last executing test programs: 3.453501673s ago: executing program 3 (id=3106): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r3) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000010000001000000070000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000000000000fd0300000100000088000000", @ANYRES32, @ANYBLOB="0100000000000700000054b4000000c000000000a49210e087f687129453", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x7, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) 3.406232584s ago: executing program 2 (id=3107): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a8001600", 0x34}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.296280678s ago: executing program 2 (id=3109): r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) (async) 3.200455121s ago: executing program 2 (id=3112): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000340)=@base={0x4, 0x7, 0x4, 0x40007, 0x20004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) r5 = socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 2.860205271s ago: executing program 2 (id=3116): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x97ff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e0000001000000001400000000000000000000d6eca37cbff6"], 0x38}, 0x20002800) 2.823871102s ago: executing program 2 (id=3117): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a8001600", 0x34}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.775521004s ago: executing program 2 (id=3118): perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x41065, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}, 0x40c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2e00, 0x0) 2.493414303s ago: executing program 3 (id=3119): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}]}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1782}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x4, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 2.156582713s ago: executing program 1 (id=3120): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x1af, 0x8098, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0xa204, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='cpu&\t0\x00+7') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) write$cgroup_pid(r2, &(0x7f0000002a80), 0x12) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c69b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0xe0, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000800)={&(0x7f00000002c0)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="f6a61da000180eb7d3689060e77cd752b140eb870e54c7b183ac21eda4248eb1d35d911ca25826d483d75815eee1f4803bf03254d9c09d3315bfb2602d45c06dae719f4fb55775b7a9f0873777bb20f9b081a90924eb4c5d3ecb2d83ff5ece0445ae69f681e7df93ec6282f0519428ad09d733493ee8bf78917ce04ed25d51956ad72036b854", 0x86}, {&(0x7f0000000600)="abffe801b6e7751af913adcf91a6e8b3b9458935a1f6e72c20b1a2607c1e5c3708f99ee20cedf9f0da2a4db0f7ea5f6eed7478e15c32c6ae934ce8e869a9a31ed1bf80f8ec4e5290f45961db6189fb2ffd53be9297d03d7577d8d724ab979d78f0a249718cbb76bfa9f7194253672921b1e2766e7bb0000983c685e0db05a80fd737484fa1fe42f424b71642ec21d04442faf6147740", 0x96}, {&(0x7f00000006c0)="8f45d0785e0b4e999195dedaa527252d59034361618b5b80183e1d187834944cc7f5bb51686eaee69b5e1903f3c24ab394988376828220c2a9e0b0261cace294af00fade667c", 0x46}], 0x1000000000000229, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x0, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8d}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffffde09}}], 0x78}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00003000ff03"], 0x50) sendmsg$tipc(r5, &(0x7f0000000c40)={&(0x7f0000000540)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socketpair(0x18, 0x800, 0x3, &(0x7f0000000580)) socket$kcm(0x2c, 0x3, 0x0) socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) 2.125233794s ago: executing program 0 (id=3121): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000f93c0000f9ff1f0000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="1aac7f288631b18c00ff8fc46f7dd11ba6e868adffacb159e3754005c1b00f305b764a7deee399139b8a06085942a2fc65a1dc93e59e4a270d38288a8d95ad8591a0d7ac93f42f39c1ead7ecddc580c82e14676611b68febde828cea1177f6025d354edf033ca22b104c1d58a5c6eff13ef7db5b5bae900c5dec40a2301a35ffe71ebdeb056dfdfb98955d09589b7b313d004c332144b6941148e6a5917eb50d1caa63526e73e4aa587b7ca520507d4c72846eb975da0632123e76281a89db", 0xbf}, {&(0x7f0000000640)="54f003556c1ee8ad2dfe78a919fed3759a1a12e49408d8d2c6b839b5668b169cd5f67de42b311499a79caa82dd76cdcea8f9311544f9189d1fa017e70f433b4be5af9cd50a40b5d8df974ddb9f7c1ccd114ed0f96612750f49371f83aed2f10ab858a260c69f5ed078ae5c1c2fb48da2207d3cfbfa1092da24b55554c7a4a0c0fc5998ef9ad4d506237fc5af4e70d1d1b78ec02cefc1e36e94437b06a066a081e4f235fd5c116f60a5", 0xa9}], 0x2, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb788}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0xdb, [@empty, @loopback, @remote, @multicast1, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1]}, @rr={0x7, 0x17, 0x2a, [@multicast1, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0x7, 0x3d, [@broadcast]}, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@empty, 0x401}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x130}, 0x20042010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x442, 0x3d, 0x5, 0x42, 0xffffffffffffffff, 0x1, '\x00', r5, r3, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000140)="e9020400", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.032489697s ago: executing program 0 (id=3122): openat$tun(0xffffffffffffff9c, 0x0, 0x40a00, 0x0) 1.980851508s ago: executing program 0 (id=3123): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='`\x00\x00\x00N', 0x5}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000f93c0000f9ff1f0000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000046a5849b1d748a6a00000000"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x442, 0x3d, 0x5, 0x42, 0xffffffffffffffff, 0x1, '\x00', r5, r3, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000140)="e9020400", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.845522453s ago: executing program 0 (id=3124): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000340)=@base={0x4, 0x7, 0x4, 0x40007, 0x20004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) r5 = socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 1.845149733s ago: executing program 1 (id=3125): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x97ff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e0000001000000001400000000000000000000d6eca37c"], 0x38}, 0x20002800) 1.802094974s ago: executing program 1 (id=3126): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00", 0x36}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.725546967s ago: executing program 1 (id=3127): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86f46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x10061, 0x2000005, 0x84, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x2b7727b3, 0x0, 0xfffffffffffffff9}, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) unlink(&(0x7f0000000200)='./cgroup\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) r2 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x111200, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'lo\x00'}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000d40)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="1c00"], 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e11e0000850000009d00000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.577460061s ago: executing program 3 (id=3128): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xf8, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f00000001c0)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x8, 0x0}, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x4, 0x4000, 0x5, 0x4000, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x36}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x1, 0x0, 0x0, 0xa, 0x6, 0x50, 0x1}, @ldst={0x2, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffe0, 0xffffffffffffffe0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xfffffeff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[0x1, r7], &(0x7f0000000bc0)=[{0x4, 0x1, 0xd, 0x4}, {0x5, 0x4, 0xd, 0x7}, {0x0, 0x2, 0xc}], 0x10, 0x20e}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="16000000030000009d000000090000000b000000", @ANYRES32=0x1, @ANYBLOB="ffff000000000000c672379a660b4fd672", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000500"/28], 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3b45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x2, 0x2, 0x1, 0x8, 0x10, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func]}, &(0x7f00000003c0)='syzkaller\x00', 0xfd, 0x18, &(0x7f0000000400)=""/24, 0x40f00, 0x4, '\x00', r4, @fallback=0x28, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0x10, 0x5aee, 0x1a}, 0x10, r6, r3, 0x3, &(0x7f0000000c00)=[r0, r7, r8, r0, r9, r2, r10], &(0x7f0000000c40)=[{0x0, 0x5, 0xe, 0x5}, {0x5, 0x1, 0xe, 0x4}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0xa}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa200088be"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.576705691s ago: executing program 1 (id=3129): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000400), 0x4) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x80) sendmsg$inet(r0, &(0x7f0000003580)={&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000003540)=[{&(0x7f0000002540)="d3404f351cb77ccea118125045eea2b5c500405a7c7c5c43a6ea2dc7995622b4d9bc6df2145e3909cc261e3eabb20e7d5c3d35b4efbf8d3901d191cd4bf4930a564a19d751bcbd72680fb84ef50afbbee1ca3fd2d886df04779d1c86e65bcaa42143d195cfacaec2782c720bdce49f88c7ec2bd20134f7114535fe4e3a2d9abb2e25e64bfcc6665045d26ada48c1b6bcbd3f78f0e2ae65d320bd6ffbb11bbe92b45132b968d053ac692e5a450456a00c9504ef2a153d2d2595dce0e826f70f69de6205e45283ff6007a43b1ea01577aed10d5fbea8e0a47250380c8643232a6c978c16ffcf297d92b0106a7a1aaf542d0dd6d4cab26d884cb2ce2f004ec0245041089370d88911b91e29d6fe4ee1c69cdc8aeec5f8b926be58e5b89d8e7169134b3e084eea1000f0844baf7f80f137c6ff74af6c2b5376a78123b0169ab471cb3b5b0c6f1ba9e87dee3b2b31e5f8698dba7b5d1a1976c6ba1cf87fb8e16146ecf399baa3c0c2fe59ecee0e990f79a417910c47f724507662392f5b508c7ba8256789003df3f631047abf51e3a347039ae6dc11bd701ecd738573f4f88423584346ec1d74e604bad44d934aba50848425ec0b12414257ab8d00ff7b0af7e4587ef81343c3900d470c87a846733999a565ad234fd925b0fd002f1c0acc08544bdb88ed933ada0eadebbc81bb2160eabd0cfa42ea1024297b780f27593a94a2b0e466e468124382317b55cb0625091dfb6a1d68a8f1d84ae9e49e477fc4e1658da94688cc048eddc1c5e5c0166d31e85e14bc9b16b7cc24ad9dc1fee1e03bf2eba8e792a88278d0bedbb40e1a13303c682c0dbf3f7241329f487c61e014d813fc3dce0ab179d1964568d22e48c5a784170bed33f336201c05a4431ab5a8f0312d7ed4ffff5c565d5a4288586e06029af905629c3ef0fd802f32d60b8d9cd8365159e5ffb362792e9135823dc2e90380e1390e86bef6fac5093271691930161a28a669bda0e1eef01a24b9720a57ef966c206a24e644f7871e8c4285f680a0d354d48a936e4ca08b0142d299f7538dbe11081a01dd75e840e1cda92c7c6c3c1e7d715d2dfc53e178d6e5a7696c5e9035ae45e9560e7d5070a8c75736b32d1d1987dacc224dfa75d7abf088da6520da59145fb6a64775e4325012fef2475a905c55f6a1d29ae6e149b75dad2c79fb909020f97fbb5d5af0001d71aae40f68d3558daa35a13017fb52ecbe72535f2ef59fafd9c7bccfa933f7549d4d8accd6371197634af682de47200d8aeff399369a28f72df2836b2aafcc05db66396e09bb746635616f0b5a99e5fe1e6e013c729542c40cd5421acdd940e8ad2e02f6a34b496dd4d3c82a7fb9f81ff520800329aaba32bab2b1b5c5326452545414c396d397bcd4a96b62d93a288c984b93699ac8a36e3bb09c50df6b6eff86b5c6927b76e50257f53875c47aa3142e61f4e7cdf0c1446a7c6f6f3eaa8c06d6e422736443e8b4a6592c199f8b977d2f6f9da9edc6c27f34fd1cfc72ab72d8db0d93a66e7425349c4c4ae12183911e0c94ba13a7454e684f388be3bf0f5dc2c68507660e9d407487dde7cea1dc217b733cb1091886cfbfaa13de920862e5368a05f11740948348f66293c15e87f5bd3a5d64f7fdbf952553fe61ad4e03f4bdcf88d1d3d42985d0dfc09a06e3fb6ea8b9e9814c9f4624a174f4a0e14c8c382e7a7f4e151585917f931786bceb631ea8badc76c79e2762555a08c6ff4a9cbf9d630fd628f35ad83807b9b10e0b238ca7dbacc31bc531cc9d1f70e85b5f5a6a5b62a4d83041d119fd533a64ffca0dfda481c477b095fb581f11deb42f6f8a83d586987b25fde81867ad271d515d2ec5b1bf49ee7962fbaf091fcb3f711027aa23c0b4661e4ac11b960ac86b689dfeadb5ab7404e6332d862e4f9d2ac0ca61645fc838112650c5c2c0c67d35dec438e642692ff265f7444b855ddeec651e1285e8d3a9f0de27320daa8ccc60d908e00ed5bf646b11f29aa8e2ff9ca908a690d707bc2da5bf885a148cc62699478e98ba526afc02cd63654a7f509a1df4f6e419df529df9ea20f4d3cfd71524b8dd9e79f6a0cede7d0bb5346b4650e730efe3b8bbf645a84dfeafbfc6a0508aa4476baa498d56a90dc21b51052a8b25dcbed828670e141bccd73a9701fe8e7c42f5455889ca63e14bc5839526d3965432d80af5abd284bb1bfbdf682cf2da0833e868a979f6069ba4cfb71ad2195fdde383c1811a05d40c854cfab883b38a2e18ab39b3436f531d00e6ed2f5647a6184bd40bfd346a71077f5d192fdd238812ee3a6d7693c0bc1fde1711092c3d35ec7389513ebc268ba357a8e0f8f2de8af78bf0b68fb4587153dda5eab142a7a8c9d3847bb9eae2530ad98618cf442f497ecb8c37afe49b77404c04d6c364c4520a5957ec5a80d87263106aa4dad15d3769bed117608c1c04a71170efb47de2b5a82d1bc2d504fb91e61f118ffd2bcdda1145b8e4a1f2195a3da60d94d412c401fed8a83b297ad25f2a7d3748ec30c5c59109d72c80e1518f60ba13fcdc0bf59f70c9cf2e73d3081879f6d05703293e5a524096f7b2b087494b59425e35c234b9d953d0a7060c89cd2e8efea7f0228cca6de9060f695cc6c8f0d2b61898d7f49be68d73169516e748845fd100eb8390aba5e358d1af7ff8e1229d7bb53840bcd7b78278be43fc2b3ce11cc62f78b7545a874aa24e02fe061505055258e917be1efb08b39ada5069be8f9d9ec081bb0a131166d23230645ee73a3e060c461fe2590a482df097771cac9d9012c69689e1fa30ce913d2ec4b0cad75a54b62a38af4a9d87d0560033360ce3ce447e9a404a438eb00e2a98956966a3d8bab971fdc777e3b7d68feb5e1fbe19c50021209b395e488c71628e9476d42c8ee381c73ccbe3b987edf00cd37f4a7981afe6cbb3201a574d68482413a1e79685ab05c24a79258a41234eb2a9f530974a080124d513bf5e21be7af1946232daf0aa50ad1badb1a72cc12e777771e295c80d4d19966571dddbd2cb9f5f79c89349e36727be19e5de7eed4d7c8203b4fd1e7de3e22b1ac40ba0eb22373a03c6e0b0d4e1029217323d0a0b246808d3139a52000bdc9ca2ec36a74166dd49a387be768bce17c862235ee571d0669ad66666975736ea6aa7f44744b6a38458333c8bb4a21bf3d3bfce6dba20d0fa55505321803b4da909c2a7d58e3e600b58a48aea88b8f5c041e91317132bc7147ae8744029f089fea14745426fef857487d5600a1d9cc485e5ed43b7a078cce36606d9e59732bd53257435a18b9f4d7d29d7275ce9716364ae69c94772103e4d20a58707a714a93090258b6a4225c541cc0332d6a4dfdd14e9d61198065de7f4c3f38cb01238968173e03fba7e594210c906d29da9c4e9590f36d53aac09459fa878f3bf64a1e69065186c257475a0fe04cb4f0e3f7cb2a616e4f418dc48f12ec0073155de58c4038e5d851b441a74812fd1c4e6506b98e2d138887aaabed77cc59228e690767751a8740706b6b7214f5f7cf803e14d9077a6425f77c002f9a0af94145951e41ad3472e4618100823cf006a555974d825656827bdaf882818b074163427884939b1cb55fb79e9455c2c736122b2463637a8e0fa518e706087fc903472f11ce4324d67df1e1249dda7909330dd343a4d5cf5036f11bc72e1a081b335baf6a0680ba3aff2f779569ca8d3b6874860c16186a7f808084241d21123618a1df8d7c500784e471f9e0969eb7b6a981f1a939300d34c569ac7a76f6515901380534c90909d79298d23a3f52e59408f0e786b6a64310a8aa3ae49c22749f334629a1741a187b9d64316d656398591f2e222ff2f06dfb13f04b1dc7292ecf212678cf39e852f484215644c755d36f68d2671caf79d356b8d5285f40434a35313791780c52fbc926b4eff63e23934a37674c52d32e6acea796c512434712ba21405a8597fb5c207545e64f1ef066254fbd5aab356600213efb3e0ebbaabf702d9c8b90a7c20a150d542964414e4df30cdbf279438d7060c354dd83219d7fce1e7525e6f87f765b7aa459ffbd3ecf8263e1f43af96284d8dc3090ba51db023bb2ac772514a5f27ee3e4b7832c64699f8c2953b949b4be66692ffbf17d54c5282437db64d50e6254781f82566f5ec8fedb77069c4aff43e064371ff33e1424efec896b68c159af45695f5e6d40f04f34d260a0679f4568b5ecb6e4973be4bfd791ea2f45a96b079c0f1fa820a1f825bf2c4af1050ddf794651e7dc26e921406afe94d8b12b188034ed7b3c6fb9402386fa222b993326b46a186832a485511fa3bd5cc531ef23675096f95b06b99b5a1fd66fa5613f26286fa8fcf0822c86ccbf57ce265212aa808761af56a980c090b73fbdcaa069bf3c7e4af4d03983eb494744526100bae0c1f35524d5de155e9d8673640c63695ec5f8c755acec81384610f5a66a88de847f4a2883cf35101492384dddc0da988f33f2240ccbbd9b9c3d7cd6bb4b21fc6e8b2c684a4489dbe66e0835f78b704a946ea95593e6b070677a0c4a8ad11d1cf53a431fdbcc79cdbb4f8d64729581712bc93fd5fd736b9e532657e6b1ee2cc7a6da5d27e6977b25f3ab695983935885b69fdd05ab8a1f27035136f7218fca0e07a71bef24120b89cec5595be61b8f576e2928df285fd8922def66cd23c39fb35ba251ce49d598082dba3ec1ef7cc8224d1e8b50e217123fd85a8b464f2eef49821aac810f41c7d80ff62591beeac5dbf601396c8a0e96fccb05c1fed125d703657853232afb0e6d272580ae90b5343f25bf698a1a3719253818bec6ddf9a46ec57f3b4ebd94bbdcf75d85ce40519feedeb5ae3566928adfdf94cfd4d97e78aca2a431465d610cfbd99f4a48c9248eaf7cdf5e7135dd76274bb47c8d5bee73ffb0ffd94daf83a3ef4ff9ddee4ec5ca7fa1ce0673a0962e54cfe6f239db97aa37739abd148d70afd007f2b2713a6b37e1760d437d13d804dffb1bcfa124e86866f80b07fc97f1e97deff22cadfdcdcab951f80b42ff27501fbebea1d2c74eecd906b392783d9590c8d162b1d77d9b62e52c019f18a2e1018cc7f54c18e135262339e92d9af902b91a659776d637543cbec2d87c846d262ae9286ae4ca6a7015de5c2afeb4a8f9b7e72041fff41a7a690dc7cf90cb65cf705f7ccae2ed63c29457a6865662d520f0a47f57ff2e6c3f28ca872528383f3fc142a9b6a553f4a2744a6f66175d9c10134b7086d47d9f89e827d910ef362686e4f84510d39cb9d9ef7f616024735713e2d4b4c237e099cf57d2b5b9c73eea8c14dc2550ef8448d7945eeefbf69a42e5a642f70834d00aa620296b65ceb9e04b0c3c1d74c96dcc5c67967ca2658dc1ada3fb4e0341c72c95330cc591509be3486250e7fc4cb77f0aeacff39507e71f78e51b5f4c13147848c008a236998ffba923f3ff295963c5aa5319cf793975a01e16f528214ecfac49badcc306fec9151839bc6b9c8ea855f1524455deb7a0a668bfe9be71c6cae5f9c78407850a2714718be5c6971f13c7ba3db4a0198dea910dd7ae09bb9cc26a3bf4d17621d73879f750d8ff0a9e4e5d5b88bae523b62779f707d138cf48644eba7e6a4ba8d2a16c230cde513275a593668d4da03c440a2124e41c1dd5cf6441fe19152edafa4eba70391afd739905da3e2e1d41f10874c3a6691c39bb2f3fe5e8b673048d315d2ccdc575d7b6dd1e5e7352c2cdacbc1c1afd46e5cb57cd92924b0bd475cb23ab6b47c4ffafba80ada5a094f40caedf002", 