100 [ 695.187730][ C0] arch_stack_walk+0x144/0x190 [ 695.187751][ C0] ? kasan_save_stack+0x3e/0x60 [ 695.187771][ C0] stack_trace_save+0xaa/0x100 [ 695.187788][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 695.187807][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 695.187830][ C0] kasan_save_stack+0x3e/0x60 [ 695.187899][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 695.187917][ C0] ? put_task_struct_rcu_user+0xa0/0xa0 [ 695.187936][ C0] call_rcu+0x153/0x900 [ 695.187961][ C0] ? call_rcu+0xe/0x900 [ 695.187981][ C0] ? rcu_force_quiescent_state+0x220/0x220 [ 695.188000][ C0] ? put_task_stack+0x147/0x200 [ 695.188018][ C0] ? finish_task_switch+0x440/0x8f0 [ 695.188040][ C0] __schedule+0x15b6/0x4660 [ 695.188061][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 695.188092][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 695.188115][ C0] ? mark_lock+0x94/0x320 [ 695.188131][ C0] ? asan.module_dtor+0x20/0x20 [ 695.188149][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 695.188181][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.188202][ C0] ? preempt_schedule+0xc0/0xd0 [ 695.188219][ C0] preempt_schedule_common+0x82/0xc0 [ 695.188236][ C0] preempt_schedule+0xc0/0xd0 [ 695.188251][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 695.188267][ C0] ? deref_stack_reg+0x83/0x230 [ 695.188286][ C0] preempt_schedule_thunk+0x1a/0x30 [ 695.188307][ C0] ? unwind_next_frame+0x2017/0x2990 [ 695.188324][ C0] unwind_next_frame+0x201c/0x2990 [ 695.188348][ C0] ? __sys_socket+0xd7/0x1b0 [ 695.188369][ C0] ? __sys_socket+0xd7/0x1b0 [ 695.188386][ C0] ? stack_trace_save+0x100/0x100 [ 695.188403][ C0] arch_stack_walk+0x144/0x190 [ 695.188424][ C0] ? __x64_sys_socket+0x7a/0x90 [ 695.188447][ C0] stack_trace_save+0xaa/0x100 [ 695.188464][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 695.188483][ C0] ? mark_lock+0x94/0x320 [ 695.188507][ C0] kasan_set_track+0x4e/0x70 [ 695.188522][ C0] ? kasan_set_track+0x4e/0x70 [ 695.188536][ C0] ? kasan_save_free_info+0x28/0x40 [ 695.188552][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 695.188567][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 695.188582][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 695.188599][ C0] ? __free_slab+0xbe/0x2a0 [ 695.188612][ C0] ? __slab_free+0x35a/0x400 [ 695.188624][ C0] ? qlist_free_all+0x75/0xd0 [ 695.188669][ C0] ? kasan_quarantine_reduce+0x143/0x160 [ 695.188689][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 695.188704][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 695.188722][ C0] ? kmem_cache_alloc_lru+0x175/0x2b0 [ 695.188740][ C0] ? sock_alloc_inode+0x28/0xc0 [ 695.188753][ C0] ? new_inode_pseudo+0x63/0x1d0 [ 695.188769][ C0] ? __sock_create+0x12d/0x940 [ 695.188785][ C0] ? __sys_socket+0xd7/0x1b0 [ 695.188843][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 695.188862][ C0] kasan_save_free_info+0x28/0x40 [ 695.188880][ C0] ____kasan_slab_free+0x126/0x1f0 [ 695.188899][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 695.188918][ C0] ? __free_slab+0xbe/0x2a0 [ 695.188932][ C0] __kmem_cache_free+0xba/0x1f0 [ 695.188957][ C0] __free_slab+0xbe/0x2a0 [ 695.188973][ C0] __slab_free+0x35a/0x400 [ 695.188991][ C0] ? ___cache_free+0x62/0x150 [ 695.189015][ C0] qlist_free_all+0x75/0xd0 [ 695.189037][ C0] kasan_quarantine_reduce+0x143/0x160 [ 695.189059][ C0] __kasan_slab_alloc+0x22/0x80 [ 695.189077][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 695.189110][ C0] kmem_cache_alloc_lru+0x175/0x2b0 [ 695.189130][ C0] ? sock_alloc_inode+0x28/0xc0 [ 695.189150][ C0] sock_alloc_inode+0x28/0xc0 [ 695.189164][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 695.189178][ C0] new_inode_pseudo+0x63/0x1d0 [ 695.189197][ C0] __sock_create+0x12d/0x940 [ 695.189214][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 