last executing test programs: 4.204568867s ago: executing program 2 (id=5693): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="240000006400ed"], 0xfe33) 3.934360495s ago: executing program 2 (id=5696): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.834651308s ago: executing program 1 (id=5697): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x51, 0x0}, 0x24000042) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200), 0x4) close(0x3) 3.79388773s ago: executing program 0 (id=5699): sendmsg$inet(0xffffffffffffffff, 0x0, 0x404c8d0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4000000c, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0x7ffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="364000001a00913a09"], 0xfe33) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='|pu&\"\"\t&\"') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000400000000000000009000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001853000006000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000010000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xe}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000500)=[r5, 0x1, r5], 0x0, 0x10, 0x7fff}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r5, 0xd, 0x0, 0xfffffffa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) write$cgroup_devices(r8, 0x0, 0x3) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, 0x0, 0x4084) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r8}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)}, {&(0x7f0000000080)="53b12d3fa0ba0000d961ba3f23b1f2507d70", 0x12}], 0x2}, 0x0) 3.773485651s ago: executing program 3 (id=5700): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x40000100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101008, 0x3, 0x8, 0x0, 0x8228, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x40000000ffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0x2e, 0x75, &(0x7f0000000180)="5591c9403cecd3862ba805d09cc4d01613df9754ffc45b47f59d1d14f4f04ea7d32c58e7cbfb85279d8b2b4eaed6", &(0x7f0000000300)=""/117, 0x1, 0x0, 0xaf, 0x85, &(0x7f0000000500)="ee211d53afa2df1f82dde8be208f6c5ec7196416ccf9d42da58c8c10c415a8112d67084ccf8899a3be98296b435440df61581936a95065f8816767cd163383926ed3f0bd41a61e1f217dbb2d16a2bb39dc5e17bbc25cb1d70ed90c096bad680b96707c6cc6b2884d28e6ca2d0b2f14e5cf6144d14acc6a0d676866a710601df6ea3fc8250ae8a51b390bab8a8439efb90f24e1604942a88e05f9645f38bfe0d2aec8368d7f42ceb05b7d690dad037c", &(0x7f00000005c0)="8dd6cadb3ecef9b1bf2fa2f504774557082b2f0cdc089615ca13fd9d2b021e411577e865a41becfca30707097afce6ff96788a7ba652c64509e74cf0b1b0f86ec1b5f1f278327bbbfae208e1bf8ca64c88debbc665d73de91e1e6a56295003e9a667efab323a4a3bc3bcbff00c23d5169c5489de3bb69f06e9409960ed831624a0ee8936dd", 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x141040, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 3.697851313s ago: executing program 2 (id=5701): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 3) 3.697234323s ago: executing program 1 (id=5702): r0 = socket$kcm(0xa, 0x7, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x191000, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/65) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002002) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.614733217s ago: executing program 4 (id=5705): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000001000000080000000200", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x110caa, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x2, r0, 0x3) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r3, &(0x7f0000000640)="fb2075159b0c94c8150b3a215660ce8d68f844af406983cb34ab5cc01b285a68bc2978ef1580b8b8486103bb7ebbdeaa94cff8068307644180ecb3a875f78d28e978d8085511bba64c0bdc9c39915589791de830ddbac19cea7502ea9d47144da03f6e9989fd3e02910df8dafe05b8e17ac8090247ef52010a78d60bf9bf49afdcc69b2f6225190e454bfe47d390567821742941bb724c4ff664eebe365ba5e582e1dad78efc5e3cbce16a24716aebd5828fe713a3e97a0867a3bb8d9beef1ac6e19"}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) socket$kcm(0x23, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="afdaf4f63e4053d99dac3c23b62fd5739c1a4b8fd755478804dd54ed4cf8979a64c2e12c585dce545eadd19ddb6b7929a91f55deb805eb7ced858e7ff41e57d86893962e15b1fd9bde1e9512abe62dbff64ff20ad7aa3b73c405402328d71457b9a4a0a675b8afc3643483eb68f54a7e8e65729f1aa7e8693652363fa6169df5b6173c5c833f1cefcc1cb956cacb87cc9ad62bdf15", 0x95}], 0x1, 0x0, 0x0, 0x7400}, 0x700) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 2.52409926s ago: executing program 1 (id=5706): r0 = socket$kcm(0xa, 0x7, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x191000, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/65) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="0000fffffffffffffffffffffffd5f2e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x3, 0x8, 0x3, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001e40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001e80)=[{0x0, 0x1, 0x4, 0x1}, {0x4, 0x2, 0x2, 0x8}], 0x10, 0x7f}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001fc0)=@generic={&(0x7f0000001f80)='./file0\x00', 0x0, 0x10}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0000001420000000000000", @ANYRES32, @ANYBLOB="0e0c2de88f744d78f2904f67455604c095e9129d1032a39c8867ed21895d539dc8ea8b1cb87fb322908bcd51ca06c63b63f1e2f04704a65ac15c65f7facd66770634f687ff4d5eba6747bee4f449aaba9a8861b02354c1279fc7ff2343", @ANYRES64=r6], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000000000002ed7b763efe953a92c292a295cc40a23598bdfd442a34c582719275f78e78ed9679411e3036797606c63a2d4a67d2aaf77e8944ff6ee0cc1b538bf2df11d863bb0ce7c69051f2ec92dc76979ccc2ba28ad2ff4a064de9f9f481edd8eef3fbdb72243bdf6bb5e479c7e90cd8797f4dec6e707777edc5b17ba7a5b1fb7f410e31c4c25ba9e752d3042476a5c08830509ff9b9bce7a41f57e907f8d833424dbd75ace33f59301b2bb4359a2e1e33e68e984dfba24641508e05930dedbd5cc986c9b14a47411263c2ae4a9a06a1c07770fe74542921353cbfdb57997e967", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r6], 0x20) 1.90459235s ago: executing program 1 (id=5711): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.844630212s ago: executing program 3 (id=5712): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8005, 0x1946}, 0x100112, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.462620554s ago: executing program 0 (id=5713): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xf3, 0x0, &(0x7f0000000580)="d324990cc8d760897251a1296f9baeff90fd33c06822ec25f10da3fbeca2ab26610dedbe3104c47819b0967bfe6709b942c48fc6bfa7355cb604962513bcd0f648c5738262c9b5cc13a1735958acabe54b63bb4a36ccc286152028bdd1dee1d15ddcc355215db33e951ef24e0d4e5a46300e2911d5225c7675a512221030e80d94166f13d9bd890a41f31c81e8190f6a57723f47dada76167e3fc9f15965894188302125fb08d94019def9e73c9249d637e99dc56e7eab3f7f6fbb488218edab98c1fec901cc86e06416cf20751369bbdf5dfb261b5aad477c29e1684c2397664278814617cea799238fbcfbf23d00f864d7c8", 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x4, 0x0, 0x24000}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, r0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.462316184s ago: executing program 1 (id=5714): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.452697164s ago: executing program 4 (id=5715): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$inet(r0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002002) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.431848625s ago: executing program 3 (id=5716): r0 = socket$kcm(0xa, 0x7, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x191000, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/65) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x51, 0x0}, 0x24000042) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200), 0x4) close(0x3) 1.361800807s ago: executing program 1 (id=5718): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], 0x0, 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)}, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000}, 0x6000, 0xc8, 0x0, 0x5, 0x0, 0x0, 0xbfff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xffc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x53) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180d0000000000000000000000000000c3220000500000009500000000000000a4d63a8315edaa5a4e1d9d6b4aedd85e9b1cbe0edbc2de74bf53c2e4134bb338f9db258ea19053a9522538cba50af1f2a29dd97c647336f39047e6496f5fc557cf1cf06f57660665f2d896149bbe6f937b027dcbd851b4a28724ee2da5e4639cad1cf9086c6dcb5ed511208d4bbf7e93823180cdfb3c766ade580ec2ca9b9a7c87cd5fc4fb1cb3dc8f00"/184], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x23) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, r8, 0x2) 1.027897398s ago: executing program 4 (id=5719): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000001000000080000000200", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x110caa, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x2, r0, 0x3) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) socket$kcm(0x23, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="afdaf4f63e4053d99dac3c23b62fd5739c1a4b8fd755478804dd54ed4cf8979a64c2e12c585dce545eadd19ddb6b7929a91f55deb805eb7ced858e7ff41e57d86893962e15b1fd9bde1e9512abe62dbff64ff20ad7aa3b73c405402328d71457b9a4a0a675b8afc3643483eb68f54a7e8e65729f1aa7e8693652363fa6169df5b6173c5c833f1cefcc1cb956cacb87cc9ad62bdf15", 0x95}], 0x1, 0x0, 0x0, 0x7400}, 0x700) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 915.509981ms ago: executing program 3 (id=5720): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xed, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0xb}, 0x8825, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xffffffffffffffff) 906.722181ms ago: executing program 2 (id=5721): r0 = socket$kcm(0xa, 0x7, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x191000, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/65) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40086602, &(0x7f0000000780)='S\x931r\x858 ;s\xc2\xd8\xf5E$?kT\xfdH(\x81Y\xbe\xe4\xdc\xf4\x99^\x14\f|\xa7\x8c&\xc4MA\r\xf8\xfe\xd2\xeb\xde \xc0\x1e\x9eN\xb9`\xa3a\']\xf0\xb2\xc91\xea\x9d\xfd\x16B\xc3\xe2\x8e\xa4\x86!\xdb\x13\xdah\xcd\xdbg\x15N_\xe8\xc8\x11\x9c\xe3\xa2\xa4[\xe0\xb5x\xc6\x92\xde\x00^(\xecn\xe5:( \xc7UQT\xd1-\xcc\xb2_\xaa\xca\xba\xa2W\x15\xc5\x03\xe5|,\x8b\x14\x00\xcc6\x000\xa1\x03\x888V\xfem\xba\x1b\xc6\xd8\xf4\xc2##4\x99\xfa*Ep\x7f\xca\x8b\x89@\xb4\x85\x1e\xadW\xde\xba\xdf\xe6\x7f\x80k\xfeL^\xf9\xd7\xa5\xd3\xf1\xed)Wne\x04\xa4\xdbq\x1d\x86\'3\xf0\xe0\xdf\xea\xb3T\'\x02\x00E\xcdT[N\xcbLW\x00\x89\xee\xd2a\x89\x9ax0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}], &(0x7f0000000280)='GPL\x00', 0x1b019da4, 0x18, &(0x7f00000002c0)=""/24, 0x41100, 0x24, '\x00', r3, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x5cd, 0xff, 0x7}, 0x10, r4, r1, 0x1, 0x0, &(0x7f0000000940)=[{0x5, 0x1, 0xc, 0x9}], 0x10, 0x7}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e22, 0xfffffffc, @remote, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18, 0x12}, 0x4000001) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x3}, 0x0, 0xa, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 364.070539ms ago: executing program 3 (id=5725): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 0s ago: executing program 2 (id=5726): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xf}, 0x106581, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000000000}}, 0xffffffffffffffff, 0x0, r0, 0x2) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004000000000da"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d35, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x828, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @empty}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffff7}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010101, 0x400}]}]}}}, @ip_tos_u8={{0x11}}], 0xb0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x1000, 0x12) kernel console output (not intermixed with test programs): 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.411461][T20401] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1137.419905][T20401] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1137.427900][T20401] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 1137.435889][T20401] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.443923][T20401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.451923][T20401] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1137.459976][T20401] [ 1138.445597][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 1142.182729][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1143.808705][T20562] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1143.860698][T20567] FAULT_INJECTION: forcing a failure. [ 1143.860698][T20567] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.919384][T20567] CPU: 1 PID: 20567 Comm: syz.2.4820 Not tainted syzkaller #0 [ 1143.926935][T20567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1143.937051][T20567] Call Trace: [ 1143.940396][T20567] [ 1143.943372][T20567] dump_stack_lvl+0x188/0x250 [ 1143.948113][T20567] ? show_regs_print_info+0x20/0x20 [ 1143.953377][T20567] ? load_image+0x400/0x400 [ 1143.957947][T20567] ? __might_sleep+0xf0/0xf0 [ 1143.962594][T20567] ? __lock_acquire+0x7d10/0x7d10 [ 1143.967685][T20567] should_fail+0x38c/0x4c0 [ 1143.972169][T20567] should_failslab+0x5/0x20 [ 1143.976719][T20567] slab_pre_alloc_hook+0x51/0xc0 [ 1143.981709][T20567] kmem_cache_alloc_node+0x47/0x2d0 [ 1143.986949][T20567] ? perf_event_alloc+0x161/0x2240 [ 1143.992127][T20567] perf_event_alloc+0x161/0x2240 [ 1143.997425][T20567] ? __fdget+0x18b/0x210 [ 1144.001710][T20567] ? perf_fget_light+0x14/0x130 [ 1144.006627][T20567] __se_sys_perf_event_open+0x5de/0x1bb0 [ 1144.012344][T20567] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1144.018059][T20567] ? lockdep_hardirqs_on+0x94/0x140 [ 1144.023295][T20567] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1144.029009][T20567] do_syscall_64+0x4c/0xa0 [ 1144.033464][T20567] ? clear_bhb_loop+0x30/0x80 [ 1144.038191][T20567] ? clear_bhb_loop+0x30/0x80 [ 1144.042911][T20567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1144.048853][T20567] RIP: 0033:0x7f78ae020e59 [ 1144.053320][T20567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.072976][T20567] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1144.081440][T20567] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1144.089472][T20567] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000010c0 [ 1144.097496][T20567] RBP: 00007f78ac27a090 R08: 0000000000000002 R09: 0000000000000000 [ 1144.105522][T20567] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1144.113544][T20567] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1144.121607][T20567] [ 1145.292223][T20611] FAULT_INJECTION: forcing a failure. [ 1145.292223][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.382862][T20611] CPU: 1 PID: 20611 Comm: syz.3.4835 Not tainted syzkaller #0 [ 1145.390410][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1145.400508][T20611] Call Trace: [ 1145.403822][T20611] [ 1145.406783][T20611] dump_stack_lvl+0x188/0x250 [ 1145.411508][T20611] ? show_regs_print_info+0x20/0x20 [ 1145.416751][T20611] ? load_image+0x400/0x400 [ 1145.421303][T20611] ? __lock_acquire+0x7d10/0x7d10 [ 1145.426374][T20611] ? __lock_acquire+0x7d10/0x7d10 [ 1145.431444][T20611] should_fail+0x38c/0x4c0 [ 1145.435933][T20611] _copy_from_user+0x2e/0x170 [ 1145.440657][T20611] ____sys_sendmsg+0x30a/0x8f0 [ 1145.445473][T20611] ? __sys_sendmsg_sock+0x30/0x30 [ 1145.450559][T20611] ? import_iovec+0x6f/0xa0 [ 1145.455127][T20611] ___sys_sendmsg+0x236/0x2e0 [ 1145.459873][T20611] ? __sys_sendmsg+0x2a0/0x2a0 [ 1145.464882][T20611] ? ktime_get_real_ts64+0x440/0x440 [ 1145.470251][T20611] __se_sys_sendmsg+0x1af/0x290 [ 1145.475162][T20611] ? __x64_sys_sendmsg+0x80/0x80 [ 1145.480178][T20611] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1145.486213][T20611] ? lockdep_hardirqs_on+0x94/0x140 [ 1145.491488][T20611] do_syscall_64+0x4c/0xa0 [ 1145.495962][T20611] ? clear_bhb_loop+0x30/0x80 [ 1145.500676][T20611] ? clear_bhb_loop+0x30/0x80 [ 1145.505399][T20611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1145.511336][T20611] RIP: 0033:0x7f0562147e59 [ 1145.515791][T20611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.535437][T20611] RSP: 002b:00007f05603a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.543905][T20611] RAX: ffffffffffffffda RBX: 00007f05623c0fa0 RCX: 00007f0562147e59 [ 1145.551934][T20611] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 1145.559962][T20611] RBP: 00007f05603a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.567981][T20611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.575990][T20611] R13: 00007f05623c1038 R14: 00007f05623c0fa0 R15: 00007fffcc2a9158 [ 1145.584015][T20611] [ 1146.197070][T20649] FAULT_INJECTION: forcing a failure. [ 1146.197070][T20649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.250661][T20649] CPU: 0 PID: 20649 Comm: syz.0.4848 Not tainted syzkaller #0 [ 1146.258234][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1146.268325][T20649] Call Trace: [ 1146.271641][T20649] [ 1146.274640][T20649] dump_stack_lvl+0x188/0x250 [ 1146.279450][T20649] ? show_regs_print_info+0x20/0x20 [ 1146.284685][T20649] ? load_image+0x400/0x400 [ 1146.289232][T20649] ? __lock_acquire+0x7d10/0x7d10 [ 1146.294544][T20649] should_fail+0x38c/0x4c0 [ 1146.298999][T20649] _copy_to_user+0x2e/0x130 [ 1146.303536][T20649] simple_read_from_buffer+0xe3/0x150 [ 1146.308943][T20649] proc_fail_nth_read+0x1a6/0x220 [ 1146.314000][T20649] ? proc_fault_inject_write+0x310/0x310 [ 