0x1000}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) 1.430492386s ago: executing program 0 (id=3130): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000f93c0000f9ff1f0000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="1aac7f288631b18c00ff8fc46f7dd11ba6e868adffacb159e3754005c1b00f305b764a7deee399139b8a06085942a2fc65a1dc93e59e4a270d38288a8d95ad8591a0d7ac93f42f39c1ead7ecddc580c82e14676611b68febde828cea1177f6025d354edf033ca22b104c1d58a5c6eff13ef7db5b5bae900c5dec40a2301a35ffe71ebdeb056dfdfb98955d09589b7b313d004c332144b6941148e6a5917eb50d1caa63526e73e4aa587b7ca520507d4c72846eb975da0632123e76281a89db", 0xbf}, {&(0x7f0000000640)="54f003556c1ee8ad2dfe78a919fed3759a1a12e49408d8d2c6b839b5668b169cd5f67de42b311499a79caa82dd76cdcea8f9311544f9189d1fa017e70f433b4be5af9cd50a40b5d8df974ddb9f7c1ccd114ed0f96612750f49371f83aed2f10ab858a260c69f5ed078ae5c1c2fb48da2207d3cfbfa1092da24b55554c7a4a0c0fc5998ef9ad4d506237fc5af4e70d1d1b78ec02cefc1e36e94437b06a066a081e4f235fd5c116f60a5", 0xa9}], 0x2, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb788}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0xdb, [@empty, @loopback, @remote, @multicast1, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1]}, @rr={0x7, 0x17, 0x2a, [@multicast1, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0x7, 0x3d, [@broadcast]}, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@empty, 0x401}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x130}, 0x20042010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x442, 0x3d, 0x5, 0x42, 0xffffffffffffffff, 0x1, '\x00', r5, r3, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000140)="e9020400", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.355906468s ago: executing program 0 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x8004745a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) close(r7) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000004000000000000080000001811000067d87c3db6945f956df1293c277c8e5d46701a78187899e81472faabeb294a8669dadbc3f13893e7cd56d8c1253c4ad8982f45ff4ce02487b6065ccd4b9e50fae25cac268a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001841000006000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x61, &(0x7f0000000680)=""/97, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0xa, 0xb, 0x18}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, 0x1, r3, r3], 0x0, 0x10, 0xdd}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000040)=r4) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 989.774419ms ago: executing program 3 (id=3132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7845904c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0xfe, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 693.585168ms ago: executing program 1 (id=3133): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='`\x00\x00\x00N', 0x5}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000f93c0000f9ff1f0000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000046a5849b1d748a6a00000000"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x442, 0x3d, 0x5, 0x42, 0xffffffffffffffff, 0x1, '\x00', r5, r3, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000140)="e9020400", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.734748ms ago: executing program 3 (id=3134): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x97ff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e0000001000000001400000000000000000000d6eca3"], 0x38}, 0x20002800) 0s ago: executing program 3 (id=3135): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00", 0x36}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): .511636][T13814] bridge_slave_0: entered promiscuous mode [ 697.554600][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.589805][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.619703][T13814] bridge_slave_1: entered allmulticast mode [ 697.643598][T13814] bridge_slave_1: entered promiscuous mode [ 697.711680][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.760178][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.871050][T13814] team0: Port device team_slave_0 added [ 697.892926][T13814] team0: Port device team_slave_1 added [ 697.983066][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.042683][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.086960][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.100291][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.107373][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.133625][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.756883][T13814] hsr_slave_0: entered promiscuous mode [ 698.776016][T13814] hsr_slave_1: entered promiscuous mode [ 698.800891][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.825111][T13814] Cannot create hsr debugfs directory [ 698.927987][ T5784] Bluetooth: hci4: command tx timeout [ 698.962595][T13836] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2390'. [ 699.333522][T13853] bridge0: port 6(team0) entered blocking state [ 699.346956][T13853] bridge0: port 6(team0) entered disabled state [ 699.365654][T13853] team0: entered allmulticast mode [ 699.400317][T13853] team_slave_0: entered allmulticast mode [ 699.426930][T13853] team_slave_1: entered allmulticast mode [ 699.448507][T13853] geneve1: entered allmulticast mode [ 699.469913][T13853] dummy0: entered allmulticast mode [ 699.669268][T13853] team0: entered promiscuous mode [ 699.677433][T13853] team_slave_0: entered promiscuous mode [ 699.697449][T13853] team_slave_1: entered promiscuous mode [ 699.707852][T13853] geneve1: entered promiscuous mode [ 699.724474][T13853] dummy0: entered promiscuous mode [ 699.758776][T13853] bridge0: port 6(team0) entered blocking state [ 699.767463][T13853] bridge0: port 6(team0) entered forwarding state [ 700.100894][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.218142][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.340707][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.006127][ T5784] Bluetooth: hci4: command tx timeout [ 703.085185][ T5784] Bluetooth: hci4: command tx timeout [ 703.386413][ T42] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.606821][T13877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2402'. [ 703.937599][T13888] FAULT_INJECTION: forcing a failure. [ 703.937599][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 703.964771][T13888] CPU: 1 PID: 13888 Comm: syz.3.2404 Not tainted syzkaller #0 [ 703.972294][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.982380][T13888] Call Trace: [ 703.985688][T13888] [ 703.988650][T13888] dump_stack_lvl+0x18c/0x250 [ 703.993366][T13888] ? trace_event_raw_event_lock+0x250/0x250 [ 703.999299][T13888] ? show_regs_print_info+0x20/0x20 [ 704.004534][T13888] ? load_image+0x420/0x420 [ 704.009096][T13888] should_fail_ex+0x39d/0x4d0 [ 704.013827][T13888] should_failslab+0x9/0x20 [ 704.018360][T13888] slab_pre_alloc_hook+0x59/0x310 [ 704.023428][T13888] kmem_cache_alloc+0x5a/0x2d0 [ 704.028218][T13888] ? __nf_conntrack_alloc+0x99/0x380 [ 704.033553][T13888] __nf_conntrack_alloc+0x99/0x380 [ 704.038712][T13888] init_conntrack+0x177/0xf10 [ 704.043434][T13888] ? early_drop+0x7f0/0x7f0 [ 704.047979][T13888] ? nf_conntrack_find_get+0x650/0x650 [ 704.053476][T13888] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.058882][T13888] ? __siphash_unaligned+0x22e/0x3a0 [ 704.064228][T13888] nf_conntrack_in+0xc06/0x15c0 [ 704.069156][T13888] ? nf_ct_pernet+0x270/0x270 [ 704.073882][T13888] ? ipt_do_table+0x2c1/0x15e0 [ 704.078707][T13888] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 704.084194][T13888] ? ipv4_conntrack_local+0x123/0x200 [ 704.089602][T13888] ? ipv4_conntrack_in+0x20/0x20 [ 704.094574][T13888] nf_hook_slow+0xbd/0x200 [ 704.099032][T13888] ? nf_hook+0x390/0x390 [ 704.103299][T13888] nf_hook+0x228/0x390 [ 704.107403][T13888] ? nf_hook+0xa2/0x390 [ 704.111576][T13888] ? __ip_local_out+0x5f0/0x5f0 [ 704.116449][T13888] ? nf_hook+0x390/0x390 [ 704.120730][T13888] ? ip_fast_csum+0x1ee/0x2b0 [ 704.125440][T13888] __ip_local_out+0x4db/0x5f0 [ 704.130151][T13888] ? nf_hook+0x390/0x390 [ 704.134429][T13888] ip_send_skb+0x4c/0x1d0 [ 704.138796][T13888] raw_sendmsg+0x163e/0x1c00 [ 704.143452][T13888] ? compat_raw_ioctl+0x70/0x70 [ 704.148425][T13888] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 704.154877][T13888] ? sock_rps_record_flow+0x19/0x3f0 [ 704.160204][T13888] ? inet_sendmsg+0x7c/0x2f0 [ 704.164826][T13888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 704.170140][T13888] ? security_socket_sendmsg+0x80/0xa0 [ 704.175626][T13888] ? inet_send_prepare+0x260/0x260 [ 704.180776][T13888] ____sys_sendmsg+0x5ba/0x960 [ 704.185575][T13888] ? __lock_acquire+0x7d40/0x7d40 [ 704.190661][T13888] ? __sys_sendmsg_sock+0x30/0x30 [ 704.195710][T13888] ? __import_iovec+0x3fa/0x850 [ 704.200609][T13888] ? import_iovec+0x73/0xa0 [ 704.205147][T13888] ___sys_sendmsg+0x2a6/0x360 [ 704.209868][T13888] ? __sys_sendmsg+0x2a0/0x2a0 [ 704.214707][T13888] ? trace_call_bpf+0xc3/0x6c0 [ 704.219554][T13888] __se_sys_sendmsg+0x1c2/0x2b0 [ 704.224454][T13888] ? __x64_sys_sendmsg+0x80/0x80 [ 704.229457][T13888] ? lockdep_hardirqs_on+0x98/0x150 [ 704.234696][T13888] do_syscall_64+0x55/0xb0 [ 704.239143][T13888] ? clear_bhb_loop+0x40/0x90 [ 704.243845][T13888] ? clear_bhb_loop+0x40/0x90 [ 704.248555][T13888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.254479][T13888] RIP: 0033:0x7f5111b9ce59 [ 704.258929][T13888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.278574][T13888] RSP: 002b:00007f51129c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.287029][T13888] RAX: ffffffffffffffda RBX: 00007f5111e15fa0 RCX: 00007f5111b9ce59 [ 704.295031][T13888] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 704.303033][T13888] RBP: 00007f51129c6090 R08: 0000000000000000 R09: 0000000000000000 [ 704.311034][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.319032][T13888] R13: 00007f5111e16038 R14: 00007f5111e15fa0 R15: 00007fff0fd60a68 [ 704.327068][T13888] [ 704.876901][T13814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 704.888171][T13814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 704.901564][T13814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 704.917501][T13814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 705.083257][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.157480][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.186152][ T5784] Bluetooth: hci4: command tx timeout [ 705.199090][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.206293][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.223214][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.230436][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.471585][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.527051][T13814] veth0_vlan: entered promiscuous mode [ 705.547775][T13814] veth1_vlan: entered promiscuous mode [ 705.607498][T13814] veth0_macvtap: entered promiscuous mode [ 705.617082][T13814] veth1_macvtap: entered promiscuous mode [ 705.633414][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.644065][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.654302][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.664856][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.674817][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.685820][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.697240][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.712618][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.725420][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.735377][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.746151][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.756082][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.766716][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.776588][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.787295][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.798480][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.829329][T13814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.838685][T13814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.847864][T13814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.857404][T13814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.970306][ T42] hsr_slave_0: left promiscuous mode [ 705.982857][ T42] hsr_slave_1: left promiscuous mode [ 705.990887][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.998417][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.007959][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.015980][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.031579][ T42] veth1_macvtap: left promiscuous mode [ 706.037542][ T42] veth0_macvtap: left promiscuous mode [ 707.350783][ T42] team0 (unregistering): Port device team_slave_1 removed [ 707.389718][ T42] team0 (unregistering): Port device team_slave_0 removed [ 707.424065][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.467977][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.511735][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 707.744891][ T42] team0 (unregistering): Port device bond0 removed [ 707.774558][ T42] bond0 (unregistering): Released all slaves [ 707.842673][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.851134][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.906196][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.914370][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.070482][T13925] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2412'. [ 708.101145][T13927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2413'. [ 708.187173][T13934] bridge0: port 3(team0) entered blocking state [ 708.199834][T13934] bridge0: port 3(team0) entered disabled state [ 708.240200][T13934] team0: entered allmulticast mode [ 708.252371][T13934] team_slave_0: entered allmulticast mode [ 708.265017][T13934] team_slave_1: entered allmulticast mode [ 708.339675][T13934] team0: entered promiscuous mode [ 708.345905][T13934] team_slave_0: entered promiscuous mode [ 708.363086][T13934] team_slave_1: entered promiscuous mode [ 708.420009][T13934] bridge0: port 3(team0) entered blocking state [ 708.429048][T13934] bridge0: port 3(team0) entered forwarding state [ 708.662646][T13943] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2407'. [ 708.697441][T13945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2408'. [ 