last executing test programs: 8.621131308s ago: executing program 3 (id=2199): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000012000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 8.160941783s ago: executing program 3 (id=2201): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.256229563s ago: executing program 3 (id=2204): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000ca466ccab787b2f54b9f8944876d45331b7a21c88e7d611ea9be0287cae12f91924f8a1fdca668b1debc1682d369217cbca6c70d518f94652afd62efe9920edd6cacd104aae97cd4749ef5b0e1e25acf2be48911adf4d8b81f6fe85c94e4ecfc21ec94c36fdaae84d0d38c35e1b5535f660b0762", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x10, 0x0}, 0x0) 6.232047514s ago: executing program 2 (id=2205): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r6) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.139902737s ago: executing program 3 (id=2207): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9, 0x958c, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r5}, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000303f4098a21c21004f0c00"/24], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x2, 0x5, 0xee, 0x108c4, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x40086602, 0x110e22fff2) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001500000008000000400000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r12, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.287056053s ago: executing program 0 (id=2209): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10440, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5a3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.285270153s ago: executing program 3 (id=2217): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="8b77377f0aef2878c5e8d932e82f85839579317c", @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) socket$kcm(0x1e, 0x1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 5.283121633s ago: executing program 2 (id=2210): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000900)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x2, 0x4, 0x4, {0xa, 0x4e23, 0x7, @local, 0x900}}}, 0xfffffffffffffdd3, &(0x7f00000002c0)=[{&(0x7f0000000280)="0bf8328536c0167d5e94b5782231fa94ca356481", 0x14}, {&(0x7f0000000680)="2dfd53532a5c345d67262112dc0d60ebdf903ac0fe48495cadce4c2248464e0efab6d3a669c28f4951aa3e5e321977c2a04fa1b0a87c022f5877b1dcdc030173d1f8b6db3674ba916b136906ff70ac90904f2bf9038fc0b6faa092f8b6731034b9ffdb817d843b6db878b037c8bb03f48174550a06780aff890f672830af303f04198bc002650ac6dc8d371a50f0fb7a52e0751f2449d451ff2dceceb2149ba7822accc1faf773df171b8603", 0xac}, {&(0x7f0000000100)="f0", 0x1}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa0}, 0x4088000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000004ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) 4.977814074s ago: executing program 3 (id=2212): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/70, 0x46}], 0x8, &(0x7f0000000780)=""/198, 0xc6}, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x18, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069c391f003dc68c84490aee2b9bd6efb2502eaf60d00", 0x2e}, {&(0x7f0000000980)="ab38f76e4590a7937b70b1cfd8e44e21a648c4fd5824b5e5d66e3c0b9b21ee6b194c18053c7f0f3cfe98bb4e1e7aca615dc0dd5a7e9e362237aab5e7291ce90fa06ffd54cf51161c4478d93aaead982b471bebf373182856129d2d8f5dd292bbc9c0bf2af0392d11f387fbb8bc3387b2c56a8a586869b53ddfffc5470a8f382fed632c7abb34515334e293b2fd57c08eb161bc7bbaecac8363b003ee7765c897376955f731e48580d5e96827ab4806fe35efc86537eef1473180f263342ca7ef06dcf805ddf1e39cb9131207f13aad017adf", 0xd2}, {&(0x7f0000000a80)="efb69e63e160478d3277b6705d46d308778f4d5fec72de23bf57c7d0f28d0bb24dda89e73f8f593f63e01550c61a090ae4afcb3e1d19feff0e1fb79c8c2a56668be1643a0ee51dcc5ad147a8d1b59e604f91f316880dc3c9df07889143543d4155fb6e1a472bc693e2d275e550e439a85a7572cbc1b97e0201f0b6692b380c14cf754eb6f2f2006d24404f1bd5d7a03d94d4911b517307e6837adf1bac2c71b61c1d6a43c4853b2de82a3eaf76528e1fcba1f9eca4ce593999e9280931cc9a5625f3c77b7e96dbedd1a488", 0xcb}, {&(0x7f0000001980)="922446f0d1a68b6e82c96a61f9169e13ca1f13afc59f62d865287285fe20f25d61b870e557087cf8707ad0bc71c883f3cc5a38a4cba5b231777698ee0b2a4c9871a73ffaefe30f80026d4a5a8dc9a974cc271d879c0895083feb8c2efbe2f400f6c6b0f82e2a7801dc68557b980c624268f7e102244284327a63402989d6ed67645f48d3d342a7f1de55371f3d98c3b53ccb31402887fe9d6ff36fcbe669dbdc8542d82d5c223b0baaea1a7c9cdf5247bff67dc524680035107446d49cef619a7d9dbc63f0be68c1cbe5bb46e698e0d32fc5f27aabff585d0f28d5ef942c34b269f0c6581c03fe13a3b5f74987ff8cd1d12c56eed8a4a18cf77522a8899806869bec6d41383f54b8458986fceba436e624aa4c9c036ed31acc555b252bbad5c803044c24a34d9a1a9598b0254a69ab4bc5ca6eadc557cdc303ffb300aad5f4fdaf01ac8bd9ad38652fce3626a06ce7c7535e54c25d9fe6fef76835e191f61ea0a6b1ad9e5c8671bdb387f28a63eaab5a38e4b8f72aaf1ddc3608104581750467205adb7dbc37548c24b41142a4682e42335416e736b5a2ee7e10ccee909ade97bdb45a7ea015f9ddc12e4b379bd9f6e68ed21c61159cb1944a0eca30cc62f95b51a3a549034282fe341f94fd702819b700087f209dffa3858d26b702eeb84e7e337f57e691330d1b27ee305d80d88072f4beeb3573632ec4a685886d2fd7e3c67a2ca2c8b99a5d1f8ff966d912b5d0139b6b61bbf82a3255256acad618c17bd724b97fddb855e2db014fcf3b41d8e7467f2021b66767d2d5487dc2efd4c0bc3a6b906b68996a2526fd9ce9db09dca18f54d5f57307574414520072bf71931d79eb994e2569e80e68c762c92ff82f0ae9bfb961733dbf5ed6e6260cf1ab56470c12a8ca1000a7a78d5607c4810d0469d1c259fea6226f69cb02bca31c6cf0009fe9724e05ca4535a45bc96a59b7390eabbedb3cf787361e39c84d5c461990d9ecad3fcb4b8c8d9e8dfca089633c2fa5625332a6c98c8774fc6275481dd45e907d1749db526345f082dac545f49bb26e8b4a64c0806d8fd17c0e96ba17c65bb406b4cceb4857ae6ed9aec002244c821fa2bcf8f1c631bacf6e93d5ce02c8734f4db058ce517a60ebfe3ae1b0b16ef894ab9d17332add10b3f103d63e6467758a503646793eb9657b768b3fc74aee61928e67c17e440c3af71d9c1f4472730f633d7bc2172db35b108a9ed9fd5e63a87a4124383652943c02dbbd2288f4e9cdf80ded0cdd05c0d8daf36e964c575b57a10cd781559067ce6aab8d09076e56010218d36ee5d7535bd4989a38e2438954b854fe3e35aba5b0432d0c91abfc50d6dab45d6c79997df8f3d1c0bbd8c030c4ea11d16637f6faa969d5950ce50bd84196c6bc2eb06301e11498b174b7ed8502a0c3d22d30110705336e92a6b3d68f79492b", 0x400}, {&(0x7f0000002980)="78f4a6919f4bbd527279f97430e51616bdd261a358215ce00123c6d56047b0f7aa4e632e582498f5e7400f5e620d1884d06398aba84d8a51fd39720cb0dfaf3403b2883d44517028f128936304fc40a6bffa39295129e500c2e908b0cb02e1cf6b6059e371c120100f69118987f92f5cea4c0a3f57899ce505680f0974241c11100793a2462e90eec154eb055f8c26f326739dd6cf2b87d9164bfb3141a6519aa42c3b831e754017a2b7417dabb7526edbcc45244b1a7836d1d28b5984cf", 0xbe}, {&(0x7f0000002a40)}], 0x6}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x4000}) 4.420411471s ago: executing program 2 (id=2214): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688812f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.550378708s ago: executing program 0 (id=2215): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.549846188s ago: executing program 2 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x201, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 3.387476164s ago: executing program 1 (id=2220): socket$kcm(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.564435279s ago: executing program 0 (id=2221): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="8b77377f0aef2878c5e8d932e82f85839579317c", @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) socket$kcm(0x1e, 0x1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 2.409927354s ago: executing program 1 (id=2222): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r1, @ANYBLOB="8b77377f0aef2878c5e8d932e82f85839579317cefb6", @ANYRESDEC=r1], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) socket$kcm(0x1e, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 1.188555273s ago: executing program 0 (id=2223): socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0xfffffffffffffffc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600200000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.163870264s ago: executing program 2 (id=2224): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/70, 0x46}], 0x8, &(0x7f0000000780)=""/198, 0xc6}, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x18, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069c391f003dc68c84490aee2b9bd6efb2502eaf60d00", 0x2e}, {&(0x7f0000000980)="ab38f76e4590a7937b70b1cfd8e44e21a648c4fd5824b5e5d66e3c0b9b21ee6b194c18053c7f0f3cfe98bb4e1e7aca615dc0dd5a7e9e362237aab5e7291ce90fa06ffd54cf51161c4478d93aaead982b471bebf373182856129d2d8f5dd292bbc9c0bf2af0392d11f387fbb8bc3387b2c56a8a586869b53ddfffc5470a8f382fed632c7abb34515334e293b2fd57c08eb161bc7bbaecac8363b003ee7765c897376955f731e48580d5e96827ab4806fe35efc86537eef1473180f263342ca7ef06dcf805ddf1e39cb9131207f13aad017adf", 0xd2}, {&(0x7f0000000a80)="efb69e63e160478d3277b6705d46d308778f4d5fec72de23bf57c7d0f28d0bb24dda89e73f8f593f63e01550c61a090ae4afcb3e1d19feff0e1fb79c8c2a56668be1643a0ee51dcc5ad147a8d1b59e604f91f316880dc3c9df07889143543d4155fb6e1a472bc693e2d275e550e439a85a7572cbc1b97e0201f0b6692b380c14cf754eb6f2f2006d24404f1bd5d7a03d94d4911b517307e6837adf1bac2c71b61c1d6a43c4853b2de82a3eaf76528e1fcba1f9eca4ce593999e9280931cc9a5625f3c77b7e96dbedd1a488", 0xcb}, {&(0x7f0000001980)="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", 0x400}, {&(0x7f0000002980)="78f4a6919f4bbd527279f97430e51616bdd261a358215ce00123c6d56047b0f7aa4e632e582498f5e7400f5e620d1884d06398aba84d8a51fd39720cb0dfaf3403b2883d44517028f128936304fc40a6bffa39295129e500c2e908b0cb02e1cf6b6059e371c120100f69118987f92f5cea4c0a3f57899ce505680f0974241c11100793a2462e90eec154eb055f8c26f326739dd6cf2b87d9164bfb3141a6519aa42c3b831e754017a2b7417dabb7526edbcc45244b1a7836d1d28b5984cf", 0xbe}, {&(0x7f0000002a40)}], 0x6}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x4000}) 1.149222064s ago: executing program 1 (id=2225): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688812f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 471.948545ms ago: executing program 0 (id=2226): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x100000, 0x20032, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xffffffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x4, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$kcm(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[{0x10, 0x84, 0x6}], 0x10}, 0x4000000) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x0, 0x0, 0x2, 0xfffffc14}}], 0x6}, 0x4008804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x26}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180080000000a294ce77bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x14, &(0x7f0000000040), 0x3b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xff, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x2, 0x20002, 0x40, r6, 0x7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000006e31e6a926597134336450909a6a00"/42], 0x48) 283.889762ms ago: executing program 1 (id=2227): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000ca466ccab787b2f54b9f8944876d45331b7a21c88e7d611ea9be0287cae12f91924f8a1fdca668b1debc1682d369217cbca6c70d518f94652afd62efe9920edd6cacd104aae97cd4749ef5b0e1e25acf2be48911adf4d8b81f6fe85c94e4ecfc21ec94c36fdaae84d0d38c35e1b5535f660b0762", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000740)}, 0x0) 139.870946ms ago: executing program 2 (id=2228): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x100, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="3e1f8b0b666a32349780cca83e9e0880", 0x10}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000100), 0x12) r9 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 138.713616ms ago: executing program 1 (id=2235): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000ca466ccab787b2f54b9f8944876d45331b7a21c88e7d611ea9be0287cae12f91924f8a1fdca668b1debc1682d369217cbca6c70d518f94652afd62efe9920edd6cacd104aae97cd4749ef5b0e1e25acf2be48911adf4d8b81f6fe85c94e4ecfc21ec94c36fdaae84d0d38c35e1b5535f660b0762", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f00000001c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000740)}, 0x0) 61.657248ms ago: executing program 0 (id=2229): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0xe391e4aa703794f6, 0x5, 0x43a5bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0xa234, 0x1, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b702000014fa0000b70300000000000085000000830000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 0s ago: executing program 1 (id=2230): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="8b77377f0aef2878c5e8d932e82f85839579317c", @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) socket$kcm(0x1e, 0x1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) kernel console output (not intermixed with test programs): .1556'. [ 401.434816][T10187] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 401.953876][T10194] netlink: 'syz.2.1559': attribute type 2 has an invalid length. [ 401.965247][T10194] netlink: 'syz.2.1559': attribute type 8 has an invalid length. [ 401.980434][T10194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1559'. [ 402.363867][T10212] FAULT_INJECTION: forcing a failure. [ 402.363867][T10212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.390716][T10212] CPU: 0 PID: 10212 Comm: syz.2.1568 Not tainted syzkaller #0 [ 402.398263][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.408399][T10212] Call Trace: [ 402.411740][T10212] [ 402.414734][T10212] dump_stack_lvl+0x18c/0x250 [ 402.419473][T10212] ? show_regs_print_info+0x20/0x20 [ 402.424756][T10212] ? load_image+0x420/0x420 [ 402.429354][T10212] ? __might_fault+0xaa/0x120 [ 402.434115][T10212] ? __lock_acquire+0x7d40/0x7d40 [ 402.439269][T10212] should_fail_ex+0x39d/0x4d0 [ 402.444092][T10212] _copy_from_user+0x2f/0xe0 [ 402.448800][T10212] ___sys_sendmsg+0x1c7/0x360 [ 402.453552][T10212] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.458427][T10212] ? __lock_acquire+0x7d40/0x7d40 [ 402.463575][T10212] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.468483][T10212] ? __x64_sys_sendmsg+0x80/0x80 [ 402.473510][T10212] ? lockdep_hardirqs_on+0x98/0x150 [ 402.478805][T10212] do_syscall_64+0x55/0xb0 [ 402.483286][T10212] ? clear_bhb_loop+0x40/0x90 [ 402.488052][T10212] ? clear_bhb_loop+0x40/0x90 [ 402.492799][T10212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.498747][T10212] RIP: 0033:0x7eff4d99ce59 [ 402.503206][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.522861][T10212] RSP: 002b:00007eff4e8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.531333][T10212] RAX: ffffffffffffffda RBX: 00007eff4dc15fa0 RCX: 00007eff4d99ce59 [ 402.539351][T10212] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 402.547366][T10212] RBP: 00007eff4e8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 402.555383][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.563404][T10212] R13: 00007eff4dc16038 R14: 00007eff4dc15fa0 R15: 00007ffd0599db78 [ 402.571457][T10212] [ 402.913425][T10216] netlink: 'syz.3.1570': attribute type 2 has an invalid length. [ 402.937725][T10216] netlink: 'syz.3.1570': attribute type 8 has an invalid length. [ 402.951740][T10216] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1570'. [ 403.020694][T10217] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 403.030200][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1569'. [ 403.300052][T10236] netlink: 'syz.3.1577': attribute type 2 has an invalid length. [ 403.394686][T10237] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 403.408188][T10237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 403.420259][T10237] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 403.677889][T10253] netlink: 'syz.0.1581': attribute type 2 has an invalid length. [ 403.686351][T10253] netlink: 'syz.0.1581': attribute type 8 has an invalid length. [ 403.695286][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'. [ 404.298202][T10257] FAULT_INJECTION: forcing a failure. [ 404.298202][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.311505][T10257] CPU: 1 PID: 10257 Comm: syz.1.1584 Not tainted syzkaller #0 [ 404.319032][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.329142][T10257] Call Trace: [ 404.332483][T10257] [ 404.335477][T10257] dump_stack_lvl+0x18c/0x250 [ 404.340240][T10257] ? show_regs_print_info+0x20/0x20 [ 404.345526][T10257] ? load_image+0x420/0x420 [ 404.350115][T10257] ? __might_fault+0xaa/0x120 [ 404.354879][T10257] ? __lock_acquire+0x7d40/0x7d40 [ 404.360003][T10257] should_fail_ex+0x39d/0x4d0 [ 404.364802][T10257] _copy_from_iter+0x1d9/0x12e0 [ 404.369732][T10257] ? __virt_addr_valid+0x18c/0x540 [ 404.374912][T10257] ? __lock_acquire+0x7d40/0x7d40 [ 404.380066][T10257] ? copyout_mc+0x70/0x70 [ 404.384487][T10257] ? __virt_addr_valid+0x18c/0x540 [ 404.389684][T10257] ? __virt_addr_valid+0x18c/0x540 [ 404.394871][T10257] ? __virt_addr_valid+0x469/0x540 [ 404.400034][T10257] ? __check_object_size+0x506/0xa20 [ 404.405383][T10257] kernfs_fop_write_iter+0x1a4/0x520 [ 404.410785][T10257] vfs_write+0x46c/0x990 [ 404.415098][T10257] ? file_end_write+0x250/0x250 [ 404.420013][T10257] ? __fget_files+0x43d/0x4b0 [ 404.424771][T10257] ? __fdget_pos+0x2a3/0x330 [ 404.429409][T10257] ? ksys_write+0x75/0x260 [ 404.433888][T10257] ksys_write+0x150/0x260 [ 404.438282][T10257] ? __ia32_sys_read+0x90/0x90 [ 404.443122][T10257] ? lockdep_hardirqs_on+0x98/0x150 [ 404.448404][T10257] do_syscall_64+0x55/0xb0 [ 404.452877][T10257] ? clear_bhb_loop+0x40/0x90 [ 404.457597][T10257] ? clear_bhb_loop+0x40/0x90 [ 404.462314][T10257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.468254][T10257] RIP: 0033:0x7fc70559ce59 [ 404.472829][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.492478][T10257] RSP: 002b:00007fc7037f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.500941][T10257] RAX: ffffffffffffffda RBX: 00007fc705816090 RCX: 00007fc70559ce59 [ 404.508975][T10257] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000c [ 404.516982][T10257] RBP: 00007fc7037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.524996][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.533038][T10257] R13: 00007fc705816128 R14: 00007fc705816090 R15: 