1146.319804][T20649] ? fsnotify_perm+0x254/0x560 [ 1146.324602][T20649] ? proc_fault_inject_write+0x310/0x310 [ 1146.330265][T20649] vfs_read+0x301/0xd60 [ 1146.334456][T20649] ? kernel_read+0x1e0/0x1e0 [ 1146.339094][T20649] ? __fget_files+0x40f/0x480 [ 1146.343803][T20649] ? mutex_lock_nested+0x17/0x20 [ 1146.348761][T20649] ? __fdget_pos+0x2bf/0x370 [ 1146.353376][T20649] ? ksys_read+0x71/0x260 [ 1146.357878][T20649] ksys_read+0x152/0x260 [ 1146.362163][T20649] ? vfs_write+0xd60/0xd60 [ 1146.366619][T20649] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1146.372561][T20649] do_syscall_64+0x4c/0xa0 [ 1146.377016][T20649] ? clear_bhb_loop+0x30/0x80 [ 1146.381718][T20649] ? clear_bhb_loop+0x30/0x80 [ 1146.386448][T20649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1146.392370][T20649] RIP: 0033:0x7fbdf9cd968e [ 1146.396807][T20649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1146.416434][T20649] RSP: 002b:00007fbdf7f71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1146.424874][T20649] RAX: ffffffffffffffda RBX: 00007fbdf7f726c0 RCX: 00007fbdf9cd968e [ 1146.432894][T20649] RDX: 000000000000000f RSI: 00007fbdf7f720a0 RDI: 0000000000000009 [ 1146.440895][T20649] RBP: 00007fbdf7f72090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.448894][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.456889][T20649] R13: 00007fbdf9f92038 R14: 00007fbdf9f91fa0 R15: 00007ffe6d4437b8 [ 1146.464900][T20649] [ 1146.732806][T20670] netlink: 'syz.0.4863': attribute type 29 has an invalid length. [ 1146.772360][T20670] netlink: 'syz.0.4863': attribute type 29 has an invalid length. [ 1146.939594][T20667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.116014][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4856'. [ 1149.814976][T20682] FAULT_INJECTION: forcing a failure. [ 1149.814976][T20682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.845309][T20682] CPU: 1 PID: 20682 Comm: syz.1.4859 Not tainted syzkaller #0 [ 1149.852839][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1149.862926][T20682] Call Trace: [ 1149.866233][T20682] [ 1149.869190][T20682] dump_stack_lvl+0x188/0x250 [ 1149.873889][T20682] ? show_regs_print_info+0x20/0x20 [ 1149.879112][T20682] ? load_image+0x400/0x400 [ 1149.883644][T20682] ? __lock_acquire+0x7d10/0x7d10 [ 1149.888696][T20682] should_fail+0x38c/0x4c0 [ 1149.893144][T20682] _copy_from_user+0x2e/0x170 [ 1149.897852][T20682] iovec_from_user+0x142/0x370 [ 1149.902677][T20682] __import_iovec+0x70/0x490 [ 1149.907337][T20682] import_iovec+0x6f/0xa0 [ 1149.911695][T20682] ___sys_sendmsg+0x1fd/0x2e0 [ 1149.916405][T20682] ? __sys_sendmsg+0x2a0/0x2a0 [ 1149.921202][T20682] ? ktime_get_real_ts64+0x440/0x440 [ 1149.926522][T20682] __se_sys_sendmsg+0x1af/0x290 [ 1149.931424][T20682] ? __x64_sys_sendmsg+0x80/0x80 [ 1149.936384][T20682] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1149.942402][T20682] ? lockdep_hardirqs_on+0x94/0x140 [ 1149.947634][T20682] do_syscall_64+0x4c/0xa0 [ 1149.952068][T20682] ? clear_bhb_loop+0x30/0x80 [ 1149.956763][T20682] ? clear_bhb_loop+0x30/0x80 [ 1149.961471][T20682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1149.967386][T20682] RIP: 0033:0x7f5fff743e59 [ 1149.971817][T20682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.991442][T20682] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.999875][T20682] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1150.007864][T20682] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1150.015846][T20682] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.023841][T20682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.031823][T20682] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1150.039829][T20682] [ 1150.112606][T20691] FAULT_INJECTION: forcing a failure. [ 1150.112606][T20691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.208689][T20691] CPU: 1 PID: 20691 Comm: syz.0.4862 Not tainted syzkaller #0 [ 1150.216220][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1150.226315][T20691] Call Trace: [ 1150.229632][T20691] [ 1150.232594][T20691] dump_stack_lvl+0x188/0x250 [ 1150.237320][T20691] ? show_regs_print_info+0x20/0x20 [ 1150.242556][T20691] ? load_image+0x400/0x400 [ 1150.247100][T20691] ? __lock_acquire+0x7d10/0x7d10 [ 1150.252191][T20691] should_fail+0x38c/0x4c0 [ 1150.256742][T20691] _copy_from_user+0x2e/0x170 [ 1150.261458][T20691] iovec_from_user+0x142/0x370 [ 1150.266268][T20691] __import_iovec+0x70/0x490 [ 1150.270903][T20691] import_iovec+0x6f/0xa0 [ 1150.275281][T20691] ___sys_sendmsg+0x1fd/0x2e0 [ 1150.280009][T20691] ? __sys_sendmsg+0x2a0/0x2a0 [ 1150.284813][T20691] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1150.290840][T20691] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1150.297039][T20691] ? lockdep_hardirqs_on+0x94/0x140 [ 1150.302295][T20691] ? __se_sys_sendmsg+0xe8/0x290 [ 1150.307420][T20691] ? kasan_check_range+0x1b0/0x290 [ 1150.312606][T20691] __se_sys_sendmsg+0x1af/0x290 [ 1150.317519][T20691] ? __x64_sys_sendmsg+0x80/0x80 [ 1150.322510][T20691] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1150.328559][T20691] ? lockdep_hardirqs_on+0x94/0x140 [ 1150.333814][T20691] do_syscall_64+0x4c/0xa0 [ 1150.338272][T20691] ? clear_bhb_loop+0x30/0x80 [ 1150.342995][T20691] ? clear_bhb_loop+0x30/0x80 [ 1150.347720][T20691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1150.353649][T20691] RIP: 0033:0x7fbdf9d18e59 [ 1150.358098][T20691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.377734][T20691] RSP: 002b:00007fbdf7f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.386194][T20691] RAX: ffffffffffffffda RBX: 00007fbdf9f91fa0 RCX: 00007fbdf9d18e59 [ 1150.394203][T20691] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 1150.402216][T20691] RBP: 00007fbdf7f72090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.410224][T20691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.418228][T20691] R13: 00007fbdf9f92038 R14: 00007fbdf9f91fa0 R15: 00007ffe6d4437b8 [ 1150.426256][T20691] [ 1150.663118][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1150.823528][T20708] sctp: [Deprecated]: syz.3.4869 (pid 20708) Use of int in max_burst socket option deprecated. [ 1150.823528][T20708] Use struct sctp_assoc_value instead [ 1154.516276][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1154.717248][T20744] sctp: [Deprecated]: syz.3.4884 (pid 20744) Use of int in max_burst socket option deprecated. [ 1154.717248][T20744] Use struct sctp_assoc_value instead [ 1154.778988][T20749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1155.371342][T20767] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4890'. [ 1158.407477][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1158.545093][T20792] sctp: [Deprecated]: syz.3.4898 (pid 20792) Use of int in max_burst socket option deprecated. [ 1158.545093][T20792] Use struct sctp_assoc_value instead [ 1158.812131][T20802] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1158.955079][T20802] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1161.814096][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1164.812989][T20840] sctp: [Deprecated]: syz.0.4917 (pid 20840) Use of int in max_burst socket option deprecated. [ 1164.812989][T20840] Use struct sctp_assoc_value instead [ 1165.243163][T20855] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4921'. [ 1165.342274][T20855] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1165.436987][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1165.673979][T20875] FAULT_INJECTION: forcing a failure. [ 1165.673979][T20875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.788870][T20875] CPU: 1 PID: 20875 Comm: syz.1.4927 Not tainted syzkaller #0 [ 1165.796408][T20875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1165.806513][T20875] Call Trace: [ 1165.809941][T20875] [ 1165.812911][T20875] dump_stack_lvl+0x188/0x250 [ 1165.817635][T20875] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1165.823977][T20875] ? show_regs_print_info+0x20/0x20 [ 1165.829235][T20875] ? load_image+0x400/0x400 [ 1165.833799][T20875] should_fail+0x38c/0x4c0 [ 1165.838267][T20875] _copy_from_user+0x2e/0x170 [ 1165.843350][T20875] __copy_msghdr_from_user+0xc9/0x630 [ 1165.848810][T20875] ? verify_lock_unused+0x140/0x140 [ 1165.854067][T20875] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1165.859410][T20875] ___sys_sendmsg+0x19a/0x2e0 [ 1165.864181][T20875] ? __sys_sendmsg+0x2a0/0x2a0 [ 1165.868999][T20875] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1165.874791][T20875] __se_sys_sendmsg+0x1af/0x290 [ 1165.879704][T20875] ? __x64_sys_sendmsg+0x80/0x80 [ 1165.884700][T20875] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1165.890636][T20875] do_syscall_64+0x4c/0xa0 [ 1165.895093][T20875] ? clear_bhb_loop+0x30/0x80 [ 1165.899823][T20875] ? clear_bhb_loop+0x30/0x80 [ 1165.904544][T20875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1165.910479][T20875] RIP: 0033:0x7f5fff743e59 [ 1165.914938][T20875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.934588][T20875] RSP: 002b:00007f5ffd97c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.943053][T20875] RAX: ffffffffffffffda RBX: 00007f5fff9bd090 RCX: 00007f5fff743e59 [ 1165.951069][T20875] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000006 [ 1165.959102][T20875] RBP: 00007f5ffd97c090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.967116][T20875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.975130][T20875] R13: 00007f5fff9bd128 R14: 00007f5fff9bd090 R15: 00007ffffe368f58 [ 1165.983168][T20875] [ 1166.186910][T20880] sctp: [Deprecated]: syz.0.4931 (pid 20880) Use of int in max_burst socket option deprecated. [ 1166.186910][T20880] Use struct sctp_assoc_value instead [ 1170.347623][T20908] netlink: 'syz.0.4938': attribute type 3 has an invalid length. [ 1170.368731][T20908] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1170.396549][T20915] FAULT_INJECTION: forcing a failure. [ 1170.396549][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.448489][T20915] CPU: 1 PID: 20915 Comm: syz.1.4941 Not tainted syzkaller #0 [ 1170.456051][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.466151][T20915] Call Trace: [ 1170.469469][T20915] [ 1170.472430][T20915] dump_stack_lvl+0x188/0x250 [ 1170.477166][T20915] ? show_regs_print_info+0x20/0x20 [ 1170.482421][T20915] ? load_image+0x400/0x400 [ 1170.486983][T20915] ? __might_sleep+0xf0/0xf0 [ 1170.492225][T20915] ? __lock_acquire+0x7d10/0x7d10 [ 1170.497305][T20915] should_fail+0x38c/0x4c0 [ 1170.501776][T20915] should_failslab+0x5/0x20 [ 1170.506325][T20915] slab_pre_alloc_hook+0x51/0xc0 [ 1170.511305][T20915] __kmalloc+0x6b/0x330 [ 1170.515502][T20915] ? tomoyo_encode+0x27e/0x540 [ 1170.520313][T20915] tomoyo_encode+0x27e/0x540 [ 1170.524949][T20915] tomoyo_realpath_from_path+0x5cd/0x610 [ 1170.530643][T20915] tomoyo_path_number_perm+0x242/0x660 [ 1170.536148][T20915] ? verify_lock_unused+0x140/0x140 [ 1170.541405][T20915] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1170.546910][T20915] ? ksys_write+0x1c6/0x260 [ 1170.551507][T20915] security_file_ioctl+0x6c/0xa0 [ 1170.556499][T20915] __se_sys_ioctl+0x48/0x170 [ 1170.561135][T20915] do_syscall_64+0x4c/0xa0 [ 1170.565595][T20915] ? clear_bhb_loop+0x30/0x80 [ 1170.570316][T20915] ? clear_bhb_loop+0x30/0x80 [ 1170.575040][T20915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1170.580988][T20915] RIP: 0033:0x7f5fff743e59 [ 1170.585454][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.605633][T20915] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.614109][T20915] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1170.622139][T20915] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 1170.630154][T20915] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.638170][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.646184][T20915] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1170.654217][T20915] [ 1170.676601][T20915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1170.924868][T20924] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1171.309735][T20938] sctp: [Deprecated]: syz.0.4948 (pid 20938) Use of int in max_burst socket option deprecated. [ 1171.309735][T20938] Use struct sctp_assoc_value instead [ 1172.086340][T20964] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1172.183704][T20968] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1172.271764][T20964] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1172.283975][T20968] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1172.299492][T20968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1172.860667][T20997] FAULT_INJECTION: forcing a failure. [ 1172.860667][T20997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.969923][T20997] CPU: 1 PID: 20997 Comm: syz.4.4968 Not tainted syzkaller #0 [ 1172.977465][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1172.987562][T20997] Call Trace: [ 1172.990881][T20997] [ 1172.993847][T20997] dump_stack_lvl+0x188/0x250 [ 1172.998572][T20997] ? show_regs_print_info+0x20/0x20 [ 1173.003815][T20997] ? load_image+0x400/0x400 [ 1173.008360][T20997] ? __lock_acquire+0x7d10/0x7d10 [ 1173.013440][T20997] should_fail+0x38c/0x4c0 [ 1173.017915][T20997] _copy_from_user+0x2e/0x170 [ 1173.022644][T20997] iovec_from_user+0x142/0x370 [ 1173.027463][T20997] __import_iovec+0x70/0x490 [ 1173.032109][T20997] import_iovec+0x6f/0xa0 [ 1173.036492][T20997] ___sys_sendmsg+0x1fd/0x2e0 [ 1173.041224][T20997] ? __sys_sendmsg+0x2a0/0x2a0 [ 1173.046041][T20997] ? vfs_write+0x8b2/0xd60 [ 1173.050536][T20997] __se_sys_sendmsg+0x1af/0x290 [ 1173.055443][T20997] ? __x64_sys_sendmsg+0x80/0x80 [ 1173.060425][T20997] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1173.066472][T20997] ? lockdep_hardirqs_on+0x94/0x140 [ 1173.071719][T20997] do_syscall_64+0x4c/0xa0 [ 1173.076177][T20997] ? clear_bhb_loop+0x30/0x80 [ 1173.080891][T20997] ? clear_bhb_loop+0x30/0x80 [ 1173.085618][T20997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1173.091552][T20997] RIP: 0033:0x7f351b9e7e59 [ 1173.096011][T20997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.115660][T20997] RSP: 002b:00007f3519c41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.124125][T20997] RAX: ffffffffffffffda RBX: 00007f351bc60fa0 RCX: 00007f351b9e7e59 [ 1173.132146][T20997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1173.140168][T20997] RBP: 00007f3519c41090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.148184][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.156204][T20997] R13: 00007f351bc61038 R14: 00007f351bc60fa0 R15: 00007ffcd21ffcc8 [ 1173.164333][T20997] [ 1174.609394][T21038] FAULT_INJECTION: forcing a failure. [ 1174.609394][T21038] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.638257][T21038] CPU: 0 PID: 21038 Comm: syz.2.4982 Not tainted syzkaller #0 [ 1174.645803][T21038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1174.655900][T21038] Call Trace: [ 1174.659216][T21038] [ 1174.662186][T21038] dump_stack_lvl+0x188/0x250 [ 1174.666911][T21038] ? show_regs_print_info+0x20/0x20 [ 1174.672161][T21038] ? load_image+0x400/0x400 [ 1174.676712][T21038] ? __might_sleep+0xf0/0xf0 [ 1174.681430][T21038] ? __lock_acquire+0x7d10/0x7d10 [ 1174.686502][T21038] ? verify_lock_unused+0x140/0x140 [ 1174.691748][T21038] should_fail+0x38c/0x4c0 [ 1174.696215][T21038] should_failslab+0x5/0x20 [ 1174.700757][T21038] slab_pre_alloc_hook+0x51/0xc0 [ 1174.705735][T21038] __kmalloc+0x6b/0x330 [ 1174.709928][T21038] ? bpf_test_init+0xf8/0x1b0 [ 1174.714654][T21038] bpf_test_init+0xf8/0x1b0 [ 1174.719197][T21038] bpf_prog_test_run_xdp+0x1cb/0x920 [ 1174.724528][T21038] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1174.730725][T21038] ? dev_put+0x70/0x70 [ 1174.734853][T21038] ? dev_put+0x70/0x70 [ 1174.738961][T21038] bpf_prog_test_run+0x31e/0x390 [ 1174.743947][T21038] __sys_bpf+0x5a5/0x6f0 [ 1174.748233][T21038] ? bpf_link_show_fdinfo+0x380/0x380 [ 1174.753711][T21038] __x64_sys_bpf+0x78/0x90 [ 1174.758255][T21038] do_syscall_64+0x4c/0xa0 [ 1174.762716][T21038] ? clear_bhb_loop+0x30/0x80 [ 1174.767425][T21038] ? clear_bhb_loop+0x30/0x80 [ 1174.772219][T21038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1174.778138][T21038] RIP: 0033:0x7f78ae020e59 [ 1174.782573][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.802199][T21038] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1174.810630][T21038] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1174.818617][T21038] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1174.826611][T21038] RBP: 00007f78ac27a090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.834605][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.842598][T21038] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1174.850607][T21038] [ 1175.505335][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4994'. [ 1176.451904][T21099] sctp: [Deprecated]: syz.0.5003 (pid 21099) Use of int in max_burst socket option deprecated. [ 1176.451904][T21099] Use struct sctp_assoc_value instead [ 1176.636392][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 1177.476531][T21141] FAULT_INJECTION: forcing a failure. [ 1177.476531][T21141] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1177.514800][T21141] CPU: 0 PID: 21141 Comm: syz.3.5016 Not tainted syzkaller #0 [ 1177.522339][T21141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.532437][T21141] Call Trace: [ 1177.535747][T21141] [ 1177.538697][T21141] dump_stack_lvl+0x188/0x250 [ 1177.543394][T21141] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1177.549570][T21141] ? show_regs_print_info+0x20/0x20 [ 1177.554790][T21141] ? load_image+0x400/0x400 [ 1177.559332][T21141] should_fail+0x38c/0x4c0 [ 1177.563777][T21141] prepare_alloc_pages+0x1e4/0x5f0 [ 1177.568917][T21141] __alloc_pages+0x11b/0x480 [ 1177.573541][T21141] ? zone_statistics+0x170/0x170 [ 1177.578514][T21141] new_slab+0xc0/0x4b0 [ 1177.582606][T21141] ___slab_alloc+0x80a/0xdd0 [ 1177.587215][T21141] ? tomoyo_realpath_from_path+0x118/0x610 [ 1177.593053][T21141] __kmalloc+0x1cd/0x330 [ 1177.597317][T21141] ? tomoyo_realpath_from_path+0x118/0x610 [ 1177.603150][T21141] tomoyo_realpath_from_path+0x118/0x610 [ 1177.608819][T21141] tomoyo_path_number_perm+0x242/0x660 [ 1177.614308][T21141] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1177.620961][T21141] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1177.626492][T21141] security_file_ioctl+0x6c/0xa0 [ 1177.631460][T21141] __se_sys_ioctl+0x48/0x170 [ 1177.636083][T21141] do_syscall_64+0x4c/0xa0 [ 1177.640517][T21141] ? clear_bhb_loop+0x30/0x80 [ 1177.645220][T21141] ? clear_bhb_loop+0x30/0x80 [ 1177.649926][T21141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1177.655874][T21141] RIP: 0033:0x7f0562147e59 [ 1177.660333][T21141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.679962][T21141] RSP: 002b:00007f05603a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.688404][T21141] RAX: ffffffffffffffda RBX: 00007f05623c0fa0 RCX: 00007f0562147e59 [ 1177.696404][T21141] RDX: 00002000000013c0 RSI: 000000004008240b RDI: 0000000000000004 [ 1177.704401][T21141] RBP: 00007f05603a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.712413][T21141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.720404][T21141] R13: 00007f05623c1038 R14: 00007f05623c0fa0 R15: 00007fffcc2a9158 [ 1177.728412][T21141] [ 1177.824118][T21146] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1177.960865][T21156] sctp: [Deprecated]: syz.4.5021 (pid 21156) Use of int in max_burst socket option deprecated. [ 1177.960865][T21156] Use struct sctp_assoc_value instead [ 1178.003695][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5022'. [ 1179.251699][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5035'. [ 1179.603655][T21207] sctp: [Deprecated]: syz.1.5038 (pid 21207) Use of int in max_burst socket option deprecated. [ 1179.603655][T21207] Use struct sctp_assoc_value instead [ 1180.471883][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1180.757863][T21248] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5054'. [ 1181.035053][T21248] team0: Port device team_slave_0 removed [ 1181.258788][T21258] sctp: [Deprecated]: syz.4.5059 (pid 21258) Use of int in max_burst socket option deprecated. [ 1181.258788][T21258] Use struct sctp_assoc_value instead [ 1181.850274][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1182.169677][T21292] FAULT_INJECTION: forcing a failure. [ 1182.169677][T21292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.216906][T21292] CPU: 1 PID: 21292 Comm: syz.2.5071 Not tainted syzkaller #0 [ 1182.224445][T21292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.234537][T21292] Call Trace: [ 1182.237852][T21292] [ 1182.240809][T21292] dump_stack_lvl+0x188/0x250 [ 1182.245530][T21292] ? show_regs_print_info+0x20/0x20 [ 1182.250778][T21292] ? load_image+0x400/0x400 [ 1182.255315][T21292] ? __lock_acquire+0x7d10/0x7d10 [ 1182.260368][T21292] should_fail+0x38c/0x4c0 [ 1182.264828][T21292] _copy_from_user+0x2e/0x170 [ 1182.269545][T21292] iovec_from_user+0x142/0x370 [ 1182.274343][T21292] __import_iovec+0x70/0x490 [ 1182.278970][T21292] import_iovec+0x6f/0xa0 [ 1182.283326][T21292] ___sys_sendmsg+0x1fd/0x2e0 [ 1182.288032][T21292] ? __sys_sendmsg+0x2a0/0x2a0 [ 1182.292830][T21292] ? vfs_write+0x8b2/0xd60 [ 1182.297280][T21292] __se_sys_sendmsg+0x1af/0x290 [ 1182.302153][T21292] ? __x64_sys_sendmsg+0x80/0x80 [ 1182.307107][T21292] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1182.313114][T21292] ? lockdep_hardirqs_on+0x94/0x140 [ 1182.318343][T21292] do_syscall_64+0x4c/0xa0 [ 1182.322794][T21292] ? clear_bhb_loop+0x30/0x80 [ 1182.327517][T21292] ? clear_bhb_loop+0x30/0x80 [ 1182.332228][T21292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1182.338166][T21292] RIP: 0033:0x7f78ae020e59 [ 1182.342612][T21292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.362237][T21292] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.370675][T21292] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1182.378681][T21292] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1182.386674][T21292] RBP: 00007f78ac27a090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.394661][T21292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.402659][T21292] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1182.410667][T21292] [ 1182.420883][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.427263][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.564005][T21298] sctp: [Deprecated]: syz.4.5074 (pid 21298) Use of int in max_burst socket option deprecated. [ 1182.564005][T21298] Use struct sctp_assoc_value instead [ 1182.792248][T21308] FAULT_INJECTION: forcing a failure. [ 1182.792248][T21308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.880614][T21308] CPU: 1 PID: 21308 Comm: syz.2.5075 Not tainted syzkaller #0 [ 1182.888151][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.898244][T21308] Call Trace: [ 1182.901553][T21308] [ 1182.904518][T21308] dump_stack_lvl+0x188/0x250 [ 1182.909239][T21308] ? show_regs_print_info+0x20/0x20 [ 1182.914473][T21308] ? load_image+0x400/0x400 [ 1182.919046][T21308] ? mark_lock+0x94/0x320 [ 1182.923420][T21308] ? verify_lock_unused+0x140/0x140 [ 1182.928677][T21308] ? __lock_acquire+0x12e8/0x7d10 [ 1182.933834][T21308] should_fail+0x38c/0x4c0 [ 1182.938469][T21308] prepare_alloc_pages+0x1e4/0x5f0 [ 1182.943640][T21308] __alloc_pages+0x11b/0x480 [ 1182.948277][T21308] ? zone_statistics+0x170/0x170 [ 1182.953367][T21308] new_slab+0xc0/0x4b0 [ 1182.957478][T21308] ___slab_alloc+0x80a/0xdd0 [ 1182.962105][T21308] ? tomoyo_realpath_from_path+0x118/0x610 [ 1182.967957][T21308] __kmalloc+0x1cd/0x330 [ 1182.972234][T21308] ? tomoyo_realpath_from_path+0x118/0x610 [ 1182.978083][T21308] tomoyo_realpath_from_path+0x118/0x610 [ 1182.983787][T21308] tomoyo_path_number_perm+0x242/0x660 [ 1182.989287][T21308] ? verify_lock_unused+0x140/0x140 [ 1182.994543][T21308] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1183.000051][T21308] ? hrtimer_interrupt+0x4d4/0x8d0 [ 1183.005215][T21308] ? ktime_get+0x7b/0x270 [ 1183.009644][T21308] security_file_ioctl+0x6c/0xa0 [ 1183.014634][T21308] __se_sys_ioctl+0x48/0x170 [ 1183.019269][T21308] do_syscall_64+0x4c/0xa0 [ 1183.023733][T21308] ? clear_bhb_loop+0x30/0x80 [ 1183.028450][T21308] ? clear_bhb_loop+0x30/0x80 [ 1183.033168][T21308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1183.039106][T21308] RIP: 0033:0x7f78ae020e59 [ 1183.043562][T21308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.063294][T21308] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.071756][T21308] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1183.079781][T21308] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000007 [ 1183.087801][T21308] RBP: 00007f78ac27a090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.095813][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.103837][T21308] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1183.111867][T21308] [ 1183.373052][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1183.857113][T21337] FAULT_INJECTION: forcing a failure. [ 1183.857113][T21337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.968254][T21337] CPU: 1 PID: 21337 Comm: syz.2.5084 Not tainted syzkaller #0 [ 1183.975798][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1183.985890][T21337] Call Trace: [ 1183.989207][T21337] [ 1183.992163][T21337] dump_stack_lvl+0x188/0x250 [ 1183.996885][T21337] ? show_regs_print_info+0x20/0x20 [ 1184.002117][T21337] ? load_image+0x400/0x400 [ 1184.006660][T21337] ? __lock_acquire+0x7d10/0x7d10 [ 1184.011735][T21337] should_fail+0x38c/0x4c0 [ 1184.016190][T21337] _copy_from_user+0x2e/0x170 [ 1184.020907][T21337] __copy_msghdr_from_user+0xc9/0x630 [ 1184.026319][T21337] ? verify_lock_unused+0x140/0x140 [ 1184.031566][T21337] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1184.036908][T21337] ___sys_sendmsg+0x19a/0x2e0 [ 1184.041630][T21337] ? __sys_sendmsg+0x2a0/0x2a0 [ 1184.046435][T21337] ? ktime_get_real_ts64+0x440/0x440 [ 1184.051775][T21337] __se_sys_sendmsg+0x1af/0x290 [ 1184.056672][T21337] ? __x64_sys_sendmsg+0x80/0x80 [ 1184.061679][T21337] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1184.067613][T21337] do_syscall_64+0x4c/0xa0 [ 1184.072056][T21337] ? clear_bhb_loop+0x30/0x80 [ 1184.076761][T21337] ? clear_bhb_loop+0x30/0x80 [ 1184.081469][T21337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1184.087397][T21337] RIP: 0033:0x7f78ae020e59 [ 1184.091841][T21337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.111481][T21337] RSP: 002b:00007f78ac259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.119934][T21337] RAX: ffffffffffffffda RBX: 00007f78ae29a090 RCX: 00007f78ae020e59 [ 1184.127941][T21337] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000008 [ 1184.135943][T21337] RBP: 00007f78ac259090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.143959][T21337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.151967][T21337] R13: 00007f78ae29a128 R14: 00007f78ae29a090 R15: 00007ffec30a1ba8 [ 1184.159992][T21337] [ 1184.204495][T21343] sctp: [Deprecated]: syz.3.5088 (pid 21343) Use of int in max_burst socket option deprecated. [ 1184.204495][T21343] Use struct sctp_assoc_value instead [ 1184.283044][T21345] netlink: 'syz.4.5089': attribute type 3 has an invalid length. [ 1184.300608][T21345] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5089'. [ 1184.508290][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5092'. [ 1185.521404][T21387] sctp: [Deprecated]: syz.1.5103 (pid 21387) Use of int in max_burst socket option deprecated. [ 1185.521404][T21387] Use struct sctp_assoc_value instead [ 1185.633627][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 1185.705319][T21386] netlink: 'syz.0.5102': attribute type 3 has an invalid length. [ 1185.723007][T21386] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1188.267716][T21415] netlink: 'syz.1.5112': attribute type 10 has an invalid length. [ 1188.303732][T21415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1188.348624][T21415] device team0 entered promiscuous mode [ 1188.367506][T21415] device team_slave_1 entered promiscuous mode [ 1188.409701][T21415] bridge0: port 3(team0) entered blocking state [ 1188.432578][T21415] bridge0: port 3(team0) entered disabled state [ 1188.507029][T21415] bridge0: port 3(team0) entered blocking state [ 1188.513591][T21415] bridge0: port 3(team0) entered forwarding state [ 1188.613719][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1188.887765][T21435] FAULT_INJECTION: forcing a failure. [ 1188.887765][T21435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.925887][T21433] sctp: [Deprecated]: syz.3.5120 (pid 21433) Use of int in max_burst socket option deprecated. [ 1188.925887][T21433] Use struct sctp_assoc_value instead [ 1189.115329][T21435] CPU: 1 PID: 21435 Comm: syz.1.5119 Not tainted syzkaller #0 [ 1189.122880][T21435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1189.132989][T21435] Call Trace: [ 1189.136318][T21435] [ 1189.139281][T21435] dump_stack_lvl+0x188/0x250 [ 1189.144009][T21435] ? show_regs_print_info+0x20/0x20 [ 1189.149252][T21435] ? load_image+0x400/0x400 [ 1189.153795][T21435] ? __lock_acquire+0x7d10/0x7d10 [ 1189.158874][T21435] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1189.164735][T21435] should_fail+0x38c/0x4c0 [ 1189.169218][T21435] _copy_from_user+0x2e/0x170 [ 1189.173954][T21435] iovec_from_user+0x142/0x370 [ 1189.178778][T21435] __import_iovec+0x70/0x490 [ 1189.183446][T21435] import_iovec+0x6f/0xa0 [ 1189.187835][T21435] ___sys_sendmsg+0x1fd/0x2e0 [ 1189.192569][T21435] ? __sys_sendmsg+0x2a0/0x2a0 [ 1189.197415][T21435] ? trace_event_raw_event_lock+0x270/0x270 [ 1189.203364][T21435] ? vfs_write+0x8b2/0xd60 [ 1189.207878][T21435] __se_sys_sendmsg+0x1af/0x290 [ 1189.212791][T21435] ? __x64_sys_sendmsg+0x80/0x80 [ 1189.217784][T21435] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1189.223838][T21435] ? lockdep_hardirqs_on+0x94/0x140 [ 1189.229095][T21435] do_syscall_64+0x4c/0xa0 [ 1189.233548][T21435] ? clear_bhb_loop+0x30/0x80 [ 1189.238258][T21435] ? clear_bhb_loop+0x30/0x80 [ 1189.242982][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1189.248925][T21435] RIP: 0033:0x7f5fff743e59 [ 1189.253384][T21435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.273039][T21435] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.281496][T21435] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1189.289504][T21435] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1189.297521][T21435] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.305537][T21435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.313541][T21435] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1189.321577][T21435] [ 1189.711851][T21445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1189.855188][T21457] netlink: 'syz.4.5126': attribute type 3 has an invalid length. [ 1189.863377][T21457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1190.157753][T21468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1190.222273][T21474] sctp: [Deprecated]: syz.0.5133 (pid 21474) Use of int in max_burst socket option deprecated. [ 1190.222273][T21474] Use struct sctp_assoc_value instead [ 1190.328808][T21476] sctp: [Deprecated]: syz.2.5134 (pid 21476) Use of int in max_burst socket option deprecated. [ 1190.328808][T21476] Use struct sctp_assoc_value instead [ 1190.387487][T21482] FAULT_INJECTION: forcing a failure. [ 1190.387487][T21482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.463085][T21482] CPU: 1 PID: 21482 Comm: syz.1.5135 Not tainted syzkaller #0 [ 1190.470628][T21482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1190.480729][T21482] Call Trace: [ 1190.484134][T21482] [ 1190.487097][T21482] dump_stack_lvl+0x188/0x250 [ 1190.491833][T21482] ? show_regs_print_info+0x20/0x20 [ 1190.497074][T21482] ? load_image+0x400/0x400 [ 1190.501717][T21482] ? __lock_acquire+0x7d10/0x7d10 [ 1190.506790][T21482] should_fail+0x38c/0x4c0 [ 1190.511285][T21482] _copy_from_user+0x2e/0x170 [ 1190.516011][T21482] sctp_setsockopt+0x191/0xf80 [ 1190.520819][T21482] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1190.526148][T21482] __sys_setsockopt+0x2bf/0x3d0 [ 1190.531048][T21482] __x64_sys_setsockopt+0xb1/0xc0 [ 1190.536121][T21482] do_syscall_64+0x4c/0xa0 [ 1190.540579][T21482] ? clear_bhb_loop+0x30/0x80 [ 1190.545378][T21482] ? clear_bhb_loop+0x30/0x80 [ 1190.550099][T21482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1190.556054][T21482] RIP: 0033:0x7f5fff743e59 [ 1190.560508][T21482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.580147][T21482] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1190.588603][T21482] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1190.596615][T21482] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 1190.604631][T21482] RBP: 00007f5ffd99d090 R08: 0000000000000004 R09: 0000000000000000 [ 1190.612655][T21482] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.620690][T21482] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1190.628719][T21482] [ 1190.771812][T21488] netlink: 'syz.3.5137': attribute type 3 has an invalid length. [ 1190.813531][T21488] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1190.923275][T21495] netlink: 'syz.1.5139': attribute type 10 has an invalid length. [ 1194.233894][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1194.343372][T21519] sctp: [Deprecated]: syz.1.5148 (pid 21519) Use of int in max_burst socket option deprecated. [ 1194.343372][T21519] Use struct sctp_assoc_value instead [ 1194.381087][T21523] FAULT_INJECTION: forcing a failure. [ 1194.381087][T21523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.506666][T21523] CPU: 0 PID: 21523 Comm: syz.0.5149 Not tainted syzkaller #0 [ 1194.514734][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1194.524828][T21523] Call Trace: [ 1194.528139][T21523] [ 1194.531104][T21523] dump_stack_lvl+0x188/0x250 [ 1194.535827][T21523] ? show_regs_print_info+0x20/0x20 [ 1194.541166][T21523] ? load_image+0x400/0x400 [ 1194.545722][T21523] ? __lock_acquire+0x7d10/0x7d10 [ 1194.550801][T21523] should_fail+0x38c/0x4c0 [ 1194.555261][T21523] _copy_from_user+0x2e/0x170 [ 1194.559975][T21523] sctp_setsockopt+0x191/0xf80 [ 1194.564765][T21523] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1194.570075][T21523] __sys_setsockopt+0x2bf/0x3d0 [ 1194.574962][T21523] __x64_sys_setsockopt+0xb1/0xc0 [ 1194.580013][T21523] do_syscall_64+0x4c/0xa0 [ 1194.584450][T21523] ? clear_bhb_loop+0x30/0x80 [ 1194.589149][T21523] ? clear_bhb_loop+0x30/0x80 [ 1194.593844][T21523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1194.599763][T21523] RIP: 0033:0x7fbdf9d18e59 [ 1194.604201][T21523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.623827][T21523] RSP: 002b:00007fbdf7f72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1194.632261][T21523] RAX: ffffffffffffffda RBX: 00007fbdf9f91fa0 RCX: 00007fbdf9d18e59 [ 1194.640251][T21523] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 1194.648240][T21523] RBP: 00007fbdf7f72090 R08: 0000000000000004 R09: 0000000000000000 [ 1194.656229][T21523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.664215][T21523] R13: 