709.183083][T13952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2411'. [ 709.420660][T13961] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2417'. [ 709.529198][T13963] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2418'. [ 709.706121][T13965] sit0: entered allmulticast mode [ 709.776865][T13967] sit0: entered promiscuous mode [ 709.953148][T13970] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2420'. [ 710.162935][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 710.177204][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 710.187608][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 710.196694][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 710.204759][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 710.213411][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.390677][ T6052] netdevsim netdevsim2 netdevsim3 (unregistering): left allmulticast mode [ 710.430396][ T6052] netdevsim netdevsim2 netdevsim3 (unregistering): left promiscuous mode [ 710.473199][ T6052] @: port 1(netdevsim3) entered disabled state [ 711.162454][ T6052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.182817][T13988] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2426'. [ 711.303113][ T6052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.421603][ T6052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.473429][T13998] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2429'. [ 711.596800][ T6052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.973138][T14013] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2430'. [ 712.042785][T13976] chnl_net:caif_netlink_parms(): no params data found [ 712.232291][T14018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2431'. [ 712.285939][ T5086] Bluetooth: hci0: command tx timeout [ 712.550630][ T6052] ip6gretap0 (unregistering): left allmulticast mode [ 712.568481][ T6052] ip6gretap0 (unregistering): left promiscuous mode [ 712.577777][ T6052] : port 1(ip6gretap0) entered disabled state [ 712.713461][T14020] sit0: left promiscuous mode [ 712.891590][T14018] sit0: entered promiscuous mode [ 713.069245][T14022] netlink: 'syz.1.2432': attribute type 13 has an invalid length. [ 713.151563][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.166060][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.183915][T13976] bridge_slave_0: entered allmulticast mode [ 713.206720][T13976] bridge_slave_0: entered promiscuous mode [ 714.376069][ T5086] Bluetooth: hci0: command tx timeout [ 716.310023][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.359075][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.371389][T13976] bridge_slave_1: entered allmulticast mode [ 716.382270][T13976] bridge_slave_1: entered promiscuous mode [ 716.445130][ T5086] Bluetooth: hci0: command tx timeout [ 716.532121][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.553007][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.618195][T13976] team0: Port device team_slave_0 added [ 716.626450][T13976] team0: Port device team_slave_1 added [ 716.660527][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.667639][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.694710][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.732498][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.739615][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.778435][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.851838][T13976] hsr_slave_0: entered promiscuous mode [ 716.858532][T13976] hsr_slave_1: entered promiscuous mode [ 716.864872][T13976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.878781][T13976] Cannot create hsr debugfs directory [ 717.474117][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.487024][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.495924][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.503339][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.511634][ T6052] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 717.518824][ T6052] batman_adv: batadv0: Removing interface: veth0_vlan [ 717.535911][ T6052] veth1_macvtap: left promiscuous mode [ 717.541445][ T6052] veth0_macvtap: left promiscuous mode [ 717.549586][ T6052] veth1_vlan: left allmulticast mode [ 717.554943][ T6052] veth1_vlan: left promiscuous mode [ 717.561375][ T6052] veth0_vlan: left promiscuous mode [ 718.384540][ T6052] team0 (unregistering): Port device geneve1 removed [ 718.513014][ T6052] team0 (unregistering): Port device macvlan1 removed [ 718.525774][ T5086] Bluetooth: hci0: command tx timeout [ 718.782745][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 718.821617][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 718.860744][ T6052] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.869434][ T6052] bond_slave_1 (unregistering): left promiscuous mode [ 718.912495][ T6052] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.925131][ T6052] bond_slave_0 (unregistering): left promiscuous mode [ 718.967002][ T6052] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 718.977779][ T6052] bridge_slave_1 (unregistering): left promiscuous mode [ 719.199275][ T6052] .` (unregistering): Released all slaves [ 719.381380][T13976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 719.400546][T13976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 719.421403][T13976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 719.456181][T13976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 719.572744][T13976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.606341][T13976] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.619928][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.627089][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.651748][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.658899][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.932009][T13976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.003585][T13976] veth0_vlan: entered promiscuous mode [ 720.022744][T13976] veth1_vlan: entered promiscuous mode [ 720.074129][T13976] veth0_macvtap: entered promiscuous mode [ 720.092665][T13976] veth1_macvtap: entered promiscuous mode [ 720.123588][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.134749][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.149242][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.161033][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.177927][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.190124][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.207393][T13976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.234276][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.245222][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.259378][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.271037][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.288815][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.300329][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.317760][T13976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.328636][T13976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.341888][T13976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.351100][T13976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.364800][T13976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.484980][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.503173][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.540933][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.552795][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.693528][T14118] __nla_validate_parse: 1 callbacks suppressed [ 720.693563][T14118] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2419'. [ 720.712921][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 720.719949][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 720.737578][T14122] netlink: 'syz.1.2446': attribute type 10 has an invalid length. [ 720.761046][T14122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2446'. [ 720.881979][T14119] netlink: 'syz.0.2445': attribute type 13 has an invalid length. [ 720.915580][T14119] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.2445'. [ 721.548296][T14140] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2439'. [ 721.797610][T14148] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2443'. [ 722.049708][T14156] netlink: 'syz.0.2448': attribute type 2 has an invalid length. [ 722.256936][T14160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2450'. [ 722.285389][T14161] netlink: 'syz.2.2451': attribute type 10 has an invalid length. [ 722.315440][T14161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2451'. [ 722.588002][T14168] netlink: 'syz.2.2452': attribute type 13 has an invalid length. [ 722.602416][T14168] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2452'. [ 725.020779][T14173] netlink: 'syz.3.2453': attribute type 25 has an invalid length. [ 725.033460][T14173] netlink: 'syz.3.2453': attribute type 29 has an invalid length. [ 725.052186][T14173] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2453'. [ 725.238182][T14181] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2455'. [ 728.389959][T14199] __nla_validate_parse: 1 callbacks suppressed [ 728.390010][T14199] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2462'. [ 728.734627][T14214] syzkaller0: entered promiscuous mode [ 728.762556][T14214] syzkaller0: entered allmulticast mode [ 728.785664][T14216] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2470'. [ 728.803552][T14206] syzkaller0: left promiscuous mode [ 728.824477][T14206] syzkaller0: left allmulticast mode [ 728.839113][T14222] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 728.848367][T14222] netlink: 'syz.0.2471': attribute type 13 has an invalid length. [ 728.856890][T14222] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.2471'. [ 730.664988][T14235] FAULT_INJECTION: forcing a failure. [ 730.664988][T14235] name failslab, interval 1, probability 0, space 0, times 0 [ 730.755462][T14235] CPU: 0 PID: 14235 Comm: syz.2.2475 Not tainted syzkaller #0 [ 730.763003][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 730.773096][T14235] Call Trace: [ 730.776407][T14235] [ 730.779374][T14235] dump_stack_lvl+0x18c/0x250 [ 730.784100][T14235] ? show_regs_print_info+0x20/0x20 [ 730.789337][T14235] ? load_image+0x420/0x420 [ 730.793885][T14235] ? __might_sleep+0xe0/0xe0 [ 730.798511][T14235] ? __lock_acquire+0x7d40/0x7d40 [ 730.803667][T14235] should_fail_ex+0x39d/0x4d0 [ 730.808404][T14235] should_failslab+0x9/0x20 [ 730.812945][T14235] slab_pre_alloc_hook+0x59/0x310 [ 730.818011][T14235] ? fib6_info_alloc+0x30/0xf0 [ 730.822812][T14235] ? fib6_info_alloc+0x30/0xf0 [ 730.827603][T14235] __kmem_cache_alloc_node+0x53/0x250 [ 730.833013][T14235] ? fib6_get_table+0x39/0x260 [ 730.837819][T14235] ? fib6_info_alloc+0x30/0xf0 [ 730.842614][T14235] __kmalloc+0xa4/0x230 [ 730.846817][T14235] fib6_info_alloc+0x30/0xf0 [ 730.851446][T14235] ip6_route_info_create+0x44f/0x1240 [ 730.856856][T14235] ? __lock_acquire+0x7d40/0x7d40 [ 730.861940][T14235] ip6_route_add+0x28/0x160 [ 730.866490][T14235] addrconf_prefix_route+0x24d/0x330 [ 730.871817][T14235] ? fib6_may_remove_gc_list+0x290/0x290 [ 730.877479][T14235] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 730.883535][T14235] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.889759][T14235] inet6_addr_add+0x64a/0xb60 [ 730.894499][T14235] addrconf_add_ifaddr+0x15a/0x1c0 [ 730.899658][T14235] ? addrconf_set_dstaddr+0x320/0x320 [ 730.905070][T14235] ? __lock_acquire+0x7d40/0x7d40 [ 730.910129][T14235] ? slab_free_freelist_hook+0x130/0x1a0 [ 730.915816][T14235] inet6_ioctl+0x14f/0x2d0 [ 730.920279][T14235] ? inet6_getname+0x650/0x650 [ 730.925080][T14235] ? tomoyo_path_number_perm+0x5b4/0x620 [ 730.930746][T14235] ? tomoyo_path_number_perm+0x217/0x620 [ 730.936410][T14235] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 730.941933][T14235] sock_do_ioctl+0xfc/0x310 [ 730.946490][T14235] ? sock_show_fdinfo+0xb0/0xb0 [ 730.951423][T14235] sock_ioctl+0x5ba/0x7e0 [ 730.955812][T14235] ? sock_poll+0x3e0/0x3e0 [ 730.960294][T14235] ? bpf_lsm_file_ioctl+0x9/0x10 [ 730.965275][T14235] ? security_file_ioctl+0x80/0xa0 [ 730.970433][T14235] ? sock_poll+0x3e0/0x3e0 [ 730.974904][T14235] __se_sys_ioctl+0xfd/0x170 [ 730.979543][T14235] do_syscall_64+0x55/0xb0 [ 730.983997][T14235] ? clear_bhb_loop+0x40/0x90 [ 730.988701][T14235] ? clear_bhb_loop+0x40/0x90 [ 730.993414][T14235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.999433][T14235] RIP: 0033:0x7f07a399ce59 [ 731.003886][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.023532][T14235] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.031994][T14235] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 731.040005][T14235] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 000000000000000f [ 731.048014][T14235] RBP: 00007f07a4865090 R08: 0000000000000000 R09: 0000000000000000 [ 731.056015][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.064022][T14235] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 731.072064][T14235] [ 733.567130][T14242] netlink: 'syz.3.2476': attribute type 10 has an invalid length. [ 733.616466][T14242] bridge0: port 7(macvlan1) entered blocking state [ 733.623157][T14242] bridge0: port 7(macvlan1) entered disabled state [ 733.663602][T14242] macvlan1: entered allmulticast mode [ 733.677280][T14242] macvlan1: entered promiscuous mode [ 733.771788][T14247] netlink: 'syz.2.2480': attribute type 29 has an invalid length. [ 733.823541][T14247] netlink: 'syz.2.2480': attribute type 29 has an invalid length. [ 733.852926][T14248] netlink: 'syz.2.2480': attribute type 29 has an invalid length. [ 738.702005][T14307] netlink: 'syz.0.2497': attribute type 10 has an invalid length. [ 738.725085][T14307] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2497'. [ 738.955820][T14315] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2500'. [ 745.000914][T14360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2511'. [ 745.451891][T14380] netlink: 'syz.2.2518': attribute type 10 has an invalid length. [ 746.129116][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.160410][T14380] bridge_slave_1: left allmulticast mode [ 746.169438][T14380] bridge_slave_1: left promiscuous mode [ 746.177069][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.255532][T14380] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 746.588946][T14405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2523'. [ 747.329525][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.335968][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.435284][T14411] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2524'. [ 749.455706][T14411] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 749.716430][T14414] syzkaller0: entered promiscuous mode [ 749.752856][T14414] syzkaller0: entered allmulticast mode [ 752.323702][T14454] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 752.339103][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.369039][T14454] bridge_slave_1: left allmulticast mode [ 752.380753][T14454] bridge_slave_1: left promiscuous mode [ 752.387062][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.412970][T14454] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 752.426013][T14461] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2535'. [ 752.695317][T14474] netlink: 'syz.3.2542': attribute type 10 has an invalid length. [ 752.703200][T14474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2542'. [ 753.710021][T14484] FAULT_INJECTION: forcing a failure. [ 753.710021][T14484] name failslab, interval 1, probability 0, space 0, times 0 [ 753.755571][T14484] CPU: 1 PID: 14484 Comm: syz.2.2546 Not tainted syzkaller #0 [ 753.763099][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.773259][T14484] Call Trace: [ 753.776536][T14484] [ 753.779459][T14484] dump_stack_lvl+0x18c/0x250 [ 753.784135][T14484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.790285][T14484] ? show_regs_print_info+0x20/0x20 [ 753.795478][T14484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.801656][T14484] should_fail_ex+0x39d/0x4d0 [ 753.806172][T14489] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2548'. [ 753.806353][T14484] should_failslab+0x9/0x20 [ 753.819838][T14484] slab_pre_alloc_hook+0x59/0x310 [ 753.824885][T14484] ? sctp_add_bind_addr+0x8c/0x360 [ 753.829998][T14484] __kmem_cache_alloc_node+0x53/0x250 [ 753.835409][T14484] ? sctp_add_bind_addr+0x8c/0x360 [ 753.840514][T14484] kmalloc_trace+0x2a/0xe0 [ 753.844939][T14484] sctp_add_bind_addr+0x8c/0x360 [ 753.849875][T14484] sctp_copy_local_addr_list+0x315/0x4f0 [ 753.855506][T14484] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 753.861229][T14484] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 753.867308][T14484] ? sctp_v4_is_any+0x35/0x60 [ 753.871996][T14484] ? sctp_copy_one_addr+0x8c/0x350 [ 753.877140][T14484] sctp_bind_addr_copy+0xb3/0x3c0 [ 753.882188][T14484] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 753.888530][T14484] sctp_connect_new_asoc+0x2f9/0x6a0 [ 753.893826][T14484] ? __sctp_connect+0xd80/0xd80 [ 753.898678][T14484] ? security_sctp_bind_connect+0x4a/0xb0 [ 753.904411][T14484] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 753.909962][T14484] ? security_sctp_bind_connect+0x89/0xb0 [ 753.915718][T14484] sctp_sendmsg+0x15d2/0x2910 [ 753.920408][T14484] ? sctp_getsockopt+0xb60/0xb60 [ 753.925363][T14484] ? aa_sk_perm+0x83c/0x970 [ 753.929873][T14484] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.936020][T14484] ? lockdep_hardirqs_on+0x98/0x150 [ 753.941216][T14484] ? aa_af_perm+0x330/0x330 [ 753.945709][T14484] ? sock_rps_record_flow+0x19/0x3f0 [ 753.950996][T14484] ? inet_sendmsg+0xe9/0x2f0 [ 753.955587][T14484] ? inet_send_prepare+0x260/0x260 [ 753.960694][T14484] ____sys_sendmsg+0x5ba/0x960 [ 753.965462][T14484] ? __lock_acquire+0x7d40/0x7d40 [ 753.970498][T14484] ? __asan_memset+0x22/0x40 [ 753.975085][T14484] ? __sys_sendmsg_sock+0x30/0x30 [ 753.980101][T14484] ? __import_iovec+0x5f2/0x850 [ 753.984958][T14484] ? import_iovec+0x73/0xa0 [ 753.989453][T14484] ___sys_sendmsg+0x2a6/0x360 [ 753.994129][T14484] ? __sys_sendmsg+0x2a0/0x2a0 [ 753.998897][T14484] ? __fget_files+0x59/0x4b0 [ 754.003493][T14484] __se_sys_sendmsg+0x1c2/0x2b0 [ 754.008336][T14484] ? __x64_sys_sendmsg+0x80/0x80 [ 754.013309][T14484] ? lockdep_hardirqs_on+0x98/0x150 [ 754.018514][T14484] do_syscall_64+0x55/0xb0 [ 754.022928][T14484] ? clear_bhb_loop+0x40/0x90 [ 754.027599][T14484] ? clear_bhb_loop+0x40/0x90 [ 754.032270][T14484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.038159][T14484] RIP: 0033:0x7f07a399ce59 [ 754.042572][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.062173][T14484] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.070582][T14484] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 754.078550][T14484] RDX: 0000000024000008 RSI: 0000200000001d80 RDI: 0000000000000005 [ 754.086514][T14484] RBP: 00007f07a4865090 R08: 0000000000000000 R09: 0000000000000000 [ 754.094477][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.102439][T14484] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 754.110431][T14484] [ 754.247727][T14496] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2550'. [ 754.404974][T14503] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 754.413247][T14503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2553'. [ 757.676611][T14523] netlink: 'syz.3.2559': attribute type 39 has an invalid length. [ 757.800703][T14523] hsr_slave_1 (unregistering): left promiscuous mode [ 757.880724][T14524] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2558'. [ 757.960213][T14528] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2560'. [ 758.028369][T14532] syzkaller0: entered promiscuous mode [ 758.034174][T14532] syzkaller0: entered allmulticast mode [ 758.229201][T14544] FAULT_INJECTION: forcing a failure. [ 758.229201][T14544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.251648][T14544] CPU: 1 PID: 14544 Comm: syz.3.2563 Not tainted syzkaller #0 [ 758.259196][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.269303][T14544] Call Trace: [ 758.272631][T14544] [ 758.275603][T14544] dump_stack_lvl+0x18c/0x250 [ 758.280333][T14544] ? show_regs_print_info+0x20/0x20 [ 758.285581][T14544] ? load_image+0x420/0x420 [ 758.290129][T14544] ? __might_fault+0xaa/0x120 [ 758.294861][T14544] ? __lock_acquire+0x7d40/0x7d40 [ 758.299949][T14544] should_fail_ex+0x39d/0x4d0 [ 758.304666][T14544] _copy_from_user+0x2f/0xe0 [ 758.309281][T14544] br_dev_siocdevprivate+0x119/0x1540 [ 758.314679][T14544] ? rcu_is_watching+0x15/0xb0 [ 758.319460][T14544] ? br_handle_local_finish+0x20/0x20 [ 758.324838][T14544] ? trace_contention_end+0x39/0xe0 [ 758.330070][T14544] ? __mutex_lock+0x315/0xcc0 [ 758.334808][T14544] ? dev_load+0x21/0x1f0 [ 758.339079][T14544] ? dev_ioctl+0x83c/0x1140 [ 758.343599][T14544] ? __lock_acquire+0x7d40/0x7d40 [ 758.348637][T14544] ? mutex_lock_nested+0x20/0x20 [ 758.353585][T14544] ? full_name_hash+0x92/0xe0 [ 758.358303][T14544] ? dev_ifsioc+0x958/0xc40 [ 758.362825][T14544] dev_ioctl+0x84c/0x1140 [ 758.367177][T14544] sock_ioctl+0x74c/0x7e0 [ 758.371525][T14544] ? sock_poll+0x3e0/0x3e0 [ 758.375970][T14544] ? bpf_lsm_file_ioctl+0x9/0x10 [ 758.380911][T14544] ? security_file_ioctl+0x80/0xa0 [ 758.386026][T14544] ? sock_poll+0x3e0/0x3e0 [ 758.390452][T14544] __se_sys_ioctl+0xfd/0x170 [ 758.395062][T14544] do_syscall_64+0x55/0xb0 [ 758.399488][T14544] ? clear_bhb_loop+0x40/0x90 [ 758.404168][T14544] ? clear_bhb_loop+0x40/0x90 [ 758.408857][T14544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.414764][T14544] RIP: 0033:0x7f5111b9ce59 [ 758.419190][T14544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.438808][T14544] RSP: 002b:00007f51129c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.447252][T14544] RAX: ffffffffffffffda RBX: 00007f5111e15fa0 RCX: 00007f5111b9ce59 [ 758.455254][T14544] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 758.463249][T14544] RBP: 00007f51129c6090 R08: 0000000000000000 R09: 0000000000000000 [ 758.471231][T14544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.479211][T14544] R13: 00007f5111e16038 R14: 00007f5111e15fa0 R15: 00007fff0fd60a68 [ 758.487222][T14544] [ 758.683416][T14554] netlink: 'syz.0.2567': attribute type 10 has an invalid length. [ 761.862980][T14567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2570'. [ 762.823601][T14589] FAULT_INJECTION: forcing a failure. [ 762.823601][T14589] name failslab, interval 1, probability 0, space 0, times 0 [ 762.847915][T14589] CPU: 1 PID: 14589 Comm: syz.0.2576 Not tainted syzkaller #0 [ 762.855423][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.865585][T14589] Call Trace: [ 762.868883][T14589] [ 762.871836][T14589] dump_stack_lvl+0x18c/0x250 [ 762.876541][T14589] ? show_regs_print_info+0x20/0x20 [ 762.881762][T14589] ? load_image+0x420/0x420 [ 762.886289][T14589] ? __might_sleep+0xe0/0xe0 [ 762.890911][T14589] ? __lock_acquire+0x7d40/0x7d40 [ 762.895965][T14589] should_fail_ex+0x39d/0x4d0 [ 762.900676][T14589] should_failslab+0x9/0x20 [ 762.905196][T14589] slab_pre_alloc_hook+0x59/0x310 [ 762.910233][T14589] ? apparmor_sk_alloc_security+0x77/0x100 [ 762.916038][T14589] __kmem_cache_alloc_node+0x53/0x250 [ 762.921411][T14589] ? apparmor_sk_alloc_security+0x77/0x100 [ 762.927214][T14589] kmalloc_trace+0x2a/0xe0 [ 762.931628][T14589] apparmor_sk_alloc_security+0x77/0x100 [ 762.937281][T14589] security_sk_alloc+0x6e/0xa0 [ 762.942067][T14589] sk_prot_alloc+0x101/0x210 [ 762.946670][T14589] ? sk_alloc+0x24/0x360 [ 762.950927][T14589] sk_alloc+0x3a/0x360 [ 762.955005][T14589] ? bpf_ctx_init+0x163/0x1a0 [ 762.959696][T14589] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 762.965247][T14589] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 762.970626][T14589] ? __fget_files+0x28/0x4b0 [ 762.975214][T14589] ? __fget_files+0x43d/0x4b0 [ 762.979895][T14589] ? cpu_online+0x60/0x60 [ 762.984221][T14589] bpf_prog_test_run+0x321/0x390 [ 762.989158][T14589] __sys_bpf+0x49d/0x890 [ 762.993398][T14589] ? bpf_link_show_fdinfo+0x390/0x390 [ 762.998776][T14589] ? lock_chain_count+0x20/0x20 [ 763.003626][T14589] __x64_sys_bpf+0x7c/0x90 [ 763.008039][T14589] do_syscall_64+0x55/0xb0 [ 763.012450][T14589] ? clear_bhb_loop+0x40/0x90 [ 763.017133][T14589] ? clear_bhb_loop+0x40/0x90 [ 763.021816][T14589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.027714][T14589] RIP: 0033:0x7f484fd9ce59 [ 763.032130][T14589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.051737][T14589] RSP: 002b:00007f4850c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.060150][T14589] RAX: ffffffffffffffda RBX: 00007f4850015fa0 RCX: 00007f484fd9ce59 [ 763.068120][T14589] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 763.076089][T14589] RBP: 00007f4850c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 763.084064][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.092032][T14589] R13: 00007f4850016038 R14: 00007f4850015fa0 R15: 00007ffd1ce6e608 [ 763.100011][T14589] [ 763.228693][T14592] netlink: 'syz.2.2577': attribute type 21 has an invalid length. [ 763.239783][T14592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2577'. [ 763.249383][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'. [ 763.481272][T14600] netlink: 'syz.1.2579': attribute type 21 has an invalid length. [ 763.495850][T14600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2579'. [ 763.618150][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2579'. [ 766.725835][T14615] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2583'. [ 766.875789][T14622] warn_alloc: 1 callbacks suppressed [ 766.875877][T14622] syz.3.2584: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 766.921025][T14622] CPU: 0 PID: 14622 Comm: syz.3.2584 Not tainted syzkaller #0 [ 766.928551][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 766.938636][T14622] Call Trace: [ 766.941941][T14622] [ 766.944901][T14622] dump_stack_lvl+0x18c/0x250 [ 766.949595][T14622] ? show_regs_print_info+0x20/0x20 [ 766.954794][T14622] ? load_image+0x420/0x420 [ 766.959311][T14622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 766.965756][T14622] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 766.972267][T14622] warn_alloc+0x246/0x340 [ 766.976602][T14622] ? stack_trace_save+0xaa/0x100 [ 766.981543][T14622] ? zone_watermark_ok_safe+0x230/0x230 [ 766.987096][T14622] ? kasan_set_track+0x5f/0x70 [ 766.991866][T14622] ? kasan_set_track+0x4e/0x70 [ 766.996659][T14622] ? __kasan_kmalloc+0x8f/0xa0 [ 767.001439][T14622] ? xsk_init_queue+0xad/0x100 [ 767.006206][T14622] ? xsk_setsockopt+0x4e5/0x760 [ 767.011062][T14622] ? do_sock_setsockopt+0x175/0x1a0 [ 767.016266][T14622] ? __x64_sys_setsockopt+0x182/0x200 [ 767.021653][T14622] __vmalloc_node_range+0x126/0x1330 [ 767.026974][T14622] ? free_vm_area+0x50/0x50 [ 767.031497][T14622] vmalloc_user+0x74/0x80 [ 767.035841][T14622] ? xskq_create+0xbf/0x170 [ 767.040344][T14622] xskq_create+0xbf/0x170 [ 767.044676][T14622] xsk_init_queue+0xad/0x100 [ 767.049268][T14622] xsk_setsockopt+0x4e5/0x760 [ 767.053947][T14622] ? xsk_poll+0x680/0x680 [ 767.058294][T14622] ? __fget_files+0x28/0x4b0 [ 767.062888][T14622] ? __fget_files+0x28/0x4b0 [ 767.067484][T14622] ? aa_sock_opt_perm+0x74/0x100 [ 767.072432][T14622] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 767.077982][T14622] ? security_socket_setsockopt+0x7e/0xa0 [ 767.083725][T14622] ? xsk_poll+0x680/0x680 [ 767.088053][T14622] do_sock_setsockopt+0x175/0x1a0 [ 767.093083][T14622] ? __fdget+0x180/0x210 [ 767.097331][T14622] __x64_sys_setsockopt+0x182/0x200 [ 767.102532][T14622] do_syscall_64+0x55/0xb0 [ 767.106950][T14622] ? clear_bhb_loop+0x40/0x90 [ 767.111624][T14622] ? clear_bhb_loop+0x40/0x90 [ 767.116300][T14622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.122200][T14622] RIP: 0033:0x7f5111b9ce59 [ 767.126618][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.146226][T14622] RSP: 002b:00007f51129a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 767.154644][T14622] RAX: ffffffffffffffda RBX: 00007f5111e16090 RCX: 00007f5111b9ce59 [ 767.162619][T14622] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 767.170590][T14622] RBP: 00007f5111c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 767.178562][T14622] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 767.186533][T14622] R13: 00007f5111e16128 R14: 00007f5111e16090 R15: 00007fff0fd60a68 [ 767.194520][T14622] [ 767.208903][T14622] Mem-Info: [ 767.212261][T14622] active_anon:5427 inactive_anon:0 isolated_anon:0 [ 767.212261][T14622] active_file:18083 inactive_file:40212 isolated_file:0 [ 767.212261][T14622] unevictable:768 dirty:453 writeback:0 [ 767.212261][T14622] slab_reclaimable:10188 slab_unreclaimable:100291 [ 767.212261][T14622] mapped:24953 shmem:1361 pagetables:541 [ 767.212261][T14622] sec_pagetables:0 bounce:0 [ 767.212261][T14622] kernel_misc_reclaimable:0 [ 767.212261][T14622] free:1339929 free_pcp:7854 free_cma:0 [ 767.262225][T14622] Node 0 active_anon:21708kB inactive_anon:0kB active_file:72332kB inactive_file:160648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99812kB dirty:1812kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no [ 767.297576][T14622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 767.342341][T14632] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2589'. [ 767.352303][T14632] openvswitch: netlink: IP tunnel dst address not specified [ 767.359934][T14622] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 767.387816][T14622] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 767.393763][T14622] Node 0 DMA32 free:1448620kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21664kB inactive_anon:0kB active_file:72332kB inactive_file:159820kB unevictable:1536kB writepending:1812kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:10264kB local_pcp:6320kB free_cma:0kB [ 767.425585][T14622] lowmem_reserve[]: 0 0 0 0 0 [ 767.430848][T14622] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 767.466492][T14622] lowmem_reserve[]: 0 0 0 0 0 [ 767.471374][T14622] Node 1 Normal free:3895480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:14552kB free_cma:0kB [ 767.553798][T14622] lowmem_reserve[]: 0 0 0 0 0 [ 767.587169][T14622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 767.633252][T14622] Node 0 DMA32: 529*4kB (UME) 1345*8kB (UME) 946*16kB (UME) 1830*32kB (UME) 401*64kB (UME) 335*128kB (UME) 229*256kB (UME) 144*512kB (UM) 84*1024kB (UME) 7*2048kB (UM) 259*4096kB (UM) = 1448684kB [ 767.684382][T14637] syzkaller0: entered promiscuous mode [ 767.690318][T14622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 767.712271][T14622] Node 1 Normal: 164*4kB (UME) 55*8kB (UME) 31*16kB (UME) 40*32kB (UME) 24*64kB (UME) 11*128kB (UME) 2*256kB (ME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895480kB [ 767.737287][T14637] syzkaller0: entered allmulticast mode [ 767.745748][T14622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.755637][T14622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 767.765242][T14622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.777125][T14622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 767.786951][T14622] 59656 total pagecache pages [ 767.812042][T14622] 0 pages in swap cache [ 767.826306][T14622] Free swap = 124996kB [ 767.840268][T14622] Total swap = 124996kB [ 767.851848][T14622] 2097051 pages RAM [ 767.863380][T14622] 0 pages HighMem/MovableOnly [ 767.874759][T14622] 416933 pages reserved [ 767.907414][T14622] 0 pages cma reserved [ 770.728715][T14648] netlink: 'syz.2.2594': attribute type 10 has an invalid length. [ 770.737351][T14648] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2594'. [ 770.949488][T14652] netlink: 'syz.2.2595': attribute type 21 has an invalid length. [ 770.968209][T14652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2595'. [ 770.984507][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 773.778598][T14660] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2596'. [ 