00007ffe6aaa56f8 [ 404.541117][T10257] [ 405.053312][T10269] syzkaller0: entered promiscuous mode [ 405.059258][T10269] syzkaller0: entered allmulticast mode [ 405.503019][T10270] netlink: 'syz.2.1590': attribute type 40 has an invalid length. [ 405.593788][T10275] FAULT_INJECTION: forcing a failure. [ 405.593788][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.621934][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1592'. [ 405.647292][T10276] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 405.661549][T10275] CPU: 0 PID: 10275 Comm: syz.0.1591 Not tainted syzkaller #0 [ 405.670448][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.680540][T10275] Call Trace: [ 405.683867][T10275] [ 405.686850][T10275] dump_stack_lvl+0x18c/0x250 [ 405.691571][T10275] ? show_regs_print_info+0x20/0x20 [ 405.696801][T10275] ? load_image+0x420/0x420 [ 405.701333][T10275] ? __lock_acquire+0x7d40/0x7d40 [ 405.706394][T10275] ? snprintf+0xe9/0x140 [ 405.710718][T10275] should_fail_ex+0x39d/0x4d0 [ 405.715439][T10275] _copy_to_user+0x2f/0xa0 [ 405.719895][T10275] simple_read_from_buffer+0xe7/0x150 [ 405.725330][T10275] proc_fail_nth_read+0x1e8/0x260 [ 405.730404][T10275] ? proc_fault_inject_write+0x360/0x360 [ 405.736067][T10275] ? fsnotify_perm+0x271/0x5e0 [ 405.740945][T10275] ? proc_fault_inject_write+0x360/0x360 [ 405.746644][T10275] vfs_read+0x28b/0x970 [ 405.750846][T10275] ? kernel_read+0x1e0/0x1e0 [ 405.755471][T10275] ? __fget_files+0x28/0x4b0 [ 405.760086][T10275] ? __fget_files+0x28/0x4b0 [ 405.764721][T10275] ? __fget_files+0x43d/0x4b0 [ 405.769463][T10275] ? __fdget_pos+0x2a3/0x330 [ 405.774080][T10275] ? ksys_read+0x75/0x260 [ 405.778440][T10275] ksys_read+0x150/0x260 [ 405.782854][T10275] ? vfs_write+0x990/0x990 [ 405.787309][T10275] ? lockdep_hardirqs_on+0x98/0x150 [ 405.792561][T10275] do_syscall_64+0x55/0xb0 [ 405.797019][T10275] ? clear_bhb_loop+0x40/0x90 [ 405.801733][T10275] ? clear_bhb_loop+0x40/0x90 [ 405.806450][T10275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.812393][T10275] RIP: 0033:0x7f9758b5d68e [ 405.816838][T10275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.836569][T10275] RSP: 002b:00007f9759abdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.845014][T10275] RAX: ffffffffffffffda RBX: 00007f9759abe6c0 RCX: 00007f9758b5d68e [ 405.853014][T10275] RDX: 000000000000000f RSI: 00007f9759abe0a0 RDI: 0000000000000004 [ 405.861013][T10275] RBP: 00007f9759abe090 R08: 0000000000000000 R09: 0000000000000000 [ 405.869005][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.876997][T10275] R13: 00007f9758e16038 R14: 00007f9758e15fa0 R15: 00007ffd4cb10f18 [ 405.885024][T10275] [ 405.918373][T10280] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1593'. [ 407.617574][T10283] validate_nla: 1 callbacks suppressed [ 407.617589][T10283] netlink: 'syz.0.1594': attribute type 2 has an invalid length. [ 407.631151][T10283] netlink: 'syz.0.1594': attribute type 8 has an invalid length. [ 407.638880][T10283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1594'. [ 407.648137][T10286] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1595'. [ 407.886468][T10300] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 407.920863][T10300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1600'. [ 407.941275][T10300] bridge0: port 3(ipvlan1) entered blocking state [ 407.948755][T10300] bridge0: port 3(ipvlan1) entered disabled state [ 408.001572][T10300] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 408.027040][T10304] netlink: 'syz.1.1601': attribute type 4 has an invalid length. [ 408.049567][T10304] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1601'. [ 408.113590][T10306] netlink: 'syz.0.1602': attribute type 4 has an invalid length. [ 408.124655][T10306] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1602'. [ 408.187808][T10306] .`: renamed from bond0 (while UP) [ 408.352567][T10313] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1604'. [ 409.149644][T10319] netlink: 'syz.1.1606': attribute type 2 has an invalid length. [ 409.158229][T10319] netlink: 'syz.1.1606': attribute type 8 has an invalid length. [ 409.169743][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1606'. [ 409.209634][T10320] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 409.223116][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1607'. [ 409.234275][T10320] bridge0: port 3(ipvlan1) entered blocking state [ 409.242045][T10320] bridge0: port 3(ipvlan1) entered disabled state [ 409.261604][T10320] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 409.280972][T10323] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1608'. [ 409.366173][T10328] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 409.378001][T10328] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 409.714324][T10343] syzkaller0: entered promiscuous mode [ 409.719955][T10343] syzkaller0: entered allmulticast mode [ 410.098349][T10349] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1617'. [ 410.738899][T10356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'. [ 412.131552][T10353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1618'. [ 412.141031][T10356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'. [ 412.338139][T10370] FAULT_INJECTION: forcing a failure. [ 412.338139][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.353643][T10370] CPU: 1 PID: 10370 Comm: syz.0.1623 Not tainted syzkaller #0 [ 412.361173][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.371269][T10370] Call Trace: [ 412.374583][T10370] [ 412.377559][T10370] dump_stack_lvl+0x18c/0x250 [ 412.382282][T10370] ? show_regs_print_info+0x20/0x20 [ 412.387538][T10370] ? load_image+0x420/0x420 [ 412.392087][T10370] ? __might_fault+0xaa/0x120 [ 412.396816][T10370] ? __lock_acquire+0x7d40/0x7d40 [ 412.401891][T10370] should_fail_ex+0x39d/0x4d0 [ 412.406639][T10370] _copy_from_user+0x2f/0xe0 [ 412.411284][T10370] ___sys_sendmsg+0x1c7/0x360 [ 412.416012][T10370] ? get_pid_task+0x20/0x1e0 [ 412.420700][T10370] ? __sys_sendmsg+0x2a0/0x2a0 [ 412.425530][T10370] ? __lock_acquire+0x7d40/0x7d40 [ 412.430615][T10370] __se_sys_sendmsg+0x1c2/0x2b0 [ 412.435514][T10370] ? __x64_sys_sendmsg+0x80/0x80 [ 412.440600][T10370] ? lockdep_hardirqs_on+0x98/0x150 [ 412.445876][T10370] do_syscall_64+0x55/0xb0 [ 412.450346][T10370] ? clear_bhb_loop+0x40/0x90 [ 412.455067][T10370] ? clear_bhb_loop+0x40/0x90 [ 412.459786][T10370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.465722][T10370] RIP: 0033:0x7f9758b9ce59 [ 412.470166][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.489818][T10370] RSP: 002b:00007f9759a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.498275][T10370] RAX: ffffffffffffffda RBX: 00007f9758e16090 RCX: 00007f9758b9ce59 [ 412.506281][T10370] RDX: 0000000000008000 RSI: 0000200000001780 RDI: 0000000000000003 [ 412.514289][T10370] RBP: 00007f9759a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 412.522297][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.530317][T10370] R13: 00007f9758e16128 R14: 00007f9758e16090 R15: 00007ffd4cb10f18 [ 412.538344][T10370] [ 412.663131][T10380] validate_nla: 5 callbacks suppressed [ 412.663150][T10380] netlink: 'syz.1.1625': attribute type 10 has an invalid length. [ 412.679284][T10380] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 413.020347][T10384] FAULT_INJECTION: forcing a failure. [ 413.020347][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.034120][T10384] CPU: 0 PID: 10384 Comm: syz.3.1628 Not tainted syzkaller #0 [ 413.041610][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.051722][T10384] Call Trace: [ 413.055044][T10384] [ 413.058028][T10384] dump_stack_lvl+0x18c/0x250 [ 413.062752][T10384] ? show_regs_print_info+0x20/0x20 [ 413.068031][T10384] ? load_image+0x420/0x420 [ 413.072652][T10384] ? __lock_acquire+0x7d40/0x7d40 [ 413.077705][T10384] ? snprintf+0xe9/0x140 [ 413.081992][T10384] should_fail_ex+0x39d/0x4d0 [ 413.086700][T10384] _copy_to_user+0x2f/0xa0 [ 413.091152][T10384] simple_read_from_buffer+0xe7/0x150 [ 413.096588][T10384] proc_fail_nth_read+0x1e8/0x260 [ 413.101672][T10384] ? proc_fault_inject_write+0x360/0x360 [ 413.107357][T10384] ? fsnotify_perm+0x271/0x5e0 [ 413.112138][T10384] ? proc_fault_inject_write+0x360/0x360 [ 413.117806][T10384] vfs_read+0x28b/0x970 [ 413.122045][T10384] ? kernel_read+0x1e0/0x1e0 [ 413.126690][T10384] ? __fget_files+0x28/0x4b0 [ 413.131327][T10384] ? __fget_files+0x28/0x4b0 [ 413.136001][T10384] ? __fget_files+0x43d/0x4b0 [ 413.140749][T10384] ? __fdget_pos+0x2a3/0x330 [ 413.145401][T10384] ? ksys_read+0x75/0x260 [ 413.149801][T10384] ksys_read+0x150/0x260 [ 413.154101][T10384] ? vfs_write+0x990/0x990 [ 413.158580][T10384] ? lockdep_hardirqs_on+0x98/0x150 [ 413.163817][T10384] do_syscall_64+0x55/0xb0 [ 413.168278][T10384] ? clear_bhb_loop+0x40/0x90 [ 413.173001][T10384] ? clear_bhb_loop+0x40/0x90 [ 413.177712][T10384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.183654][T10384] RIP: 0033:0x7f06b9d5d68e [ 413.188189][T10384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.207831][T10384] RSP: 002b:00007f06bac37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.216274][T10384] RAX: ffffffffffffffda RBX: 00007f06bac386c0 RCX: 00007f06b9d5d68e [ 413.224283][T10384] RDX: 000000000000000f RSI: 00007f06bac380a0 RDI: 0000000000000005 [ 413.232286][T10384] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 413.240289][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.248284][T10384] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 413.256307][T10384] [ 413.409871][T10393] __nla_validate_parse: 2 callbacks suppressed [ 413.409891][T10393] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1629'. [ 413.664363][T10392] netlink: 'syz.0.1630': attribute type 2 has an invalid length. [ 413.687524][T10392] netlink: 'syz.0.1630': attribute type 8 has an invalid length. [ 413.726979][T10392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1630'. [ 415.256044][T10412] syzkaller0: entered promiscuous mode [ 415.261800][T10412] syzkaller0: entered allmulticast mode [ 415.268983][T10416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1637'. [ 417.225878][T10429] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 417.233845][T10429] netlink: 'syz.3.1641': attribute type 8 has an invalid length. [ 417.241776][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1641'. [ 417.251061][T10438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1644'. [ 417.260424][T10442] netlink: 'syz.1.1645': attribute type 10 has an invalid length. [ 417.276842][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1645'. [ 417.307188][T10442] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 417.525807][T10454] FAULT_INJECTION: forcing a failure. [ 417.525807][T10454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.539314][T10454] CPU: 0 PID: 10454 Comm: syz.1.1649 Not tainted syzkaller #0 [ 417.546807][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.556904][T10454] Call Trace: [ 417.560213][T10454] [ 417.563178][T10454] dump_stack_lvl+0x18c/0x250 [ 417.567909][T10454] ? show_regs_print_info+0x20/0x20 [ 417.573146][T10454] ? load_image+0x420/0x420 [ 417.577736][T10454] should_fail_ex+0x39d/0x4d0 [ 417.582517][T10454] prepare_alloc_pages+0x1e2/0x5f0 [ 417.587701][T10454] __alloc_pages+0x134/0x460 [ 417.592330][T10454] ? zone_statistics+0x170/0x170 [ 417.597398][T10454] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.603436][T10454] alloc_pages_node+0x10e/0x170 [ 417.608341][T10454] ? skb_splice_from_iter+0xc10/0xc10 [ 417.613764][T10454] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 417.619749][T10454] ? lockdep_hardirqs_on+0x98/0x150 [ 417.625008][T10454] __napi_alloc_skb+0x381/0x560 [ 417.629909][T10454] napi_get_frags+0x6c/0x150 [ 417.634635][T10454] ? napi_get_frags_check+0x24/0x90 [ 417.639886][T10454] napi_get_frags_check+0x39/0x90 [ 417.644962][T10454] netif_napi_add_weight+0x9e3/0xdf0 [ 417.650283][T10454] gro_cells_init+0x197/0x200 [ 417.655076][T10454] ip6gre_tunnel_init_common+0x235/0xc20 [ 417.660822][T10454] ip6gre_tunnel_init+0x1d/0x150 [ 417.665792][T10454] register_netdevice+0x67b/0x1bb0 [ 417.670943][T10454] ? __kmem_cache_alloc_node+0x13a/0x250 [ 417.676619][T10454] ? kvmalloc_node+0x70/0x180 [ 417.681329][T10454] ? netif_stacked_transfer_operstate+0x210/0x210 [ 417.687769][T10454] ? __asan_memset+0x22/0x40 [ 417.692387][T10454] ? alloc_netdev_mqs+0xbb7/0x1040 [ 417.697535][T10454] ? __asan_memcpy+0x40/0x70 [ 417.702157][T10454] ? alloc_netdev_mqs+0xca6/0x1040 [ 417.707292][T10454] ? ip6gre_tunnel_locate+0x274/0x5d0 [ 417.712713][T10454] ip6gre_tunnel_locate+0x315/0x5d0 [ 417.718008][T10454] ? ip6gre_tnl_change+0x920/0x920 [ 417.723149][T10454] ? __asan_memcpy+0x40/0x70 [ 417.727766][T10454] ? ip6gre_tunnel_siocdevprivate+0x521/0x740 [ 417.733947][T10454] ip6gre_tunnel_siocdevprivate+0x54e/0x740 [ 417.739889][T10454] ? ip6gre_tunnel_init+0x150/0x150 [ 417.745121][T10454] ? __mutex_lock+0x315/0xcc0 [ 417.749836][T10454] ? dev_ioctl+0x83c/0x1140 [ 417.754449][T10454] ? dev_ifsioc+0x958/0xc40 [ 417.759077][T10454] dev_ioctl+0x84c/0x1140 [ 417.763471][T10454] sock_ioctl+0x74c/0x7e0 [ 417.767864][T10454] ? sock_poll+0x3e0/0x3e0 [ 417.772326][T10454] ? bpf_lsm_file_ioctl+0x9/0x10 [ 417.777289][T10454] ? security_file_ioctl+0x80/0xa0 [ 417.782421][T10454] ? sock_poll+0x3e0/0x3e0 [ 417.786908][T10454] __se_sys_ioctl+0xfd/0x170 [ 417.791522][T10454] do_syscall_64+0x55/0xb0 [ 417.795963][T10454] ? clear_bhb_loop+0x40/0x90 [ 417.800670][T10454] ? clear_bhb_loop+0x40/0x90 [ 417.805386][T10454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.811315][T10454] RIP: 0033:0x7fc70559ce59 [ 417.815745][T10454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.835375][T10454] RSP: 002b:00007fc706377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.843850][T10454] RAX: ffffffffffffffda RBX: 00007fc705815fa0 RCX: 00007fc70559ce59 [ 417.851869][T10454] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000b [ 417.859868][T10454] RBP: 00007fc706377090 R08: 0000000000000000 R09: 0000000000000000 [ 417.867941][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.875936][T10454] R13: 00007fc705816038 R14: 00007fc705815fa0 R15: 00007ffe6aaa56f8 [ 417.883964][T10454] [ 417.968555][T10462] netlink: 'syz.3.1652': attribute type 25 has an invalid length. [ 418.010912][T10462] netlink: 'syz.3.1652': attribute type 32 has an invalid length. [ 418.092856][T10464] netlink: 'syz.0.1653': attribute type 3 has an invalid length. [ 418.407252][T10478] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1658'. [ 419.247158][T10487] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 419.290851][T10487] netlink: 'syz.0.1660': attribute type 8 has an invalid length. [ 419.310185][T10487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1660'. [ 419.396664][T10495] netlink: 'syz.1.1666': attribute type 5 has an invalid length. [ 419.496385][T10496] syzkaller0: entered promiscuous mode [ 419.502198][T10496] syzkaller0: entered allmulticast mode [ 419.569819][T10498] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 419.579044][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 419.593282][T10498] bridge0: port 3(ipvlan1) entered blocking state [ 419.600368][T10498] bridge0: port 3(ipvlan1) entered disabled state [ 419.628032][T10498] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 421.733272][T10521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1672'. [ 422.054546][T10530] netlink: 'syz.3.1676': attribute type 2 has an invalid length. [ 422.091686][T10530] netlink: 'syz.3.1676': attribute type 8 has an invalid length. [ 422.128866][T10530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'. [ 423.141358][T10549] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1681'. [ 423.813649][T10558] syzkaller0: entered promiscuous mode [ 423.819328][T10558] syzkaller0: entered allmulticast mode [ 424.084964][T10570] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1690'. [ 426.092381][T10573] netlink: 'syz.3.1689': attribute type 2 has an invalid length. [ 426.100318][T10573] netlink: 'syz.3.1689': attribute type 8 has an invalid length. [ 426.108726][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1689'. [ 427.066755][T10629] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1698'. [ 427.519696][T10651] netlink: 'syz.1.1705': attribute type 2 has an invalid length. [ 427.527806][T10651] netlink: 'syz.1.1705': attribute type 8 has an invalid length. [ 427.536070][T10651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1705'. [ 428.069881][T10641] FAULT_INJECTION: forcing a failure. [ 428.069881][T10641] name failslab, interval 1, probability 0, space 0, times 0 [ 428.084383][T10641] CPU: 1 PID: 10641 Comm: syz.2.1702 Not tainted syzkaller #0 [ 428.091888][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.101970][T10641] Call Trace: [ 428.105277][T10641] [ 428.108227][T10641] dump_stack_lvl+0x18c/0x250 [ 428.112934][T10641] ? show_regs_print_info+0x20/0x20 [ 428.118165][T10641] ? load_image+0x420/0x420 [ 428.122697][T10641] ? __might_sleep+0xe0/0xe0 [ 428.127325][T10641] ? __lock_acquire+0x7d40/0x7d40 [ 428.132380][T10641] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.137624][T10641] should_fail_ex+0x39d/0x4d0 [ 428.142340][T10641] should_failslab+0x9/0x20 [ 428.146877][T10641] slab_pre_alloc_hook+0x59/0x310 [ 428.151938][T10641] ? acct_exit_ns+0xf0/0xf0 [ 428.156474][T10641] kmem_cache_alloc+0x5a/0x2d0 [ 428.161359][T10641] ? taskstats_exit+0xcc/0x9d0 [ 428.166204][T10641] taskstats_exit+0xcc/0x9d0 [ 428.170836][T10641] ? tty_audit_exit+0x152/0x200 [ 428.175771][T10641] do_exit+0x8d0/0x2460 [ 428.179968][T10641] ? put_task_struct+0xc0/0xc0 [ 428.184767][T10641] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 428.190781][T10641] ? get_signal+0x1068/0x13f0 [ 428.195504][T10641] ? lock_chain_count+0x20/0x20 [ 428.200390][T10641] ? _raw_spin_lock_irq+0xbb/0xf0 [ 428.205456][T10641] do_group_exit+0x21b/0x2d0 [ 428.210082][T10641] ? lockdep_hardirqs_on+0x98/0x150 [ 428.215326][T10641] get_signal+0x12fc/0x13f0 [ 