695.189240][ C0] __sys_socket+0xd7/0x1b0 [ 695.189263][ C0] __x64_sys_socket+0x7a/0x90 [ 695.189283][ C0] do_syscall_64+0x55/0xb0 [ 695.189302][ C0] ? clear_bhb_loop+0x40/0x90 [ 695.189315][ C0] ? clear_bhb_loop+0x40/0x90 [ 695.189330][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.189350][ C0] RIP: 0033:0x7f533b39de99 [ 695.189364][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.189375][ C0] RSP: 002b:00007f533c22e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 695.189389][ C0] RAX: ffffffffffffffda RBX: 00007f533b625fa0 RCX: 00007f533b39de99 [ 695.189399][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 695.189408][ C0] RBP: 00007f533b433eaf R08: 0000000000000000 R09: 0000000000000000 [ 695.189417][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.189425][ C0] R13: 00007f533b626038 R14: 00007f533b625fa0 R15: 00007fff2d6287a8 [ 695.189451][ C0] [ 695.190171][ C1] CPU: 1 PID: 17438 Comm: syz.3.4489 Not tainted syzkaller #0 [ 696.528999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 696.539069][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 696.545074][ C1] Code: 8a e8 32 92 39 09 65 66 8b 05 2a 6c b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 d6 06 3b 00 fb 65 8b 05 f6 6b b1 7e <85> c0 75 05 e8 a5 50 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 696.564711][ C1] RSP: 0018:ffffc900001f05c0 EFLAGS: 00000282 [ 696.570804][ C1] RAX: 0000000000000101 RBX: 0000000000000200 RCX: 6ed348307bf18000 [ 696.578795][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 696.586792][ C1] RBP: ffffc900001f0650 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 696.594786][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: ffffffff8958591b [ 696.602778][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200003e0b8 [ 696.610763][ C1] FS: 00007f090f9c36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 696.619712][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.626310][ C1] CR2: 0000000000000004 CR3: 000000007754c000 CR4: 00000000003506e0 [ 696.634295][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 696.642277][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 696.650261][ C1] Call Trace: [ 696.653813][ C1] [ 696.656674][ C1] ? _local_bh_enable+0xa0/0xa0 [ 696.661567][ C1] ip6t_do_table+0x13c4/0x1570 [ 696.666383][ C1] ? ip6t_do_table+0x1cb/0x1570 [ 696.671253][ C1] ? ip6t_alloc_initial_table+0x640/0x640 [ 696.677005][ C1] ? nf_nat_ipv6_local_fn+0x212/0x3b0 [ 696.682404][ C1] ? ip6t_alloc_initial_table+0x640/0x640 [ 696.688141][ C1] nf_hook_slow+0xbd/0x200 [ 696.692585][ C1] ndisc_send_skb+0x1331/0x1480 [ 696.697447][ C1] ? ndisc_alloc_skb+0x18c/0x450 [ 696.702407][ C1] ? ndisc_send_skb+0x201/0x1480 [ 696.707380][ C1] ? ndisc_mc_map+0x680/0x680 [ 696.712081][ C1] ? skb_dst+0xd0/0xd0 [ 696.716202][ C1] addrconf_rs_timer+0x36b/0x640 [ 696.721165][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 696.727246][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 696.733260][ C1] call_timer_fn+0x189/0x540 [ 696.737862][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 696.743959][ C1] ? call_timer_fn+0xd2/0x540 [ 696.748648][ C1] ? __run_timers+0x810/0x810 [ 696.753357][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 696.759442][ C1] __run_timers+0x570/0x810 [ 696.763984][ C1] ? detach_timer+0x2b0/0x2b0 [ 696.768698][ C1] run_timer_softirq+0x67/0xf0 [ 696.773479][ C1] handle_softirqs+0x27d/0x820 [ 696.778255][ C1] ? read_tsc+0x9/0x20 [ 696.782337][ C1] ? ktime_get+0x24b/0x280 [ 696.786814][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 696.791607][ C1] ? do_softirq+0x1a0/0x1a0 [ 696.796131][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 696.801442][ C1] __irq_exit_rcu+0xd3/0x190 [ 696.806049][ C1] ? irq_exit_rcu+0x20/0x20 [ 696.810586][ C1] irq_exit_rcu+0x9/0x20 [ 