773.989802][T14667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 774.016086][T14667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 774.040467][T14667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 774.096329][T14671] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2602'. [ 774.213093][T14677] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2611'. [ 774.572143][T14684] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 774.588832][T14684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2604'. [ 775.921613][T14706] __nla_validate_parse: 1 callbacks suppressed [ 775.921650][T14706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 775.938835][T14706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 775.963970][T14706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 775.977594][T14708] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2613'. [ 776.046960][T14710] netlink: 'syz.1.2614': attribute type 10 has an invalid length. [ 776.054817][T14710] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2614'. [ 776.238223][T14712] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 776.369656][T14720] netlink: 'syz.1.2617': attribute type 1 has an invalid length. [ 776.405213][T14720] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2617'. [ 776.692304][ T6692] bridge0: port 4(syz_tun) entered disabled state [ 776.748135][ T6692] syz_tun (unregistering): left allmulticast mode [ 776.754903][ T6692] syz_tun (unregistering): left promiscuous mode [ 776.761636][ T6692] bridge0: port 4(syz_tun) entered disabled state [ 776.964917][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.976160][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.986846][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.997490][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 777.010168][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 777.017787][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.130895][ T3446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.245500][ T3446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.342816][ T3446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.356632][T14738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2622'. [ 777.392394][T14738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2622'. [ 777.432626][T14738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2622'. [ 777.504413][ T3446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.671972][T14748] netlink: 'syz.2.2625': attribute type 10 has an invalid length. [ 777.680114][T14748] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2625'. [ 778.060545][T14732] chnl_net:caif_netlink_parms(): no params data found [ 778.980169][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.990884][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.003315][T14732] bridge_slave_0: entered allmulticast mode [ 779.034751][T14732] bridge_slave_0: entered promiscuous mode [ 779.054482][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.062581][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.070660][T14732] bridge_slave_1: entered allmulticast mode [ 779.078736][T14732] bridge_slave_1: entered promiscuous mode [ 779.085589][ T5784] Bluetooth: hci1: command tx timeout [ 779.230931][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.267819][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.430802][T14732] team0: Port device team_slave_0 added [ 779.453009][T14732] team0: Port device team_slave_1 added [ 779.530193][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.543822][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.578591][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.620477][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.632699][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.667633][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.850643][T14732] hsr_slave_0: entered promiscuous mode [ 779.858460][T14732] hsr_slave_1: entered promiscuous mode [ 779.864811][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.873480][T14732] Cannot create hsr debugfs directory [ 780.325386][ T3446] hsr_slave_0: left promiscuous mode [ 780.353735][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.375334][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.407713][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.425164][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.435776][ T3446] macvlan1: left allmulticast mode [ 780.440932][ T3446] macvlan1: left promiscuous mode [ 780.446870][ T3446] bridge0: port 7(macvlan1) entered disabled state [ 780.456894][ T3446] team0: left allmulticast mode [ 780.461800][ T3446] team_slave_0: left allmulticast mode [ 780.468408][ T3446] team_slave_1: left allmulticast mode [ 780.473897][ T3446] geneve1: left allmulticast mode [ 780.479508][ T3446] dummy0: left allmulticast mode [ 780.484616][ T3446] team0: left promiscuous mode [ 780.489942][ T3446] team_slave_0: left promiscuous mode [ 780.496053][ T3446] team_slave_1: left promiscuous mode [ 780.501584][ T3446] geneve1: left promiscuous mode [ 780.507812][ T3446] dummy0: left promiscuous mode [ 780.513053][ T3446] bridge0: port 6(team0) entered disabled state [ 780.525871][ T3446] .`: left allmulticast mode [ 780.530489][ T3446] bond_slave_0: left allmulticast mode [ 780.539178][ T3446] bond_slave_1: left allmulticast mode [ 780.544665][ T3446] bridge_slave_1: left allmulticast mode [ 780.553335][ T3446] bridge0: port 5(.`) entered disabled state [ 780.569628][ T3446] hsr0: left allmulticast mode [ 780.575097][ T3446] bridge0: port 3(hsr0) entered disabled state [ 780.589047][ T3446] batadv0: left allmulticast mode [ 780.594112][ T3446] batadv0: left promiscuous mode [ 780.601571][ T3446] bridge0: port 2(batadv0) entered disabled state [ 780.612940][ T3446] bridge_slave_0: left allmulticast mode [ 780.618810][ T3446] bridge_slave_0: left promiscuous mode [ 780.624568][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.655776][ T3446] veth1_macvtap: left promiscuous mode [ 780.661355][ T3446] veth0_macvtap: left promiscuous mode [ 780.668078][ T3446] veth1_vlan: left promiscuous mode [ 781.165113][ T5784] Bluetooth: hci1: command tx timeout [ 781.606570][ T3446] team0 (unregistering): Port device geneve1 removed [ 781.958217][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 781.999425][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 782.038777][ T3446] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.047864][ T3446] bond_slave_1 (unregistering): left promiscuous mode [ 782.086693][ T3446] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.096922][ T3446] bond_slave_0 (unregistering): left promiscuous mode [ 782.144358][ T3446] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 782.153359][ T3446] bridge_slave_1 (unregistering): left promiscuous mode [ 782.354221][ T3446] team0 (unregistering): Port device dummy0 removed [ 782.399811][ T3446] .` (unregistering): Released all slaves [ 782.864988][T14732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.879318][T14732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.889634][T14732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.904813][T14732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 783.036614][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.071638][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.098970][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.106162][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.145382][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.152536][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.195769][T14732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.246045][ T5784] Bluetooth: hci1: command tx timeout [ 783.443514][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.492677][T14732] veth0_vlan: entered promiscuous mode [ 783.507642][T14732] veth1_vlan: entered promiscuous mode [ 783.559512][T14732] veth0_macvtap: entered promiscuous mode [ 783.570538][T14732] veth1_macvtap: entered promiscuous mode [ 783.590256][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.602103][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.612559][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.623410][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.633926][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.652921][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.667114][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.684685][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.695457][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.710883][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.722097][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.736542][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.750277][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.770307][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.799929][T14732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.809770][T14732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.819757][T14732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.828848][T14732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.922552][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.951638][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.998687][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.014809][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.325512][ T5784] Bluetooth: hci1: command tx timeout [ 787.380385][T14918] netlink: 'syz.1.2633': attribute type 10 has an invalid length. [ 787.401472][T14918] __nla_validate_parse: 2 callbacks suppressed [ 787.401504][T14918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2633'. [ 787.444145][T14912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2632'. [ 787.466617][T14912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2632'. [ 787.491775][T14912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2632'. [ 787.560187][T14923] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2635'. [ 787.743141][T14927] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2636'. [ 791.259871][T14953] netlink: 'syz.0.2648': attribute type 10 has an invalid length. [ 791.269732][T14953] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2648'. [ 791.363589][T14956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2649'. [ 791.436307][T14959] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 791.449477][T14959] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2659'. [ 791.725900][T14965] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2653'. [ 791.927445][T14976] netlink: 'syz.3.2656': attribute type 29 has an invalid length. [ 792.019279][T14976] netlink: 'syz.3.2656': attribute type 29 has an invalid length. [ 792.075867][T14977] netlink: 'syz.3.2656': attribute type 29 has an invalid length. [ 792.096507][T14979] netlink: 'syz.3.2656': attribute type 29 has an invalid length. [ 792.175608][T14976] netlink: 'syz.3.2656': attribute type 29 has an invalid length. [ 795.046099][T14989] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2661'. [ 795.103916][T14993] netlink: 'syz.0.2662': attribute type 10 has an invalid length. [ 795.120901][T14993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2662'. [ 795.186767][T14996] netlink: 611 bytes leftover after parsing attributes in process `syz.0.2663'. [ 795.989228][T15003] can: request_module (can-proto-3) failed. [ 796.265960][T15022] netlink: 'syz.2.2671': attribute type 10 has an invalid length. [ 796.280395][T15022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2671'. [ 796.763853][T15038] netlink: 'syz.3.2677': attribute type 39 has an invalid length. [ 797.198765][T15056] netlink: 'syz.1.2683': attribute type 10 has an invalid length. [ 797.209475][T15056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2683'. [ 797.295761][T15052] can: request_module (can-proto-3) failed. [ 797.764241][T15074] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2690'. [ 797.793278][T15074] openvswitch: netlink: Flow key attribute not present in set flow. [ 797.838612][T15082] bridge_slave_1: left allmulticast mode [ 797.845434][T15082] bridge_slave_1: left promiscuous mode [ 797.853701][T15082] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.905804][T15082] bridge_slave_0: left allmulticast mode [ 797.911794][T15082] bridge_slave_0: left promiscuous mode [ 797.927295][T15082] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.100731][T15088] netlink: 'syz.2.2694': attribute type 10 has an invalid length. [ 798.108734][T15088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2694'. [ 798.396042][T15092] can: request_module (can-proto-3) failed. [ 798.633023][T15113] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 798.650384][T15113] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2704'. [ 798.772059][T15119] FAULT_INJECTION: forcing a failure. [ 798.772059][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 798.800379][T15119] CPU: 1 PID: 15119 Comm: syz.2.2707 Not tainted syzkaller #0 [ 798.807900][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 798.817977][T15119] Call Trace: [ 798.821284][T15119] [ 798.824235][T15119] dump_stack_lvl+0x18c/0x250 [ 798.828936][T15119] ? show_regs_print_info+0x20/0x20 [ 798.834151][T15119] ? load_image+0x420/0x420 [ 798.838673][T15119] ? __might_sleep+0xe0/0xe0 [ 798.843280][T15119] ? __lock_acquire+0x7d40/0x7d40 [ 798.848314][T15119] should_fail_ex+0x39d/0x4d0 [ 798.853009][T15119] should_failslab+0x9/0x20 [ 798.857525][T15119] slab_pre_alloc_hook+0x59/0x310 [ 798.862558][T15119] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 798.868282][T15119] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 798.873999][T15119] __kmem_cache_alloc_node+0x53/0x250 [ 798.879374][T15119] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 798.885091][T15119] __kmalloc+0xa4/0x230 [ 798.889271][T15119] tomoyo_realpath_from_path+0xe3/0x5d0 [ 798.894846][T15119] tomoyo_path_number_perm+0x248/0x620 [ 798.900315][T15119] ? tomoyo_path_number_perm+0x217/0x620 [ 798.905956][T15119] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 798.911418][T15119] ? ksys_write+0x1c4/0x260 [ 798.915948][T15119] ? __fget_files+0x28/0x4b0 [ 798.920538][T15119] ? __fget_files+0x28/0x4b0 [ 798.925142][T15119] security_file_ioctl+0x70/0xa0 [ 798.930080][T15119] __se_sys_ioctl+0x48/0x170 [ 798.934678][T15119] do_syscall_64+0x55/0xb0 [ 798.939093][T15119] ? clear_bhb_loop+0x40/0x90 [ 798.943768][T15119] ? clear_bhb_loop+0x40/0x90 [ 798.948439][T15119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.954337][T15119] RIP: 0033:0x7f07a399ce59 [ 798.958755][T15119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.978366][T15119] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.986782][T15119] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 798.994748][T15119] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 0000000000000003 [ 799.002798][T15119] RBP: 00007f07a4865090 R08: 0000000000000000 R09: 0000000000000000 [ 799.010773][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.018742][T15119] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 799.026725][T15119] [ 799.082919][T15119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 799.110811][T15126] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.2709'. [ 799.132883][T15126] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2709'. [ 799.328488][T15126] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 799.352461][T15126] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 799.373318][T15126] openvswitch: netlink: Message has 4 unknown bytes. [ 799.750367][T15142] netlink: 'syz.3.2714': attribute type 10 has an invalid length. [ 800.437721][T15156] netlink: 'syz.0.2717': attribute type 3 has an invalid length. [ 800.465126][T15156] netlink: 'syz.0.2717': attribute type 6 has an invalid length. [ 800.503377][T15156] __nla_validate_parse: 2 callbacks suppressed [ 800.503393][T15156] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2717'. [ 