00007fbdf9f92038 R14: 00007fbdf9f91fa0 R15: 00007ffe6d4437b8 [ 1194.672221][T21523] [ 1194.724889][T21529] sctp: [Deprecated]: syz.3.5150 (pid 21529) Use of int in max_burst socket option deprecated. [ 1194.724889][T21529] Use struct sctp_assoc_value instead [ 1195.474850][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5160'. [ 1195.509480][T21557] sctp: [Deprecated]: syz.1.5161 (pid 21557) Use of int in max_burst socket option deprecated. [ 1195.509480][T21557] Use struct sctp_assoc_value instead [ 1195.815672][T21571] netlink: 'syz.3.5164': attribute type 10 has an invalid length. [ 1195.842799][T21571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5164'. [ 1195.856469][T21571] device team0 entered promiscuous mode [ 1195.879823][T21571] device team_slave_0 entered promiscuous mode [ 1195.897360][T21571] device team_slave_1 entered promiscuous mode [ 1195.986593][T21571] bond0: (slave team0): Releasing backup interface [ 1196.142979][T21580] FAULT_INJECTION: forcing a failure. [ 1196.142979][T21580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.172744][T21571] bridge0: port 3(team0) entered blocking state [ 1196.184935][T21571] bridge0: port 3(team0) entered disabled state [ 1196.198332][T21580] CPU: 0 PID: 21580 Comm: syz.4.5167 Not tainted syzkaller #0 [ 1196.205858][T21580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1196.216083][T21580] Call Trace: [ 1196.219410][T21580] [ 1196.222520][T21580] dump_stack_lvl+0x188/0x250 [ 1196.227343][T21580] ? show_regs_print_info+0x20/0x20 [ 1196.232601][T21580] ? load_image+0x400/0x400 [ 1196.237318][T21580] ? __lock_acquire+0x7d10/0x7d10 [ 1196.242418][T21580] should_fail+0x38c/0x4c0 [ 1196.247050][T21580] _copy_from_user+0x2e/0x170 [ 1196.251895][T21580] __copy_msghdr_from_user+0xc9/0x630 [ 1196.257325][T21580] ? verify_lock_unused+0x140/0x140 [ 1196.262715][T21580] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1196.268075][T21580] ___sys_sendmsg+0x19a/0x2e0 [ 1196.272810][T21580] ? __sys_sendmsg+0x2a0/0x2a0 [ 1196.277634][T21580] ? trace_event_raw_event_lock+0x270/0x270 [ 1196.283572][T21580] ? vfs_write+0x8b2/0xd60 [ 1196.288158][T21580] __se_sys_sendmsg+0x1af/0x290 [ 1196.293074][T21580] ? __x64_sys_sendmsg+0x80/0x80 [ 1196.298067][T21580] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1196.304106][T21580] ? lockdep_hardirqs_on+0x94/0x140 [ 1196.309360][T21580] do_syscall_64+0x4c/0xa0 [ 1196.313828][T21580] ? clear_bhb_loop+0x30/0x80 [ 1196.318553][T21580] ? clear_bhb_loop+0x30/0x80 [ 1196.323288][T21580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1196.329249][T21580] RIP: 0033:0x7f351b9e7e59 [ 1196.333725][T21580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.353520][T21580] RSP: 002b:00007f3519c20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.361986][T21580] RAX: ffffffffffffffda RBX: 00007f351bc61090 RCX: 00007f351b9e7e59 [ 1196.370006][T21580] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000a [ 1196.378034][T21580] RBP: 00007f3519c20090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.386092][T21580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.394104][T21580] R13: 00007f351bc61128 R14: 00007f351bc61090 R15: 00007ffcd21ffcc8 [ 1196.402227][T21580] [ 1196.862889][T21571] syz.3.5164 (21571) used greatest stack depth: 18544 bytes left [ 1197.018833][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1197.338080][T21608] sctp: [Deprecated]: syz.2.5175 (pid 21608) Use of int in max_burst socket option deprecated. [ 1197.338080][T21608] Use struct sctp_assoc_value instead [ 1197.394699][T21611] netlink: 'syz.3.5178': attribute type 21 has an invalid length. [ 1197.404762][T21611] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1197.420647][T21611] netlink: 'syz.3.5178': attribute type 1 has an invalid length. [ 1197.717052][T21628] FAULT_INJECTION: forcing a failure. [ 1197.717052][T21628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.750882][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5184'. [ 1197.840016][T21628] CPU: 1 PID: 21628 Comm: syz.1.5183 Not tainted syzkaller #0 [ 1197.847899][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.858000][T21628] Call Trace: [ 1197.861318][T21628] [ 1197.864285][T21628] dump_stack_lvl+0x188/0x250 [ 1197.869011][T21628] ? show_regs_print_info+0x20/0x20 [ 1197.874258][T21628] ? load_image+0x400/0x400 [ 1197.878802][T21628] ? __lock_acquire+0x7d10/0x7d10 [ 1197.883873][T21628] should_fail+0x38c/0x4c0 [ 1197.888340][T21628] _copy_from_user+0x2e/0x170 [ 1197.893062][T21628] iovec_from_user+0x142/0x370 [ 1197.897873][T21628] __import_iovec+0x70/0x490 [ 1197.902512][T21628] import_iovec+0x6f/0xa0 [ 1197.906890][T21628] ___sys_sendmsg+0x1fd/0x2e0 [ 1197.911621][T21628] ? __sys_sendmsg+0x2a0/0x2a0 [ 1197.916494][T21628] ? vfs_write+0x8b2/0xd60 [ 1197.920976][T21628] __se_sys_sendmsg+0x1af/0x290 [ 1197.925872][T21628] ? __x64_sys_sendmsg+0x80/0x80 [ 1197.930846][T21628] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1197.936863][T21628] ? lockdep_hardirqs_on+0x94/0x140 [ 1197.942128][T21628] do_syscall_64+0x4c/0xa0 [ 1197.946573][T21628] ? clear_bhb_loop+0x30/0x80 [ 1197.951295][T21628] ? clear_bhb_loop+0x30/0x80 [ 1197.956002][T21628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1197.961919][T21628] RIP: 0033:0x7f5fff743e59 [ 1197.966360][T21628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.985989][T21628] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.994445][T21628] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1198.002458][T21628] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 1198.010462][T21628] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.018466][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.026639][T21628] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1198.034667][T21628] [ 1198.361745][T21640] FAULT_INJECTION: forcing a failure. [ 1198.361745][T21640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.558732][T21640] CPU: 1 PID: 21640 Comm: syz.1.5188 Not tainted syzkaller #0 [ 1198.566271][T21640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.576373][T21640] Call Trace: [ 1198.579711][T21640] [ 1198.582682][T21640] dump_stack_lvl+0x188/0x250 [ 1198.587409][T21640] ? show_regs_print_info+0x20/0x20 [ 1198.592648][T21640] ? load_image+0x400/0x400 [ 1198.597198][T21640] ? __lock_acquire+0x7d10/0x7d10 [ 1198.602357][T21640] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1198.608392][T21640] should_fail+0x38c/0x4c0 [ 1198.612855][T21640] _copy_from_user+0x2e/0x170 [ 1198.617579][T21640] iovec_from_user+0x142/0x370 [ 1198.622414][T21640] __import_iovec+0x70/0x490 [ 1198.627069][T21640] import_iovec+0x6f/0xa0 [ 1198.631451][T21640] ___sys_sendmsg+0x1fd/0x2e0 [ 1198.636181][T21640] ? __sys_sendmsg+0x2a0/0x2a0 [ 1198.641177][T21640] ? lock_chain_count+0x20/0x20 [ 1198.646200][T21640] __se_sys_sendmsg+0x1af/0x290 [ 1198.651096][T21640] ? __x64_sys_sendmsg+0x80/0x80 [ 1198.656079][T21640] ? lockdep_hardirqs_on+0x94/0x140 [ 1198.661343][T21640] do_syscall_64+0x4c/0xa0 [ 1198.665907][T21640] ? clear_bhb_loop+0x30/0x80 [ 1198.670624][T21640] ? clear_bhb_loop+0x30/0x80 [ 1198.675388][T21640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1198.681309][T21640] RIP: 0033:0x7f5fff743e59 [ 1198.685771][T21640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.705407][T21640] RSP: 002b:00007f5ffd97c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.713846][T21640] RAX: ffffffffffffffda RBX: 00007f5fff9bd090 RCX: 00007f5fff743e59 [ 1198.721834][T21640] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 1198.729908][T21640] RBP: 00007f5ffd97c090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.737931][T21640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.745923][T21640] R13: 00007f5fff9bd128 R14: 00007f5fff9bd090 R15: 00007ffffe368f58 [ 1198.753926][T21640] [ 1199.014479][T21656] sctp: [Deprecated]: syz.1.5192 (pid 21656) Use of int in max_burst socket option deprecated. [ 1199.014479][T21656] Use struct sctp_assoc_value instead [ 1199.090976][T21660] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1199.499248][T21678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5199'. [ 1200.029260][T21697] FAULT_INJECTION: forcing a failure. [ 1200.029260][T21697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.065363][T21697] CPU: 0 PID: 21697 Comm: syz.1.5206 Not tainted syzkaller #0 [ 1200.072905][T21697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.083006][T21697] Call Trace: [ 1200.086329][T21697] [ 1200.089291][T21697] dump_stack_lvl+0x188/0x250 [ 1200.094026][T21697] ? show_regs_print_info+0x20/0x20 [ 1200.099277][T21697] ? load_image+0x400/0x400 [ 1200.103826][T21697] ? __lock_acquire+0x7d10/0x7d10 [ 1200.108899][T21697] should_fail+0x38c/0x4c0 [ 1200.113362][T21697] _copy_from_user+0x2e/0x170 [ 1200.118091][T21697] iovec_from_user+0x142/0x370 [ 1200.122906][T21697] __import_iovec+0x70/0x490 [ 1200.127551][T21697] import_iovec+0x6f/0xa0 [ 1200.131920][T21697] ___sys_sendmsg+0x1fd/0x2e0 [ 1200.136650][T21697] ? __sys_sendmsg+0x2a0/0x2a0 [ 1200.141472][T21697] ? vfs_write+0x8b2/0xd60 [ 1200.145948][T21697] __se_sys_sendmsg+0x1af/0x290 [ 1200.150951][T21697] ? __x64_sys_sendmsg+0x80/0x80 [ 1200.155928][T21697] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1200.161997][T21697] ? lockdep_hardirqs_on+0x94/0x140 [ 1200.167250][T21697] do_syscall_64+0x4c/0xa0 [ 1200.171887][T21697] ? clear_bhb_loop+0x30/0x80 [ 1200.176602][T21697] ? clear_bhb_loop+0x30/0x80 [ 1200.181320][T21697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1200.187263][T21697] RIP: 0033:0x7f5fff743e59 [ 1200.191723][T21697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.211367][T21697] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.219830][T21697] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1200.227853][T21697] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 1200.236155][T21697] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.244168][T21697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.252186][T21697] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1200.260219][T21697] [ 1200.379128][T21700] sctp: [Deprecated]: syz.3.5207 (pid 21700) Use of int in max_burst socket option deprecated. [ 1200.379128][T21700] Use struct sctp_assoc_value instead [ 1200.617890][T21709] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5209'. [ 1200.699949][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5213'. [ 1201.534300][T21737] FAULT_INJECTION: forcing a failure. [ 1201.534300][T21737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.585602][T21737] CPU: 0 PID: 21737 Comm: syz.1.5221 Not tainted syzkaller #0 [ 1201.593283][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.603379][T21737] Call Trace: [ 1201.606690][T21737] [ 1201.609645][T21737] dump_stack_lvl+0x188/0x250 [ 1201.614504][T21737] ? show_regs_print_info+0x20/0x20 [ 1201.619745][T21737] ? load_image+0x400/0x400 [ 1201.624295][T21737] ? __lock_acquire+0x7d10/0x7d10 [ 1201.629371][T21737] should_fail+0x38c/0x4c0 [ 1201.633833][T21737] _copy_from_user+0x2e/0x170 [ 1201.638647][T21737] sctp_setsockopt+0x191/0xf80 [ 1201.643451][T21737] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1201.648777][T21737] __sys_setsockopt+0x2bf/0x3d0 [ 1201.653669][T21737] __x64_sys_setsockopt+0xb1/0xc0 [ 1201.658728][T21737] do_syscall_64+0x4c/0xa0 [ 1201.663182][T21737] ? clear_bhb_loop+0x30/0x80 [ 1201.667893][T21737] ? clear_bhb_loop+0x30/0x80 [ 1201.672603][T21737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1201.678529][T21737] RIP: 0033:0x7f5fff743e59 [ 1201.682992][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.702623][T21737] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1201.711063][T21737] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1201.719068][T21737] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 1201.727083][T21737] RBP: 00007f5ffd99d090 R08: 0000000000000010 R09: 0000000000000000 [ 1201.735082][T21737] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.743077][T21737] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1201.751104][T21737] [ 1201.974340][T21748] sctp: [Deprecated]: syz.3.5223 (pid 21748) Use of int in max_burst socket option deprecated. [ 1201.974340][T21748] Use struct sctp_assoc_value instead [ 1202.376858][T21760] netlink: 'syz.1.5228': attribute type 10 has an invalid length. [ 1202.439993][T21760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1205.600703][T21774] FAULT_INJECTION: forcing a failure. [ 1205.600703][T21774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.668482][T21774] CPU: 1 PID: 21774 Comm: syz.1.5235 Not tainted syzkaller #0 [ 1205.676086][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.686196][T21774] Call Trace: [ 1205.689513][T21774] [ 1205.692488][T21774] dump_stack_lvl+0x188/0x250 [ 1205.697211][T21774] ? show_regs_print_info+0x20/0x20 [ 1205.702457][T21774] ? load_image+0x400/0x400 [ 1205.707005][T21774] ? __lock_acquire+0x7d10/0x7d10 [ 1205.712078][T21774] should_fail+0x38c/0x4c0 [ 1205.716549][T21774] _copy_from_user+0x2e/0x170 [ 1205.721268][T21774] iovec_from_user+0x142/0x370 [ 1205.726076][T21774] __import_iovec+0x70/0x490 [ 1205.730709][T21774] import_iovec+0x6f/0xa0 [ 1205.735082][T21774] ___sys_sendmsg+0x1fd/0x2e0 [ 1205.739807][T21774] ? __sys_sendmsg+0x2a0/0x2a0 [ 1205.744633][T21774] ? vfs_write+0x8b2/0xd60 [ 1205.749117][T21774] __se_sys_sendmsg+0x1af/0x290 [ 1205.754014][T21774] ? __x64_sys_sendmsg+0x80/0x80 [ 1205.758992][T21774] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1205.765028][T21774] ? lockdep_hardirqs_on+0x94/0x140 [ 1205.770270][T21774] do_syscall_64+0x4c/0xa0 [ 1205.774719][T21774] ? clear_bhb_loop+0x30/0x80 [ 1205.779430][T21774] ? clear_bhb_loop+0x30/0x80 [ 1205.784142][T21774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1205.790074][T21774] RIP: 0033:0x7f5fff743e59 [ 1205.794528][T21774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.814169][T21774] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.822627][T21774] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1205.830636][T21774] RDX: 0000000000000011 RSI: 0000200000005600 RDI: 000000000000000b [ 1205.838640][T21774] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.846640][T21774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.854636][T21774] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1205.862660][T21774] [ 1206.121332][T21789] sctp: [Deprecated]: syz.0.5238 (pid 21789) Use of int in max_burst socket option deprecated. [ 1206.121332][T21789] Use struct sctp_assoc_value instead [ 1206.437348][T21801] netlink: 'syz.2.5246': attribute type 10 has an invalid length. [ 1206.461159][T21801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5246'. [ 1206.484144][T21807] FAULT_INJECTION: forcing a failure. [ 1206.484144][T21807] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.505941][T21801] device team0 entered promiscuous mode [ 1206.514802][T21807] CPU: 0 PID: 21807 Comm: syz.1.5244 Not tainted syzkaller #0 [ 1206.522330][T21807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1206.532518][T21807] Call Trace: [ 1206.535840][T21807] [ 1206.538819][T21807] dump_stack_lvl+0x188/0x250 [ 1206.543535][T21807] ? show_regs_print_info+0x20/0x20 [ 1206.548766][T21807] ? load_image+0x400/0x400 [ 1206.553307][T21807] ? __might_sleep+0xf0/0xf0 [ 1206.557928][T21807] ? __lock_acquire+0x7d10/0x7d10 [ 1206.562983][T21807] ? lockdep_unlock+0x143/0x2e0 [ 1206.567874][T21807] ? lockdep_lock+0x1f0/0x1f0 [ 1206.572591][T21807] should_fail+0x38c/0x4c0 [ 1206.577054][T21807] should_failslab+0x5/0x20 [ 1206.581594][T21807] slab_pre_alloc_hook+0x51/0xc0 [ 1206.586574][T21807] __kmalloc_node+0x6e/0x3b0 [ 1206.591194][T21807] ? bpf_map_area_alloc+0x47/0xe0 [ 1206.596260][T21807] bpf_map_area_alloc+0x47/0xe0 [ 1206.601148][T21807] htab_map_alloc+0x3c3/0x15a0 [ 1206.605965][T21807] ? capable+0x84/0xe0 [ 1206.610071][T21807] ? htab_map_alloc_check+0x3e0/0x4d0 [ 1206.615481][T21807] map_create+0x485/0x2350 [ 1206.619937][T21807] __sys_bpf+0x30a/0x6f0 [ 1206.624215][T21807] ? bpf_link_show_fdinfo+0x380/0x380 [ 1206.629641][T21807] ? vtime_user_exit+0x2c8/0x3e0 [ 1206.634662][T21807] __x64_sys_bpf+0x78/0x90 [ 1206.639109][T21807] do_syscall_64+0x4c/0xa0 [ 1206.643552][T21807] ? clear_bhb_loop+0x30/0x80 [ 1206.648287][T21807] ? clear_bhb_loop+0x30/0x80 [ 1206.652997][T21807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1206.658924][T21807] RIP: 0033:0x7f5fff743e59 [ 1206.663372][T21807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.683010][T21807] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1206.691492][T21807] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1206.699496][T21807] RDX: 0000000000000050 RSI: 0000200000002d00 RDI: 0000000000000000 [ 1206.707495][T21807] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.715516][T21807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.723525][T21807] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1206.731554][T21807] [ 1206.753087][T21801] device team_slave_0 entered promiscuous mode [ 1206.827689][T21801] device team_slave_1 entered promiscuous mode [ 1206.912067][T21801] bridge0: port 3(team0) entered blocking state [ 1206.927477][T21801] bridge0: port 3(team0) entered disabled state [ 1207.093233][T21801] bridge0: port 3(team0) entered blocking state [ 1207.100641][T21801] bridge0: port 3(team0) entered forwarding state [ 1210.122280][T21826] sctp: [Deprecated]: syz.0.5252 (pid 21826) Use of int in max_burst socket option deprecated. [ 1210.122280][T21826] Use struct sctp_assoc_value instead [ 1210.544783][T21842] netlink: 