428.219891][T10641] arch_do_signal_or_restart+0xc2/0x800 [ 428.225505][T10641] ? get_sigframe_size+0x20/0x20 [ 428.230486][T10641] ? exit_to_user_mode_loop+0x3b/0x110 [ 428.235969][T10641] exit_to_user_mode_loop+0x70/0x110 [ 428.241310][T10641] exit_to_user_mode_prepare+0xee/0x180 [ 428.246898][T10641] syscall_exit_to_user_mode+0x1a/0x50 [ 428.252476][T10641] do_syscall_64+0x61/0xb0 [ 428.256909][T10641] ? clear_bhb_loop+0x40/0x90 [ 428.261605][T10641] ? clear_bhb_loop+0x40/0x90 [ 428.266302][T10641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.272224][T10641] RIP: 0033:0x7eff4d99ce59 [ 428.276662][T10641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.296291][T10641] RSP: 002b:00007eff4e8d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.304733][T10641] RAX: fffffffffffffffc RBX: 00007eff4dc15fa0 RCX: 00007eff4d99ce59 [ 428.312723][T10641] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 428.320724][T10641] RBP: 00007eff4e8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 428.328707][T10641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.336686][T10641] R13: 00007eff4dc16038 R14: 00007eff4dc15fa0 R15: 00007ffd0599db78 [ 428.344702][T10641] [ 428.535410][T10654] syzkaller0: entered promiscuous mode [ 428.547341][T10654] syzkaller0: entered allmulticast mode [ 428.570359][T10662] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1709'. [ 431.120621][T10681] netlink: 'syz.0.1718': attribute type 2 has an invalid length. [ 431.130730][T10681] netlink: 'syz.0.1718': attribute type 8 has an invalid length. [ 431.138509][T10681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1718'. [ 431.294688][T10687] netlink: 'syz.3.1719': attribute type 25 has an invalid length. [ 431.327173][T10687] netlink: 'syz.3.1719': attribute type 32 has an invalid length. [ 431.347333][T10691] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1720'. [ 431.705934][T10697] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 431.730673][T10697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1722'. [ 431.741027][T10697] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 432.332428][T10714] netlink: 'syz.0.1728': attribute type 2 has an invalid length. [ 432.340300][T10714] netlink: 'syz.0.1728': attribute type 8 has an invalid length. [ 432.350652][T10714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1728'. [ 432.742453][T10721] syzkaller0: entered promiscuous mode [ 432.748219][T10721] syzkaller0: entered allmulticast mode [ 432.903892][T10727] FAULT_INJECTION: forcing a failure. [ 432.903892][T10727] name failslab, interval 1, probability 0, space 0, times 0 [ 432.918247][T10727] CPU: 0 PID: 10727 Comm: syz.2.1737 Not tainted syzkaller #0 [ 432.925729][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.935793][T10727] Call Trace: [ 432.939117][T10727] [ 432.942062][T10727] dump_stack_lvl+0x18c/0x250 [ 432.946764][T10727] ? show_regs_print_info+0x20/0x20 [ 432.951987][T10727] ? load_image+0x420/0x420 [ 432.956547][T10727] ? mark_lock+0x94/0x320 [ 432.960906][T10727] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 432.966928][T10727] should_fail_ex+0x39d/0x4d0 [ 432.971652][T10727] should_failslab+0x9/0x20 [ 432.976214][T10727] slab_pre_alloc_hook+0x59/0x310 [ 432.981274][T10727] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.987466][T10727] ? sctp_add_bind_addr+0x8c/0x360 [ 432.992697][T10727] __kmem_cache_alloc_node+0x53/0x250 [ 432.998128][T10727] ? sctp_add_bind_addr+0x8c/0x360 [ 433.003279][T10727] kmalloc_trace+0x2a/0xe0 [ 433.007729][T10727] sctp_add_bind_addr+0x8c/0x360 [ 433.012692][T10727] sctp_copy_local_addr_list+0x315/0x4f0 [ 433.018442][T10727] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 433.024219][T10727] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 433.030340][T10727] ? sctp_v4_is_any+0x35/0x60 [ 433.035075][T10727] ? sctp_copy_one_addr+0x8c/0x350 [ 433.040231][T10727] sctp_bind_addr_copy+0xb3/0x3c0 [ 433.045284][T10727] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 433.051740][T10727] sctp_connect_new_asoc+0x2f9/0x6a0 [ 433.057054][T10727] ? __sctp_connect+0xd80/0xd80 [ 433.061958][T10727] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.067365][T10727] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 433.072948][T10727] ? security_sctp_bind_connect+0x89/0xb0 [ 433.078706][T10727] sctp_sendmsg+0x15d2/0x2910 [ 433.083432][T10727] ? sctp_getsockopt+0xb60/0xb60 [ 433.088438][T10727] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.094617][T10727] ? lockdep_hardirqs_on+0x98/0x150 [ 433.099853][T10727] ? sock_rps_record_flow+0x19/0x3f0 [ 433.105171][T10727] ? inet_sendmsg+0xe9/0x2f0 [ 433.109800][T10727] ? inet_send_prepare+0x260/0x260 [ 433.114941][T10727] ____sys_sendmsg+0x5ba/0x960 [ 433.119732][T10727] ? __lock_acquire+0x7d40/0x7d40 [ 433.124786][T10727] ? __asan_memset+0x22/0x40 [ 433.129414][T10727] ? __sys_sendmsg_sock+0x30/0x30 [ 433.134460][T10727] ? __import_iovec+0x5f2/0x850 [ 433.139347][T10727] ? import_iovec+0x73/0xa0 [ 433.143889][T10727] ___sys_sendmsg+0x2a6/0x360 [ 433.148632][T10727] ? __sys_sendmsg+0x2a0/0x2a0 [ 433.153473][T10727] __se_sys_sendmsg+0x1c2/0x2b0 [ 433.158357][T10727] ? __x64_sys_sendmsg+0x80/0x80 [ 433.163356][T10727] do_syscall_64+0x55/0xb0 [ 433.167816][T10727] ? clear_bhb_loop+0x40/0x90 [ 433.172520][T10727] ? clear_bhb_loop+0x40/0x90 [ 433.177237][T10727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.183167][T10727] RIP: 0033:0x7eff4d99ce59 [ 433.187608][T10727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.207256][T10727] RSP: 002b:00007eff4e8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.215703][T10727] RAX: ffffffffffffffda RBX: 00007eff4dc15fa0 RCX: 00007eff4d99ce59 [ 433.223707][T10727] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 433.231716][T10727] RBP: 00007eff4e8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 433.239739][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.247733][T10727] R13: 00007eff4dc16038 R14: 00007eff4dc15fa0 R15: 00007ffd0599db78 [ 433.255745][T10727] [ 434.848732][T10730] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1736'. [ 434.860627][T10739] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 434.880690][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1740'. [ 435.026723][T10746] netlink: 'syz.3.1744': attribute type 25 has an invalid length. [ 435.036562][T10746] netlink: 'syz.3.1744': attribute type 32 has an invalid length. [ 435.441462][T10754] delete_channel: no stack [ 435.449116][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'. [ 435.634741][T10767] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1751'. [ 436.004200][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1752'. [ 436.024401][T10771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 437.094392][T10776] syzkaller0: entered promiscuous mode [ 437.099942][T10776] syzkaller0: entered allmulticast mode [ 438.902543][T10790] validate_nla: 3 callbacks suppressed [ 438.902557][T10790] netlink: 'syz.0.1761': attribute type 2 has an invalid length. [ 438.917592][T10790] netlink: 'syz.0.1761': attribute type 8 has an invalid length. [ 438.925934][T10790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 439.134114][T10805] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1765'. [ 439.402076][T10806] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 439.412661][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 439.602893][T10814] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1770'. [ 440.046461][T10824] netlink: 'syz.0.1772': attribute type 2 has an invalid length. [ 440.061262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067814][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.100682][T10824] netlink: 'syz.0.1772': attribute type 8 has an invalid length. [ 440.119539][T10824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1772'. [ 440.435090][T10832] syzkaller0: entered promiscuous mode [ 440.440964][T10832] syzkaller0: entered allmulticast mode [ 442.323308][T10853] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1782'. [ 442.580239][T10854] netlink: 'syz.0.1783': attribute type 10 has an invalid length. [ 442.601275][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1783'. [ 442.623410][T10854] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 442.838046][T10863] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 442.846579][T10863] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1788'. [ 443.073844][T10865] netlink: 'syz.1.1789': attribute type 2 has an invalid length. [ 443.091765][T10865] netlink: 'syz.1.1789': attribute type 8 has an invalid length. [ 443.099719][T10865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1789'. [ 443.534164][T10875] syzkaller0: entered promiscuous mode [ 443.560035][T10875] syzkaller0: entered allmulticast mode [ 449.203698][T10899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1800'. [ 449.311115][T10902] FAULT_INJECTION: forcing a failure. [ 449.311115][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 449.326857][T10902] CPU: 1 PID: 10902 Comm: syz.3.1801 Not tainted syzkaller #0 [ 449.334395][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.344491][T10902] Call Trace: [ 449.347813][T10902] [ 449.350824][T10902] dump_stack_lvl+0x18c/0x250 [ 449.355560][T10902] ? show_regs_print_info+0x20/0x20 [ 449.360805][T10902] ? load_image+0x420/0x420 [ 449.365358][T10902] ? __might_sleep+0xe0/0xe0 [ 449.370008][T10902] ? __lock_acquire+0x7d40/0x7d40 [ 449.375179][T10902] should_fail_ex+0x39d/0x4d0 [ 449.379932][T10902] should_failslab+0x9/0x20 [ 449.384675][T10902] slab_pre_alloc_hook+0x59/0x310 [ 449.389765][T10902] ? kvmalloc_node+0x70/0x180 [ 449.394498][T10902] ? kvmalloc_node+0x70/0x180 [ 449.399269][T10902] __kmem_cache_alloc_node+0x53/0x250 [ 449.404705][T10902] ? kvmalloc_node+0x70/0x180 [ 449.409436][T10902] __kmalloc_node+0xa4/0x230 [ 449.414085][T10902] kvmalloc_node+0x70/0x180 [ 449.418642][T10902] page_pool_create+0x1eb/0x5c0 [ 449.423559][T10902] __veth_napi_enable_range+0x195/0x700 [ 449.429220][T10902] ? __skb_frag_ref+0x1c0/0x1c0 [ 449.434142][T10902] ? netif_napi_add_weight+0xa22/0xdf0 [ 449.439658][T10902] veth_napi_enable_range+0xd0/0x150 [ 449.444997][T10902] veth_set_features+0x1c8/0x2a0 [ 449.450160][T10902] __netdev_update_features+0x9cb/0x18e0 [ 449.455856][T10902] ? dev_xdp_attach+0x1030/0x1030 [ 449.460945][T10902] ? __might_fault+0xaa/0x120 [ 449.465665][T10902] ? __lock_acquire+0x7d40/0x7d40 [ 449.470748][T10902] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 449.476793][T10902] ? __might_fault+0xaa/0x120 [ 449.481518][T10902] ? __might_fault+0xc6/0x120 [ 449.486237][T10902] ? __might_fault+0xaa/0x120 [ 449.491332][T10902] ethtool_set_one_feature+0x2a8/0x2f0 [ 449.496938][T10902] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.503132][T10902] ? ethtool_get_one_feature+0x280/0x280 [ 449.508800][T10902] ? dev_ethtool+0xf81/0x18d0 [ 449.513511][T10902] dev_ethtool+0xfd7/0x18d0 [ 449.518072][T10902] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 449.524346][T10902] ? __lock_acquire+0x7d40/0x7d40 [ 449.529399][T10902] ? lockdep_hardirqs_on+0x98/0x150 [ 449.534653][T10902] ? full_name_hash+0x92/0xe0 [ 449.539463][T10902] ? dev_load+0x21/0x1f0 [ 449.543751][T10902] dev_ioctl+0x392/0x1140 [ 449.548135][T10902] sock_do_ioctl+0x239/0x310 [ 449.552776][T10902] ? sock_show_fdinfo+0xb0/0xb0 [ 449.557679][T10902] sock_ioctl+0x5ba/0x7e0 [ 449.562054][T10902] ? sock_poll+0x3e0/0x3e0 [ 449.566552][T10902] ? bpf_lsm_file_ioctl+0x9/0x10 [ 449.571526][T10902] ? security_file_ioctl+0x80/0xa0 [ 449.576665][T10902] ? sock_poll+0x3e0/0x3e0 [ 449.581126][T10902] __se_sys_ioctl+0xfd/0x170 [ 449.585756][T10902] do_syscall_64+0x55/0xb0 [ 449.590222][T10902] ? clear_bhb_loop+0x40/0x90 [ 449.594935][T10902] ? clear_bhb_loop+0x40/0x90 [ 449.599631][T10902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.605555][T10902] RIP: 0033:0x7f06b9d9ce59 [ 449.609988][T10902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.629607][T10902] RSP: 002b:00007f06bac38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.638049][T10902] RAX: ffffffffffffffda RBX: 00007f06ba015fa0 RCX: 00007f06b9d9ce59 [ 449.646051][T10902] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 449.654138][T10902] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 449.662142][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.670145][T10902] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 449.678181][T10902] [ 449.691411][T10902] page_pool_create() gave up with errno -12 [ 449.699066][T10902] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 449.766547][T10904] netlink: 'syz.2.1802': attribute type 2 has an invalid length. [ 449.774766][T10904] netlink: 'syz.2.1802': attribute type 8 has an invalid length. [ 449.782704][T10904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1802'. [ 449.860776][T10910] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 449.868870][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1803'. [ 449.928477][T10910] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 449.962242][T10913] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 449.982639][T10913] team0: Device vxcan1 is of different type [ 450.242849][T10927] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1810'. [ 450.374910][T10928] syzkaller0: entered promiscuous mode [ 450.383859][T10928] syzkaller0: entered allmulticast mode [ 454.934771][T10936] netlink: 'syz.3.1814': attribute type 2 has an invalid length. [ 454.942812][T10936] netlink: 'syz.3.1814': attribute type 8 has an invalid length. [ 454.952074][T10936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1814'. [ 454.971040][T10938] sit0: left promiscuous mode [ 455.370407][T10945] sctp: [Deprecated]: syz.0.1817 (pid 10945) Use of int in max_burst socket option deprecated. [ 455.370407][T10945] Use struct sctp_assoc_value instead [ 455.471048][T10951] netlink: 'syz.2.1819': attribute type 4 has an invalid length. [ 455.479397][T10951] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1819'. [ 455.953288][T10967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1822'. [ 456.007918][T10963] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 456.018220][T10963] netlink: 'syz.3.1823': attribute type 8 has an invalid length. [ 456.029321][T10963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1823'. [ 456.077872][T10966] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 456.087148][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 456.127063][T10966] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 456.366151][T10969] syzkaller0: entered promiscuous mode [ 456.372977][T10969] syzkaller0: entered allmulticast mode [ 456.628205][T10975] syzkaller0: entered promiscuous mode [ 456.634202][T10975] syzkaller0: entered allmulticast mode [ 462.722114][T10997] netlink: 'syz.1.1834': attribute type 2 has an invalid length. [ 462.730025][T10997] netlink: 'syz.1.1834': attribute type 8 has an invalid length. [ 462.738143][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1834'. [ 462.940141][T11008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1836'. [ 463.992944][T11015] FAULT_INJECTION: forcing a failure. [ 463.992944][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 464.020750][T11015] CPU: 0 PID: 11015 Comm: syz.3.1841 Not tainted syzkaller #0 [ 464.028261][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.038347][T11015] Call Trace: [ 464.041661][T11015] [ 464.044625][T11015] dump_stack_lvl+0x18c/0x250 [ 464.049346][T11015] ? show_regs_print_info+0x20/0x20 [ 464.054575][T11015] ? load_image+0x420/0x420 [ 464.059117][T11015] ? __might_sleep+0xe0/0xe0 [ 464.063748][T11015] ? __lock_acquire+0x7d40/0x7d40 [ 464.068824][T11015] should_fail_ex+0x39d/0x4d0 [ 464.073551][T11015] should_failslab+0x9/0x20 [ 464.078105][T11015] slab_pre_alloc_hook+0x59/0x310 [ 464.083190][T11015] ? __get_vm_area_node+0x125/0x370 [ 464.088419][T11015] __kmem_cache_alloc_node+0x53/0x250 [ 464.093827][T11015] ? __get_vm_area_node+0x125/0x370 [ 464.099050][T11015] kmalloc_node_trace+0x26/0xe0 [ 464.103938][T11015] __get_vm_area_node+0x125/0x370 [ 464.108991][T11015] __vmalloc_node_range+0x36e/0x1330 [ 464.114316][T11015] ? copy_process+0x586/0x3dc0 [ 464.119111][T11015] ? free_vm_area+0x50/0x50 [ 464.123636][T11015] ? arch_dup_task_struct+0x57/0xd0 [ 464.128877][T11015] ? __asan_memcpy+0x40/0x70 [ 464.133509][T11015] dup_task_struct+0x3d0/0x7c0 [ 464.138310][T11015] ? copy_process+0x586/0x3dc0 [ 464.143101][T11015] ? lockdep_hardirqs_on+0x98/0x150 [ 464.148331][T11015] copy_process+0x586/0x3dc0 [ 464.152941][T11015] ? __might_fault+0xaa/0x120 [ 464.157672][T11015] ? get_pid_task+0x20/0x1e0 [ 464.162318][T11015] ? __pidfd_prepare+0x140/0x140 [ 464.167284][T11015] kernel_clone+0x24b/0x8a0 [ 464.171838][T11015] ? create_io_thread+0x190/0x190 [ 464.176916][T11015] __x64_sys_clone+0x1b7/0x230 [ 464.181724][T11015] ? __fget_files+0x43d/0x4b0 [ 464.186430][T11015] ? __ia32_sys_vfork+0x140/0x140 [ 464.191489][T11015] ? lock_chain_count+0x20/0x20 [ 464.196373][T11015] ? lockdep_hardirqs_on+0x98/0x150 [ 464.201608][T11015] do_syscall_64+0x55/0xb0 [ 464.206047][T11015] ? clear_bhb_loop+0x40/0x90 [ 464.210739][T11015] ? clear_bhb_loop+0x40/0x90 [ 464.215431][T11015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.221348][T11015] RIP: 0033:0x7f06b9d9ce59 [ 464.225772][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.245398][T11015] RSP: 002b:00007f06bac37fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 464.253833][T11015] RAX: ffffffffffffffda RBX: 00007f06ba015fa0 RCX: 00007f06b9d9ce59 [ 464.261835][T11015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 464.269821][T11015] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 464.277807][T11015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 464.285800][T11015] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 464.293805][T11015] [ 464.303700][T11015] syz.3.1841: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 464.331393][T11015] CPU: 1 PID: 11015 Comm: syz.3.1841 Not tainted syzkaller #0 [ 