696.814842][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 696.820493][ C1] [ 696.823434][ C1] [ 696.826375][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 696.832372][ C1] RIP: 0010:smp_call_function_many_cond+0xc51/0x1190 [ 696.839068][ C1] Code: 00 74 0c 48 c7 c7 60 0d f9 8c e8 ba 66 63 00 48 8b 7c 24 68 ff 15 bf 16 7d 0b 80 7c 24 50 00 0f 85 f2 f7 ff ff e8 bf ee 0a 00 <83> 7c 24 5c 00 0f 84 af 01 00 00 8b 44 24 7c 39 84 24 80 00 00 00 [ 696.858689][ C1] RSP: 0018:ffffc9000b20f760 EFLAGS: 00000283 [ 696.864776][ C1] RAX: ffffffff817bf64d RBX: 0000000000000200 RCX: 0000000000080000 [ 696.872761][ C1] RDX: ffffc90014a71000 RSI: 0000000000002c57 RDI: 0000000000002c58 [ 696.880746][ C1] RBP: ffffc9000b20f8e0 R08: ffffffff911e7507 R09: 1ffffffff223cea0 [ 696.888728][ C1] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: ffff8880b8f3d3c0 [ 696.896711][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff81306fb0 [ 696.904694][ C1] ? text_poke_sync+0x30/0x30 [ 696.909407][ C1] ? smp_call_function_many_cond+0xbed/0x1190 [ 696.915507][ C1] ? text_poke_sync+0x30/0x30 [ 696.920218][ C1] ? smp_call_function_many+0x40/0x40 [ 696.925606][ C1] ? text_poke+0xc0/0xc0 [ 696.929867][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 696.936037][ C1] ? text_poke_loc_init+0x50f/0x7c0 [ 696.941261][ C1] ? text_poke_sync+0x30/0x30 [ 696.945953][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 696.951087][ C1] ? lock_release+0x7a/0x8c0 [ 696.955690][ C1] text_poke_bp_batch+0x31e/0x980 [ 696.960741][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 696.966923][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 696.972134][ C1] ? text_poke_queue+0xfc/0x190 [ 696.977007][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 696.983281][ C1] text_poke_finish+0x30/0x50 [ 696.987972][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 696.993977][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 696.999892][ C1] static_key_enable+0x1a/0x20 [ 697.004700][ C1] tracepoint_add_func+0x985/0xa10 [ 697.009842][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 697.015764][ C1] tracepoint_probe_register+0x5e/0x90 [ 697.021235][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 697.027152][ C1] perf_trace_event_init+0x4d4/0x9b0 [ 697.032469][ C1] perf_trace_init+0x238/0x2d0 [ 697.037257][ C1] perf_tp_event_init+0x8d/0x110 [ 697.042216][ C1] perf_try_init_event+0x12b/0x3c0 [ 697.047346][ C1] ? perf_event_alloc+0xb23/0x2150 [ 697.052476][ C1] perf_event_alloc+0xed4/0x2150 [ 697.057443][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 697.063098][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 697.068757][ C1] __se_sys_perf_event_open+0x740/0x1c60 [ 697.074428][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 697.080119][ C1] ? lock_chain_count+0x20/0x20 [ 697.084982][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 697.090990][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 697.096205][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 697.101861][ C1] do_syscall_64+0x55/0xb0 [ 697.106304][ C1] ? clear_bhb_loop+0x40/0x90 [ 697.110988][ C1] ? clear_bhb_loop+0x40/0x90 [ 697.115695][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.121616][ C1] RIP: 0033:0x7f090eb9de99 [ 697.126054][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.145684][ C1] RSP: 002b:00007f090f9c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 697.154123][ C1] RAX: ffffffffffffffda RBX: 00007f090ee26090 RCX: 00007f090eb9de99 [ 697.162109][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 697.170096][ C1] RBP: 00007f090ec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 697.178082][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 697.186080][ C1] R13: 00007f090ee26128 R14: 00007f090ee26090 R15: 00007fffd5b2ec28 [ 697.194099][ C1]