800.657453][T15165] netlink: 'syz.1.2721': attribute type 29 has an invalid length. [ 800.813310][T15173] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 800.819847][T15173] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 803.561951][T15165] netlink: 'syz.1.2721': attribute type 29 has an invalid length. [ 803.581455][T15169] netlink: 'syz.0.2723': attribute type 10 has an invalid length. [ 803.595856][T15169] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2723'. [ 807.642879][T15203] netlink: 'syz.2.2732': attribute type 25 has an invalid length. [ 807.662941][T15203] netlink: 'syz.2.2732': attribute type 28 has an invalid length. [ 807.691688][T15205] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 807.701249][T15205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2734'. [ 807.728268][T15200] netlink: 'syz.2.2732': attribute type 17 has an invalid length. [ 807.741075][T15200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2732'. [ 807.751928][T15200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.787905][T15209] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2736'. [ 808.141750][T15228] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 808.148309][T15228] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 808.779130][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.786989][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.884620][T15234] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 808.895092][T15234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2744'. [ 811.450888][T15255] FAULT_INJECTION: forcing a failure. [ 811.450888][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.476871][T15255] CPU: 1 PID: 15255 Comm: syz.1.2751 Not tainted syzkaller #0 [ 811.484398][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.494476][T15255] Call Trace: [ 811.497774][T15255] [ 811.500722][T15255] dump_stack_lvl+0x18c/0x250 [ 811.505431][T15255] ? show_regs_print_info+0x20/0x20 [ 811.510658][T15255] ? load_image+0x420/0x420 [ 811.515189][T15255] ? __might_fault+0xaa/0x120 [ 811.519895][T15255] should_fail_ex+0x39d/0x4d0 [ 811.524604][T15255] copyin+0x1a/0x90 [ 811.528438][T15255] _copy_from_iter+0x404/0x12e0 [ 811.533325][T15255] ? copyout_mc+0x70/0x70 [ 811.537688][T15255] ? verify_lock_unused+0x140/0x140 [ 811.542908][T15255] ? dev_get_by_index+0x22/0x2d0 [ 811.547869][T15255] ? dev_get_by_index+0x22/0x2d0 [ 811.552839][T15255] packet_sendmsg+0x2cd5/0x4c30 [ 811.557733][T15255] ? __might_sleep+0xe0/0xe0 [ 811.562352][T15255] ? verify_lock_unused+0x140/0x140 [ 811.567572][T15255] ? mark_lock+0x94/0x320 [ 811.571930][T15255] ? __lock_acquire+0x1273/0x7d40 [ 811.576974][T15255] ? verify_lock_unused+0x140/0x140 [ 811.582196][T15255] ? aa_sk_perm+0x83c/0x970 [ 811.586719][T15255] ? packet_getsockopt+0xad0/0xad0 [ 811.591868][T15255] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 811.597355][T15255] ? aa_sock_msg_perm+0x94/0x150 [ 811.602322][T15255] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 811.607628][T15255] ? security_socket_sendmsg+0x80/0xa0 [ 811.613111][T15255] ? packet_getsockopt+0xad0/0xad0 [ 811.618251][T15255] ____sys_sendmsg+0x5ba/0x960 [ 811.623039][T15255] ? __lock_acquire+0x7d40/0x7d40 [ 811.628088][T15255] ? __asan_memset+0x22/0x40 [ 811.632691][T15255] ? __sys_sendmsg_sock+0x30/0x30 [ 811.637731][T15255] ? __import_iovec+0x3fa/0x850 [ 811.642590][T15255] ? import_iovec+0x73/0xa0 [ 811.647089][T15255] ___sys_sendmsg+0x2a6/0x360 [ 811.652036][T15255] ? get_pid_task+0x20/0x1e0 [ 811.656639][T15255] ? __sys_sendmsg+0x2a0/0x2a0 [ 811.661421][T15255] ? __lock_acquire+0x7d40/0x7d40 [ 811.666453][T15255] __se_sys_sendmsg+0x1c2/0x2b0 [ 811.671300][T15255] ? __x64_sys_sendmsg+0x80/0x80 [ 811.676234][T15255] ? lockdep_hardirqs_on+0x98/0x150 [ 811.681456][T15255] do_syscall_64+0x55/0xb0 [ 811.685876][T15255] ? clear_bhb_loop+0x40/0x90 [ 811.690571][T15255] ? clear_bhb_loop+0x40/0x90 [ 811.695266][T15255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.701188][T15255] RIP: 0033:0x7fadced9ce59 [ 811.705626][T15255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.725257][T15255] RSP: 002b:00007fadcfd24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.733673][T15255] RAX: ffffffffffffffda RBX: 00007fadcf015fa0 RCX: 00007fadced9ce59 [ 811.741652][T15255] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 811.749617][T15255] RBP: 00007fadcfd24090 R08: 0000000000000000 R09: 0000000000000000 [ 811.757580][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.765545][T15255] R13: 00007fadcf016038 R14: 00007fadcf015fa0 R15: 00007ffc236c2a48 [ 811.773524][T15255] [ 811.915349][T15259] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 811.923403][T15259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2753'. [ 812.077162][T15267] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 812.083669][T15267] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 815.298938][T15285] netlink: 'syz.0.2763': attribute type 10 has an invalid length. [ 815.320440][T15285] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2763'. [ 815.770775][T15293] netlink: 'syz.3.2766': attribute type 2 has an invalid length. [ 815.791573][T15293] netlink: 'syz.3.2766': attribute type 8 has an invalid length. [ 815.808340][T15293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2766'. [ 817.547491][T15314] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 817.567919][T15314] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2773'. [ 818.793290][T15323] FAULT_INJECTION: forcing a failure. [ 818.793290][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 818.807973][T15323] CPU: 0 PID: 15323 Comm: syz.1.2776 Not tainted syzkaller #0 [ 818.815476][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.825550][T15323] Call Trace: [ 818.828842][T15323] [ 818.831787][T15323] dump_stack_lvl+0x18c/0x250 [ 818.836495][T15323] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 818.842676][T15323] ? show_regs_print_info+0x20/0x20 [ 818.847897][T15323] ? load_image+0x420/0x420 [ 818.852449][T15323] should_fail_ex+0x39d/0x4d0 [ 818.857166][T15323] should_failslab+0x9/0x20 [ 818.861683][T15323] slab_pre_alloc_hook+0x59/0x310 [ 818.866736][T15323] ? __scm_send+0x64c/0x14a0 [ 818.871344][T15323] __kmem_cache_alloc_node+0x53/0x250 [ 818.876735][T15323] ? trace_call_bpf+0x5e9/0x6c0 [ 818.881611][T15323] ? __scm_send+0x64c/0x14a0 [ 818.886217][T15323] kmalloc_trace+0x2a/0xe0 [ 818.890656][T15323] __scm_send+0x64c/0x14a0 [ 818.895098][T15323] ? aa_sk_perm+0x970/0x970 [ 818.899641][T15323] ? __scm_destroy+0x160/0x160 [ 818.904423][T15323] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 818.910506][T15323] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 818.916770][T15323] unix_dgram_sendmsg+0x179/0x16d0 [ 818.921906][T15323] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 818.927910][T15323] ? aa_sk_perm+0x83c/0x970 [ 818.932435][T15323] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 818.938613][T15323] ? unix_dgram_poll+0x680/0x680 [ 818.943563][T15323] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 818.950003][T15323] ? aa_sock_msg_perm+0x94/0x150 [ 818.954964][T15323] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 818.960537][T15323] ? unix_dgram_peer_wake_me+0x430/0x430 [ 818.966191][T15323] ____sys_sendmsg+0x5ba/0x960 [ 818.970998][T15323] ? __sys_sendmsg_sock+0x30/0x30 [ 818.976040][T15323] ? __import_iovec+0x3fa/0x850 [ 818.980924][T15323] ? import_iovec+0x73/0xa0 [ 818.985450][T15323] ___sys_sendmsg+0x2a6/0x360 [ 818.990170][T15323] ? __sys_sendmsg+0x2a0/0x2a0 [ 818.995088][T15323] __se_sys_sendmsg+0x1c2/0x2b0 [ 818.999968][T15323] ? __x64_sys_sendmsg+0x80/0x80 [ 819.004956][T15323] ? lockdep_hardirqs_on+0x98/0x150 [ 819.010191][T15323] do_syscall_64+0x55/0xb0 [ 819.014626][T15323] ? clear_bhb_loop+0x40/0x90 [ 819.019315][T15323] ? clear_bhb_loop+0x40/0x90 [ 819.024007][T15323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.029922][T15323] RIP: 0033:0x7fadced9ce59 [ 819.034353][T15323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.053976][T15323] RSP: 002b:00007fadcfd24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.062412][T15323] RAX: ffffffffffffffda RBX: 00007fadcf015fa0 RCX: 00007fadced9ce59 [ 819.070392][T15323] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000c [ 819.078376][T15323] RBP: 00007fadcfd24090 R08: 0000000000000000 R09: 0000000000000000 [ 819.086370][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.094353][T15323] R13: 00007fadcf016038 R14: 00007fadcf015fa0 R15: 00007ffc236c2a48 [ 819.102372][T15323] [ 820.267375][T15341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2780'. [ 820.534518][T15348] netlink: 'syz.2.2782': attribute type 10 has an invalid length. [ 820.542654][T15348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2782'. [ 820.629410][T15350] netlink: 'syz.2.2783': attribute type 9 has an invalid length. [ 820.640779][T15350] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2783'. [ 820.749859][T15350] netlink: 'syz.2.2783': attribute type 9 has an invalid length. [ 820.760220][T15350] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2783'. [ 821.245382][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 821.701778][T15372] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 821.713534][T15372] syzkaller1: linktype set to 786 [ 821.747080][T15375] netlink: 'syz.3.2791': attribute type 10 has an invalid length. [ 821.754946][T15375] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2791'. [ 822.912067][T15397] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 822.935821][T15397] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 823.244832][T15401] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 823.258690][T15401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2800'. [ 823.379307][T15408] netlink: 109788 bytes leftover after parsing attributes in process `syz.1.2804'. [ 823.480226][T15412] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2805'. [ 824.696480][T15426] netlink: 'syz.3.2809': attribute type 10 has an invalid length. [ 826.600326][T15426] team0: Port device wlan1 added [ 826.642696][T15427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.693482][T15436] netlink: 'syz.0.2812': attribute type 10 has an invalid length. [ 826.703021][T15436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2812'. [ 826.839292][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2813'. [ 826.881868][T15438] netlink: 'syz.3.2813': attribute type 3 has an invalid length. [ 826.890170][T15438] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2813'. [ 826.950748][T15441] FAULT_INJECTION: forcing a failure. [ 826.950748][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 826.970319][T15441] CPU: 0 PID: 15441 Comm: syz.0.2814 Not tainted syzkaller #0 [ 826.977830][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.987908][T15441] Call Trace: [ 826.991204][T15441] [ 826.994137][T15441] dump_stack_lvl+0x18c/0x250 [ 826.998819][T15441] ? lock_chain_count+0x20/0x20 [ 827.003690][T15441] ? show_regs_print_info+0x20/0x20 [ 827.008913][T15441] ? load_image+0x420/0x420 [ 827.013474][T15441] ? lockdep_hardirqs_on+0x98/0x150 [ 827.015740][T15446] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2813'. [ 827.018706][T15441] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.034279][T15441] should_fail_ex+0x39d/0x4d0 [ 827.039028][T15441] should_failslab+0x9/0x20 [ 827.043584][T15441] slab_pre_alloc_hook+0x59/0x310 [ 827.048678][T15441] ? sctp_add_bind_addr+0x8c/0x360 [ 827.053847][T15441] __kmem_cache_alloc_node+0x53/0x250 [ 827.059289][T15441] ? sctp_add_bind_addr+0x8c/0x360 [ 827.064465][T15441] kmalloc_trace+0x2a/0xe0 [ 827.068945][T15441] sctp_add_bind_addr+0x8c/0x360 [ 827.073952][T15441] sctp_copy_local_addr_list+0x315/0x4f0 [ 827.079652][T15441] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 827.085416][T15441] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 827.091511][T15441] ? sctp_v6_is_any+0x64/0x70 [ 827.096210][T15441] ? sctp_copy_one_addr+0x8c/0x350 [ 827.101348][T15441] sctp_bind_addr_copy+0xb3/0x3c0 [ 827.106395][T15441] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 827.112753][T15441] sctp_connect_new_asoc+0x2f9/0x6a0 [ 827.118066][T15441] ? __sctp_connect+0xd80/0xd80 [ 827.122956][T15441] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 827.128524][T15441] ? security_sctp_bind_connect+0x89/0xb0 [ 827.134270][T15441] sctp_sendmsg+0x15d2/0x2910 [ 827.138996][T15441] ? sctp_getsockopt+0xb60/0xb60 [ 827.143957][T15441] ? aa_sk_perm+0x83c/0x970 [ 827.148498][T15441] ? aa_af_perm+0x330/0x330 [ 827.153008][T15441] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 827.159449][T15441] ? sock_rps_record_flow+0x19/0x3f0 [ 827.164768][T15441] ? inet_sendmsg+0xe9/0x2f0 [ 827.169383][T15441] ? inet_send_prepare+0x260/0x260 [ 827.174522][T15441] ____sys_sendmsg+0x5ba/0x960 [ 827.179327][T15441] ? __sys_sendmsg_sock+0x30/0x30 [ 827.184367][T15441] ? __import_iovec+0x5f2/0x850 [ 827.189255][T15441] ? import_iovec+0x73/0xa0 [ 827.193785][T15441] ___sys_sendmsg+0x2a6/0x360 [ 827.198667][T15441] ? __sys_sendmsg+0x2a0/0x2a0 [ 827.203578][T15441] __se_sys_sendmsg+0x1c2/0x2b0 [ 827.208454][T15441] ? __x64_sys_sendmsg+0x80/0x80 [ 827.213447][T15441] ? syscall_enter_from_user_mode+0x2e/0x80 [ 827.219369][T15441] do_syscall_64+0x55/0xb0 [ 827.223798][T15441] ? clear_bhb_loop+0x40/0x90 [ 827.228486][T15441] ? clear_bhb_loop+0x40/0x90 [ 827.233211][T15441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.239120][T15441] RIP: 0033:0x7f484fd9ce59 [ 827.243550][T15441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.263173][T15441] RSP: 002b:00007f4850c1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.271608][T15441] RAX: ffffffffffffffda RBX: 00007f4850015fa0 RCX: 00007f484fd9ce59 [ 827.279596][T15441] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000007 [ 827.287585][T15441] RBP: 00007f4850c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 827.295571][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.303555][T15441] R13: 00007f4850016038 R14: 00007f4850015fa0 R15: 00007ffd1ce6e608 [ 827.311590][T15441] [ 828.039117][T15464] sit0: entered allmulticast mode [ 828.157928][T15468] sit0: entered promiscuous mode [ 828.541775][T15477] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2821'. [ 828.732302][T15480] netlink: 'syz.3.2822': attribute type 10 has an invalid length. [ 828.745263][T15480] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2822'. [ 831.184393][T15485] netlink: 'syz.1.2825': attribute type 10 has an invalid length. [ 831.207604][T15485] hsr_slave_0: left promiscuous mode [ 831.229609][T15485] hsr_slave_1: left promiscuous mode [ 831.497322][T15492] netlink: 'syz.3.2827': attribute type 15 has an invalid length. [ 831.614388][T15501] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2830'. [ 831.804813][T15508] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 831.842849][T15508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2831'. [ 832.544464][T15520] netlink: 'syz.3.2837': attribute type 10 has an invalid length. [ 832.565716][T15520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2837'. [ 832.620256][T15520] batman_adv: batadv0: Adding interface: veth0_vlan [ 832.645219][T15520] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.698617][T15520] batman_adv: batadv0: Interface activated: veth0_vlan [ 835.098787][T15538] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2841'. [ 835.168214][T15540] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 835.186719][T15540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'. [ 836.305191][T15562] sit0: left promiscuous mode [ 836.416560][T15556] sit0: entered promiscuous mode [ 836.456873][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 836.784698][T15578] netlink: 'syz.3.2852': attribute type 10 has an invalid length. [ 836.805255][T15578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2852'. [ 836.827693][T15582] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2853'. [ 