464.338935][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.349045][T11015] Call Trace: [ 464.352358][T11015] [ 464.355322][T11015] dump_stack_lvl+0x18c/0x250 [ 464.360045][T11015] ? show_regs_print_info+0x20/0x20 [ 464.365289][T11015] ? load_image+0x420/0x420 [ 464.369825][T11015] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 464.376298][T11015] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 464.377809][T11013] syzkaller0: entered promiscuous mode [ 464.382845][T11015] warn_alloc+0x246/0x340 [ 464.382881][T11015] ? __get_vm_area_node+0x125/0x370 [ 464.382913][T11015] ? zone_watermark_ok_safe+0x230/0x230 [ 464.382945][T11015] ? rcu_is_watching+0x15/0xb0 [ 464.382979][T11015] ? __get_vm_area_node+0x356/0x370 [ 464.389073][T11013] syzkaller0: entered allmulticast mode [ 464.392781][T11015] __vmalloc_node_range+0x393/0x1330 [ 464.392862][T11015] ? free_vm_area+0x50/0x50 [ 464.392891][T11015] ? arch_dup_task_struct+0x57/0xd0 [ 464.392918][T11015] ? __asan_memcpy+0x40/0x70 [ 464.392951][T11015] dup_task_struct+0x3d0/0x7c0 [ 464.392975][T11015] ? copy_process+0x586/0x3dc0 [ 464.448412][T11015] ? lockdep_hardirqs_on+0x98/0x150 [ 464.453641][T11015] copy_process+0x586/0x3dc0 [ 464.458259][T11015] ? __might_fault+0xaa/0x120 [ 464.462976][T11015] ? get_pid_task+0x20/0x1e0 [ 464.467588][T11015] ? __pidfd_prepare+0x140/0x140 [ 464.472557][T11015] kernel_clone+0x24b/0x8a0 [ 464.477094][T11015] ? create_io_thread+0x190/0x190 [ 464.482150][T11015] __x64_sys_clone+0x1b7/0x230 [ 464.486934][T11015] ? __fget_files+0x43d/0x4b0 [ 464.491636][T11015] ? __ia32_sys_vfork+0x140/0x140 [ 464.496679][T11015] ? lock_chain_count+0x20/0x20 [ 464.501550][T11015] ? lockdep_hardirqs_on+0x98/0x150 [ 464.506790][T11015] do_syscall_64+0x55/0xb0 [ 464.511219][T11015] ? clear_bhb_loop+0x40/0x90 [ 464.515902][T11015] ? clear_bhb_loop+0x40/0x90 [ 464.520591][T11015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.526499][T11015] RIP: 0033:0x7f06b9d9ce59 [ 464.530931][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.550568][T11015] RSP: 002b:00007f06bac37fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 464.559046][T11015] RAX: ffffffffffffffda RBX: 00007f06ba015fa0 RCX: 00007f06b9d9ce59 [ 464.567063][T11015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 464.575056][T11015] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 464.583043][T11015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 464.591025][T11015] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 464.599018][T11015] [ 464.616442][T11015] Mem-Info: [ 464.619676][T11015] active_anon:5237 inactive_anon:0 isolated_anon:0 [ 464.619676][T11015] active_file:19331 inactive_file:40091 isolated_file:0 [ 464.619676][T11015] unevictable:768 dirty:96 writeback:0 [ 464.619676][T11015] slab_reclaimable:10329 slab_unreclaimable:99868 [ 464.619676][T11015] mapped:24999 shmem:1361 pagetables:521 [ 464.619676][T11015] sec_pagetables:0 bounce:0 [ 464.619676][T11015] kernel_misc_reclaimable:0 [ 464.619676][T11015] free:1339352 free_pcp:9428 free_cma:0 [ 464.711276][T11015] Node 0 active_anon:20848kB inactive_anon:0kB active_file:77284kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99956kB dirty:384kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10300kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no [ 464.751191][T11015] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 464.790285][T11015] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.818307][T11015] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 464.824537][T11015] Node 0 DMA32 free:1445760kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20912kB inactive_anon:0kB active_file:77284kB inactive_file:159348kB unevictable:1536kB writepending:384kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:20704kB local_pcp:18028kB free_cma:0kB [ 464.862992][T11015] lowmem_reserve[]: 0 0 0 0 0 [ 464.867874][T11015] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 464.895451][T11015] lowmem_reserve[]: 0 0 0 0 0 [ 464.900239][T11015] Node 1 Normal free:3895964kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:8032kB free_cma:0kB [ 464.932275][T11015] lowmem_reserve[]: 0 0 0 0 0 [ 464.937064][T11015] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 464.952840][T11015] Node 0 DMA32: 1076*4kB (U) 1336*8kB (UME) 955*16kB (UME) 2008*32kB (UME) 1170*64kB (UME) 481*128kB (UME) 293*256kB (UME) 146*512kB (UME) 30*1024kB (UME) 15*2048kB (UM) 245*4096kB (UM) = 1445696kB [ 464.979236][T11015] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 464.991523][T11015] Node 1 Normal: 291*4kB (UE) 62*8kB (UME) 62*16kB (UME) 164*32kB (UE) 35*64kB (UE) 8*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3895964kB [ 465.009738][T11015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.020593][T11015] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.029938][T11015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.039930][T11015] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.049434][T11015] 60783 total pagecache pages [ 465.054382][T11015] 0 pages in swap cache [ 465.058566][T11015] Free swap = 124996kB [ 465.062812][T11015] Total swap = 124996kB [ 465.067146][T11015] 2097051 pages RAM [ 465.071050][T11015] 0 pages HighMem/MovableOnly [ 465.075749][T11015] 416933 pages reserved [ 465.080080][T11015] 0 pages cma reserved [ 465.287445][T11033] FAULT_INJECTION: forcing a failure. [ 465.287445][T11033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.301682][T11033] CPU: 0 PID: 11033 Comm: syz.3.1845 Not tainted syzkaller #0 [ 465.309176][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.319253][T11033] Call Trace: [ 465.322671][T11033] [ 465.325638][T11033] dump_stack_lvl+0x18c/0x250 [ 465.330332][T11033] ? show_regs_print_info+0x20/0x20 [ 465.335547][T11033] ? load_image+0x420/0x420 [ 465.340091][T11033] ? __might_fault+0xaa/0x120 [ 465.344773][T11033] ? __lock_acquire+0x7d40/0x7d40 [ 465.349800][T11033] should_fail_ex+0x39d/0x4d0 [ 465.354502][T11033] _copy_from_user+0x2f/0xe0 [ 465.359142][T11033] ____sys_sendmsg+0x2fd/0x960 [ 465.363955][T11033] ? __lock_acquire+0x7d40/0x7d40 [ 465.369022][T11033] ? __sys_sendmsg_sock+0x30/0x30 [ 465.374054][T11033] ? __import_iovec+0x3fa/0x850 [ 465.378927][T11033] ? import_iovec+0x73/0xa0 [ 465.383448][T11033] ___sys_sendmsg+0x2a6/0x360 [ 465.388135][T11033] ? get_pid_task+0x20/0x1e0 [ 465.392747][T11033] ? __sys_sendmsg+0x2a0/0x2a0 [ 465.397568][T11033] ? __lock_acquire+0x7d40/0x7d40 [ 465.402664][T11033] __se_sys_sendmsg+0x1c2/0x2b0 [ 465.407533][T11033] ? __x64_sys_sendmsg+0x80/0x80 [ 465.412506][T11033] ? lockdep_hardirqs_on+0x98/0x150 [ 465.417757][T11033] do_syscall_64+0x55/0xb0 [ 465.422200][T11033] ? clear_bhb_loop+0x40/0x90 [ 465.426879][T11033] ? clear_bhb_loop+0x40/0x90 [ 465.431564][T11033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.437468][T11033] RIP: 0033:0x7f06b9d9ce59 [ 465.441928][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.461556][T11033] RSP: 002b:00007f06bac38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.469971][T11033] RAX: ffffffffffffffda RBX: 00007f06ba015fa0 RCX: 00007f06b9d9ce59 [ 465.477948][T11033] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 465.485927][T11033] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 465.493904][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.501904][T11033] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 465.509908][T11033] [ 466.697998][T11016] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 466.706008][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1839'. [ 466.715647][T11016] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 466.735341][T11035] netlink: 'syz.3.1846': attribute type 2 has an invalid length. [ 466.761381][T11035] netlink: 'syz.3.1846': attribute type 8 has an invalid length. [ 466.769148][T11035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'. [ 467.064274][T11049] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1851'. [ 467.101547][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 467.111098][T11051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1852'. [ 467.623514][T11058] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 467.631704][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1855'. [ 468.045190][T11065] syzkaller0: entered promiscuous mode [ 468.051019][T11065] syzkaller0: entered allmulticast mode [ 468.063408][T11063] netlink: 'syz.3.1857': attribute type 2 has an invalid length. [ 468.080159][T11063] netlink: 'syz.3.1857': attribute type 8 has an invalid length. [ 468.088964][T11063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1857'. [ 475.818255][T11086] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1865'. [ 476.107331][T11094] netlink: 'syz.3.1869': attribute type 2 has an invalid length. [ 476.142915][T11094] netlink: 'syz.3.1869': attribute type 8 has an invalid length. [ 476.172606][T11094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1869'. [ 476.493888][T11108] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 476.521067][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1872'. [ 476.625922][T11119] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1876'. [ 479.888368][T11124] syzkaller0: entered promiscuous mode [ 479.894333][T11124] syzkaller0: entered allmulticast mode [ 479.908490][T11131] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1883'. [ 481.321514][T11133] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 481.329452][T11133] netlink: 'syz.0.1882': attribute type 8 has an invalid length. [ 481.337389][T11133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 481.862897][T11153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1890'. [ 482.177767][T11155] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 482.215693][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1891'. [ 482.427585][T11159] netlink: 'syz.1.1892': attribute type 2 has an invalid length. [ 482.510141][T11159] netlink: 'syz.1.1892': attribute type 8 has an invalid length. [ 482.547578][T11159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1892'. [ 483.002486][T11167] syzkaller0: entered promiscuous mode [ 483.008193][T11167] syzkaller0: entered allmulticast mode [ 484.703666][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1901'. [ 484.892209][T11187] syzkaller0: entered promiscuous mode [ 484.897734][T11187] syzkaller0: entered allmulticast mode [ 484.906734][T11186] netlink: 'syz.2.1902': attribute type 2 has an invalid length. [ 484.918551][T11186] netlink: 'syz.2.1902': attribute type 8 has an invalid length. [ 484.927754][T11186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1902'. [ 485.042571][T11197] FAULT_INJECTION: forcing a failure. [ 485.042571][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.061239][T11197] CPU: 1 PID: 11197 Comm: syz.0.1905 Not tainted syzkaller #0 [ 485.068759][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.078862][T11197] Call Trace: [ 485.082197][T11197] [ 485.085179][T11197] dump_stack_lvl+0x18c/0x250 [ 485.089935][T11197] ? show_regs_print_info+0x20/0x20 [ 485.095193][T11197] ? load_image+0x420/0x420 [ 485.099738][T11197] ? __might_fault+0xaa/0x120 [ 485.104440][T11197] ? __lock_acquire+0x7d40/0x7d40 [ 485.109486][T11197] should_fail_ex+0x39d/0x4d0 [ 485.114183][T11197] _copy_from_iter+0x1d9/0x12e0 [ 485.119051][T11197] ? __might_fault+0xaa/0x120 [ 485.123744][T11197] ? _copy_from_iter+0x24e/0x12e0 [ 485.128823][T11197] ? __virt_addr_valid+0x18c/0x540 [ 485.133956][T11197] ? __lock_acquire+0x7d40/0x7d40 [ 485.139000][T11197] ? copyout_mc+0x70/0x70 [ 485.143371][T11197] ? copyout_mc+0x70/0x70 [ 485.147766][T11197] ? __virt_addr_valid+0x18c/0x540 [ 485.152952][T11197] ? page_copy_sane+0x16a/0x270 [ 485.157866][T11197] copy_page_from_iter+0x7b/0x100 [ 485.162947][T11197] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 485.168832][T11197] tun_get_user+0x15db/0x3ca0 [ 485.173551][T11197] ? aa_file_perm+0x11b/0xee0 [ 485.178267][T11197] ? rcu_read_unlock+0xa0/0xa0 [ 485.183071][T11197] ? tun_get+0x1c/0x2e0 [ 485.187272][T11197] ? __lock_acquire+0x7d40/0x7d40 [ 485.192348][T11197] ? tun_get+0x1c/0x2e0 [ 485.196540][T11197] tun_chr_write_iter+0x119/0x200 [ 485.201604][T11197] vfs_write+0x46c/0x990 [ 485.205886][T11197] ? file_end_write+0x250/0x250 [ 485.210767][T11197] ? __fget_files+0x43d/0x4b0 [ 485.215485][T11197] ? __fdget_pos+0x1d8/0x330 [ 485.220131][T11197] ? ksys_write+0x75/0x260 [ 485.224583][T11197] ksys_write+0x150/0x260 [ 485.228947][T11197] ? __ia32_sys_read+0x90/0x90 [ 485.233747][T11197] ? lockdep_hardirqs_on+0x98/0x150 [ 485.238983][T11197] do_syscall_64+0x55/0xb0 [ 485.243431][T11197] ? clear_bhb_loop+0x40/0x90 [ 485.248127][T11197] ? clear_bhb_loop+0x40/0x90 [ 485.252842][T11197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.258775][T11197] RIP: 0033:0x7f9758b9ce59 [ 485.263215][T11197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.282883][T11197] RSP: 002b:00007f9759a7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.291329][T11197] RAX: ffffffffffffffda RBX: 00007f9758e16180 RCX: 00007f9758b9ce59 [ 485.299336][T11197] RDX: 000000000000ee8a RSI: 00002000000008c0 RDI: 0000000000000003 [ 485.307330][T11197] RBP: 00007f9759a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.315321][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.323314][T11197] R13: 00007f9758e16218 R14: 00007f9758e16180 R15: 00007ffd4cb10f18 [ 485.331333][T11197] [ 486.680276][T11193] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 486.688320][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1904'. [ 486.697959][T11193] bridge0: port 3(ipvlan1) entered blocking state [ 486.704669][T11193] bridge0: port 3(ipvlan1) entered disabled state [ 486.713410][T11193] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 486.870129][T11204] netlink: 'syz.2.1907': attribute type 7 has an invalid length. [ 487.147223][T11215] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1912'. [ 487.252708][T11208] syzkaller0: entered promiscuous mode [ 487.259263][T11208] syzkaller0: entered allmulticast mode [ 488.917293][T11220] netlink: 'syz.1.1914': attribute type 2 has an invalid length. [ 488.927488][T11220] netlink: 'syz.1.1914': attribute type 8 has an invalid length. [ 488.935846][T11220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1914'. [ 489.035051][T11227] netlink: 'syz.3.1917': attribute type 3 has an invalid length. [ 489.043871][T11227] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1917'. [ 489.253913][T11233] netlink: 'syz.2.1918': attribute type 10 has an invalid length. [ 489.270868][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1918'. [ 489.422599][T11245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1923'. [ 489.504485][T11246] netlink: 'syz.0.1924': attribute type 2 has an invalid length. [ 489.512907][T11246] netlink: 'syz.0.1924': attribute type 8 has an invalid length. [ 489.521940][T11246] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1924'. [ 490.104883][T11253] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1927'. [ 490.424819][T11259] syzkaller0: entered promiscuous mode [ 490.430428][T11259] syzkaller0: entered allmulticast mode [ 492.061977][T11268] syzkaller0: entered promiscuous mode [ 492.067709][T11268] syzkaller0: entered allmulticast mode [ 493.653863][T11279] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1936'. [ 493.745384][T11282] FAULT_INJECTION: forcing a failure. [ 493.745384][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 493.758093][T11282] CPU: 0 PID: 11282 Comm: syz.0.1939 Not tainted syzkaller #0 [ 493.765579][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.775696][T11282] Call Trace: [ 493.779020][T11282] [ 493.781984][T11282] dump_stack_lvl+0x18c/0x250 [ 493.786718][T11282] ? show_regs_print_info+0x20/0x20 [ 493.791995][T11282] ? load_image+0x420/0x420 [ 493.796557][T11282] should_fail_ex+0x39d/0x4d0 [ 493.801299][T11282] should_failslab+0x9/0x20 [ 493.805854][T11282] slab_pre_alloc_hook+0x59/0x310 [ 493.810939][T11282] ? ip6_pol_route+0x171/0x1230 [ 493.815943][T11282] kmem_cache_alloc+0x5a/0x2d0 [ 493.820767][T11282] ? dst_alloc+0x105/0x170 [ 493.825243][T11282] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 493.830990][T11282] dst_alloc+0x105/0x170 [ 493.835282][T11282] ip6_pol_route+0x94f/0x1230 [ 493.839978][T11282] ? ip6_pol_route+0x171/0x1230 [ 493.844870][T11282] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 493.850567][T11282] ? __lock_acquire+0x1273/0x7d40 [ 493.855653][T11282] fib6_rule_lookup+0x33d/0x570 [ 493.860782][T11282] ? skb_header_pointer+0x120/0x120 [ 493.866037][T11282] ? fib6_lookup+0x2d0/0x2d0 [ 493.870688][T11282] ? read_lock_is_recursive+0x20/0x20 [ 493.876225][T11282] ip6_route_output_flags+0x364/0x5d0 [ 493.881651][T11282] ? ip6_route_output_flags+0x2e/0x5d0 [ 493.887168][T11282] ip6_dst_lookup_tail+0x1ae/0x1530 [ 493.892468][T11282] ? ip6_dst_lookup+0x60/0x60 [ 493.897213][T11282] ? l2tp_ip6_sendmsg+0x955/0x1690 [ 493.902445][T11282] ? __lock_acquire+0x7d40/0x7d40 [ 493.907546][T11282] ip6_dst_lookup_flow+0x48/0xe0 [ 493.912552][T11282] l2tp_ip6_sendmsg+0xf5b/0x1690 [ 493.917552][T11282] ? __might_sleep+0xe0/0xe0 [ 493.922203][T11282] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 493.927565][T11282] ? aa_af_perm+0x330/0x330 [ 493.932148][T11282] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 493.938620][T11282] ? sock_rps_record_flow+0x19/0x3f0 [ 493.943983][T11282] ? inet_sendmsg+0x7c/0x2f0 [ 493.948629][T11282] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.953963][T11282] ? security_socket_sendmsg+0x80/0xa0 [ 493.959482][T11282] ? inet_send_prepare+0x260/0x260 [ 493.964645][T11282] ____sys_sendmsg+0x5ba/0x960 [ 493.969453][T11282] ? __lock_acquire+0x7d40/0x7d40 [ 493.974529][T11282] ? __sys_sendmsg_sock+0x30/0x30 [ 493.979634][T11282] ? __import_iovec+0x3fa/0x850 [ 493.984534][T11282] ? import_iovec+0x73/0xa0 [ 493.989118][T11282] ___sys_sendmsg+0x2a6/0x360 [ 493.993865][T11282] ? __sys_sendmsg+0x2a0/0x2a0 [ 493.998707][T11282] ? __lock_acquire+0x7d40/0x7d40 [ 494.003831][T11282] __se_sys_sendmsg+0x1c2/0x2b0 [ 494.008735][T11282] ? __x64_sys_sendmsg+0x80/0x80 [ 494.013751][T11282] ? lockdep_hardirqs_on+0x98/0x150 [ 494.019017][T11282] do_syscall_64+0x55/0xb0 [ 494.023482][T11282] ? clear_bhb_loop+0x40/0x90 [ 494.028201][T11282] ? clear_bhb_loop+0x40/0x90 [ 494.032919][T11282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.038865][T11282] RIP: 0033:0x7f9758b9ce59 [ 494.043347][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.063004][T11282] RSP: 002b:00007f9759abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.071463][T11282] RAX: ffffffffffffffda RBX: 00007f9758e15fa0 RCX: 00007f9758b9ce59 [ 494.079472][T11282] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 494.087491][T11282] RBP: 00007f9759abe090 R08: 0000000000000000 R09: 0000000000000000 [ 494.095506][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.103525][T11282] R13: 00007f9758e16038 R14: 00007f9758e15fa0 R15: 00007ffd4cb10f18 [ 494.111567][T11282] [ 494.159068][T11287] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 494.167316][T11287] netlink: 'syz.1.1937': attribute type 8 has an invalid length. [ 494.181645][T11287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 494.224805][T11286] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 494.264680][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1938'. [ 494.758731][T11310] FAULT_INJECTION: forcing a failure. [ 494.758731][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 494.772689][T11310] CPU: 1 PID: 11310 Comm: syz.3.1946 Not tainted syzkaller #0 [ 494.780196][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.790286][T11310] Call Trace: [ 494.793602][T11310] [ 494.796577][T11310] dump_stack_lvl+0x18c/0x250 [ 494.801321][T11310] ? show_regs_print_info+0x20/0x20 [ 494.806559][T11310] ? load_image+0x420/0x420 [ 494.811099][T11310] ? __might_sleep+0xe0/0xe0 [ 494.815737][T11310] ? __lock_acquire+0x7d40/0x7d40 [ 494.820805][T11310] should_fail_ex+0x39d/0x4d0 [ 494.825531][T11310] should_failslab+0x9/0x20 [ 494.830073][T11310] slab_pre_alloc_hook+0x59/0x310 [ 494.835154][T11310] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 494.840925][T11310] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 494.846598][T11310] __kmem_cache_alloc_node+0x53/0x250 [ 494.852020][T11310] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 494.857670][T11310] __kmalloc+0xa4/0x230 [ 494.861860][T11310] ioctl_standard_iw_point+0x51a/0xcf0 [ 494.867352][T11310] ? dev_hold+0xa0/0xa0 [ 494.871618][T11310] ? iw_handler_get_iwstats+0x110/0x110 [ 494.877187][T11310] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.883377][T11310] ? lockdep_hardirqs_on+0x98/0x150 [ 494.888626][T11310] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.894839][T11310] ? dev_hold+0xa0/0xa0 [ 494.899026][T11310] ioctl_standard_call+0xb7/0x2b0 [ 494.904081][T11310] ? dev_hold+0xa0/0xa0 [ 494.908257][T11310] wext_ioctl_dispatch+0x1cb/0x600 [ 494.913398][T11310] ? wext_ioctl_dispatch+0x600/0x600 [ 494.918707][T11310] ? iw_handler_get_private+0x1f0/0x1f0 [ 494.924276][T11310] ? wext_handle_ioctl+0x1d0/0x1d0 [ 494.929408][T11310] ? __might_fault+0xaa/0x120 [ 494.934108][T11310] ? __might_fault+0xc6/0x120 [ 494.938811][T11310] ? __might_fault+0xaa/0x120 [ 494.943511][T11310] wext_handle_ioctl+0x117/0x1d0 [ 494.948486][T11310] ? call_commit_handler+0xf0/0xf0 [ 494.953628][T11310] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 494.959638][T11310] ? lock_chain_count+0x20/0x20 [ 494.964506][T11310] sock_ioctl+0x15d/0x7e0 [ 494.968856][T11310] ? sock_poll+0x3e0/0x3e0 [ 494.973293][T11310] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.979478][T11310] ? __se_sys_ioctl+0x53/0x170 [ 494.984273][T11310] ? sock_poll+0x3e0/0x3e0 [ 494.988723][T11310] __se_sys_ioctl+0xfd/0x170 [ 494.993344][T11310] do_syscall_64+0x55/0xb0 [ 494.997784][T11310] ? clear_bhb_loop+0x40/0x90 [ 495.002482][T11310] ? clear_bhb_loop+0x40/0x90 [ 495.007188][T11310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.013111][T11310] RIP: 0033:0x7f06b9d9ce59 [ 495.017562][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.037182][T11310] RSP: 002b:00007f06bac38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.045616][T11310] RAX: ffffffffffffffda RBX: 00007f06ba015fa0 RCX: 00007f06b9d9ce59 [ 495.053613][T11310] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000006 [ 495.061624][T11310] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 495.069607][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.077584][T11310] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 495.085577][T11310] [ 495.166295][T11317] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1947'. [ 495.741819][T11325] netlink: 'syz.2.1951': attribute type 2 has an invalid length. [ 495.752173][T11325] netlink: 'syz.2.1951': attribute type 8 has an invalid length. [ 495.760337][T11325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1951'. [ 496.300028][T11340] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 496.319885][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1956'. [ 496.349533][T11340] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 496.381177][T11343] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1959'. [ 496.393213][T11343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.439995][T11347] netlink: 'syz.2.1959': attribute type 2 has an invalid length. [ 496.453349][T11347] netlink: 'syz.2.1959': attribute type 8 has an invalid length. [ 496.461871][T11347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1959'. [ 496.480456][T11343] netlink: 'syz.2.1959': attribute type 11 has an invalid length. [ 496.686647][T11352] netlink: 'syz.3.1962': attribute type 2 has an invalid length. [ 496.695324][T11352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1962'. [ 496.923544][T11362] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1964'. [ 497.688429][T11373] FAULT_INJECTION: forcing a failure. [ 497.688429][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 497.718136][T11373] CPU: 1 PID: 11373 Comm: syz.1.1970 Not tainted syzkaller #0 [ 497.725678][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.735779][T11373] Call Trace: [ 497.739092][T11373] [ 497.742062][T11373] dump_stack_lvl+0x18c/0x250 [ 497.746794][T11373] ? show_regs_print_info+0x20/0x20 [ 497.752038][T11373] ? load_image+0x420/0x420 [ 497.756578][T11373] ? __might_sleep+0xe0/0xe0 [ 497.761219][T11373] ? __lock_acquire+0x7d40/0x7d40 [ 497.766284][T11373] should_fail_ex+0x39d/0x4d0 [ 497.771021][T11373] should_failslab+0x9/0x20 [ 497.775564][T11373] slab_pre_alloc_hook+0x59/0x310 [ 497.780668][T11373] ? sk_prot_alloc+0xe7/0x210 [ 497.785395][T11373] ? sk_prot_alloc+0xe7/0x210 [ 497.790122][T11373] __kmem_cache_alloc_node+0x53/0x250 [ 497.795540][T11373] ? sk_prot_alloc+0xe7/0x210 [ 497.800288][T11373] __kmalloc+0xa4/0x230 [ 497.804501][T11373] sk_prot_alloc+0xe7/0x210 [ 497.809056][T11373] ? sk_alloc+0x24/0x360 [ 497.813359][T11373] sk_alloc+0x3a/0x360 [ 497.817476][T11373] ? bpf_ctx_init+0x163/0x1a0 [ 497.822171][T11373] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 497.827753][T11373] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 497.833178][T11373] ? __fget_files+0x28/0x4b0 [ 497.837809][T11373] ? __fget_files+0x43d/0x4b0 [ 497.842536][T11373] ? cpu_online+0x60/0x60 [ 497.846906][T11373] bpf_prog_test_run+0x321/0x390 [ 497.851876][T11373] __sys_bpf+0x49d/0x890 [ 497.856158][T11373] ? bpf_link_show_fdinfo+0x390/0x390 [ 497.861581][T11373] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.867783][T11373] __x64_sys_bpf+0x7c/0x90 [ 497.872252][T11373] do_syscall_64+0x55/0xb0 [ 497.876694][T11373] ? clear_bhb_loop+0x40/0x90 [ 497.881379][T11373] ? clear_bhb_loop+0x40/0x90 [ 497.886066][T11373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.891977][T11373] RIP: 0033:0x7fc70559ce59 [ 497.896430][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.916065][T11373] RSP: 002b:00007fc706377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.924508][T11373] RAX: ffffffffffffffda RBX: 00007fc705815fa0 RCX: 00007fc70559ce59 [ 497.932509][T11373] RDX: 0000000000000047 RSI: 00002000000002c0 RDI: 000000000000000a [ 497.940506][T11373] RBP: 00007fc706377090 R08: 0000000000000000 R09: 0000000000000000 [ 497.948509][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.956505][T11373] R13: 00007fc705816038 R14: 00007fc705815fa0 R15: 00007ffe6aaa56f8 [ 497.964529][T11373] [ 498.019941][T11377] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.069432][T11377] syzkaller0: entered promiscuous mode [ 498.105347][T11377] syzkaller0: entered allmulticast mode [ 499.815492][T11392] validate_nla: 4 callbacks suppressed [ 499.815503][T11392] netlink: 'syz.2.1977': attribute type 10 has an invalid length. [ 499.828951][T11392] __nla_validate_parse: 2 callbacks suppressed [ 499.828966][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1977'. [ 500.026277][T11405] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1981'. [ 500.152534][T11410] netlink: 'syz.0.1983': attribute type 2 has an invalid length. [ 500.160376][T11410] netlink: 'syz.0.1983': attribute type 8 has an invalid length. [ 500.182326][T11410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1983'. [ 500.316958][T11414] FAULT_INJECTION: forcing a failure. [ 500.316958][T11414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.331648][T11414] CPU: 0 PID: 11414 Comm: syz.3.1986 Not tainted syzkaller #0 [ 500.339169][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.349284][T11414] Call Trace: [ 500.352593][T11414] [ 500.355559][T11414] dump_stack_lvl+0x18c/0x250 [ 500.360288][T11414] ? show_regs_print_info+0x20/0x20 [ 500.365534][T11414] ? load_image+0x420/0x420 [ 500.370099][T11414] ? __lock_acquire+0x7d40/0x7d40 [ 500.375193][T11414] ? snprintf+0xe9/0x140 [ 500.379504][T11414] should_fail_ex+0x39d/0x4d0 [ 500.384251][T11414] _copy_to_user+0x2f/0xa0 [ 500.388728][T11414] simple_read_from_buffer+0xe7/0x150 [ 500.394181][T11414] proc_fail_nth_read+0x1e8/0x260 [ 500.399288][T11414] ? proc_fault_inject_write+0x360/0x360 [ 500.405016][T11414] ? fsnotify_perm+0x271/0x5e0 [ 500.409822][T11414] ? proc_fault_inject_write+0x360/0x360 [ 500.415504][T11414] vfs_read+0x28b/0x970 [ 500.419724][T11414] ? kernel_read+0x1e0/0x1e0 [ 500.424361][T11414] ? __fget_files+0x28/0x4b0 [ 500.428994][T11414] ? __fget_files+0x28/0x4b0 [ 500.433644][T11414] ? __fget_files+0x43d/0x4b0 [ 500.438396][T11414] ? __fdget_pos+0x2a3/0x330 [ 500.443031][T11414] ? ksys_read+0x75/0x260 [ 500.447416][T11414] ksys_read+0x150/0x260 [ 500.451711][T11414] ? vfs_write+0x990/0x990 [ 500.456192][T11414] ? lockdep_hardirqs_on+0x98/0x150 [ 500.461447][T11414] do_syscall_64+0x55/0xb0 [ 500.465897][T11414] ? clear_bhb_loop+0x40/0x90 [ 500.470615][T11414] ? clear_bhb_loop+0x40/0x90 [ 500.475337][T11414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.481281][T11414] RIP: 0033:0x7f06b9d5d68e [ 500.485739][T11414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.505379][T11414] RSP: 002b:00007f06bac37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.513838][T11414] RAX: ffffffffffffffda RBX: 00007f06bac386c0 RCX: 00007f06b9d5d68e [ 500.521871][T11414] RDX: 000000000000000f RSI: 00007f06bac380a0 RDI: 0000000000000004 [ 500.529875][T11414] RBP: 00007f06bac38090 R08: 0000000000000000 R09: 0000000000000000 [ 500.537908][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.545921][T11414] R13: 00007f06ba016038 R14: 00007f06ba015fa0 R15: 00007ffe2eccb518 [ 500.553991][T11414] [ 501.044323][T11424] netlink: 'syz.2.1989': attribute type 10 has an invalid length. [ 501.052348][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 501.497220][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504477][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.084388][T11450] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1998'. [ 504.224470][T11457] netlink: 'syz.0.1999': attribute type 2 has an invalid length. [ 504.232559][T11457] netlink: 'syz.0.1999': attribute type 8 has an invalid length. [ 504.240385][T11457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1999'. [ 505.082988][T11467] FAULT_INJECTION: forcing a failure. [ 505.082988][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 505.096779][T11467] CPU: 0 PID: 11467 Comm: syz.0.2003 Not tainted syzkaller #0 [ 505.104292][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.114395][T11467] Call Trace: [ 505.117711][T11467] [ 505.120684][T11467] dump_stack_lvl+0x18c/0x250 [ 505.125422][T11467] ? show_regs_print_info+0x20/0x20 [ 505.130676][T11467] ? load_image+0x420/0x420 [ 505.133844][T11468] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 505.135226][T11467] ? __might_sleep+0xe0/0xe0 [ 505.135296][T11467] ? __lock_acquire+0x7d40/0x7d40 [ 505.135321][T11467] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 505.135353][T11467] should_fail_ex+0x39d/0x4d0 [ 505.135393][T11467] should_failslab+0x9/0x20 [ 505.168528][T11467] slab_pre_alloc_hook+0x59/0x310 [ 505.173603][T11467] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 505.179693][T11467] __kmem_cache_alloc_node+0x53/0x250 [ 505.185106][T11467] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 505.191026][T11467] kmalloc_trace+0x2a/0xe0 [ 505.195470][T11467] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 505.201236][T11467] sctp_association_new+0x15d3/0x25c0 [ 505.206683][T11467] sctp_connect_new_asoc+0x2de/0x6a0 [ 505.212015][T11467] ? __sctp_connect+0xd80/0xd80 [ 505.216900][T11467] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 505.222479][T11467] ? security_sctp_bind_connect+0x89/0xb0 [ 505.228239][T11467] sctp_sendmsg+0x15d2/0x2910 [ 505.232954][T11467] ? sctp_getsockopt+0xb60/0xb60 [ 505.237943][T11467] ? aa_sk_perm+0x83c/0x970 [ 505.242471][T11467] ? aa_af_perm+0x330/0x330 [ 505.246988][T11467] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 505.253444][T11467] ? sock_rps_record_flow+0x19/0x3f0 [ 505.258767][T11467] ? inet_sendmsg+0xe9/0x2f0 [ 505.263400][T11467] ? inet_send_prepare+0x260/0x260 [ 505.268564][T11467] ____sys_sendmsg+0x5ba/0x960 [ 505.273357][T11467] ? __lock_acquire+0x7d40/0x7d40 [ 505.278423][T11467] ? __asan_memset+0x22/0x40 [ 505.283063][T11467] ? __sys_sendmsg_sock+0x30/0x30 [ 505.288115][T11467] ? __import_iovec+0x5f2/0x850 [ 505.293000][T11467] ? import_iovec+0x73/0xa0 [ 505.297540][T11467] ___sys_sendmsg+0x2a6/0x360 [ 505.302264][T11467] ? __sys_sendmsg+0x2a0/0x2a0 [ 505.307094][T11467] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 505.313409][T11467] __se_sys_sendmsg+0x1c2/0x2b0 [ 505.318386][T11467] ? __x64_sys_sendmsg+0x80/0x80 [ 505.323378][T11467] ? lockdep_hardirqs_on+0x98/0x150 [ 505.328617][T11467] do_syscall_64+0x55/0xb0 [ 505.333076][T11467] ? clear_bhb_loop+0x40/0x90 [ 505.337792][T11467] ? clear_bhb_loop+0x40/0x90 [ 505.342501][T11467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.348435][T11467] RIP: 0033:0x7f9758b9ce59 [ 505.352904][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.372548][T11467] RSP: 002b:00007f9759abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.380992][T11467] RAX: ffffffffffffffda RBX: 00007f9758e15fa0 RCX: 00007f9758b9ce59 [ 505.388997][T11467] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 505.397003][T11467] RBP: 00007f9759abe090 R08: 0000000000000000 R09: 0000000000000000 [ 505.405015][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.413020][T11467] R13: 00007f9758e16038 R14: 00007f9758e15fa0 R15: 00007ffd4cb10f18 [ 505.421044][T11467] [ 505.457625][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2002'. [ 505.866207][T11491] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2009'. [ 506.018206][T11497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2010'. [ 508.911413][T11499] netlink: 'syz.2.2011': attribute type 2 has an invalid length. [ 508.936880][T11499] netlink: 'syz.2.2011': attribute type 8 has an invalid length. [ 508.949989][T11499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2011'. [ 508.983473][T11505] syz.3.2013 (11505) used obsolete PPPIOCDETACH ioctl [ 509.383398][T11523] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2020'. [ 509.576233][T11526] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 509.596805][T11526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2019'. [ 512.611472][T11539] netlink: 'syz.2.2025': attribute type 6 has an invalid length. [ 512.619716][T11539] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2025'. [ 512.641001][T11540] FAULT_INJECTION: forcing a failure. [ 512.641001][T11540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.670578][T11540] CPU: 1 PID: 11540 Comm: syz.1.2024 Not tainted syzkaller #0 [ 512.678105][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.688282][T11540] Call Trace: [ 512.691588][T11540] [ 512.694549][T11540] dump_stack_lvl+0x18c/0x250 [ 512.699254][T11540] ? show_regs_print_info+0x20/0x20 [ 512.704472][T11540] ? load_image+0x420/0x420 [ 512.709000][T11540] ? __might_fault+0xaa/0x120 [ 512.713706][T11540] ? __lock_acquire+0x7d40/0x7d40 [ 512.718785][T11540] should_fail_ex+0x39d/0x4d0 [ 512.723502][T11540] _copy_from_user+0x2f/0xe0 [ 512.728129][T11540] __sys_bpf+0x23e/0x890 [ 512.732406][T11540] ? bpf_link_show_fdinfo+0x390/0x390 [ 512.737906][T11540] ? lock_chain_count+0x20/0x20 [ 512.742965][T11540] __x64_sys_bpf+0x7c/0x90 [ 512.747408][T11540] do_syscall_64+0x55/0xb0 [ 512.751853][T11540] ? clear_bhb_loop+0x40/0x90 [ 512.756549][T11540] ? clear_bhb_loop+0x40/0x90 [ 512.761258][T11540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.767207][T11540] RIP: 0033:0x7fc70559ce59 [ 512.771651][T11540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.791298][T11540] RSP: 002b:00007fc7037f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.799781][T11540] RAX: ffffffffffffffda RBX: 00007fc705816090 RCX: 00007fc70559ce59 [ 512.807779][T11540] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 512.815776][T11540] RBP: 00007fc7037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.823774][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.831775][T11540] R13: 00007fc705816128 R14: 00007fc705816090 R15: 