'syz.4.5259': attribute type 3 has an invalid length. [ 1210.583983][T21842] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1211.328921][T21864] sctp: [Deprecated]: syz.1.5267 (pid 21864) Use of int in max_burst socket option deprecated. [ 1211.328921][T21864] Use struct sctp_assoc_value instead [ 1213.719273][T21870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 1213.775906][T21873] netlink: 'syz.1.5269': attribute type 19 has an invalid length. [ 1213.838661][T21873] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1214.478006][T21899] sctp: [Deprecated]: syz.3.5279 (pid 21899) Use of int in max_burst socket option deprecated. [ 1214.478006][T21899] Use struct sctp_assoc_value instead [ 1216.660381][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 1216.850680][T21925] FAULT_INJECTION: forcing a failure. [ 1216.850680][T21925] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.863950][T21925] CPU: 1 PID: 21925 Comm: syz.1.5285 Not tainted syzkaller #0 [ 1216.871483][T21925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.881595][T21925] Call Trace: [ 1216.884929][T21925] [ 1216.887909][T21925] dump_stack_lvl+0x188/0x250 [ 1216.892674][T21925] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1216.899332][T21925] ? show_regs_print_info+0x20/0x20 [ 1216.904595][T21925] ? load_image+0x400/0x400 [ 1216.909202][T21925] should_fail+0x38c/0x4c0 [ 1216.913697][T21925] should_failslab+0x5/0x20 [ 1216.918254][T21925] slab_pre_alloc_hook+0x51/0xc0 [ 1216.923243][T21925] ? inet_bind_bucket_create+0x2b/0x230 [ 1216.928858][T21925] kmem_cache_alloc+0x3d/0x290 [ 1216.933706][T21925] inet_bind_bucket_create+0x2b/0x230 [ 1216.939156][T21925] inet_csk_get_port+0xaa0/0x1150 [ 1216.944241][T21925] ? lock_chain_count+0x20/0x20 [ 1216.949218][T21925] ? inet_csk_update_fastreuse+0xa80/0xa80 [ 1216.955128][T21925] inet_sendmsg+0x1e8/0x2f0 [ 1216.959705][T21925] ? inet_send_prepare+0x260/0x260 [ 1216.964882][T21925] ____sys_sendmsg+0x5b7/0x8f0 [ 1216.969738][T21925] ? __sys_sendmsg_sock+0x30/0x30 [ 1216.974862][T21925] ? import_iovec+0x6f/0xa0 [ 1216.979445][T21925] ___sys_sendmsg+0x236/0x2e0 [ 1216.984214][T21925] ? __sys_sendmsg+0x2a0/0x2a0 [ 1216.989092][T21925] ? vfs_write+0x8b2/0xd60 [ 1216.993651][T21925] __se_sys_sendmsg+0x1af/0x290 [ 1216.998571][T21925] ? __x64_sys_sendmsg+0x80/0x80 [ 1217.003557][T21925] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1217.009637][T21925] ? lockdep_hardirqs_on+0x94/0x140 [ 1217.014910][T21925] do_syscall_64+0x4c/0xa0 [ 1217.019374][T21925] ? clear_bhb_loop+0x30/0x80 [ 1217.024098][T21925] ? clear_bhb_loop+0x30/0x80 [ 1217.028830][T21925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1217.034771][T21925] RIP: 0033:0x7f5fff743e59 [ 1217.039239][T21925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.058906][T21925] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.067377][T21925] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1217.075405][T21925] RDX: 0000000004000010 RSI: 0000200000001700 RDI: 0000000000000003 [ 1217.083428][T21925] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.091457][T21925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.099493][T21925] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1217.107862][T21925] [ 1217.504563][T21942] sctp: [Deprecated]: syz.2.5292 (pid 21942) Use of int in max_burst socket option deprecated. [ 1217.504563][T21942] Use struct sctp_assoc_value instead [ 1217.514460][T21935] netlink: 'syz.4.5291': attribute type 3 has an invalid length. [ 1217.552524][T21935] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1218.036195][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5300'. [ 1218.313851][T21967] netlink: 'syz.2.5301': attribute type 2 has an invalid length. [ 1218.347935][T21967] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5301'. [ 1219.016372][T21988] sctp: [Deprecated]: syz.1.5308 (pid 21988) Use of int in max_burst socket option deprecated. [ 1219.016372][T21988] Use struct sctp_assoc_value instead [ 1219.776375][T21994] netlink: 'syz.2.5309': attribute type 3 has an invalid length. [ 1219.785036][T21994] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1220.026714][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 1223.201010][T22020] FAULT_INJECTION: forcing a failure. [ 1223.201010][T22020] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.251559][T22020] CPU: 1 PID: 22020 Comm: syz.0.5319 Not tainted syzkaller #0 [ 1223.259139][T22020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1223.266708][T22025] netlink: 'syz.1.5320': attribute type 29 has an invalid length. [ 1223.269239][T22020] Call Trace: [ 1223.269249][T22020] [ 1223.269257][T22020] dump_stack_lvl+0x188/0x250 [ 1223.269288][T22020] ? show_regs_print_info+0x20/0x20 [ 1223.269308][T22020] ? load_image+0x400/0x400 [ 1223.269331][T22020] ? __might_sleep+0xf0/0xf0 [ 1223.269352][T22020] ? __lock_acquire+0x7d10/0x7d10 [ 1223.269375][T22020] ? netlink_insert+0xe95/0x11f0 [ 1223.269399][T22020] should_fail+0x38c/0x4c0 [ 1223.269429][T22020] should_failslab+0x5/0x20 [ 1223.269450][T22020] slab_pre_alloc_hook+0x51/0xc0 [ 1223.269474][T22020] kmem_cache_alloc_node+0x47/0x2d0 [ 1223.269494][T22020] ? __alloc_skb+0xf4/0x750 [ 1223.269522][T22020] __alloc_skb+0xf4/0x750 [ 1223.269550][T22020] netlink_sendmsg+0x654/0xbe0 [ 1223.269580][T22020] ? netlink_getsockopt+0x570/0x570 [ 1223.269604][T22020] ? aa_sock_msg_perm+0x94/0x150 [ 1223.269630][T22020] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1223.269653][T22020] ? security_socket_sendmsg+0x7c/0xa0 [ 1223.269677][T22020] ? netlink_getsockopt+0x570/0x570 [ 1223.269698][T22020] ____sys_sendmsg+0x5b7/0x8f0 [ 1223.269731][T22020] ? __sys_sendmsg_sock+0x30/0x30 [ 1223.269772][T22020] ? import_iovec+0x6f/0xa0 [ 1223.269801][T22020] ___sys_sendmsg+0x236/0x2e0 [ 1223.269834][T22020] ? __sys_sendmsg+0x2a0/0x2a0 [ 1223.269870][T22020] ? vfs_write+0x8b2/0xd60 [ 1223.269962][T22020] __se_sys_sendmsg+0x1af/0x290 [ 1223.405079][T22020] ? __x64_sys_sendmsg+0x80/0x80 [ 1223.410065][T22020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1223.416090][T22020] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.421342][T22020] do_syscall_64+0x4c/0xa0 [ 1223.425907][T22020] ? clear_bhb_loop+0x30/0x80 [ 1223.430619][T22020] ? clear_bhb_loop+0x30/0x80 [ 1223.435334][T22020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1223.441264][T22020] RIP: 0033:0x7fbdf9d18e59 [ 1223.445716][T22020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.465460][T22020] RSP: 002b:00007fbdf7f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.474158][T22020] RAX: ffffffffffffffda RBX: 00007fbdf9f91fa0 RCX: 00007fbdf9d18e59 [ 1223.482184][T22020] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1223.490210][T22020] RBP: 00007fbdf7f72090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.498227][T22020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.506223][T22020] R13: 00007fbdf9f92038 R14: 00007fbdf9f91fa0 R15: 00007ffe6d4437b8 [ 1223.514247][T22020] [ 1223.527997][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5320'. [ 1223.557957][T22025] netlink: 'syz.1.5320': attribute type 29 has an invalid length. [ 1223.566826][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5320'. [ 1223.700786][T22034] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.5322'. [ 1223.929899][T22039] sctp: [Deprecated]: syz.2.5327 (pid 22039) Use of int in max_burst socket option deprecated. [ 1223.929899][T22039] Use struct sctp_assoc_value instead [ 1224.194172][T22052] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5328'. [ 1224.640058][T22062] netlink: 'syz.4.5333': attribute type 3 has an invalid length. [ 1224.682046][T22062] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5333'. [ 1227.595753][T22079] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1227.907082][T22085] netlink: 'syz.3.5341': attribute type 10 has an invalid length. [ 1227.949538][T22085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5341'. [ 1227.984435][T22089] sctp: [Deprecated]: syz.2.5342 (pid 22089) Use of int in max_burst socket option deprecated. [ 1227.984435][T22089] Use struct sctp_assoc_value instead [ 1228.158247][T22085] bridge0: port 3(team0) entered blocking state [ 1228.167076][T22085] bridge0: port 3(team0) entered forwarding state [ 1228.187192][T22095] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1228.190083][T22085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.302340][T22093] FAULT_INJECTION: forcing a failure. [ 1228.302340][T22093] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.328607][T22093] CPU: 1 PID: 22093 Comm: syz.4.5344 Not tainted syzkaller #0 [ 1228.336289][T22093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.346384][T22093] Call Trace: [ 1228.349705][T22093] [ 1228.352682][T22093] dump_stack_lvl+0x188/0x250 [ 1228.357413][T22093] ? show_regs_print_info+0x20/0x20 [ 1228.362739][T22093] ? load_image+0x400/0x400 [ 1228.367288][T22093] ? __might_sleep+0xf0/0xf0 [ 1228.371918][T22093] ? __lock_acquire+0x7d10/0x7d10 [ 1228.376986][T22093] should_fail+0x38c/0x4c0 [ 1228.381450][T22093] should_failslab+0x5/0x20 [ 1228.385988][T22093] slab_pre_alloc_hook+0x51/0xc0 [ 1228.390968][T22093] __kmalloc_node_track_caller+0x68/0x3a0 [ 1228.396913][T22093] ? netlink_dump+0x1e8/0xcf0 [ 1228.401643][T22093] ? kmem_cache_alloc_node+0x162/0x2d0 [ 1228.407147][T22093] ? __alloc_skb+0xf4/0x750 [ 1228.411705][T22093] ? netlink_dump+0x1e8/0xcf0 [ 1228.416426][T22093] __alloc_skb+0x22c/0x750 [ 1228.420898][T22093] netlink_dump+0x1e8/0xcf0 [ 1228.425440][T22093] ? __skb_try_recv_datagram+0x3d6/0x4d0 [ 1228.431123][T22093] ? __check_object_size+0x91/0x410 [ 1228.436373][T22093] ? simple_copy_to_iter+0x2e/0x60 [ 1228.441634][T22093] ? netlink_lookup+0x1d0/0x1d0 [ 1228.446535][T22093] ? refcount_dec_and_test+0x4f/0x70 [ 1228.451958][T22093] netlink_recvmsg+0x672/0xe20 [ 1228.456772][T22093] ? netlink_sendmsg+0xbe0/0xbe0 [ 1228.461753][T22093] ? aa_sk_perm+0x7dc/0x910 [ 1228.466303][T22093] ? aa_af_perm+0x340/0x340 [ 1228.470844][T22093] ? perf_trace_lock+0xe4/0x390 [ 1228.475778][T22093] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1228.481105][T22093] ? security_socket_recvmsg+0x85/0xb0 [ 1228.486605][T22093] ? netlink_sendmsg+0xbe0/0xbe0 [ 1228.491606][T22093] ____sys_recvmsg+0x2cd/0x5e0 [ 1228.496427][T22093] ? __sys_recvmsg_sock+0x40/0x40 [ 1228.501524][T22093] ? import_iovec+0x6f/0xa0 [ 1228.506072][T22093] ___sys_recvmsg+0x21a/0x5c0 [ 1228.510805][T22093] ? __sys_recvmsg+0x280/0x280 [ 1228.515617][T22093] ? trace_event_raw_event_lock+0x270/0x270 [ 1228.521582][T22093] __x64_sys_recvmsg+0x1f9/0x2c0 [ 1228.526564][T22093] ? ___sys_recvmsg+0x5c0/0x5c0 [ 1228.531456][T22093] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1228.537495][T22093] ? lockdep_hardirqs_on+0x94/0x140 [ 1228.542818][T22093] do_syscall_64+0x4c/0xa0 [ 1228.547284][T22093] ? clear_bhb_loop+0x30/0x80 [ 1228.551997][T22093] ? clear_bhb_loop+0x30/0x80 [ 1228.556717][T22093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1228.562651][T22093] RIP: 0033:0x7f351b9e7e59 [ 1228.567107][T22093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.586755][T22093] RSP: 002b:00007f3519c41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1228.595226][T22093] RAX: ffffffffffffffda RBX: 00007f351bc60fa0 RCX: 00007f351b9e7e59 [ 1228.603244][T22093] RDX: 0000000000002022 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1228.611260][T22093] RBP: 00007f3519c41090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.619268][T22093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.627372][T22093] R13: 00007f351bc61038 R14: 00007f351bc60fa0 R15: 00007ffcd21ffcc8 [ 1228.635409][T22093] [ 1228.688677][T22085] syz.3.5341 (22085) used greatest stack depth: 18160 bytes left [ 1232.308805][ T1111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1232.443862][T22139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1232.591264][T22139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1232.661697][T22133] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1233.060860][T22141] netlink: 'syz.2.5359': attribute type 10 has an invalid length. [ 1233.126250][T22126] syz.0.5355 (22126) used greatest stack depth: 16024 bytes left [ 1233.145104][T22151] netlink: 'syz.4.5362': attribute type 10 has an invalid length. [ 1233.180196][T22151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1233.208200][T22151] device team0 entered promiscuous mode [ 1233.245134][T22151] device team_slave_0 entered promiscuous mode [ 1233.272354][T22151] device team_slave_1 entered promiscuous mode [ 1233.290486][T22151] bridge0: port 3(team0) entered blocking state [ 1233.307128][T22151] bridge0: port 3(team0) entered disabled state [ 1233.329939][T22151] bridge0: port 3(team0) entered blocking state [ 1233.336340][T22151] bridge0: port 3(team0) entered forwarding state [ 1233.345344][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5363'. [ 1233.370651][T22165] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1234.135723][T22183] netlink: 'syz.4.5374': attribute type 3 has an invalid length. [ 1234.188689][T22183] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5374'. [ 1234.207602][T22188] netlink: 'syz.1.5375': attribute type 3 has an invalid length. [ 1234.221440][T22188] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1234.319986][T22192] netlink: 'syz.3.5376': attribute type 10 has an invalid length. [ 1234.349364][T22192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1234.852517][T22199] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1234.895058][T22199] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1234.962977][T22201] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1235.797904][T22230] netlink: 'syz.1.5389': attribute type 3 has an invalid length. [ 1236.120997][T22242] netlink: 'syz.2.5393': attribute type 10 has an invalid length. [ 1236.297642][T22240] netlink: 'syz.0.5391': attribute type 3 has an invalid length. [ 1237.113066][T22264] netlink: 'syz.0.5402': attribute type 10 has an invalid length. [ 1237.242206][T22272] netlink: 'syz.1.5404': attribute type 10 has an invalid length. [ 1237.322693][T22272] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1238.505571][T22297] netlink: 'syz.2.5412': attribute type 10 has an invalid length. [ 1238.529129][T22297] __nla_validate_parse: 6 callbacks suppressed [ 1238.529263][T22297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1238.885782][T22314] netlink: 'syz.3.5419': attribute type 10 has an invalid length. [ 1238.896303][T22314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5419'. [ 1242.273905][T22340] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1242.677579][T22351] netlink: 'syz.4.5430': attribute type 10 has an invalid length. [ 1242.923190][T22351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1243.524299][T22370] netlink: 'syz.0.5439': attribute type 10 has an invalid length. [ 1243.568491][T22370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5439'. [ 1243.760288][T22382] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5443'. [ 1243.869849][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.876300][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.707982][T22418] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5455'. [ 1254.230754][T22459] netlink: 'syz.4.5472': attribute type 10 has an invalid length. [ 1254.338498][T22459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1254.415471][T22463] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1254.581589][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1254.712687][T22472] sctp: [Deprecated]: syz.4.5477 (pid 22472) Use of int in max_burst socket option deprecated. [ 1254.712687][T22472] Use struct sctp_assoc_value instead [ 1255.549652][T22501] netlink: 'syz.0.5486': attribute type 3 has an invalid length. [ 1255.558531][T22501] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1255.793914][T22516] netlink: 'syz.1.5490': attribute type 10 has an invalid length. [ 1255.844112][T22516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1255.876155][T22523] sctp: [Deprecated]: syz.3.5493 (pid 22523) Use of int in max_burst socket option deprecated. [ 1255.876155][T22523] Use struct sctp_assoc_value instead [ 1255.994384][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5492'. [ 1256.744363][T22554] netlink: 'syz.3.5506': attribute type 3 has an invalid length. [ 1256.780857][T22554] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1256.893886][T22562] netlink: 'syz.2.5509': attribute type 10 has an invalid length. [ 1256.908879][T22562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5509'. [ 1257.006227][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1257.047572][T22569] sctp: [Deprecated]: syz.1.5513 (pid 22569) Use of int in max_burst socket option deprecated. [ 1257.047572][T22569] Use struct sctp_assoc_value instead [ 1257.223498][T22575] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5514'. [ 1260.526926][T22607] netlink: 'syz.1.5528': attribute type 3 has an invalid length. [ 1260.560976][T22614] sctp: [Deprecated]: syz.3.5531 (pid 22614) Use of int in max_burst socket option deprecated. [ 1260.560976][T22614] Use struct sctp_assoc_value instead [ 1260.581280][T22607] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5528'. [ 1261.065543][T22635] netlink: 'syz.1.5540': attribute type 3 has an invalid length. [ 1261.086129][T22633] sctp: [Deprecated]: syz.2.5539 (pid 22633) Use of int in max_burst socket option deprecated. [ 1261.086129][T22633] Use struct sctp_assoc_value instead [ 