836.938611][T15587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2856'. [ 836.989275][T15589] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2857'. [ 838.753977][T15610] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2861'. [ 838.764042][T15610] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2861'. [ 838.782118][T15610] tipc: Started in network mode [ 838.788051][T15610] tipc: Node identity b, cluster identity 73 [ 838.794557][T15610] tipc: Node number set to 11 [ 840.134877][T15614] FAULT_INJECTION: forcing a failure. [ 840.134877][T15614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.153968][T15614] CPU: 0 PID: 15614 Comm: syz.0.2863 Not tainted syzkaller #0 [ 840.161491][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.171576][T15614] Call Trace: [ 840.174877][T15614] [ 840.177821][T15614] dump_stack_lvl+0x18c/0x250 [ 840.182524][T15614] ? show_regs_print_info+0x20/0x20 [ 840.187749][T15614] ? load_image+0x420/0x420 [ 840.192259][T15614] ? __might_fault+0xaa/0x120 [ 840.196943][T15614] should_fail_ex+0x39d/0x4d0 [ 840.201635][T15614] copyin+0x1a/0x90 [ 840.205449][T15614] _copy_from_iter+0x54f/0x12e0 [ 840.210306][T15614] ? copyin+0x70/0x90 [ 840.214298][T15614] ? copyout_mc+0x70/0x70 [ 840.218631][T15614] ? copyout_mc+0x70/0x70 [ 840.222969][T15614] ? __virt_addr_valid+0x18c/0x540 [ 840.228083][T15614] ? __virt_addr_valid+0x469/0x540 [ 840.233189][T15614] ? page_copy_sane+0x4e/0x270 [ 840.237955][T15614] copy_page_from_iter+0x7b/0x100 [ 840.242976][T15614] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 840.248781][T15614] packet_sendmsg+0x33ff/0x4c30 [ 840.253648][T15614] ? __might_sleep+0xe0/0xe0 [ 840.258234][T15614] ? mark_lock+0x94/0x320 [ 840.262565][T15614] ? __lock_acquire+0x1273/0x7d40 [ 840.267604][T15614] ? verify_lock_unused+0x140/0x140 [ 840.272801][T15614] ? aa_sk_perm+0x83c/0x970 [ 840.277302][T15614] ? packet_getsockopt+0xad0/0xad0 [ 840.282411][T15614] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 840.287865][T15614] ? aa_sock_msg_perm+0x94/0x150 [ 840.292799][T15614] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 840.298080][T15614] ? security_socket_sendmsg+0x80/0xa0 [ 840.303533][T15614] ? packet_getsockopt+0xad0/0xad0 [ 840.308644][T15614] ____sys_sendmsg+0x5ba/0x960 [ 840.313405][T15614] ? __lock_acquire+0x7d40/0x7d40 [ 840.318426][T15614] ? __asan_memset+0x22/0x40 [ 840.323013][T15614] ? __sys_sendmsg_sock+0x30/0x30 [ 840.328027][T15614] ? __import_iovec+0x3fa/0x850 [ 840.332879][T15614] ? import_iovec+0x73/0xa0 [ 840.337377][T15614] ___sys_sendmsg+0x2a6/0x360 [ 840.342050][T15614] ? get_pid_task+0x20/0x1e0 [ 840.346641][T15614] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.351417][T15614] ? __lock_acquire+0x7d40/0x7d40 [ 840.356470][T15614] __se_sys_sendmsg+0x1c2/0x2b0 [ 840.361320][T15614] ? __x64_sys_sendmsg+0x80/0x80 [ 840.366261][T15614] ? lockdep_hardirqs_on+0x98/0x150 [ 840.371460][T15614] do_syscall_64+0x55/0xb0 [ 840.375871][T15614] ? clear_bhb_loop+0x40/0x90 [ 840.380538][T15614] ? clear_bhb_loop+0x40/0x90 [ 840.385217][T15614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.391108][T15614] RIP: 0033:0x7f484fd9ce59 [ 840.395517][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.415122][T15614] RSP: 002b:00007f4850c1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.423529][T15614] RAX: ffffffffffffffda RBX: 00007f4850015fa0 RCX: 00007f484fd9ce59 [ 840.431496][T15614] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 840.439460][T15614] RBP: 00007f4850c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 840.447424][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.455388][T15614] R13: 00007f4850016038 R14: 00007f4850015fa0 R15: 00007ffd1ce6e608 [ 840.463363][T15614] [ 840.481858][T15619] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2865'. [ 840.695216][T15626] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2868'. [ 841.332843][T15648] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 841.343844][T15648] syzkaller1: linktype set to 773 [ 842.263719][T15666] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2878'. [ 843.533990][T15701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2890'. [ 843.592056][T15699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2888'. [ 843.643651][T15707] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 845.023781][T15737] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2901'. [ 845.432943][T15746] FAULT_INJECTION: forcing a failure. [ 845.432943][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 845.452674][T15746] CPU: 1 PID: 15746 Comm: syz.2.2905 Not tainted syzkaller #0 [ 845.460217][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.470306][T15746] Call Trace: [ 845.473613][T15746] [ 845.476571][T15746] dump_stack_lvl+0x18c/0x250 [ 845.481293][T15746] ? show_regs_print_info+0x20/0x20 [ 845.486525][T15746] ? load_image+0x420/0x420 [ 845.491067][T15746] ? __might_sleep+0xe0/0xe0 [ 845.495691][T15746] ? __lock_acquire+0x7d40/0x7d40 [ 845.500746][T15746] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 845.506767][T15746] should_fail_ex+0x39d/0x4d0 [ 845.511489][T15746] should_failslab+0x9/0x20 [ 845.516027][T15746] slab_pre_alloc_hook+0x59/0x310 [ 845.521084][T15746] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 845.527015][T15746] ? nf_nat_masq_schedule+0x246/0x560 [ 845.532425][T15746] __kmem_cache_alloc_node+0x53/0x250 [ 845.537842][T15746] ? nf_nat_masq_schedule+0x246/0x560 [ 845.543253][T15746] kmalloc_trace+0x2a/0xe0 [ 845.547715][T15746] nf_nat_masq_schedule+0x246/0x560 [ 845.552965][T15746] ? masq_inet_event+0x250/0x250 [ 845.557947][T15746] ? masq_device_event+0xd0/0xd0 [ 845.562947][T15746] masq_inet_event+0x1a7/0x250 [ 845.567754][T15746] ? iterate_cleanup_work+0x210/0x210 [ 845.573167][T15746] ? neigh_ifdown+0x1f/0x30 [ 845.577707][T15746] ? ieee80211_ifa_changed+0xcf/0x5e0 [ 845.583216][T15746] notifier_call_chain+0x197/0x380 [ 845.588392][T15746] blocking_notifier_call_chain+0x6a/0x90 [ 845.594173][T15746] __inet_del_ifa+0x879/0x1020 [ 845.599014][T15746] devinet_ioctl+0xb40/0x1c40 [ 845.603775][T15746] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 845.608943][T15746] ? _copy_from_user+0xa5/0xe0 [ 845.613754][T15746] ? get_user_ifreq+0x12b/0x180 [ 845.618648][T15746] inet_ioctl+0x42b/0x560 [ 845.623017][T15746] ? tomoyo_path_number_perm+0x217/0x620 [ 845.628686][T15746] ? inet_shutdown+0x370/0x370 [ 845.633575][T15746] ? slab_free_freelist_hook+0x130/0x1a0 [ 845.639237][T15746] ? tomoyo_path_number_perm+0x500/0x620 [ 845.644875][T15746] ? __kmem_cache_free+0xba/0x1e0 [ 845.649930][T15746] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 845.655422][T15746] sock_do_ioctl+0xfc/0x310 [ 845.659940][T15746] ? sock_show_fdinfo+0xb0/0xb0 [ 845.664826][T15746] sock_ioctl+0x5ba/0x7e0 [ 845.669168][T15746] ? sock_poll+0x3e0/0x3e0 [ 845.673604][T15746] ? bpf_lsm_file_ioctl+0x9/0x10 [ 845.678542][T15746] ? security_file_ioctl+0x80/0xa0 [ 845.683653][T15746] ? sock_poll+0x3e0/0x3e0 [ 845.688074][T15746] __se_sys_ioctl+0xfd/0x170 [ 845.692672][T15746] do_syscall_64+0x55/0xb0 [ 845.697095][T15746] ? clear_bhb_loop+0x40/0x90 [ 845.701770][T15746] ? clear_bhb_loop+0x40/0x90 [ 845.706454][T15746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.712353][T15746] RIP: 0033:0x7f07a399ce59 [ 845.716774][T15746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.736391][T15746] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.744817][T15746] RAX: ffffffffffffffda RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 845.752790][T15746] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000009 [ 845.760797][T15746] RBP: 00007f07a4865090 R08: 0000000000000000 R09: 0000000000000000 [ 845.768778][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.776754][T15746] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 845.784778][T15746] [ 846.985989][T15764] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2912'. [ 850.174790][T15796] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2921'. [ 850.351199][T15808] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2926'. [ 856.604812][T15880] netlink: 'syz.3.2947': attribute type 9 has an invalid length. [ 856.635844][T15880] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2947'. [ 857.075786][T15898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2954'. [ 857.520591][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.530346][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.544396][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.564864][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.573728][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 857.582106][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.965219][T15905] chnl_net:caif_netlink_parms(): no params data found [ 858.075302][T15905] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.082646][T15905] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.092297][T15905] bridge_slave_0: entered allmulticast mode [ 858.100115][T15905] bridge_slave_0: entered promiscuous mode [ 858.109826][T15905] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.117622][T15905] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.126493][T15905] bridge_slave_1: entered allmulticast mode [ 858.134404][T15905] bridge_slave_1: entered promiscuous mode [ 858.183716][T15905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.197479][T15905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.239794][T15905] team0: Port device team_slave_0 added [ 858.249476][T15905] team0: Port device team_slave_1 added [ 858.284049][T15905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.300706][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.338288][T15905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.351928][T15905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.362076][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.391456][T15905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.154447][T15905] hsr_slave_0: entered promiscuous mode [ 860.200914][T15905] hsr_slave_1: entered promiscuous mode [ 860.584824][T15915] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2958'. [ 860.624751][T15918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2958'. [ 860.645763][T15923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.655606][T15923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.669815][T15923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.683278][T15923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.691480][T15923] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 860.702237][T15923] batman_adv: batadv0: Removing interface: veth0_vlan [ 860.741030][T15932] netlink: 'syz.2.2963': attribute type 3 has an invalid length. [ 860.753293][T15932] netlink: 'syz.2.2963': attribute type 6 has an invalid length. [ 860.761701][T15932] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2963'. [ 860.802434][ T6060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.824423][T15930] €Â0: renamed from batadv_slave_1 (while UP) [ 860.934473][ T6060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.970239][T15934] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2964'. [ 861.002725][ T6060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.120733][ T6060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.135438][ T5784] Bluetooth: hci2: command tx timeout [ 864.215160][ T5784] Bluetooth: hci2: command tx timeout [ 864.418613][T15958] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2971'. [ 864.446362][ T6060] tipc: Left network mode [ 864.570630][T15966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2974'. [ 865.061282][T15980] netlink: 'syz.3.2978': attribute type 21 has an invalid length. [ 865.075286][T15980] netlink: 'syz.3.2978': attribute type 12 has an invalid length. [ 865.094616][T15980] netlink: 'syz.3.2978': attribute type 13 has an invalid length. [ 865.106193][T15980] netlink: 'syz.3.2978': attribute type 14 has an invalid length. [ 865.114191][T15980] netlink: 'syz.3.2978': attribute type 15 has an invalid length. [ 865.152959][T15980] netlink: 'syz.3.2978': attribute type 16 has an invalid length. [ 865.180478][T15980] netlink: 'syz.3.2978': attribute type 21 has an invalid length. [ 865.205341][T15980] netlink: 'syz.3.2978': attribute type 22 has an invalid length. [ 865.213431][T15980] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.2978'. [ 865.769713][T15905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.801551][T15905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.296870][ T5784] Bluetooth: hci2: command tx timeout [ 866.422451][T16018] FAULT_INJECTION: forcing a failure. [ 866.422451][T16018] name failslab, interval 1, probability 0, space 0, times 0 [ 866.435616][T16018] CPU: 0 PID: 16018 Comm: syz.1.2984 Not tainted syzkaller #0 [ 866.443106][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.453191][T16018] Call Trace: [ 866.456492][T16018] [ 866.459449][T16018] dump_stack_lvl+0x18c/0x250 [ 866.464169][T16018] ? show_regs_print_info+0x20/0x20 [ 866.469396][T16018] ? load_image+0x420/0x420 [ 866.473926][T16018] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 866.479939][T16018] ? lock_chain_count+0x20/0x20 [ 866.484829][T16018] should_fail_ex+0x39d/0x4d0 [ 866.489548][T16018] should_failslab+0x9/0x20 [ 866.494078][T16018] slab_pre_alloc_hook+0x59/0x310 [ 866.499129][T16018] kmem_cache_alloc_bulk+0x52/0x5a0 [ 866.504351][T16018] ? check_preemption_disabled+0x13/0x110 [ 866.510110][T16018] bpf_test_run_xdp_live+0x1699/0x1b20 [ 866.515628][T16018] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 866.521208][T16018] ? xdp_convert_md_to_buff+0x330/0x330 [ 866.526819][T16018] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 866.533089][T16018] ? xdp_convert_md_to_buff+0x5b/0x330 [ 866.538581][T16018] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 866.544000][T16018] ? dev_put+0x80/0x80 [ 866.548106][T16018] ? dev_put+0x80/0x80 [ 866.552275][T16018] bpf_prog_test_run+0x321/0x390 [ 866.557234][T16018] __sys_bpf+0x49d/0x890 [ 866.561491][T16018] ? bpf_link_show_fdinfo+0x390/0x390 [ 866.566890][T16018] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.573078][T16018] __x64_sys_bpf+0x7c/0x90 [ 866.577508][T16018] do_syscall_64+0x55/0xb0 [ 866.581943][T16018] ? clear_bhb_loop+0x40/0x90 [ 866.586626][T16018] ? clear_bhb_loop+0x40/0x90 [ 866.591315][T16018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.597225][T16018] RIP: 0033:0x7fadced9ce59 [ 866.601662][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.621289][T16018] RSP: 002b:00007fadcfd24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.629726][T16018] RAX: ffffffffffffffda RBX: 00007fadcf015fa0 RCX: 00007fadced9ce59 [ 866.637714][T16018] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 866.645698][T16018] RBP: 00007fadcfd24090 R08: 0000000000000000 R09: 0000000000000000 [ 866.653768][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 866.661755][T16018] R13: 00007fadcf016038 R14: 00007fadcf015fa0 R15: 00007ffc236c2a48 [ 866.669772][T16018] [ 866.823371][T15905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.134585][T15905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.251270][T16033] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2986'. [ 867.598987][T15905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.668752][T15905] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.697621][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.704810][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.740729][T15955] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.747913][T15955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.197695][T15905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.375757][ T5784] Bluetooth: hci2: command tx timeout [ 868.503636][ T6060] hsr_slave_0: left promiscuous mode [ 868.510626][ T6060] hsr_slave_1: left promiscuous mode [ 868.533807][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.561773][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.612194][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.625088][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.646256][ T6060] batman_adv: batadv0: Interface deactivated: vlan1 [ 868.652938][ T6060] batman_adv: batadv0: Removing interface: vlan1 [ 868.736011][ T6060] veth1_macvtap: left promiscuous mode [ 868.742089][ T6060] veth0_macvtap: left promiscuous mode [ 868.755284][ T6060] veth1_vlan: left promiscuous mode [ 870.219431][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.233820][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.189030][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 871.248979][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 871.315158][ T6060] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.323807][ T6060] bond_slave_1 (unregistering): left promiscuous mode [ 871.388093][ T6060] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.404455][ T6060] bond_slave_0 (unregistering): left promiscuous mode [ 871.472167][ T6060] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 871.487451][ T6060] bridge_slave_1 (unregistering): left promiscuous mode [ 871.840070][ T6060] .