00007ffe6aaa56f8 [ 512.839785][T11540] [ 512.961752][T11545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2025'. [ 512.991434][T11545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.014190][T11543] netlink: 'syz.0.2026': attribute type 2 has an invalid length. [ 513.030594][T11543] netlink: 'syz.0.2026': attribute type 8 has an invalid length. [ 513.048627][T11543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2026'. [ 513.431152][T11561] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2031'. [ 513.481898][T11564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2032'. [ 513.706850][T11565] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 513.715867][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2033'. [ 513.739260][T11565] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 513.830399][T11568] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 513.838837][T11568] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2034'. [ 513.848101][T11568] hsr0: entered promiscuous mode [ 514.709416][T11578] delete_channel: no stack [ 514.924844][T11592] netlink: 'syz.2.2043': attribute type 2 has an invalid length. [ 514.937644][T11592] netlink: 'syz.2.2043': attribute type 8 has an invalid length. [ 514.947172][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2043'. [ 515.001831][T11596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2045'. [ 515.289959][T11597] syzkaller0: entered promiscuous mode [ 515.331134][T11597] syzkaller0: entered allmulticast mode [ 517.982230][T11607] netlink: 'syz.1.2048': attribute type 10 has an invalid length. [ 517.990113][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2048'. [ 517.999974][T11607] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 518.144943][T11614] FAULT_INJECTION: forcing a failure. [ 518.144943][T11614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.174122][T11614] CPU: 0 PID: 11614 Comm: syz.1.2051 Not tainted syzkaller #0 [ 518.181647][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.191739][T11614] Call Trace: [ 518.195052][T11614] [ 518.198009][T11614] dump_stack_lvl+0x18c/0x250 [ 518.202733][T11614] ? show_regs_print_info+0x20/0x20 [ 518.207988][T11614] ? load_image+0x420/0x420 [ 518.212531][T11614] ? __might_fault+0xaa/0x120 [ 518.217251][T11614] ? __lock_acquire+0x7d40/0x7d40 [ 518.222322][T11614] should_fail_ex+0x39d/0x4d0 [ 518.227052][T11614] _copy_from_user+0x2f/0xe0 [ 518.231688][T11614] ppp_set_compress+0x118/0x730 [ 518.236625][T11614] ? __lock_acquire+0x7d40/0x7d40 [ 518.241702][T11614] ? ppp_bridge_channels+0x4d0/0x4d0 [ 518.247056][T11614] ? __might_fault+0xc6/0x120 [ 518.251784][T11614] ? __might_fault+0xaa/0x120 [ 518.256508][T11614] ppp_ioctl+0x1571/0x1ac0 [ 518.261431][T11614] ? ppp_poll+0x250/0x250 [ 518.265813][T11614] ? __fget_files+0x28/0x4b0 [ 518.270469][T11614] ? bpf_lsm_file_ioctl+0x9/0x10 [ 518.275431][T11614] ? security_file_ioctl+0x80/0xa0 [ 518.280599][T11614] ? ppp_poll+0x250/0x250 [ 518.284973][T11614] __se_sys_ioctl+0xfd/0x170 [ 518.289605][T11614] do_syscall_64+0x55/0xb0 [ 518.294046][T11614] ? clear_bhb_loop+0x40/0x90 [ 518.298743][T11614] ? clear_bhb_loop+0x40/0x90 [ 518.303438][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.309360][T11614] RIP: 0033:0x7fc70559ce59 [ 518.313792][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.333419][T11614] RSP: 002b:00007fc706377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.341855][T11614] RAX: ffffffffffffffda RBX: 00007fc705815fa0 RCX: 00007fc70559ce59 [ 518.349843][T11614] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 518.357848][T11614] RBP: 00007fc706377090 R08: 0000000000000000 R09: 0000000000000000 [ 518.365840][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.373826][T11614] R13: 00007fc705816038 R14: 00007fc705815fa0 R15: 00007ffe6aaa56f8 [ 518.381827][T11614] [ 518.549238][T11622] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 518.570762][T11622] netlink: 'syz.2.2055': attribute type 8 has an invalid length. [ 518.579113][T11622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2055'. [ 518.692886][T11628] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2056'. [ 519.096521][T11635] FAULT_INJECTION: forcing a failure. [ 519.096521][T11635] name failslab, interval 1, probability 0, space 0, times 0 [ 519.116510][T11635] CPU: 1 PID: 11635 Comm: syz.2.2059 Not tainted syzkaller #0 [ 519.124027][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.134198][T11635] Call Trace: [ 519.137499][T11635] [ 519.140454][T11635] dump_stack_lvl+0x18c/0x250 [ 519.145201][T11635] ? show_regs_print_info+0x20/0x20 [ 519.150432][T11635] ? load_image+0x420/0x420 [ 519.154960][T11635] ? __might_sleep+0xe0/0xe0 [ 519.159580][T11635] ? __lock_acquire+0x7d40/0x7d40 [ 519.164628][T11635] ? rcu_is_watching+0x15/0xb0 [ 519.169432][T11635] should_fail_ex+0x39d/0x4d0 [ 519.174165][T11635] should_failslab+0x9/0x20 [ 519.178700][T11635] slab_pre_alloc_hook+0x59/0x310 [ 519.183762][T11635] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 519.189693][T11635] __kmem_cache_alloc_node+0x53/0x250 [ 519.195121][T11635] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 519.201058][T11635] kmalloc_trace+0x2a/0xe0 [ 519.205510][T11635] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 519.211279][T11635] sctp_association_new+0x15d3/0x25c0 [ 519.216711][T11635] sctp_connect_new_asoc+0x2de/0x6a0 [ 519.222031][T11635] ? __sctp_connect+0xd80/0xd80 [ 519.226896][T11635] ? __local_bh_enable_ip+0x13a/0x1c0 [ 519.232329][T11635] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 519.237940][T11635] ? security_sctp_bind_connect+0x89/0xb0 [ 519.243729][T11635] sctp_sendmsg+0x15d2/0x2910 [ 519.248488][T11635] ? sctp_getsockopt+0xb60/0xb60 [ 519.253478][T11635] ? aa_sk_perm+0x83c/0x970 [ 519.258045][T11635] ? aa_af_perm+0x330/0x330 [ 519.262582][T11635] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 519.269060][T11635] ? sock_rps_record_flow+0x19/0x3f0 [ 519.274399][T11635] ? inet_sendmsg+0xe9/0x2f0 [ 519.279037][T11635] ? inet_send_prepare+0x260/0x260 [ 519.284199][T11635] ____sys_sendmsg+0x5ba/0x960 [ 519.289011][T11635] ? __lock_acquire+0x7d40/0x7d40 [ 519.294088][T11635] ? __asan_memset+0x22/0x40 [ 519.298722][T11635] ? __sys_sendmsg_sock+0x30/0x30 [ 519.303795][T11635] ? __import_iovec+0x5f2/0x850 [ 519.308704][T11635] ? import_iovec+0x73/0xa0 [ 519.313260][T11635] ___sys_sendmsg+0x2a6/0x360 [ 519.317975][T11635] ? perf_trace_preemptirq_template+0x269/0x330 [ 519.324278][T11635] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.329225][T11635] __se_sys_sendmsg+0x1c2/0x2b0 [ 519.334134][T11635] ? __x64_sys_sendmsg+0x80/0x80 [ 519.339239][T11635] ? lockdep_hardirqs_on+0x98/0x150 [ 519.344491][T11635] do_syscall_64+0x55/0xb0 [ 519.348944][T11635] ? clear_bhb_loop+0x40/0x90 [ 519.353658][T11635] ? clear_bhb_loop+0x40/0x90 [ 519.358379][T11635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.364310][T11635] RIP: 0033:0x7eff4d99ce59 [ 519.368780][T11635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.388435][T11635] RSP: 002b:00007eff4e8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.396889][T11635] RAX: ffffffffffffffda RBX: 00007eff4dc15fa0 RCX: 00007eff4d99ce59 [ 519.404899][T11635] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000003a [ 519.412910][T11635] RBP: 00007eff4e8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 519.420927][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.428940][T11635] R13: 00007eff4dc16038 R14: 00007eff4dc15fa0 R15: 00007ffd0599db78 [ 519.437016][T11635] [ 519.503923][T11640] netlink: 'syz.3.2060': attribute type 10 has an invalid length. [ 519.514178][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2060'. [ 519.527238][T11640] bridge0: port 3(ipvlan1) entered blocking state [ 519.535056][T11640] bridge0: port 3(ipvlan1) entered disabled state [ 519.575383][T11640] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 519.777485][T11650] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2064'. [ 519.797430][T11650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.062456][T11654] netlink: 'syz.3.2067': attribute type 2 has an invalid length. [ 520.071708][T11654] netlink: 'syz.3.2067': attribute type 8 has an invalid length. [ 520.080782][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2067'. [ 520.214552][T11658] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 520.235087][T11658] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2069'. [ 520.256820][T11658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.267530][T11658] hsr0: entered promiscuous mode [ 520.276618][T11658] bridge0: port 3(hsr0) entered blocking state [ 520.283258][T11658] bridge0: port 3(hsr0) entered disabled state [ 520.289695][T11658] hsr0: entered allmulticast mode [ 520.295101][T11658] hsr_slave_0: entered allmulticast mode [ 520.301662][T11658] hsr_slave_1: entered allmulticast mode [ 520.320886][T11658] bridge0: port 3(hsr0) entered blocking state [ 520.327335][T11658] bridge0: port 3(hsr0) entered forwarding state [ 520.523073][T11672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2072'. [ 520.953466][T11680] netlink: 'syz.1.2077': attribute type 2 has an invalid length. [ 520.968456][T11680] netlink: 'syz.1.2077': attribute type 8 has an invalid length. [ 520.978070][T11680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2077'. [ 521.414146][T11689] netlink: 'syz.0.2080': attribute type 10 has an invalid length. [ 521.422906][T11689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2080'. [ 521.442397][T11689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 521.583668][ T5778] Bluetooth: hci3: Malformed LE Event: 0x1b [ 525.545045][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 525.583748][T11726] FAULT_INJECTION: forcing a failure. [ 525.583748][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 525.606434][T11726] CPU: 1 PID: 11726 Comm: syz.1.2094 Not tainted syzkaller #0 [ 525.613946][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.624068][T11726] Call Trace: [ 525.627360][T11726] [ 525.630305][T11726] dump_stack_lvl+0x18c/0x250 [ 525.635030][T11726] ? show_regs_print_info+0x20/0x20 [ 525.640254][T11726] ? load_image+0x420/0x420 [ 525.644776][T11726] ? __might_sleep+0xe0/0xe0 [ 525.649403][T11726] ? __lock_acquire+0x7d40/0x7d40 [ 525.654453][T11726] should_fail_ex+0x39d/0x4d0 [ 525.659165][T11726] should_failslab+0x9/0x20 [ 525.663727][T11726] slab_pre_alloc_hook+0x59/0x310 [ 525.668871][T11726] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.675099][T11726] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 525.681043][T11726] __kmem_cache_alloc_node+0x53/0x250 [ 525.686457][T11726] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.692655][T11726] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 525.698586][T11726] kmalloc_trace+0x2a/0xe0 [ 525.703044][T11726] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 525.708805][T11726] sctp_association_new+0x15d3/0x25c0 [ 525.714215][T11726] sctp_connect_new_asoc+0x2de/0x6a0 [ 525.719547][T11726] ? __sctp_connect+0xd80/0xd80 [ 525.724459][T11726] ? security_sctp_bind_connect+0x5f/0xb0 [ 525.730203][T11726] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 525.735775][T11726] ? security_sctp_bind_connect+0x89/0xb0 [ 525.741522][T11726] sctp_sendmsg+0x15d2/0x2910 [ 525.746240][T11726] ? sctp_getsockopt+0xb60/0xb60 [ 525.751206][T11726] ? aa_sk_perm+0x83c/0x970 [ 525.755740][T11726] ? aa_af_perm+0x330/0x330 [ 525.760280][T11726] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 525.766745][T11726] ? sock_rps_record_flow+0x19/0x3f0 [ 525.772073][T11726] ? inet_sendmsg+0xe9/0x2f0 [ 525.776698][T11726] ? inet_send_prepare+0x260/0x260 [ 525.781842][T11726] ____sys_sendmsg+0x5ba/0x960 [ 525.786656][T11726] ? __lock_acquire+0x7d40/0x7d40 [ 525.791729][T11726] ? __asan_memset+0x22/0x40 [ 525.796354][T11726] ? __sys_sendmsg_sock+0x30/0x30 [ 525.801411][T11726] ? __import_iovec+0x5f2/0x850 [ 525.806296][T11726] ? import_iovec+0x73/0xa0 [ 525.810831][T11726] ___sys_sendmsg+0x2a6/0x360 [ 525.815575][T11726] ? __sys_sendmsg+0x2a0/0x2a0 [ 525.820406][T11726] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 525.826713][T11726] __se_sys_sendmsg+0x1c2/0x2b0 [ 525.831599][T11726] ? __x64_sys_sendmsg+0x80/0x80 [ 525.836575][T11726] ? lockdep_hardirqs_on+0x98/0x150 [ 525.841796][T11726] do_syscall_64+0x55/0xb0 [ 525.846230][T11726] ? clear_bhb_loop+0x40/0x90 [ 525.850923][T11726] ? clear_bhb_loop+0x40/0x90 [ 525.855616][T11726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.861532][T11726] RIP: 0033:0x7fc70559ce59 [ 525.865984][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.885700][T11726] RSP: 002b:00007fc706377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.894164][T11726] RAX: ffffffffffffffda RBX: 00007fc705815fa0 RCX: 00007fc70559ce59 [ 525.902162][T11726] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000016 [ 525.910150][T11726] RBP: 00007fc706377090 R08: 0000000000000000 R09: 0000000000000000 [ 525.918139][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.926215][T11726] R13: 00007fc705816038 R14: 00007fc705815fa0 R15: 00007ffe6aaa56f8 [ 525.934221][T11726] [ 526.013367][T11728] validate_nla: 2 callbacks suppressed [ 526.013386][T11728] netlink: 'syz.2.2098': attribute type 2 has an invalid length. [ 526.046444][T11728] netlink: 'syz.2.2098': attribute type 8 has an invalid length. [ 526.062065][T11728] __nla_validate_parse: 2 callbacks suppressed [ 526.062113][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 526.239545][T11735] FAULT_INJECTION: forcing a failure. [ 526.239545][T11735] name failslab, interval 1, probability 0, space 0, times 0 [ 526.268065][T11735] CPU: 0 PID: 11735 Comm: syz.2.2102 Not tainted syzkaller #0 [ 526.275603][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.285733][T11735] Call Trace: [ 526.289049][T11735] [ 526.292016][T11735] dump_stack_lvl+0x18c/0x250 [ 526.296746][T11735] ? show_regs_print_info+0x20/0x20 [ 526.301987][T11735] ? load_image+0x420/0x420 [ 526.306537][T11735] ? __might_sleep+0xe0/0xe0 [ 526.311173][T11735] ? __lock_acquire+0x7d40/0x7d40 [ 526.316276][T11735] should_fail_ex+0x39d/0x4d0 [ 526.321010][T11735] should_failslab+0x9/0x20 [ 526.325558][T11735] slab_pre_alloc_hook+0x59/0x310 [ 526.330638][T11735] ? __request_module+0x2ed/0x600 [ 526.335707][T11735] ? __request_module+0x2ed/0x600 [ 526.340778][T11735] __kmem_cache_alloc_node+0x53/0x250 [ 526.346214][T11735] ? __request_module+0x2ed/0x600 [ 526.351292][T11735] __kmalloc_node_track_caller+0xa2/0x230 [ 526.357251][T11735] kstrdup+0x3b/0x80 [ 526.361249][T11735] __request_module+0x2ed/0x600 [ 526.366158][T11735] ? module_enforce_rwx_sections+0x150/0x150 [ 526.372190][T11735] ? module_enforce_rwx_sections+0x150/0x150 [ 526.378215][T11735] ? apparmor_capable+0x137/0x1a0 [ 526.383298][T11735] ? dev_load+0x21/0x1f0 [ 526.387599][T11735] dev_ioctl+0x384/0x1140 [ 526.391988][T11735] sock_do_ioctl+0x239/0x310 [ 526.396637][T11735] ? sock_show_fdinfo+0xb0/0xb0 [ 526.401552][T11735] sock_ioctl+0x5ba/0x7e0 [ 526.405969][T11735] ? sock_poll+0x3e0/0x3e0 [ 526.410455][T11735] ? bpf_lsm_file_ioctl+0x9/0x10 [ 526.415453][T11735] ? security_file_ioctl+0x80/0xa0 [ 526.420612][T11735] ? sock_poll+0x3e0/0x3e0 [ 526.425534][T11735] __se_sys_ioctl+0xfd/0x170 [ 526.431261][T11735] do_syscall_64+0x55/0xb0 [ 526.440697][T11735] ? clear_bhb_loop+0x40/0x90 [ 526.446138][T11735] ? clear_bhb_loop+0x40/0x90 [ 526.451377][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.460721][T11735] RIP: 0033:0x7eff4d99ce59 [ 526.466451][T11735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.491559][T11735] RSP: 002b:00007eff4e8d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.503262][T11735] RAX: ffffffffffffffda RBX: 00007eff4dc15fa0 RCX: 00007eff4d99ce59 [ 526.513445][T11735] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000004 [ 526.522894][T11735] RBP: 00007eff4e8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 526.535537][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.545253][T11735] R13: 00007eff4dc16038 R14: 00007eff4dc15fa0 R15: 00007ffd0599db78 [ 526.553545][T11735] [ 526.585442][T11745] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2104'. [ 526.656770][T11744] netlink: 'syz.0.2103': attribute type 16 has an invalid length. [ 526.665201][T11744] netlink: 'syz.0.2103': attribute type 3 has an invalid length. [ 526.677909][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2103'. [ 526.811949][T11751] netlink: 'syz.2.2106': attribute type 10 has an invalid length. [ 526.820985][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2106'. [ 529.914301][T11760] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 529.992074][T11761] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 530.001488][T11761] netlink: 'syz.3.2110': attribute type 8 has an invalid length. [ 530.013683][T11761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'. [ 530.084771][T11767] netlink: 'syz.2.2111': attribute type 16 has an invalid length. [ 530.110878][T11767] netlink: 'syz.2.2111': attribute type 3 has an invalid length. [ 530.129413][T11767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2111'. [ 530.355709][T11779] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2115'. [ 530.812045][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'. [ 530.822204][T11788] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 533.923347][T11796] validate_nla: 1 callbacks suppressed [ 533.923366][T11796] netlink: 'syz.1.2121': attribute type 2 has an invalid length. [ 533.942911][T11796] netlink: 'syz.1.2121': attribute type 8 has an invalid length. [ 533.965074][T11796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2121'. [ 534.039378][T11803] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2122'. [ 534.385652][T11814] netlink: 'syz.1.2130': attribute type 29 has an invalid length. [ 534.396996][T11814] netlink: 'syz.1.2130': attribute type 29 has an invalid length. [ 534.408719][T11817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2129'. [ 534.939618][T11822] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 