1261.115077][T22635] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1261.396569][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1261.515134][T22656] sctp: [Deprecated]: syz.3.5548 (pid 22656) Use of int in max_burst socket option deprecated. [ 1261.515134][T22656] Use struct sctp_assoc_value instead [ 1261.716812][T22665] netlink: 'syz.2.5551': attribute type 3 has an invalid length. [ 1261.735311][T22665] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1261.933760][T22672] netlink: 'syz.1.5554': attribute type 3 has an invalid length. [ 1261.994805][T22672] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1262.295118][T22689] sctp: [Deprecated]: syz.0.5558 (pid 22689) Use of int in max_burst socket option deprecated. [ 1262.295118][T22689] Use struct sctp_assoc_value instead [ 1262.382376][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1262.572185][T22703] FAULT_INJECTION: forcing a failure. [ 1262.572185][T22703] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.588353][T22703] CPU: 0 PID: 22703 Comm: syz.1.5566 Not tainted syzkaller #0 [ 1262.595881][T22703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.605987][T22703] Call Trace: [ 1262.609304][T22703] [ 1262.612267][T22703] dump_stack_lvl+0x188/0x250 [ 1262.616985][T22703] ? show_regs_print_info+0x20/0x20 [ 1262.622348][T22703] ? load_image+0x400/0x400 [ 1262.623102][T22699] sctp: [Deprecated]: syz.4.5564 (pid 22699) Use of int in max_burst socket option deprecated. [ 1262.623102][T22699] Use struct sctp_assoc_value instead [ 1262.626940][T22703] ? __might_sleep+0xf0/0xf0 [ 1262.626970][T22703] ? __lock_acquire+0x7d10/0x7d10 [ 1262.627003][T22703] should_fail+0x38c/0x4c0 [ 1262.627036][T22703] should_failslab+0x5/0x20 [ 1262.627060][T22703] slab_pre_alloc_hook+0x51/0xc0 [ 1262.627083][T22703] ? __alloc_file+0x25/0x240 [ 1262.627107][T22703] kmem_cache_alloc+0x3d/0x290 [ 1262.627135][T22703] __alloc_file+0x25/0x240 [ 1262.680457][T22703] alloc_empty_file+0x90/0x180 [ 1262.685274][T22703] path_openat+0x10f/0x2fa0 [ 1262.689847][T22703] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1262.695472][T22703] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1262.701069][T22703] ? do_filp_open+0x410/0x410 [ 1262.705802][T22703] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1262.712461][T22703] do_filp_open+0x1e2/0x410 [ 1262.717051][T22703] ? vfs_tmpfile+0x300/0x300 [ 1262.721708][T22703] ? _raw_spin_unlock+0x24/0x40 [ 1262.726605][T22703] ? alloc_fd+0x598/0x630 [ 1262.730976][T22703] do_sys_openat2+0x150/0x4b0 [ 1262.735671][T22703] ? __lock_acquire+0x7d10/0x7d10 [ 1262.740729][T22703] ? do_sys_open+0xe0/0xe0 [ 1262.745214][T22703] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1262.751236][T22703] ? lock_chain_count+0x20/0x20 [ 1262.756128][T22703] ? vtime_user_exit+0x2c8/0x3e0 [ 1262.761104][T22703] __x64_sys_openat+0x135/0x160 [ 1262.765990][T22703] do_syscall_64+0x4c/0xa0 [ 1262.770427][T22703] ? clear_bhb_loop+0x30/0x80 [ 1262.775155][T22703] ? clear_bhb_loop+0x30/0x80 [ 1262.779880][T22703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1262.785882][T22703] RIP: 0033:0x7f5fff743e59 [ 1262.790319][T22703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.809962][T22703] RSP: 002b:00007f5ffd99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1262.818418][T22703] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1262.826415][T22703] RDX: 00000000000026e1 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1262.834409][T22703] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.842427][T22703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.850422][T22703] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1262.858453][T22703] [ 1263.406399][T22718] netlink: 'syz.1.5570': attribute type 3 has an invalid length. [ 1263.499198][T22718] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5570'. [ 1263.702269][T22731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1263.754338][T22735] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1263.893848][T22741] FAULT_INJECTION: forcing a failure. [ 1263.893848][T22741] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.918158][T22741] CPU: 1 PID: 22741 Comm: syz.2.5578 Not tainted syzkaller #0 [ 1263.925701][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.935813][T22741] Call Trace: [ 1263.939143][T22741] [ 1263.942119][T22741] dump_stack_lvl+0x188/0x250 [ 1263.946883][T22741] ? show_regs_print_info+0x20/0x20 [ 1263.952159][T22741] ? load_image+0x400/0x400 [ 1263.956739][T22741] ? __might_sleep+0xf0/0xf0 [ 1263.961392][T22741] ? __lock_acquire+0x7d10/0x7d10 [ 1263.966475][T22741] ? __local_bh_enable_ip+0x136/0x1c0 [ 1263.971921][T22741] should_fail+0x38c/0x4c0 [ 1263.976408][T22741] should_failslab+0x5/0x20 [ 1263.980963][T22741] slab_pre_alloc_hook+0x51/0xc0 [ 1263.985962][T22741] kmem_cache_alloc_node_trace+0x4a/0x300 [ 1263.991731][T22741] ? __get_vm_area_node+0x119/0x2d0 [ 1263.997007][T22741] __get_vm_area_node+0x119/0x2d0 [ 1264.002108][T22741] __vmalloc_node_range+0xef/0x8b0 [ 1264.007277][T22741] ? netlink_sendmsg+0x5ec/0xbe0 [ 1264.012266][T22741] ? netlink_data_ready+0x10/0x10 [ 1264.017381][T22741] ? netlink_sendmsg+0x5ec/0xbe0 [ 1264.022373][T22741] vmalloc+0x75/0x80 [ 1264.026327][T22741] ? netlink_sendmsg+0x5ec/0xbe0 [ 1264.031312][T22741] netlink_sendmsg+0x5ec/0xbe0 [ 1264.036160][T22741] ? netlink_getsockopt+0x570/0x570 [ 1264.041427][T22741] ? aa_sock_msg_perm+0x94/0x150 [ 1264.046440][T22741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1264.051783][T22741] ? security_socket_sendmsg+0x7c/0xa0 [ 1264.057386][T22741] ? netlink_getsockopt+0x570/0x570 [ 1264.062648][T22741] ____sys_sendmsg+0x5b7/0x8f0 [ 1264.067554][T22741] ? __sys_sendmsg_sock+0x30/0x30 [ 1264.073016][T22741] ? import_iovec+0x6f/0xa0 [ 1264.077592][T22741] ___sys_sendmsg+0x236/0x2e0 [ 1264.082352][T22741] ? __sys_sendmsg+0x2a0/0x2a0 [ 1264.087223][T22741] ? trace_event_raw_event_lock+0x270/0x270 [ 1264.093165][T22741] ? vfs_write+0x8b2/0xd60 [ 1264.097725][T22741] __se_sys_sendmsg+0x1af/0x290 [ 1264.102642][T22741] ? __x64_sys_sendmsg+0x80/0x80 [ 1264.107631][T22741] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1264.113718][T22741] ? lockdep_hardirqs_on+0x94/0x140 [ 1264.118994][T22741] do_syscall_64+0x4c/0xa0 [ 1264.123464][T22741] ? clear_bhb_loop+0x30/0x80 [ 1264.128202][T22741] ? clear_bhb_loop+0x30/0x80 [ 1264.132972][T22741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1264.138925][T22741] RIP: 0033:0x7f78ae020e59 [ 1264.143401][T22741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.163147][T22741] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.171652][T22741] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1264.179689][T22741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1264.187725][T22741] RBP: 00007f78ac27a090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.195757][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.203797][T22741] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1264.211922][T22741] [ 1264.388780][T22741] syz.2.5578: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1264.417953][T22741] CPU: 0 PID: 22741 Comm: syz.2.5578 Not tainted syzkaller #0 [ 1264.425634][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.435764][T22741] Call Trace: [ 1264.439095][T22741] [ 1264.442159][T22741] dump_stack_lvl+0x188/0x250 [ 1264.446896][T22741] ? rcu_lock_release+0x5/0x20 [ 1264.451710][T22741] ? show_regs_print_info+0x20/0x20 [ 1264.456960][T22741] ? load_image+0x400/0x400 [ 1264.461581][T22741] warn_alloc+0x243/0x320 [ 1264.466000][T22741] ? zone_watermark_ok_safe+0x240/0x240 [ 1264.471613][T22741] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 1264.477636][T22741] ? __get_vm_area_node+0x119/0x2d0 [ 1264.482937][T22741] __vmalloc_node_range+0x2b1/0x8b0 [ 1264.488183][T22741] ? netlink_data_ready+0x10/0x10 [ 1264.493292][T22741] ? netlink_sendmsg+0x5ec/0xbe0 [ 1264.498280][T22741] vmalloc+0x75/0x80 [ 1264.502475][T22741] ? netlink_sendmsg+0x5ec/0xbe0 [ 1264.507734][T22741] netlink_sendmsg+0x5ec/0xbe0 [ 1264.512595][T22741] ? netlink_getsockopt+0x570/0x570 [ 1264.517858][T22741] ? aa_sock_msg_perm+0x94/0x150 [ 1264.522857][T22741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1264.528189][T22741] ? security_socket_sendmsg+0x7c/0xa0 [ 1264.533723][T22741] ? netlink_getsockopt+0x570/0x570 [ 1264.538989][T22741] ____sys_sendmsg+0x5b7/0x8f0 [ 1264.543853][T22741] ? __sys_sendmsg_sock+0x30/0x30 [ 1264.548998][T22741] ? import_iovec+0x6f/0xa0 [ 1264.553582][T22741] ___sys_sendmsg+0x236/0x2e0 [ 1264.558351][T22741] ? __sys_sendmsg+0x2a0/0x2a0 [ 1264.563208][T22741] ? trace_event_raw_event_lock+0x270/0x270 [ 1264.569191][T22741] ? vfs_write+0x8b2/0xd60 [ 1264.573742][T22741] __se_sys_sendmsg+0x1af/0x290 [ 1264.578747][T22741] ? __x64_sys_sendmsg+0x80/0x80 [ 1264.583726][T22741] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1264.589801][T22741] ? lockdep_hardirqs_on+0x94/0x140 [ 1264.595062][T22741] do_syscall_64+0x4c/0xa0 [ 1264.599523][T22741] ? clear_bhb_loop+0x30/0x80 [ 1264.604243][T22741] ? clear_bhb_loop+0x30/0x80 [ 1264.608983][T22741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1264.614922][T22741] RIP: 0033:0x7f78ae020e59 [ 1264.619392][T22741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.639051][T22741] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.647542][T22741] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1264.655571][T22741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1264.663612][T22741] RBP: 00007f78ac27a090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.671643][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.679666][T22741] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1264.687747][T22741] [ 1264.696096][T22743] FAULT_INJECTION: forcing a failure. [ 1264.696096][T22743] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.733734][T22743] CPU: 0 PID: 22743 Comm: syz.1.5577 Not tainted syzkaller #0 [ 1264.741294][T22743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.751425][T22743] Call Trace: [ 1264.754753][T22743] [ 1264.757870][T22743] dump_stack_lvl+0x188/0x250 [ 1264.762795][T22743] ? show_regs_print_info+0x20/0x20 [ 1264.768049][T22743] ? load_image+0x400/0x400 [ 1264.772627][T22743] ? __might_sleep+0xf0/0xf0 [ 1264.777283][T22743] ? __lock_acquire+0x7d10/0x7d10 [ 1264.782386][T22743] should_fail+0x38c/0x4c0 [ 1264.786887][T22743] should_failslab+0x5/0x20 [ 1264.791437][T22743] slab_pre_alloc_hook+0x51/0xc0 [ 1264.796441][T22743] __kmalloc_node_track_caller+0x68/0x3a0 [ 1264.802217][T22743] ? qrtr_port_remove+0x81/0x450 [ 1264.807312][T22743] ? kmem_cache_alloc_node+0x162/0x2d0 [ 1264.812818][T22743] ? __alloc_skb+0xf4/0x750 [ 1264.817371][T22743] ? qrtr_port_remove+0x81/0x450 [ 1264.822357][T22743] __alloc_skb+0x22c/0x750 [ 1264.826807][T22743] ? lockdep_hardirqs_on+0x94/0x140 [ 1264.832056][T22743] qrtr_port_remove+0x81/0x450 [ 1264.836879][T22743] qrtr_release+0x1e6/0x2a0 [ 1264.841429][T22743] sock_close+0xd5/0x240 [ 1264.845719][T22743] ? sock_mmap+0x90/0x90 [ 1264.849994][T22743] __fput+0x234/0x930 [ 1264.854066][T22743] task_work_run+0x125/0x1a0 [ 1264.858707][T22743] get_signal+0x122e/0x12d0 [ 1264.863296][T22743] arch_do_signal_or_restart+0xe7/0x12c0 [ 1264.869003][T22743] ? kick_process+0xd4/0x140 [ 1264.873636][T22743] ? get_sigframe_size+0x10/0x10 [ 1264.878645][T22743] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1264.884679][T22743] ? exit_to_user_mode_loop+0x3b/0x130 [ 1264.890196][T22743] exit_to_user_mode_loop+0x9e/0x130 [ 1264.895513][T22743] exit_to_user_mode_prepare+0xee/0x180 [ 1264.901089][T22743] syscall_exit_to_user_mode+0x16/0x40 [ 1264.906581][T22743] do_syscall_64+0x58/0xa0 [ 1264.911031][T22743] ? clear_bhb_loop+0x30/0x80 [ 1264.915745][T22743] ? clear_bhb_loop+0x30/0x80 [ 1264.920470][T22743] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1264.926395][T22743] RIP: 0033:0x7f5fff743e59 [ 1264.930845][T22743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.950480][T22743] RSP: 002b:00007f5ffd97c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1264.958927][T22743] RAX: fffffffffffffe00 RBX: 00007f5fff9bd090 RCX: 00007f5fff743e59 [ 1264.966923][T22743] RDX: 0000000000000120 RSI: 0000200000000740 RDI: 0000000000000004 [ 1264.974922][T22743] RBP: 00007f5ffd97c090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.982924][T22743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.990930][T22743] R13: 00007f5fff9bd128 R14: 00007f5fff9bd090 R15: 00007ffffe368f58 [ 1264.998974][T22743] [ 1265.187508][T22750] netlink: 'syz.3.5580': attribute type 10 has an invalid length. [ 1265.729896][T22741] Mem-Info: [ 1265.733111][T22741] active_anon:276 inactive_anon:5375 isolated_anon:0 [ 1265.733111][T22741] active_file:17977 inactive_file:41030 isolated_file:0 [ 1265.733111][T22741] unevictable:768 dirty:185 writeback:0 [ 1265.733111][T22741] slab_reclaimable:20540 slab_unreclaimable:99381 [ 1265.733111][T22741] mapped:30138 shmem:1630 pagetables:609 bounce:0 [ 1265.733111][T22741] kernel_misc_reclaimable:0 [ 1265.733111][T22741] free:1352393 free_pcp:10647 free_cma:0 [ 1265.777546][T22741] Node 0 active_anon:1072kB inactive_anon:20992kB active_file:71708kB inactive_file:164120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120552kB dirty:736kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10740kB pagetables:2436kB all_unreclaimable? no [ 1265.820242][T22741] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1265.854845][T22750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.875857][T22750] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1265.923993][T22741] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.968197][T22741] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1265.974756][T22741] Node 0 DMA32 free:1474448kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:20984kB active_file:71712kB inactive_file:164120kB unevictable:1536kB writepending:748kB present:3129332kB managed:2606536kB mlocked:0kB bounce:0kB free_pcp:34184kB local_pcp:13836kB free_cma:0kB [ 1266.013519][T22741] lowmem_reserve[]: 0 0 0 0 0 [ 1266.018710][T22741] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1266.053029][T22741] lowmem_reserve[]: 0 0 0 0 0 [ 1266.057822][T22741] Node 1 Normal free:3919856kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8940kB local_pcp:2072kB free_cma:0kB [ 1266.137693][T22741] lowmem_reserve[]: 0 0 0 0 0 [ 1266.143190][T22741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1266.162892][T22741] Node 0 DMA32: 2446*4kB (UM) 2353*8kB (UM) 4317*16kB (UME) 1907*32kB (UME) 2805*64kB (UME) 1537*128kB (UME) 499*256kB (UM) 77*512kB (UME) 14*1024kB (UM) 2*2048kB (UM) 184*4096kB (M) = 1474224kB [ 1266.204507][T22741] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1266.237985][T22741] Node 1 Normal: 118*4kB (UE) 39*8kB (UME) 26*16kB (UME) 94*32kB (UE) 36*64kB (UME) 19*128kB (UME) 9*256kB (UM) 6*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 952*4096kB (M) = 3919856kB [ 1266.344266][T22741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.416407][T22741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1266.438103][T22741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.447709][T22741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1266.472898][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1266.487462][T22741] 60638 total pagecache pages [ 1266.513621][T22741] 0 pages in swap cache [ 1266.517850][T22741] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.530473][T22771] netlink: 'syz.0.5587': attribute type 3 has an invalid length. [ 1266.539237][T22771] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1266.556360][T22741] Free swap = 124996kB [ 1266.561054][T22741] Total swap = 124996kB [ 1266.575637][T22741] 2097051 pages RAM [ 1266.579893][T22741] 0 pages HighMem/MovableOnly [ 1266.588661][T22741] 411494 pages reserved [ 1266.592871][T22741] 0 pages cma reserved [ 1266.682100][T22781] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1266.867278][T22787] netlink: 'syz.2.5592': attribute type 10 has an invalid length. [ 1266.938234][T22787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5592'. [ 1267.071212][T22793] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1267.551803][T22811] FAULT_INJECTION: forcing a failure. [ 1267.551803][T22811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.608703][T22811] CPU: 0 PID: 22811 Comm: syz.1.5603 Not tainted syzkaller #0 [ 1267.616234][T22811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1267.626330][T22811] Call Trace: [ 1267.629646][T22811] [ 1267.632609][T22811] dump_stack_lvl+0x188/0x250 [ 1267.637323][T22811] ? show_regs_print_info+0x20/0x20 [ 1267.642559][T22811] ? load_image+0x400/0x400 [ 1267.647115][T22811] ? __lock_acquire+0x7d10/0x7d10 [ 1267.652228][T22811] should_fail+0x38c/0x4c0 [ 1267.656693][T22811] _copy_to_user+0x2e/0x130 [ 1267.661238][T22811] simple_read_from_buffer+0xe3/0x150 [ 1267.666657][T22811] proc_fail_nth_read+0x1a6/0x220 [ 1267.671718][T22811] ? proc_fault_inject_write+0x310/0x310 [ 1267.677393][T22811] ? fsnotify_perm+0x254/0x560 [ 1267.682291][T22811] ? proc_fault_inject_write+0x310/0x310 [ 1267.687969][T22811] vfs_read+0x301/0xd60 [ 1267.692179][T22811] ? kernel_read+0x1e0/0x1e0 [ 1267.696820][T22811] ? __fget_files+0x40f/0x480 [ 1267.701541][T22811] ? mutex_lock_nested+0x17/0x20 [ 1267.706513][T22811] ? __fdget_pos+0x2bf/0x370 [ 1267.711142][T22811] ? ksys_read+0x71/0x260 [ 1267.715523][T22811] ksys_read+0x152/0x260 [ 1267.719810][T22811] ? vfs_write+0xd60/0xd60 [ 1267.724285][T22811] ? lockdep_hardirqs_on+0x94/0x140 [ 1267.729521][T22811] do_syscall_64+0x4c/0xa0 [ 1267.733975][T22811] ? clear_bhb_loop+0x30/0x80 [ 1267.738680][T22811] ? clear_bhb_loop+0x30/0x80 [ 1267.743384][T22811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1267.749302][T22811] RIP: 0033:0x7f5fff70468e [ 1267.753744][T22811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.773374][T22811] RSP: 002b:00007f5ffd99cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.781821][T22811] RAX: ffffffffffffffda RBX: 00007f5ffd99d6c0 RCX: 00007f5fff70468e [ 1267.789826][T22811] RDX: 000000000000000f RSI: 00007f5ffd99d0a0 RDI: 0000000000000006 [ 1267.797834][T22811] RBP: 00007f5ffd99d090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.805841][T22811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.813845][T22811] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1267.821867][T22811] [ 1267.839913][T22809] netlink: 'syz.3.5602': attribute type 3 has an invalid length. [ 1267.907455][T22809] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1268.093336][T22815] netlink: 'syz.0.5601': attribute type 10 has an invalid length. [ 1268.147091][T22815] team0: Device hsr_slave_0 failed to register rx_handler [ 1268.262233][T22806] netlink: 'syz.0.5601': attribute type 9 has an invalid length. [ 1268.326741][T22806] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1268.384735][T22832] sctp: [Deprecated]: syz.3.5607 (pid 22832) Use of int in max_burst socket option deprecated. [ 1268.384735][T22832] Use struct sctp_assoc_value instead [ 1268.502243][T22836] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5610'. [ 1268.563778][T22833] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5608'. [ 1268.894000][T22852] netlink: 'syz.4.5616': attribute type 10 has an invalid length. [ 1268.907952][T22852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5616'. [ 1269.170679][T22863] netlink: 'syz.0.5619': attribute type 29 has an invalid length. [ 1269.198338][T22863] netlink: 'syz.0.5619': attribute type 29 has an invalid length. [ 1269.210008][T22870] FAULT_INJECTION: forcing a failure. [ 1269.210008][T22870] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.236122][T22870] CPU: 0 PID: 22870 Comm: syz.2.5622 Not tainted syzkaller #0 [ 1269.243647][T22870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.253779][T22870] Call Trace: [ 1269.257096][T22870] [ 1269.260054][T22870] dump_stack_lvl+0x188/0x250 [ 1269.264804][T22870] ? show_regs_print_info+0x20/0x20 [ 1269.270039][T22870] ? load_image+0x400/0x400 [ 1269.274592][T22870] ? __might_sleep+0xf0/0xf0 [ 1269.279221][T22870] ? __lock_acquire+0x7d10/0x7d10 [ 1269.284285][T22870] ? __mutex_lock_common+0x465/0x2400 [ 1269.289714][T22870] should_fail+0x38c/0x4c0 [ 1269.294190][T22870] should_failslab+0x5/0x20 [ 1269.298733][T22870] slab_pre_alloc_hook+0x51/0xc0 [ 1269.303713][T22870] ? trace_event_raw_event_kmem_cache_free+0x120/0x120 [ 1269.310748][T22870] __kmalloc+0x6b/0x330 [ 1269.314939][T22870] ? tracepoint_add_func+0x2f9/0x990 [ 1269.320277][T22870] ? trace_event_raw_event_kmem_cache_free+0x120/0x120 [ 1269.327294][T22870] tracepoint_add_func+0x2f9/0x990 [ 1269.332574][T22870] ? trace_event_raw_event_kmem_cache_free+0x120/0x120 [ 1269.339479][T22870] tracepoint_probe_register+0x5a/0x90 [ 1269.344984][T22870] ? trace_event_raw_event_kmem_cache_free+0x120/0x120 [ 1269.351884][T22870] perf_trace_event_init+0x518/0xa10 [ 1269.357219][T22870] perf_trace_init+0x234/0x2d0 [ 1269.362028][T22870] perf_tp_event_init+0x89/0x110 [ 1269.367009][T22870] perf_try_init_event+0x12b/0x3d0 [ 1269.372175][T22870] perf_event_alloc+0xfcf/0x2240 [ 1269.377185][T22870] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 1269.382917][T22870] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1269.388609][T22870] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.393855][T22870] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1269.399543][T22870] do_syscall_64+0x4c/0xa0 [ 1269.404026][T22870] ? clear_bhb_loop+0x30/0x80 [ 1269.408753][T22870] ? clear_bhb_loop+0x30/0x80 [ 1269.413475][T22870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1269.419541][T22870] RIP: 0033:0x7f78ae020e59 [ 1269.424009][T22870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.432421][T22872] netlink: 'syz.0.5619': attribute type 29 has an invalid length. [ 1269.443670][T22870] RSP: 002b:00007f78ac27a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1269.443741][T22870] RAX: ffffffffffffffda RBX: 00007f78ae299fa0 RCX: 00007f78ae020e59 [ 1269.443760][T22870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d00 [ 1269.443775][T22870] RBP: 00007f78ac27a090 R08: 0000000000000001 R09: 0000000000000000 [ 1269.443790][T22870] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1269.443807][T22870] R13: 00007f78ae29a038 R14: 00007f78ae299fa0 R15: 00007ffec30a1ba8 [ 1269.443844][T22870] [ 1269.802111][T22880] device syzkaller0 entered promiscuous mode [ 1270.486783][T22912] netlink: 'syz.0.5637': attribute type 3 has an invalid length. [ 1271.559081][T22949] validate_nla: 1 callbacks suppressed [ 1271.559135][T22949] netlink: 'syz.4.5649': attribute type 10 has an invalid length. [ 1271.655748][T22949] __nla_validate_parse: 7 callbacks suppressed [ 1271.655861][T22949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5649'. [ 1272.969656][T22992] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5666'. [ 1273.177345][T22999] sctp: [Deprecated]: syz.0.5668 (pid 22999) Use of int in max_burst socket option deprecated. [ 1273.177345][T22999] Use struct sctp_assoc_value instead [ 1273.632917][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1273.814546][T23015] netlink: 'syz.3.5674': attribute type 3 has an invalid length. [ 1273.839177][T23015] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1274.040553][T23016] netlink: 'syz.1.5675': attribute type 3 has an invalid length. [ 1274.078482][T23016] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1274.728143][T23038] sctp: [Deprecated]: syz.0.5683 (pid 23038) Use of int in max_burst socket option deprecated. [ 1274.728143][T23038] Use struct sctp_assoc_value instead [ 1275.303708][T23055] netlink: 'syz.0.5689': attribute type 3 has an invalid length. [ 1275.344145][T23055] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5689'. [ 1275.445294][T23058] netlink: 'syz.3.5692': attribute type 3 has an invalid length. [ 1275.454262][T23058] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1275.960660][T23090] sctp: [Deprecated]: syz.0.5699 (pid 23090) Use of int in max_burst socket option deprecated. [ 1275.960660][T23090] Use struct sctp_assoc_value instead [ 1276.035759][T23095] FAULT_INJECTION: forcing a failure. [ 1276.035759][T23095] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.085279][T23095] CPU: 0 PID: 23095 Comm: syz.2.5701 Not tainted syzkaller #0 [ 1276.092863][T23095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1276.093199][T23084] netlink: 'syz.3.5700': attribute type 10 has an invalid length. [ 1276.102968][T23095] Call Trace: [ 1276.102981][T23095] [ 1276.102993][T23095] dump_stack_lvl+0x188/0x250 [ 1276.103027][T23095] ? show_regs_print_info+0x20/0x20 [ 1276.103053][T23095] ? load_image+0x400/0x400 [ 1276.103082][T23095] ? __might_sleep+0xf0/0xf0 [ 1276.103109][T23095] ? __lock_acquire+0x7d10/0x7d10 [ 1276.103148][T23095] should_fail+0x38c/0x4c0 [ 1276.103187][T23095] should_failslab+0x5/0x20 [ 1276.103211][T23095] slab_pre_alloc_hook+0x51/0xc0 [ 1276.103241][T23095] kmem_cache_alloc_node_trace+0x4a/0x300 [ 1276.103267][T23095] ? __get_vm_area_node+0x119/0x2d0 [ 1276.103302][T23095] __get_vm_area_node+0x119/0x2d0 [ 1276.103338][T23095] __vmalloc_node_range+0xef/0x8b0 [ 1276.103364][T23095] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.103398][T23095] ? end_current_label_crit_section+0x170/0x170 [ 1276.103429][T23095] ? __lock_acquire+0x7d10/0x7d10 [ 1276.103461][T23095] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1276.103493][T23095] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.103523][T23095] __vmalloc+0x76/0x80 [ 1276.103549][T23095] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.103581][T23095] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.103616][T23095] bpf_prog_alloc+0x1a/0x1e0 [ 1276.103649][T23095] bpf_prog_load+0x7c6/0x1510 [ 1276.103695][T23095] ? map_freeze+0x350/0x350 [ 1276.103723][T23095] ? __might_fault+0xb7/0x110 [ 1276.103771][T23095] ? __might_fault+0xb3/0x110 [ 1276.103799][T23095] ? bpf_lsm_bpf+0x5/0x10 [ 1276.103826][T23095] ? security_bpf+0x7a/0xa0 [ 1276.103856][T23095] __sys_bpf+0x532/0x6f0 [ 1276.103888][T23095] ? bpf_link_show_fdinfo+0x380/0x380 [ 1276.103941][T23095] ? vtime_user_exit+0x2c8/0x3e0 [ 1276.103981][T23095] __x64_sys_bpf+0x78/0x90 [ 1276.104010][T23095] do_syscall_64+0x4c/0xa0 [ 1276.104036][T23095] ? clear_bhb_loop+0x30/0x80 [ 1276.104063][T23095] ? clear_bhb_loop+0x30/0x80 [ 1276.104093][T23095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1276.104120][T23095] RIP: 0033:0x7f78ae020e59 [ 1276.104147][T23095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.104169][T23095] RSP: 002b:00007f78ac259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1276.104197][T23095] RAX: ffffffffffffffda RBX: 00007f78ae29a090 RCX: 00007f78ae020e59 [ 1276.104218][T23095] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005 [ 1276.104235][T23095] RBP: 00007f78ac259090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.104252][T23095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.104269][T23095] R13: 00007f78ae29a128 R14: 00007f78ae29a090 R15: 00007ffec30a1ba8 [ 1276.104310][T23095] [ 1276.242398][T23095] syz.2.5701: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1276.446930][T23084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1276.507992][T23095] ,cpuset=syz2,mems_allowed=0-1 [ 1276.514051][T23095] CPU: 0 PID: 23095 Comm: syz.2.5701 Not tainted syzkaller #0 [ 1276.521553][T23095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1276.531658][T23095] Call Trace: [ 1276.534966][T23095] [ 1276.537916][T23095] dump_stack_lvl+0x188/0x250 [ 1276.542622][T23095] ? rcu_lock_release+0x5/0x20 [ 1276.547408][T23095] ? show_regs_print_info+0x20/0x20 [ 1276.552631][T23095] ? load_image+0x400/0x400 [ 1276.557162][T23095] ? __rcu_read_unlock+0x78/0xd0 [ 1276.562213][T23095] warn_alloc+0x243/0x320 [ 1276.566676][T23095] ? zone_watermark_ok_safe+0x240/0x240 [ 1276.572255][T23095] ? __get_vm_area_node+0x2b5/0x2d0 [ 1276.577484][T23095] __vmalloc_node_range+0x2b1/0x8b0 [ 1276.582706][T23095] ? end_current_label_crit_section+0x170/0x170 [ 1276.588979][T23095] ? __lock_acquire+0x7d10/0x7d10 [ 1276.594035][T23095] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1276.599628][T23095] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.605201][T23095] __vmalloc+0x76/0x80 [ 1276.609297][T23095] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.614953][T23095] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 1276.620369][T23095] bpf_prog_alloc+0x1a/0x1e0 [ 1276.624995][T23095] bpf_prog_load+0x7c6/0x1510 [ 1276.629705][T23095] ? map_freeze+0x350/0x350 [ 1276.634234][T23095] ? __might_fault+0xb7/0x110 [ 1276.638941][T23095] ? __might_fault+0xb3/0x110 [ 1276.643652][T23095] ? bpf_lsm_bpf+0x5/0x10 [ 1276.648009][T23095] ? security_bpf+0x7a/0xa0 [ 1276.652553][T23095] __sys_bpf+0x532/0x6f0 [ 1276.656825][T23095] ? bpf_link_show_fdinfo+0x380/0x380 [ 1276.662238][T23095] ? vtime_user_exit+0x2c8/0x3e0 [ 1276.667202][T23095] __x64_sys_bpf+0x78/0x90 [ 1276.671726][T23095] do_syscall_64+0x4c/0xa0 [ 1276.676164][T23095] ? clear_bhb_loop+0x30/0x80 [ 1276.680863][T23095] ? clear_bhb_loop+0x30/0x80 [ 1276.685564][T23095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1276.691477][T23095] RIP: 0033:0x7f78ae020e59 [ 1276.695921][T23095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.715551][T23095] RSP: 002b:00007f78ac259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1276.723998][T23095] RAX: ffffffffffffffda RBX: 00007f78ae29a090 RCX: 00007f78ae020e59 [ 1276.732006][T23095] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005 [ 1276.740010][T23095] RBP: 00007f78ac259090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.748000][T23095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.755997][T23095] R13: 00007f78ae29a128 R14: 00007f78ae29a090 R15: 00007ffec30a1ba8 [ 1276.764009][T23095] [ 1276.787025][T23095] Mem-Info: [ 1276.792504][T23095] active_anon:276 inactive_anon:5436 isolated_anon:0 [ 1276.792504][T23095] active_file:17982 inactive_file:41030 isolated_file:0 [ 1276.792504][T23095] unevictable:768 dirty:80 writeback:0 [ 1276.792504][T23095] slab_reclaimable:20874 slab_unreclaimable:102769 [ 1276.792504][T23095] mapped:30131 shmem:1630 pagetables:625 bounce:0 [ 1276.792504][T23095] kernel_misc_reclaimable:0 [ 1276.792504][T23095] free:1347726 free_pcp:12121 free_cma:0 [ 1276.840222][T23095] Node 0 active_anon:1076kB inactive_anon:21052kB active_file:71728kB inactive_file:164120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120596kB dirty:320kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:2416kB all_unreclaimable? no [ 1276.871868][T23095] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1276.905697][T23095] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.934051][T23095] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1276.941439][T23095] Node 0 DMA32 free:1455428kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:20948kB active_file:71728kB inactive_file:164120kB unevictable:1536kB writepending:344kB present:3129332kB managed:2606536kB mlocked:0kB bounce:0kB free_pcp:41636kB local_pcp:20072kB free_cma:0kB [ 1277.038312][T23095] lowmem_reserve[]: 0 0 0 0 0 [ 1277.043116][T23095] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1277.138313][T23095] lowmem_reserve[]: 0 0 0 0 0 [ 1277.150582][T23095] Node 1 Normal free:3920112kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8684kB local_pcp:2072kB free_cma:0kB [ 1277.204918][T23102] netlink: 'syz.4.5705': attribute type 3 has an invalid length. [ 1277.235981][T23102] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1277.279473][T23095] lowmem_reserve[]: 0 0 0 0 0 [ 1277.295616][T23095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1277.342887][T23095] Node 0 DMA32: 2613*4kB (UM) 2888*8kB (UME) 4697*16kB (UME) 933*32kB (UME) 2793*64kB (UM) 1551*128kB (UME) 501*256kB (UME) 76*512kB (UM) 15*1024kB (UME) 3*2048kB (UME) 183*4096kB (M) = 1454084kB [ 1277.413499][T23095] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1277.481765][T23095] Node 1 Normal: 118*4kB (UE) 39*8kB (UME) 26*16kB (UME) 96*32kB (UE) 39*64kB (UME) 19*128kB (UME) 9*256kB (UM) 6*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 952*4096kB (M) = 3920112kB [ 1277.523818][T23095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1277.578503][T23095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1277.587878][T23095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1277.637572][T23119] FAULT_INJECTION: forcing a failure. [ 1277.637572][T23119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.664741][T23095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1277.696657][T23119] CPU: 0 PID: 23119 Comm: syz.4.5709 Not tainted syzkaller #0 [ 1277.704192][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1277.714288][T23119] Call Trace: [ 1277.717601][T23119] [ 1277.720567][T23119] dump_stack_lvl+0x188/0x250 [ 1277.724806][T23095] 60642 total pagecache pages [ 1277.725297][T23119] ? show_regs_print_info+0x20/0x20 [ 1277.735213][T23119] ? load_image+0x400/0x400 [ 1277.739759][T23119] ? __lock_acquire+0x7d10/0x7d10 [ 1277.739919][T23095] 0 pages in swap cache [ 1277.744832][T23119] should_fail+0x38c/0x4c0 [ 1277.744865][T23119] _copy_from_user+0x2e/0x170 [ 1277.744889][T23119] __sys_bpf+0x26d/0x6f0 [ 1277.744915][T23119] ? bpf_link_show_fdinfo+0x380/0x380 [ 1277.744958][T23119] __x64_sys_bpf+0x78/0x90 [ 1277.744980][T23119] do_syscall_64+0x4c/0xa0 [ 1277.745002][T23119] ? clear_bhb_loop+0x30/0x80 [ 1277.745024][T23119] ? clear_bhb_loop+0x30/0x80 [ 1277.745047][T23119] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1277.745071][T23119] RIP: 0033:0x7f351b9e7e59 [ 1277.745091][T23119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.745110][T23119] RSP: 002b:00007f3519c41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1277.745134][T23119] RAX: ffffffffffffffda RBX: 00007f351bc60fa0 RCX: 00007f351b9e7e59 [ 1277.745149][T23119] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1277.745164][T23119] RBP: 00007f3519c41090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.745178][T23119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.745192][T23119] R13: 00007f351bc61038 R14: 00007f351bc60fa0 R15: 00007ffcd21ffcc8 [ 1277.745224][T23119] [ 1277.934157][T23095] Swap cache stats: add 0, delete 0, find 0/0 [ 1277.952851][T23095] Free swap = 124996kB [ 1277.976079][T23095] Total swap = 124996kB [ 1277.989588][T23095] 2097051 pages RAM [ 1278.000066][T23095] 0 pages HighMem/MovableOnly [ 1278.004806][T23095] 411494 pages reserved [ 1278.040767][T23095] 0 pages cma reserved [ 1278.700128][T23145] netlink: 'syz.4.5719': attribute type 3 has an invalid length. [ 1278.713887][T23145] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5719'. [ 1279.204723][T23160] FAULT_INJECTION: forcing a failure. [ 1279.204723][T23160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.229653][T23160] CPU: 1 PID: 23160 Comm: syz.4.5723 Not tainted syzkaller #0 [ 1279.237208][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1279.247330][T23160] Call Trace: [ 1279.250655][T23160] [ 1279.253633][T23160] dump_stack_lvl+0x188/0x250 [ 1279.258393][T23160] ? show_regs_print_info+0x20/0x20 [ 1279.263652][T23160] ? load_image+0x400/0x400 [ 1279.268236][T23160] ? __lock_acquire+0x7d10/0x7d10 [ 1279.273344][T23160] should_fail+0x38c/0x4c0 [ 1279.277836][T23160] _copy_to_user+0x2e/0x130 [ 1279.282412][T23160] simple_read_from_buffer+0xe3/0x150 [ 1279.287862][T23160] proc_fail_nth_read+0x1a6/0x220 [ 1279.292959][T23160] ? proc_fault_inject_write+0x310/0x310 [ 1279.298668][T23160] ? fsnotify_perm+0x254/0x560 [ 1279.303491][T23160] ? proc_fault_inject_write+0x310/0x310 [ 1279.309186][T23160] vfs_read+0x301/0xd60 [ 1279.313429][T23160] ? kernel_read+0x1e0/0x1e0 [ 1279.318100][T23160] ? __fget_files+0x40f/0x480 [ 1279.322864][T23160] ? mutex_lock_nested+0x17/0x20 [ 1279.327862][T23160] ? __fdget_pos+0x2bf/0x370 [ 1279.332504][T23160] ? ksys_read+0x71/0x260 [ 1279.336903][T23160] ksys_read+0x152/0x260 [ 1279.341219][T23160] ? vfs_write+0xd60/0xd60 [ 1279.345729][T23160] ? lockdep_hardirqs_on+0x94/0x140 [ 1279.351007][T23160] do_syscall_64+0x4c/0xa0 [ 1279.355485][T23160] ? clear_bhb_loop+0x30/0x80 [ 1279.360217][T23160] ? clear_bhb_loop+0x30/0x80 [ 1279.364973][T23160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1279.370913][T23160] RIP: 0033:0x7f351b9a868e [ 1279.375401][T23160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1279.395068][T23160] RSP: 002b:00007f3519c40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1279.403566][T23160] RAX: ffffffffffffffda RBX: 00007f3519c416c0 RCX: 00007f351b9a868e [ 1279.411602][T23160] RDX: 000000000000000f RSI: 00007f3519c410a0 RDI: 0000000000000007 [ 1279.419625][T23160] RBP: 00007f3519c41090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.427652][T23160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.435692][T23160] R13: 00007f351bc61038 R14: 00007f351bc60fa0 R15: 00007ffcd21ffcc8 [ 1279.444043][T23160] [ 1279.526347][T23164] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1279.608160][ C1] ------------[ cut here ]------------ [ 1279.608160][ C0] ------------[ cut here ]------------ [ 1279.608178][ C1] WARNING: CPU: 1 PID: 23159 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1279.613670][ C0] WARNING: CPU: 0 PID: 23137 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1279.619153][ C1] Modules linked in: [ 1279.628518][ C0] Modules linked in: [ 1279.637890][ C1] [ 1279.637899][ C1] CPU: 1 PID: 23159 Comm: syz.0.5724 Not tainted syzkaller #0 [ 1279.641800][ C0] CPU: 0 PID: 23137 Comm: syz.1.5718 Not tainted syzkaller #0 [ 1279.645699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1279.648039][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1279.648053][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1279.655514][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1279.662976][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1279.673067][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1279.683126][ C0] RSP: 0018:ffffc90000007b18 EFLAGS: 00010046 [ 1279.689278][ C1] RSP: 0000:ffffc90000dd0b18 EFLAGS: 00010046 [ 1279.695435][ C0] [ 1279.695442][ C0] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff888017a7d940 [ 1279.715047][ C1] [ 1279.715054][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88802133bb80 [ 1279.734663][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.740732][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.746802][ C0] RBP: 0000000000000000 R08: ffff888017a7d947 R09: 1ffff11002f4fb28 [ 1279.749136][ C1] RBP: 0000000000000000 R08: ffff88802133bb87 R09: 1ffff11004267770 [ 1279.757115][ C0] R10: dffffc0000000000 R11: ffffed1002f4fb29 R12: ffff888017a7f0c8 [ 1279.759446][ C1] R10: dffffc0000000000 R11: ffffed1004267771 R12: ffff88802133d308 [ 1279.767428][ C0] R13: 00007ffffffff000 R14: ffffc90000007b88 R15: 0000000000000005 [ 1279.775407][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0b88 R15: 0000000000000005 [ 1279.783385][ C0] FS: 00007f5ffd99d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1279.791486][ C1] FS: 000055555fd82500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1279.799474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.807538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.815520][ C0] CR2: 0000000000000005 CR3: 000000006273d000 CR4: 00000000003506f0 [ 1279.823505][ C1] CR2: 0000000000000005 CR3: 000000001ee28000 CR4: 00000000003506e0 [ 1279.831494][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1279.840867][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1279.849801][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1279.856386][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1279.863058][ C0] Call Trace: [ 1279.863069][ C0] [ 1279.871035][ C1] Call Trace: [ 1279.871044][ C1] [ 1279.879108][ C0] bpf_probe_read_compat+0xdd/0x170 [ 1279.887081][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1279.895063][ C0] bpf_prog_35c2aeabad5a7bfe+0x45/0x100 [ 1279.903074][ C1] bpf_prog_35c2aeabad5a7bfe+0x45/0x100 [ 1279.911047][ C0] trace_call_bpf+0x2b1/0x5b0 [ 1279.914342][ C1] trace_call_bpf+0x2b1/0x5b0 [ 1279.917210][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1279.920503][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1279.923363][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1279.928566][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1279.933770][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 1279.939322][ C1] perf_trace_preemptirq_template+0x2aa/0x360 [ 1279.944873][ C0] ? handle_softirqs+0x1a4/0x830 [ 1279.949556][ C1] ? handle_softirqs+0x1a4/0x830 [ 1279.954241][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 1279.960138][ C1] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 1279.966037][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 1279.972030][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1279.977577][ C0] ? handle_softirqs+0x1a4/0x830 [ 1279.983740][ C1] ? handle_softirqs+0x1a4/0x830 [ 1279.989807][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 1279.994759][ C1] trace_irq_enable_rcuidle+0x108/0x180 [ 1279.999702][ C0] trace_hardirqs_on+0x57/0x80 [ 1280.006901][ C1] trace_hardirqs_on+0x57/0x80 [ 1280.014107][ C0] handle_softirqs+0x1a4/0x830 [ 1280.018958][ C1] handle_softirqs+0x1a4/0x830 [ 1280.023820][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1280.028760][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1280.033700][ C0] ? do_softirq+0x210/0x210 [ 1280.039260][ C1] ? do_softirq+0x210/0x210 [ 1280.044821][ C0] __irq_exit_rcu+0x13b/0x230 [ 1280.049589][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1280.054360][ C0] ? irq_exit_rcu+0x20/0x20 [ 1280.059133][ C1] __irq_exit_rcu+0x13b/0x230 [ 1280.063911][ C0] irq_exit_rcu+0x5/0x20 [ 1280.068763][ C1] ? irq_exit_rcu+0x20/0x20 [ 1280.073617][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1280.078134][ C1] irq_exit_rcu+0x5/0x20 [ 1280.082636][ C0] [ 1280.087321][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1280.092526][ C0] [ 1280.092537][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1280.097036][ C1] [ 1280.101715][ C0] RIP: 0010:kasan_check_range+0xe/0x290 [ 1280.105960][ C1] [ 1280.105970][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1280.110475][ C0] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 <41> 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 [ 1280.116113][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1280.120362][ C0] RSP: 0018:ffffc90002fef7a8 EFLAGS: 00000202 [ 1280.123312][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 9d 8b f7 65 8b 05 70 86 3b 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 1280.128951][ C0] [ 1280.131899][ C1] RSP: 0000:ffffc90002f6f960 EFLAGS: 00000206 [ 1280.137881][ C0] RAX: ffffffff81a30e01 RBX: ffffea0000ed8d74 RCX: ffffffff81a30ed5 [ 1280.140829][ C1] [ 1280.140835][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: fcaff88148a53c00 [ 1280.146380][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0000ed8d74 [ 1280.149322][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: 0000000000000001 [ 1280.155309][ C0] RBP: ffffc90002fef8c8 R08: ffffea0000ed8d77 R09: 1ffffd40001db1ae [ 1280.174925][ C1] RBP: ffffc90002f6f9f0 R08: ffffffff901d8107 R09: 1ffffffff203b020 [ 1280.181431][ C0] R10: dffffc0000000000 R11: fffff940001db1af R12: dffffc0000000000 [ 1280.187506][ C1] R10: dffffc0000000000 R11: fffffbfff203b021 R12: dffffc0000000000 [ 1280.207116][ C0] R13: 0000000000000000 R14: ffffea0000ed8d40 R15: 0000000000000005 [ 1280.209451][ C1] R13: dffffc0000000000 R14: ffff888074a7f050 R15: 1ffff920005edf2c [ 1280.215531][ C0] ? release_pages+0x1e1/0x1be0 [ 1280.223536][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1280.225858][ C0] ? release_pages+0x2b5/0x1be0 [ 1280.233862][ C1] __pagevec_lru_add+0x13e9/0x1780 [ 1280.241852][ C0] release_pages+0x2b5/0x1be0 [ 1280.249837][ C1] ? lru_cache_add+0x750/0x750 [ 1280.257836][ C0] ? lru_cache_disable+0x30/0x30 [ 1280.265805][ C1] ? __mod_lruvec_page_state+0x1fe/0x330 [ 1280.273832][ C0] tlb_finish_mmu+0x1b4/0x370 [ 1280.281806][ C1] lru_cache_add+0x516/0x750 [ 1280.289789][ C0] exit_mmap+0x3d0/0x640 [ 1280.297822][ C1] wp_page_copy+0xe30/0x2050 [ 1280.302686][ C0] ? vm_brk+0x20/0x20 [ 1280.307553][ C1] ? do_wp_page+0x902/0xad0 [ 1280.312441][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 1280.317566][ C1] ? insert_page_into_pte_locked+0x480/0x480 [ 1280.322234][ C0] ? rcu_is_watching+0x11/0xa0 [ 1280.327157][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1280.332105][ C0] __mmput+0x115/0x3b0 [ 1280.337745][ C1] ? _raw_spin_unlock+0x24/0x40 [ 1280.342600][ C0] copy_process+0x2f42/0x3e20 [ 1280.347211][ C1] ? do_wp_page+0x902/0xad0 [ 1280.351538][ C0] ? __pidfd_prepare+0x140/0x140 [ 1280.356086][ C1] handle_mm_fault+0x1f06/0x4410 [ 1280.360091][ C0] kernel_clone+0x23f/0x990 [ 1280.364609][ C1] ? get_page+0xe0/0xe0 [ 1280.369980][ C0] ? create_io_thread+0x180/0x180 [ 1280.375975][ C1] ? vmacache_find+0x238/0x590 [ 1280.380774][ C0] __x64_sys_clone+0x19a/0x210 [ 1280.385933][ C1] ? find_vma+0xd2/0x230 [ 1280.390010][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 1280.394866][ C1] do_user_addr_fault+0x489/0xc80 [ 1280.399585][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1280.404082][ C1] exc_page_fault+0x60/0x100 [ 1280.409004][ C0] do_syscall_64+0x4c/0xa0 [ 1280.413947][ C1] asm_exc_page_fault+0x22/0x30 [ 1280.418457][ C0] ? clear_bhb_loop+0x30/0x80 [ 1280.422620][ C1] RIP: 0033:0x7fbdf9bcc7fc [ 1280.427656][ C0] ? clear_bhb_loop+0x30/0x80 [ 1280.432444][ C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 1280.437221][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1280.441459][ C1] RSP: 002b:00007ffe6d4437f8 EFLAGS: 00010246 [ 1280.446491][ C0] RIP: 0033:0x7f5fff743e59 [ 1280.451515][ C1] [ 1280.451522][ C1] RAX: 0000000000000000 RBX: ffffffff83a54288 RCX: ffffffff81880288 [ 1280.456720][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.461313][ C1] RDX: 0000000000000288 RSI: ffffffff83a54288 RDI: 000000000000000f [ 1280.465737][ C0] RSP: 002b:00007f5ffd99cfd8 EFLAGS: 00000206 [ 1280.470593][ C1] RBP: 0000000000000000 R08: 00007fbdf9f7c000 R09: 00007fbdf9f7e000 [ 1280.475277][ C0] ORIG_RAX: 0000000000000038 [ 1280.479704][ C1] R10: 0000000083a5428c R11: 000000000000000f R12: 00007fbdf9f92218 [ 1280.484385][ C0] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1280.504178][ C1] R13: 000000000000001f R14: ffffffff83a54f8d R15: 00007fbdfaac1720 [ 1280.510079][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600 [ 1280.516159][ C1] ? tomoyo_file_ioctl+0xd/0x30 [ 1280.520592][ C0] RBP: 00007f5fff7d9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1280.522941][ C1] ? tomoyo_task_free+0xa8/0x100 [ 1280.530918][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1280.530936][ C0] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1280.550549][ C1] ? bpf_check+0x748/0xf270 [ 1280.558562][ C0] [ 1280.564603][ C1] ? tomoyo_task_free+0xa8/0x100 [ 1280.572611][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1280.577270][ C1] [ 1280.585244][ C0] CPU: 0 PID: 23137 Comm: syz.1.5718 Not tainted syzkaller #0 [ 1280.593233][ C1] irq event stamp: 4299 [ 1280.601215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1280.609194][ C1] hardirqs last enabled at (4297): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 1280.614051][ C0] Call Trace: [ 1280.622023][ C1] hardirqs last disabled at (4298): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 1280.626972][ C0] [ 1280.634960][ C1] softirqs last enabled at (3832): [] local_bh_enable+0x5/0x20 [ 1280.642947][ C0] dump_stack_lvl+0x188/0x250 [ 1280.647462][ C1] softirqs last disabled at (4299): [] __irq_exit_rcu+0x13b/0x230 [ 1280.650513][ C0] ? show_regs_print_info+0x20/0x20 [ 1280.655458][ C1] ---[ end trace a9811db8646d18df ]--- [ 1280.662748][ C0] ? load_image+0x400/0x400 [ 1280.752942][ C0] panic+0x2e5/0x810 [ 1280.756962][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1280.761511][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 1280.767092][ C0] __warn+0x248/0x2b0 [ 1280.771101][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 1280.776685][ C0] report_bug+0x1b7/0x2e0 [ 1280.781056][ C0] handle_bug+0x3a/0x70 [ 1280.785247][ C0] exc_invalid_op+0x16/0x40 [ 1280.789786][ C0] asm_exc_invalid_op+0x16/0x20 [ 1280.794665][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1280.800853][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1280.820487][ C0] RSP: 0018:ffffc90000007b18 EFLAGS: 00010046 [ 1280.826600][ C0] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff888017a7d940 [ 1280.834608][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.842612][ C0] RBP: 0000000000000000 R08: ffff888017a7d947 R09: 1ffff11002f4fb28 [ 1280.850628][ C0] R10: dffffc0000000000 R11: ffffed1002f4fb29 R12: ffff888017a7f0c8 [ 1280.858653][ C0] R13: 00007ffffffff000 R14: ffffc90000007b88 R15: 0000000000000005 [ 1280.866683][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 1280.872299][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 1280.877976][ C0] bpf_probe_read_compat+0xdd/0x170 [ 1280.883216][ C0] bpf_prog_35c2aeabad5a7bfe+0x45/0x100 [ 1280.888800][ C0] trace_call_bpf+0x2b1/0x5b0 [ 1280.893533][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1280.899476][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1280.905067][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 1280.911175][ C0] ? handle_softirqs+0x1a4/0x830 [ 1280.916149][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 1280.923402][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 1280.928296][ C0] ? handle_softirqs+0x1a4/0x830 [ 1280.933263][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 1280.938847][ C0] trace_hardirqs_on+0x57/0x80 [ 1280.943640][ C0] handle_softirqs+0x1a4/0x830 [ 1280.948438][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1280.953322][ C0] ? do_softirq+0x210/0x210 [ 1280.957882][ C0] __irq_exit_rcu+0x13b/0x230 [ 1280.962604][ C0] ? irq_exit_rcu+0x20/0x20 [ 1280.967152][ C0] irq_exit_rcu+0x5/0x20 [ 1280.971423][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1280.977100][ C0] [ 1280.980060][ C0] [ 1280.983103][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1280.989121][ C0] RIP: 0010:kasan_check_range+0xe/0x290 [ 1280.994707][ C0] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 <41> 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 [ 1281.014342][ C0] RSP: 0018:ffffc90002fef7a8 EFLAGS: 00000202 [ 1281.020470][ C0] RAX: ffffffff81a30e01 RBX: ffffea0000ed8d74 RCX: ffffffff81a30ed5 [ 1281.028484][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0000ed8d74 [ 1281.036495][ C0] RBP: ffffc90002fef8c8 R08: ffffea0000ed8d77 R09: 1ffffd40001db1ae [ 1281.044509][ C0] R10: dffffc0000000000 R11: fffff940001db1af R12: dffffc0000000000 [ 1281.052547][ C0] R13: 0000000000000000 R14: ffffea0000ed8d40 R15: 0000000000000005 [ 1281.060563][ C0] ? release_pages+0x1e1/0x1be0 [ 1281.065458][ C0] ? release_pages+0x2b5/0x1be0 [ 1281.070348][ C0] release_pages+0x2b5/0x1be0 [ 1281.075083][ C0] ? lru_cache_disable+0x30/0x30 [ 1281.080068][ C0] tlb_finish_mmu+0x1b4/0x370 [ 1281.084797][ C0] exit_mmap+0x3d0/0x640 [ 1281.089084][ C0] ? vm_brk+0x20/0x20 [ 1281.093116][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 1281.098346][ C0] ? rcu_is_watching+0x11/0xa0 [ 1281.103155][ C0] __mmput+0x115/0x3b0 [ 1281.107272][ C0] copy_process+0x2f42/0x3e20 [ 1281.112012][ C0] ? __pidfd_prepare+0x140/0x140 [ 1281.117013][ C0] kernel_clone+0x23f/0x990 [ 1281.121558][ C0] ? create_io_thread+0x180/0x180 [ 1281.126634][ C0] __x64_sys_clone+0x19a/0x210 [ 1281.131432][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 1281.136504][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1281.141743][ C0] do_syscall_64+0x4c/0xa0 [ 1281.146196][ C0] ? clear_bhb_loop+0x30/0x80 [ 1281.150896][ C0] ? clear_bhb_loop+0x30/0x80 [ 1281.155608][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1281.161555][ C0] RIP: 0033:0x7f5fff743e59 [ 1281.166006][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.185644][ C0] RSP: 002b:00007f5ffd99cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1281.194107][ C0] RAX: ffffffffffffffda RBX: 00007f5fff9bcfa0 RCX: 00007f5fff743e59 [ 1281.202122][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600 [ 1281.210131][ C0] RBP: 00007f5fff7d9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1281.218221][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1281.226229][ C0] R13: 00007f5fff9bd038 R14: 00007f5fff9bcfa0 R15: 00007ffffe368f58 [ 1281.234252][ C0] [ 1281.237577][ C0] Kernel Offset: disabled [ 1281.242053][ C0] Rebooting in 86400 seconds..