534.948534][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2132'. [ 534.959911][T11822] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 537.649479][T11841] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 537.671996][T11841] netlink: 'syz.2.2136': attribute type 8 has an invalid length. [ 537.699119][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2136'. [ 538.011872][T11855] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2142'. [ 538.147760][T11858] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 538.156135][T11858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 538.165513][T11858] bridge0: port 4(ipvlan1) entered blocking state [ 538.172889][T11858] bridge0: port 4(ipvlan1) entered disabled state [ 538.183403][T11858] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 538.472195][T11861] FAULT_INJECTION: forcing a failure. [ 538.472195][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.486275][T11861] CPU: 0 PID: 11861 Comm: syz.1.2144 Not tainted syzkaller #0 [ 538.493824][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.503956][T11861] Call Trace: [ 538.507300][T11861] [ 538.510301][T11861] dump_stack_lvl+0x18c/0x250 [ 538.515075][T11861] ? show_regs_print_info+0x20/0x20 [ 538.520344][T11861] ? load_image+0x420/0x420 [ 538.524915][T11861] ? __lock_acquire+0x7d40/0x7d40 [ 538.530077][T11861] should_fail_ex+0x39d/0x4d0 [ 538.534870][T11861] _copy_from_user+0x2f/0xe0 [ 538.539551][T11861] __copy_msghdr+0x3bb/0x580 [ 538.544227][T11861] ___sys_sendmsg+0x214/0x360 [ 538.548984][T11861] ? __sys_sendmsg+0x2a0/0x2a0 [ 538.553868][T11861] ? __lock_acquire+0x7d40/0x7d40 [ 538.558990][T11861] __se_sys_sendmsg+0x1c2/0x2b0 [ 538.563977][T11861] ? __x64_sys_sendmsg+0x80/0x80 [ 538.569022][T11861] ? lockdep_hardirqs_on+0x98/0x150 [ 538.574286][T11861] do_syscall_64+0x55/0xb0 [ 538.578763][T11861] ? clear_bhb_loop+0x40/0x90 [ 538.583482][T11861] ? clear_bhb_loop+0x40/0x90 [ 538.588294][T11861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.594239][T11861] RIP: 0033:0x7fc70559ce59 [ 538.598708][T11861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.618439][T11861] RSP: 002b:00007fc706377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.626901][T11861] RAX: ffffffffffffffda RBX: 00007fc705815fa0 RCX: 00007fc70559ce59 [ 538.634922][T11861] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 538.642948][T11861] RBP: 00007fc706377090 R08: 0000000000000000 R09: 0000000000000000 [ 538.650966][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.658974][T11861] R13: 00007fc705816038 R14: 00007fc705815fa0 R15: 00007ffe6aaa56f8 [ 538.667057][T11861] [ 539.306412][T11882] netlink: 'syz.1.2153': attribute type 2 has an invalid length. [ 539.316902][T11882] netlink: 'syz.1.2153': attribute type 8 has an invalid length. [ 539.326019][T11882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2153'. [ 539.613428][T11892] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2156'. [ 540.189479][T11901] netlink: 'syz.3.2161': attribute type 10 has an invalid length. [ 540.208621][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2161'. [ 540.224585][T11901] bridge0: port 4(ipvlan1) entered blocking state [ 540.237253][T11901] bridge0: port 4(ipvlan1) entered disabled state [ 540.363317][T11901] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 540.486146][T11913] netlink: 'syz.0.2163': attribute type 2 has an invalid length. [ 540.495999][T11913] netlink: 'syz.0.2163': attribute type 8 has an invalid length. [ 540.505556][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2163'. [ 540.530916][T11910] netlink: 'syz.2.2164': attribute type 10 has an invalid length. [ 540.541737][T11910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2164'. [ 544.094723][T11938] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2173'. [ 544.544092][T11945] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 544.553811][T11945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2178'. [ 544.574697][T11945] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 544.661378][T11949] netlink: 'syz.0.2179': attribute type 2 has an invalid length. [ 544.669372][T11949] netlink: 'syz.0.2179': attribute type 8 has an invalid length. [ 544.677543][T11949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2179'. [ 548.325018][T11967] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 548.337679][T11967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2185'. [ 548.353227][T11967] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 548.375580][T11972] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 548.384731][T11972] netlink: 'syz.2.2187': attribute type 8 has an invalid length. [ 548.398087][T11972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2187'. [ 548.408359][T11969] netlink: 'syz.3.2186': attribute type 10 has an invalid length. [ 548.418109][T11969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2186'. [ 548.431254][T11969] bridge0: port 4(ipvlan1) entered blocking state [ 548.443111][T11969] bridge0: port 4(ipvlan1) entered disabled state [ 548.468080][T11969] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 548.484801][T11974] netlink: 'syz.1.2188': attribute type 10 has an invalid length. [ 548.496291][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 548.510778][T11974] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 549.115826][T11979] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2189'. [ 549.744234][T11986] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 549.773183][T11986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 549.819545][T11986] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 549.909229][T11990] netlink: 'syz.3.2193': attribute type 2 has an invalid length. [ 549.918140][T11990] netlink: 'syz.3.2193': attribute type 8 has an invalid length. [ 549.927845][T11990] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2193'. [ 550.913955][T12004] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 550.931089][T12004] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2197'. [ 551.358079][T11999] sit0: left promiscuous mode [ 552.023135][T12010] syzkaller0: entered promiscuous mode [ 552.028683][T12010] syzkaller0: entered allmulticast mode [ 552.253502][T12019] netlink: 'syz.0.2200': attribute type 2 has an invalid length. [ 552.281812][T12019] netlink: 'syz.0.2200': attribute type 8 has an invalid length. [ 552.289618][T12019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2200'. [ 554.022946][T12022] netlink: 'syz.3.2201': attribute type 10 has an invalid length. [ 554.032875][T12022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2201'. [ 554.043944][T12022] bridge0: port 4(ipvlan1) entered blocking state [ 554.050887][T12022] bridge0: port 4(ipvlan1) entered disabled state [ 554.063019][T12022] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 554.082905][T12026] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2202'. [ 554.375358][T12040] netlink: 'syz.0.2203': attribute type 2 has an invalid length. [ 554.418380][T12040] netlink: 'syz.0.2203': attribute type 8 has an invalid length. [ 554.431829][T12040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2203'. [ 554.454902][T12036] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 554.466565][T12036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2205'. [ 554.497485][T12038] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2207'. [ 555.227399][T12044] validate_nla: 1 callbacks suppressed [ 555.227418][T12044] netlink: 'syz.3.2217': attribute type 2 has an invalid length. [ 555.247376][T12044] netlink: 'syz.3.2217': attribute type 8 has an invalid length. [ 555.277273][T12044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2217'. [ 555.324986][T12048] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2211'. [ 555.601825][T12058] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2212'. [ 555.621624][T12052] sit0: entered allmulticast mode [ 556.062249][T12062] netlink: 'syz.1.2213': attribute type 6 has an invalid length. [ 556.081877][T12062] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2213'. [ 556.487099][T12065] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2213'. [ 556.557533][T12065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.293407][T12075] syzkaller0: entered promiscuous mode [ 557.299064][T12075] syzkaller0: entered allmulticast mode [ 557.309540][T12078] netlink: 'syz.0.2215': attribute type 10 has an invalid length. [ 557.320358][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2215'. [ 557.334042][T12078] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 557.351044][T12083] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 557.362296][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2220'. [ 557.379478][T12083] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 557.656132][T12086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.671013][T12086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.681879][T12086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.704896][T12086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.721041][T12086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 557.731806][T12086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.123815][ T5783] bond0: (slave syz_tun): Releasing backup interface [ 559.137109][T12090] netlink: 'syz.0.2221': attribute type 2 has an invalid length. [ 559.145440][T12090] netlink: 'syz.0.2221': attribute type 8 has an invalid length. [ 559.155557][T12090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2221'. [ 559.172532][T12093] netlink: 'syz.1.2222': attribute type 2 has an invalid length. [ 559.180325][T12093] netlink: 'syz.1.2222': attribute type 8 has an invalid length. [ 559.210788][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'. [ 559.568126][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.857547][T12102] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2224'. [ 559.891705][T12086] Bluetooth: hci3: command tx timeout [ 559.914374][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.027197][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.166117][ T11] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.632963][T12122] netlink: 'syz.1.2230': attribute type 2 has an invalid length. [ 560.680856][T12122] netlink: 'syz.1.2230': attribute type 8 has an invalid length. [ 560.747210][T12122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2230'. [ 560.846684][T12085] chnl_net:caif_netlink_parms(): no params data found [ 561.439430][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.500742][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.550223][T12085] bridge_slave_0: entered allmulticast mode [ 561.591256][T12085] bridge_slave_0: entered promiscuous mode [ 561.644473][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.680975][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.688223][T12085] bridge_slave_1: entered allmulticast mode [ 561.722458][T12085] bridge_slave_1: entered promiscuous mode [ 561.861314][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.893828][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.963107][T12085] team0: Port device team_slave_0 added [ 561.980875][T12086] Bluetooth: hci3: command tx timeout [ 561.994661][T12085] team0: Port device team_slave_1 added [ 562.069087][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.080532][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.141795][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.174948][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.187203][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.215614][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.639686][T12085] hsr_slave_0: entered promiscuous mode [ 562.647650][T12085] hsr_slave_1: entered promiscuous mode [ 562.655721][T12085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.663869][T12085] Cannot create hsr debugfs directory [ 562.935163][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950013][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.373914][T12085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.409484][T12085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.424487][T12085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.447856][T12085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.541768][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.562912][T12085] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.598973][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.606149][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.632887][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.640038][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.061243][T12086] Bluetooth: hci3: command tx timeout [ 564.127093][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.205831][T12085] veth0_vlan: entered promiscuous mode [ 564.263290][T12085] veth1_vlan: entered promiscuous mode [ 564.328586][ T11] hsr_slave_0: left promiscuous mode [ 564.336444][ T11] hsr_slave_1: left promiscuous mode [ 564.348180][ T11] hsr0: left allmulticast mode [ 564.355460][ T11] bridge0: port 3(hsr0) entered disabled state [ 564.364985][ T11] bridge_slave_1: left allmulticast mode [ 564.371953][ T11] bridge_slave_1: left promiscuous mode [ 564.377789][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.389435][ T11] bridge_slave_0: left allmulticast mode [ 564.398399][ T11] bridge_slave_0: left promiscuous mode [ 564.405504][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.436895][ T11] veth1_vlan: left promiscuous mode [ 566.131358][T12086] Bluetooth: hci3: command tx timeout [ 617.989258][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.000158][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.009871][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.020690][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.028731][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 618.037101][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.130607][ T5778] Bluetooth: hci4: command tx timeout [ 622.210685][ T5778] Bluetooth: hci4: command tx timeout [ 624.290655][ T5778] Bluetooth: hci4: command tx timeout [ 624.383299][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389690][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.370565][ T5778] Bluetooth: hci4: command tx timeout [ 679.058432][T12086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.072573][T12086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.080373][T12086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.089314][T12086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.097711][T12086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 679.107304][T12086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.170580][ T5778] Bluetooth: hci5: command tx timeout [ 682.770758][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 683.250684][T12086] Bluetooth: hci5: command tx timeout [ 685.330579][T12086] Bluetooth: hci5: command tx timeout [ 685.815775][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.822444][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.410566][T12086] Bluetooth: hci5: command tx timeout [ 711.410852][ T29] INFO: task kworker/u4:10:2959 blocked for more than 143 seconds. [ 711.418872][ T29] Not tainted syzkaller #0 [ 711.426182][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.436379][ T29] task:kworker/u4:10 state:D stack:23288 pid:2959 ppid:2 flags:0x00004000 [ 711.445705][ T29] Workqueue: events_unbound linkwatch_event [ 711.451735][ T29] Call Trace: [ 711.455053][ T29] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 711.458024][ T29] __schedule+0x1553/0x45a0 [ 711.462839][ T29] ? verify_lock_unused+0x140/0x140 [ 711.468115][ T29] ? asan.module_dtor+0x20/0x20 [ 711.490480][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 711.495236][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 711.510664][ T29] ? kthread_data+0x4f/0xc0 [ 711.515292][ T29] ? wq_worker_sleeping+0x63/0x240 [ 711.573528][ T29] schedule+0xbd/0x170 [ 711.590694][ T29] schedule_preempt_disabled+0x13/0x20 [ 711.606463][ T29] __mutex_lock+0x6a9/0xcc0 [ 711.635968][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 711.658865][ T29] ? linkwatch_event+0xe/0x60 [ 711.690476][ T29] ? mutex_lock_nested+0x20/0x20 [ 711.695504][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.711825][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 711.717640][ T29] linkwatch_event+0xe/0x60 [ 711.731705][ T29] process_scheduled_works+0xa5d/0x15d0 [ 711.737362][ T29] ? worker_attach_to_pool+0x380/0x380 [ 711.760462][ T29] ? assign_work+0x3d2/0x5d0 [ 711.765247][ T29] worker_thread+0xa55/0xfc0 [ 711.769929][ T29] kthread+0x2fa/0x390 [ 711.791477][ T29] ? pr_cont_work+0x560/0x560 [ 711.796241][ T29] ? kthread_blkcg+0xd0/0xd0 [ 711.810969][ T29] ret_from_fork+0x48/0x80 [ 711.815455][ T29] ? kthread_blkcg+0xd0/0xd0 [ 711.820105][ T29] ret_from_fork_asm+0x11/0x20 [ 711.840473][ T29] [ 711.843636][ T29] INFO: task dhcpcd:5438 blocked for more than 143 seconds. [ 711.860484][ T29] Not tainted syzkaller #0 [ 711.866116][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.880632][ T29] task:dhcpcd state:D stack:24496 pid:5438 ppid:1 flags:0x00004002 [ 711.889895][ T29] Call Trace: [ 711.900631][ T29] [ 711.903699][ T29] __schedule+0x1553/0x45a0 [ 711.908365][ T29] ? asan.module_dtor+0x20/0x20 [ 711.914442][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 711.919619][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 711.928338][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 711.936805][ T29] schedule+0xbd/0x170 [ 711.941096][ T29] schedule_preempt_disabled+0x13/0x20 [ 711.946655][ T29] __mutex_lock+0x6a9/0xcc0 [ 711.952562][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 711.957353][ T29] ? netlink_dump+0x78f/0xe50 [ 711.962197][ T29] ? mutex_lock_nested+0x20/0x20 [ 711.967245][ T29] ? __build_skb_around+0x255/0x3d0 [ 711.975489][ T29] ? __alloc_skb+0x1b2/0x2c0 [ 711.980210][ T29] netlink_dump+0x78f/0xe50 [ 711.985281][ T29] ? netlink_lookup+0x200/0x200 [ 711.990306][ T29] ? netlink_autobind+0x300/0x300 [ 711.997071][ T29] ? netlink_lookup+0x30/0x200 [ 712.002054][ T29] ? netlink_lookup+0x30/0x200 [ 712.006939][ T29] __netlink_dump_start+0x5f1/0x810 [ 712.013551][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 712.018803][ T29] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 712.023915][ T29] ? fib6_run_gc+0x8b0/0x8b0 [ 712.028639][ T29] ? rtnetlink_bind+0x80/0x80 [ 712.037647][ T29] ? mark_lock+0x94/0x320 [ 712.043316][ T29] ? __lock_acquire+0x1273/0x7d40 [ 712.048462][ T29] ? __kernel_text_address+0xd/0x30 [ 712.055376][ T29] ? mark_lock+0x94/0x320 [ 712.059867][ T29] ? mark_lock+0x94/0x320 [ 712.064924][ T29] ? __lock_acquire+0x1273/0x7d40 [ 712.070138][ T29] ? kmalloc_reserve+0x95/0x240 [ 712.076616][ T29] ? verify_lock_unused+0x140/0x140 [ 712.082265][ T29] ? verify_lock_unused+0x140/0x140 [ 712.087574][ T29] ? fib6_run_gc+0x8b0/0x8b0 [ 712.094298][ T29] netlink_rcv_skb+0x241/0x4d0 [ 712.099405][ T29] ? rtnetlink_bind+0x80/0x80 [ 712.104662][ T29] ? netlink_ack+0x1180/0x1180 [ 712.109558][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 712.125708][ T29] ? net_generic+0x1e/0x240 [ 712.140579][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.145849][ T29] netlink_unicast+0x751/0x8d0 [ 712.160783][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 712.165621][ T29] ? netlink_getsockopt+0x590/0x590 [ 712.190449][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 712.195556][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 712.201594][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 712.207186][ T29] ? netlink_getsockopt+0x590/0x590 [ 712.212943][ T29] ____sys_sendmsg+0x5ba/0x960 [ 712.217839][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 712.223425][ T29] ? __asan_memset+0x22/0x40 [ 712.228203][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 712.233722][ T29] ? __import_iovec+0x5f2/0x850 [ 712.238702][ T29] ? import_iovec+0x73/0xa0 [ 712.243758][ T29] ___sys_sendmsg+0x2a6/0x360 [ 712.248607][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 712.253942][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 712.258917][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 712.264416][ T29] ? __secure_computing+0x111/0x2f0 [ 712.269765][ T29] do_syscall_64+0x55/0xb0 [ 712.274686][ T29] ? clear_bhb_loop+0x40/0x90 [ 712.279478][ T29] ? clear_bhb_loop+0x40/0x90 [ 712.285744][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.292242][ T29] RIP: 0033:0x7fc1138e4407 [ 712.296778][ T29] RSP: 002b:00007ffe12c205f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 712.305886][ T29] RAX: ffffffffffffffda RBX: 00007fc11385a740 RCX: 00007fc1138e4407 [ 712.314297][ T29] RDX: 0000000000000000 RSI: 00007ffe12c20670 RDI: 000000000000000c [ 712.322662][ T29] RBP: 00007ffe12c24890 R08: 0000000000000000 R09: 0000000000000000 [ 712.331039][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556a51124c60 [ 712.339138][ T29] R13: 000000000000000c R14: 00007ffe12c24850 R15: 00007ffe12c24890 [ 712.348504][ T29] [ 712.400641][ T29] INFO: task kworker/u4:1:11824 blocked for more than 144 seconds. [ 712.408630][ T29] Not tainted syzkaller #0 [ 712.430524][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.439265][ T29] task:kworker/u4:1 state:D stack:25288 pid:11824 ppid:2 flags:0x00004000 [ 712.460894][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 712.473438][ T29] Call Trace: [ 712.482317][ T29] [ 712.488744][ T29] __schedule+0x1553/0x45a0 [ 712.499319][ T29] ? asan.module_dtor+0x20/0x20 [ 712.515496][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 712.526096][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 712.538479][ T29] ? kthread_data+0x4f/0xc0 [ 712.548972][ T29] ? wq_worker_sleeping+0x63/0x240 [ 712.560147][ T29] schedule+0xbd/0x170 [ 712.569422][ T29] schedule_preempt_disabled+0x13/0x20 [ 712.580753][ T29] __mutex_lock+0x6a9/0xcc0 [ 712.590747][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 712.601175][ T29] ? addrconf_dad_work+0xd4/0x1530 [ 712.612984][ T29] ? mutex_lock_nested+0x20/0x20 [ 712.623988][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 712.640568][ T29] addrconf_dad_work+0xd4/0x1530 [ 712.645595][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 712.661954][ T29] ? read_lock_is_recursive+0x20/0x20 [ 712.667414][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.690648][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 712.696460][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 712.711274][ T29] process_scheduled_works+0xa5d/0x15d0 [ 712.716982][ T29] ? worker_attach_to_pool+0x380/0x380 [ 712.740514][ T29] ? assign_work+0x3d2/0x5d0 [ 712.745212][ T29] worker_thread+0xa55/0xfc0 [ 712.749871][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 712.761859][ T29] ? _raw_spin_unlock+0x40/0x40 [ 712.766789][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 712.774563][ T29] kthread+0x2fa/0x390 [ 712.778692][ T29] ? pr_cont_work+0x560/0x560 [ 712.783843][ T29] ? kthread_blkcg+0xd0/0xd0 [ 712.788511][ T29] ret_from_fork+0x48/0x80 [ 712.794528][ T29] ? kthread_blkcg+0xd0/0xd0 [ 712.799174][ T29] ret_from_fork_asm+0x11/0x20 [ 712.804459][ T29] [ 712.807857][ T29] INFO: task kworker/1:0:12005 blocked for more than 144 seconds. [ 712.817467][ T29] Not tainted syzkaller #0 [ 712.822780][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.833212][ T29] task:kworker/1:0 state:D stack:26792 pid:12005 ppid:2 flags:0x00004000 [ 712.846815][ T29] Workqueue: events switchdev_deferred_process_work [ 712.855798][ T29] Call Trace: [ 712.859122][ T29] [ 712.862499][ T29] __schedule+0x1553/0x45a0 [ 712.867082][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 712.873744][ T29] ? mark_lock+0x94/0x320 [ 712.878171][ T29] ? asan.module_dtor+0x20/0x20 [ 712.883517][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 712.888782][ T29] schedule+0xbd/0x170 [ 712.894379][ T29] schedule_preempt_disabled+0x13/0x20 [ 712.899919][ T29] __mutex_lock+0x6a9/0xcc0 [ 712.904579][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 712.909317][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 712.916500][ T29] ? mutex_lock_nested+0x20/0x20 [ 712.921652][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.926924][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 712.933913][ T29] switchdev_deferred_process_work+0xe/0x20 [ 712.939863][ T29] process_scheduled_works+0xa5d/0x15d0 [ 712.945723][ T29] ? worker_attach_to_pool+0x380/0x380 [ 712.953452][ T29] ? assign_work+0x3d2/0x5d0 [ 712.958580][ T29] worker_thread+0xa55/0xfc0 [ 712.964513][ T29] kthread+0x2fa/0x390 [ 712.969014][ T29] ? pr_cont_work+0x560/0x560 [ 712.974819][ T29] ? kthread_blkcg+0xd0/0xd0 [ 712.980558][ T29] ret_from_fork+0x48/0x80 [ 712.985916][ T29] ? kthread_blkcg+0xd0/0xd0 [ 712.991003][ T29] ret_from_fork_asm+0x11/0x20 [ 712.996483][ T29] [ 713.020503][ T29] INFO: task syz-executor:12085 blocked for more than 144 seconds. [ 713.029532][ T29] Not tainted syzkaller #0 [ 713.041644][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.054496][ T29] task:syz-executor state:D stack:21736 pid:12085 ppid:1 flags:0x00004004 [ 713.067124][ T29] Call Trace: [ 713.075628][ T29] [ 713.079080][ T29] __schedule+0x1553/0x45a0 [ 713.084246][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.092425][ T29] ? asan.module_dtor+0x20/0x20 [ 713.097343][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 713.102362][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 713.107913][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 713.114503][ T29] schedule+0xbd/0x170 [ 713.118637][ T29] schedule_preempt_disabled+0x13/0x20 [ 713.124529][ T29] __mutex_lock+0x6a9/0xcc0 [ 713.129088][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 713.133878][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 713.139075][ T29] ? mutex_lock_nested+0x20/0x20 [ 713.144274][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 713.149460][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 713.154539][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 713.159800][ T29] ? rtnetlink_bind+0x80/0x80 [ 713.164569][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 713.170940][ T29] ? lock_chain_count+0x20/0x20 [ 713.176011][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.182600][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 713.187878][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 713.193361][ T29] ? _local_bh_enable+0xa0/0xa0 [ 713.198304][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 713.203512][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 713.208673][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 713.214037][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 713.219230][ T29] ? ref_tracker_free+0x690/0x840 [ 713.224348][ T29] netlink_rcv_skb+0x241/0x4d0 [ 713.229151][ T29] ? rtnetlink_bind+0x80/0x80 [ 713.233971][ T29] ? netlink_ack+0x1180/0x1180 [ 713.238798][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 713.243932][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.249223][ T29] netlink_unicast+0x751/0x8d0 [ 713.254303][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 713.259238][ T29] ? netlink_getsockopt+0x590/0x590 [ 713.264598][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 713.269609][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 713.275054][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 713.280618][ T29] __sys_sendto+0x4a9/0x6b0 [ 713.285169][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 713.290699][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 713.296739][ T29] ? lock_chain_count+0x20/0x20 [ 713.308936][ T29] __x64_sys_sendto+0xde/0xf0 [ 713.313884][ T29] do_syscall_64+0x55/0xb0 [ 713.318364][ T29] ? clear_bhb_loop+0x40/0x90 [ 713.323382][ T29] ? clear_bhb_loop+0x40/0x90 [ 713.328122][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.334310][ T29] RIP: 0033:0x7fbdadd5d68e [ 713.338797][ T29] RSP: 002b:00007ffe4b0ac458 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 713.347744][ T29] RAX: ffffffffffffffda RBX: 0000555576a21500 RCX: 00007fbdadd5d68e [ 713.356813][ T29] RDX: 0000000000000040 RSI: 00007fbdaeb44670 RDI: 0000000000000003 [ 713.364988][ T29] RBP: 0000000000000001 R08: 00007ffe4b0ac4d4 R09: 000000000000000c [ 713.373980][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 713.382083][ T29] R13: 0000000000000000 R14: 00007fbdaeb44670 R15: 0000000000000000 [ 713.390112][ T29] [ 713.403992][ T29] [ 713.403992][ T29] Showing all locks held in the system: [ 713.413082][ T29] 1 lock held by pool_workqueue_/3: [ 713.418479][ T29] 4 locks held by kworker/u4:0/11: [ 713.429058][ T29] 2 locks held by ksoftirqd/1/22: [ 713.434240][ T29] #0: ffff8880b8f3c098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 713.444492][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 713.453626][ T29] 1 lock held by khungtaskd/29: [ 713.458517][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 713.468541][ T29] 3 locks held by kworker/u4:10/2959: [ 713.474306][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.486108][ T29] #1: ffffc9000bd77d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.497185][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 713.506245][ T29] 2 locks held by dhcpcd/5438: [ 713.512265][ T29] #0: ffff88801a6ff690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 713.522817][ T29] #1: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 713.532145][ T29] 2 locks held by getty/5535: [ 713.536866][ T29] #0: ffff88814cb310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 713.546787][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 713.557018][ T29] 1 lock held by syz-executor/5776: [ 713.562290][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 713.572025][ T29] 1 lock held by syz-executor/5777: [ 713.577248][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 713.586450][ T29] 1 lock held by syz-executor/5780: [ 713.591758][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 713.600895][ T29] 2 locks held by kworker/1:4/6532: [ 713.606133][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.617245][ T29] #1: ffffc900191dfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.629361][ T29] 3 locks held by kworker/u4:1/11824: [ 713.634965][ T29] #0: ffff88802c9ac938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.646644][ T29] #1: ffffc9000ca9fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.659597][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 713.669126][ T29] 3 locks held by kworker/1:0/12005: [ 713.674498][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.685681][ T29] #1: ffffc90018b3fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 713.696960][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 713.707629][ T29] 1 lock held by syz-executor/12085: [ 713.713149][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 713.722839][ T29] 1 lock held by syz-executor/12192: [ 713.728190][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 713.737908][ T29] 1 lock held by syz-executor/12196: [ 713.743444][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 713.753324][ T29] [ 713.755692][ T29] ============================================= [ 713.755692][ T29] [ 713.764546][ T29] NMI backtrace for cpu 0 [ 713.768929][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 713.776161][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.786251][ T29] Call Trace: [ 713.789573][ T29] [ 713.792540][ T29] dump_stack_lvl+0x18c/0x250 [ 713.797288][ T29] ? show_regs_print_info+0x20/0x20 [ 713.802524][ T29] ? load_image+0x420/0x420 [ 713.807136][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 713.812210][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 713.818424][ T29] ? _printk+0xde/0x130 [ 713.822607][ T29] ? load_image+0x420/0x420 [ 713.827146][ T29] ? load_image+0x420/0x420 [ 713.831672][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 713.837782][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 713.843804][ T29] watchdog+0xf3d/0xf80 [ 713.847992][ T29] ? watchdog+0x1e1/0xf80 [ 713.852352][ T29] kthread+0x2fa/0x390 [ 713.856450][ T29] ? hungtask_pm_notify+0x90/0x90 [ 713.861527][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.866143][ T29] ret_from_fork+0x48/0x80 [ 713.870600][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.875233][ T29] ret_from_fork_asm+0x11/0x20 [ 713.880042][ T29] [ 713.883371][ T29] Sending NMI from CPU 0 to CPUs 1: [ 713.888620][ C1] NMI backtrace for cpu 1 [ 713.888630][ C1] CPU: 1 PID: 167 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 713.888645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.888655][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 713.888711][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x264/0x770 [ 713.888733][ C1] Code: 00 00 00 83 da 00 48 8b 7c 24 10 4c 89 fe e8 33 f4 00 00 48 ba 00 00 00 00 00 fc ff df 85 c0 0f 84 a2 01 00 00 41 0f b6 04 16 <84> c0 75 5b 49 ff c5 48 63 03 49 83 c7 28 49 83 c4 28 49 39 c5 7c [ 713.888745][ C1] RSP: 0018:ffffc90002ec7920 EFLAGS: 00000002 [ 713.888757][ C1] RAX: 0000000000000000 RBX: ffff88801b3fa8d8 RCX: ffffffff8168ee54 [ 713.888768][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff911cd5e0 [ 713.888779][ C1] RBP: ffffc90002ec79e0 R08: ffffffff911cd5e7 R09: 1ffffffff2239abc [ 713.888790][ C1] R10: dffffc0000000000 R11: fffffbfff2239abd R12: ffff88801b3fa928 [ 713.888801][ C1] R13: 0000000000000001 R14: 1ffff1100367f51b R15: ffff88801b3fa908 [ 713.888813][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 713.888825][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.888835][ C1] CR2: 00007ffc8c687dd4 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 713.888849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 713.888858][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 713.888867][ C1] Call Trace: [ 713.888872][ C1] [ 713.888879][ C1] ? lock_chain_count+0x20/0x20 [ 713.888899][ C1] ? rcu_is_watching+0x15/0xb0 [ 713.888920][ C1] trace_hardirqs_on+0x28/0x40 [ 713.888942][ C1] kasan_quarantine_put+0xd8/0x220 [ 713.888966][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 713.888984][ C1] ? nsim_dev_trap_report_work+0x77e/0xb10 [ 713.889002][ C1] kmem_cache_free+0xf8/0x270 [ 713.889027][ C1] nsim_dev_trap_report_work+0x77e/0xb10 [ 713.889053][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 713.889073][ C1] process_scheduled_works+0xa5d/0x15d0 [ 713.889104][ C1] ? worker_attach_to_pool+0x380/0x380 [ 713.889125][ C1] ? assign_work+0x3d2/0x5d0 [ 713.889146][ C1] worker_thread+0xa55/0xfc0 [ 713.889175][ C1] kthread+0x2fa/0x390 [ 713.889189][ C1] ? pr_cont_work+0x560/0x560 [ 713.889207][ C1] ? kthread_blkcg+0xd0/0xd0 [ 713.889222][ C1] ret_from_fork+0x48/0x80 [ 713.889240][ C1] ? kthread_blkcg+0xd0/0xd0 [ 713.889254][ C1] ret_from_fork_asm+0x11/0x20 [ 713.889281][ C1] [ 713.896215][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 713.896253][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 713.896316][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.896348][ T29] Call Trace: [ 713.896365][ T29] [ 713.896384][ T29] dump_stack_lvl+0x18c/0x250 [ 713.896455][ T29] ? show_regs_print_info+0x20/0x20 [ 713.896508][ T29] ? load_image+0x420/0x420 [ 713.896573][ T29] panic+0x2dc/0x730 [ 713.896633][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 713.896696][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 713.896757][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 713.896829][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 713.896901][ T29] watchdog+0xf7c/0xf80 [ 713.896963][ T29] ? watchdog+0x1e1/0xf80 [ 713.897034][ T29] kthread+0x2fa/0x390 [ 713.897072][ T29] ? hungtask_pm_notify+0x90/0x90 [ 713.897132][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.897177][ T29] ret_from_fork+0x48/0x80 [ 713.897223][ T29] ? kthread_blkcg+0xd0/0xd0 [ 713.897267][ T29] ret_from_fork_asm+0x11/0x20 [ 713.897361][ T29] [ 713.902821][ T29] Kernel Offset: disabled [ 714.248051][ T29] Rebooting in 86400 seconds..