` (unregistering): Released all slaves [ 871.876989][T16048] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2990'. [ 872.199410][T15905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.318156][T15905] veth0_vlan: entered promiscuous mode [ 872.352240][T15905] veth1_vlan: entered promiscuous mode [ 872.421755][T15905] veth0_macvtap: entered promiscuous mode [ 872.448455][T15905] veth1_macvtap: entered promiscuous mode [ 872.502078][T15905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.529897][T15905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.552747][T15905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.571333][T15905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.583926][T15905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.356611][T15905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.377479][T15905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.406015][T15905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 875.425022][T15905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.446628][T15905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.458687][T16073] bridge0: port 2(team0) entered blocking state [ 875.481659][T16073] bridge0: port 2(team0) entered disabled state [ 875.495975][T16073] team0: entered allmulticast mode [ 875.501315][T16073] team_slave_0: entered allmulticast mode [ 875.520631][T16073] team_slave_1: entered allmulticast mode [ 875.543307][T16073] team0: entered promiscuous mode [ 875.553213][T16073] team_slave_0: entered promiscuous mode [ 875.562367][T16073] team_slave_1: entered promiscuous mode [ 875.576331][T16073] bridge0: port 2(team0) entered blocking state [ 875.582703][T16073] bridge0: port 2(team0) entered forwarding state [ 875.642723][T15905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.661862][T15905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.673276][T15905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.683547][T15905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.918120][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.961382][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.084176][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.118930][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.483440][T16104] netlink: 'syz.1.3002': attribute type 4 has an invalid length. [ 876.505354][T16104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3002'. [ 876.514470][T16104] .`: renamed from bond0 (while UP) [ 876.867433][ T3493] tipc: Subscription rejected, illegal request [ 877.302106][T16118] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3006'. [ 879.909723][T16118] bond0: entered allmulticast mode [ 879.914907][T16118] bond_slave_0: entered allmulticast mode [ 879.920751][T16118] bond_slave_1: entered allmulticast mode [ 880.124575][T16128] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3011'. [ 880.137037][T16124] FAULT_INJECTION: forcing a failure. [ 880.137037][T16124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.165779][T16124] CPU: 1 PID: 16124 Comm: syz.3.3009 Not tainted syzkaller #0 [ 880.173307][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.183382][T16124] Call Trace: [ 880.186685][T16124] [ 880.189629][T16124] dump_stack_lvl+0x18c/0x250 [ 880.194337][T16124] ? show_regs_print_info+0x20/0x20 [ 880.199559][T16124] ? load_image+0x420/0x420 [ 880.204096][T16124] ? __lock_acquire+0x7d40/0x7d40 [ 880.209148][T16124] ? snprintf+0xe9/0x140 [ 880.213425][T16124] should_fail_ex+0x39d/0x4d0 [ 880.218138][T16124] _copy_to_user+0x2f/0xa0 [ 880.222591][T16124] simple_read_from_buffer+0xe7/0x150 [ 880.227999][T16124] proc_fail_nth_read+0x1e8/0x260 [ 880.233061][T16124] ? proc_fault_inject_write+0x360/0x360 [ 880.238738][T16124] ? fsnotify_perm+0x271/0x5e0 [ 880.243534][T16124] ? proc_fault_inject_write+0x360/0x360 [ 880.249207][T16124] vfs_read+0x28b/0x970 [ 880.253403][T16124] ? kernel_read+0x1e0/0x1e0 [ 880.258133][T16124] ? __fget_files+0x28/0x4b0 [ 880.262751][T16124] ? __fget_files+0x28/0x4b0 [ 880.267371][T16124] ? __fget_files+0x43d/0x4b0 [ 880.272082][T16124] ? __fdget_pos+0x2a3/0x330 [ 880.276695][T16124] ? ksys_read+0x75/0x260 [ 880.281049][T16124] ksys_read+0x150/0x260 [ 880.285318][T16124] ? vfs_write+0x990/0x990 [ 880.289759][T16124] ? lockdep_hardirqs_on+0x98/0x150 [ 880.294988][T16124] do_syscall_64+0x55/0xb0 [ 880.299427][T16124] ? clear_bhb_loop+0x40/0x90 [ 880.304126][T16124] ? clear_bhb_loop+0x40/0x90 [ 880.308833][T16124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.314758][T16124] RIP: 0033:0x7f72a035d68e [ 880.319189][T16124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.338824][T16124] RSP: 002b:00007f72a1172fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.347271][T16124] RAX: ffffffffffffffda RBX: 00007f72a11736c0 RCX: 00007f72a035d68e [ 880.355264][T16124] RDX: 000000000000000f RSI: 00007f72a11730a0 RDI: 0000000000000006 [ 880.363257][T16124] RBP: 00007f72a1173090 R08: 0000000000000000 R09: 0000000000000000 [ 880.371250][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.379242][T16124] R13: 00007f72a0616038 R14: 00007f72a0615fa0 R15: 00007ffc361dd118 [ 880.387253][T16124] [ 881.586551][T16146] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3017'. [ 883.706987][T16146] bond0: entered allmulticast mode [ 883.712186][T16146] bond_slave_0: entered allmulticast mode [ 883.721400][T16146] bond_slave_1: entered allmulticast mode [ 884.359407][T16163] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3023'. [ 885.012432][T16179] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3029'. [ 885.025874][T16179] bond0: entered allmulticast mode [ 885.040775][T16179] bond_slave_0: entered allmulticast mode [ 885.047020][T16179] bond_slave_1: entered allmulticast mode [ 885.056853][T16179] bridge_slave_1: entered allmulticast mode [ 885.239138][T16186] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3030'. [ 885.673803][T16191] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3032'. [ 885.902885][T16193] FAULT_INJECTION: forcing a failure. [ 885.902885][T16193] name failslab, interval 1, probability 0, space 0, times 0 [ 885.924260][T16193] CPU: 0 PID: 16193 Comm: syz.0.3033 Not tainted syzkaller #0 [ 885.931802][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 885.941899][T16193] Call Trace: [ 885.945199][T16193] [ 885.948150][T16193] dump_stack_lvl+0x18c/0x250 [ 885.952868][T16193] ? show_regs_print_info+0x20/0x20 [ 885.958085][T16193] ? load_image+0x420/0x420 [ 885.962612][T16193] ? __lock_acquire+0x7d40/0x7d40 [ 885.967659][T16193] ? __lock_acquire+0x7d40/0x7d40 [ 885.972707][T16193] should_fail_ex+0x39d/0x4d0 [ 885.977416][T16193] should_failslab+0x9/0x20 [ 885.981977][T16193] slab_pre_alloc_hook+0x59/0x310 [ 885.987026][T16193] ? ip6_setup_cork+0x1d6/0xfe0 [ 885.991903][T16193] __kmem_cache_alloc_node+0x53/0x250 [ 885.997302][T16193] ? ip6_setup_cork+0x1d6/0xfe0 [ 886.002176][T16193] kmalloc_trace+0x2a/0xe0 [ 886.006617][T16193] ip6_setup_cork+0x1d6/0xfe0 [ 886.011326][T16193] ip6_append_data+0x220/0x350 [ 886.016198][T16193] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 886.021070][T16193] l2tp_ip6_sendmsg+0x1237/0x1690 [ 886.026127][T16193] ? __might_sleep+0xe0/0xe0 [ 886.030755][T16193] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 886.036095][T16193] ? aa_af_perm+0x330/0x330 [ 886.040619][T16193] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 886.047070][T16193] ? sock_rps_record_flow+0x19/0x3f0 [ 886.052390][T16193] ? inet_sendmsg+0x7c/0x2f0 [ 886.057005][T16193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 886.062320][T16193] ? security_socket_sendmsg+0x80/0xa0 [ 886.067802][T16193] ? inet_send_prepare+0x260/0x260 [ 886.072941][T16193] ____sys_sendmsg+0x5ba/0x960 [ 886.077732][T16193] ? __lock_acquire+0x7d40/0x7d40 [ 886.082784][T16193] ? __sys_sendmsg_sock+0x30/0x30 [ 886.087826][T16193] ? __import_iovec+0x3fa/0x850 [ 886.092703][T16193] ? import_iovec+0x73/0xa0 [ 886.097228][T16193] ___sys_sendmsg+0x2a6/0x360 [ 886.101921][T16193] ? get_pid_task+0x20/0x1e0 [ 886.106537][T16193] ? __sys_sendmsg+0x2a0/0x2a0 [ 886.111344][T16193] ? __lock_acquire+0x7d40/0x7d40 [ 886.116412][T16193] __se_sys_sendmsg+0x1c2/0x2b0 [ 886.121286][T16193] ? __x64_sys_sendmsg+0x80/0x80 [ 886.126267][T16193] ? lockdep_hardirqs_on+0x98/0x150 [ 886.131498][T16193] do_syscall_64+0x55/0xb0 [ 886.135934][T16193] ? clear_bhb_loop+0x40/0x90 [ 886.140625][T16193] ? clear_bhb_loop+0x40/0x90 [ 886.145324][T16193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.151241][T16193] RIP: 0033:0x7ff63a99ce59 [ 886.155681][T16193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.175319][T16193] RSP: 002b:00007ff63b8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.183759][T16193] RAX: ffffffffffffffda RBX: 00007ff63ac15fa0 RCX: 00007ff63a99ce59 [ 886.191752][T16193] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 886.199739][T16193] RBP: 00007ff63b8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 886.207725][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.215713][T16193] R13: 00007ff63ac16038 R14: 00007ff63ac15fa0 R15: 00007fff733553c8 [ 886.223719][T16193] [ 886.500281][T16202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3036'. [ 886.588968][T16200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3037'. [ 886.761719][T16206] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3038'. [ 886.852358][T16208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3039'. [ 887.302066][T16226] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3044'. [ 888.102915][T16233] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3047'. [ 890.166110][T16248] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3050'. [ 890.391749][T16262] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3056'. [ 891.019319][T16283] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3063'. [ 893.146837][T16290] netlink: 'syz.1.3065': attribute type 10 has an invalid length. [ 893.159153][T16290] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3065'. [ 893.189493][T16294] FAULT_INJECTION: forcing a failure. [ 893.189493][T16294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.226727][T16294] CPU: 0 PID: 16294 Comm: syz.3.3067 Not tainted syzkaller #0 [ 893.234258][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 893.244341][T16294] Call Trace: [ 893.247631][T16294] [ 893.250581][T16294] dump_stack_lvl+0x18c/0x250 [ 893.255305][T16294] ? show_regs_print_info+0x20/0x20 [ 893.260530][T16294] ? load_image+0x420/0x420 [ 893.265068][T16294] ? __lock_acquire+0x7d40/0x7d40 [ 893.270130][T16294] ? __virt_addr_valid+0x18c/0x540 [ 893.275286][T16294] should_fail_ex+0x39d/0x4d0 [ 893.280016][T16294] _copy_from_user+0x2f/0xe0 [ 893.284652][T16294] bpf_prog_test_run_skb+0x26c/0x18c0 [ 893.290070][T16294] ? __fget_files+0x28/0x4b0 [ 893.294692][T16294] ? __fget_files+0x28/0x4b0 [ 893.299308][T16294] ? __fget_files+0x43d/0x4b0 [ 893.303992][T16294] ? cpu_online+0x60/0x60 [ 893.308320][T16294] bpf_prog_test_run+0x321/0x390 [ 893.313259][T16294] __sys_bpf+0x49d/0x890 [ 893.317501][T16294] ? bpf_link_show_fdinfo+0x390/0x390 [ 893.322881][T16294] ? lock_chain_count+0x20/0x20 [ 893.327735][T16294] __x64_sys_bpf+0x7c/0x90 [ 893.332145][T16294] do_syscall_64+0x55/0xb0 [ 893.336568][T16294] ? clear_bhb_loop+0x40/0x90 [ 893.341270][T16294] ? clear_bhb_loop+0x40/0x90 [ 893.345953][T16294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.351853][T16294] RIP: 0033:0x7f72a039ce59 [ 893.356272][T16294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.375879][T16294] RSP: 002b:00007f72a1173028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 893.384293][T16294] RAX: ffffffffffffffda RBX: 00007f72a0615fa0 RCX: 00007f72a039ce59 [ 893.392267][T16294] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 893.400241][T16294] RBP: 00007f72a1173090 R08: 0000000000000000 R09: 0000000000000000 [ 893.408209][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.416178][T16294] R13: 00007f72a0616038 R14: 00007f72a0615fa0 R15: 00007ffc361dd118 [ 893.424174][T16294] [ 893.479275][T16296] netlink: 'syz.2.3068': attribute type 17 has an invalid length. [ 893.492620][T16296] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3068'. [ 893.893644][T16314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3073'. [ 894.074029][T16319] bridge0: port 3(ip6gretap0) entered blocking state [ 894.081100][T16319] bridge0: port 3(ip6gretap0) entered disabled state [ 894.105366][T16319] ip6gretap0: entered allmulticast mode [ 894.112290][T16319] ip6gretap0: entered promiscuous mode [ 894.119971][T16319] bridge0: port 3(ip6gretap0) entered blocking state [ 894.126835][T16319] bridge0: port 3(ip6gretap0) entered forwarding state [ 894.138540][T16320] ip6gretap0: left allmulticast mode [ 894.143948][T16320] ip6gretap0: left promiscuous mode [ 894.151882][T16320] bridge0: port 3(ip6gretap0) entered disabled state [ 894.231613][T16322] FAULT_INJECTION: forcing a failure. [ 894.231613][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 894.278566][T16322] CPU: 1 PID: 16322 Comm: syz.3.3075 Not tainted syzkaller #0 [ 894.286122][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.296234][T16322] Call Trace: [ 894.299551][T16322] [ 894.302527][T16322] dump_stack_lvl+0x18c/0x250 [ 894.307275][T16322] ? show_regs_print_info+0x20/0x20 [ 894.312532][T16322] ? load_image+0x420/0x420 [ 894.317101][T16322] ? __might_sleep+0xe0/0xe0 [ 894.321745][T16322] ? __lock_acquire+0x7d40/0x7d40 [ 894.326843][T16322] should_fail_ex+0x39d/0x4d0 [ 894.331589][T16322] should_failslab+0x9/0x20 [ 894.336138][T16322] slab_pre_alloc_hook+0x59/0x310 [ 894.341217][T16322] ? lock_chain_count+0x20/0x20 [ 894.346111][T16322] ? __inet_diag_dump_start+0x8b/0x9f0 [ 894.351623][T16322] __kmem_cache_alloc_node+0x53/0x250 [ 894.357057][T16322] ? __inet_diag_dump_start+0x8b/0x9f0 [ 894.362566][T16322] kmalloc_trace+0x2a/0xe0 [ 894.367039][T16322] __inet_diag_dump_start+0x8b/0x9f0 [ 894.372379][T16322] __netlink_dump_start+0x4a9/0x810 [ 894.377619][T16322] inet_diag_rcv_msg_compat+0x215/0x440 [ 894.383188][T16322] ? __inet_diag_dump+0x380/0x380 [ 894.388242][T16322] ? sock_diag_rcv_msg+0xd1/0x600 [ 894.393284][T16322] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 894.399016][T16322] ? inet_diag_dump_start_compat+0x20/0x20 [ 894.404834][T16322] ? inet_diag_dump+0x50/0x50 [ 894.409547][T16322] ? __inet_diag_dump+0x380/0x380 [ 894.414588][T16322] sock_diag_rcv_msg+0x3d8/0x600 [ 894.419554][T16322] netlink_rcv_skb+0x241/0x4d0 [ 894.424335][T16322] ? sock_diag_bind+0xb0/0xb0 [ 894.429036][T16322] ? netlink_ack+0x1180/0x1180 [ 894.433844][T16322] ? __lock_acquire+0x7d40/0x7d40 [ 894.438919][T16322] ? netlink_deliver_tap+0x2e/0x1b0 [ 894.444169][T16322] sock_diag_rcv+0x2a/0x40 [ 894.448616][T16322] netlink_unicast+0x751/0x8d0 [ 894.453430][T16322] netlink_sendmsg+0x8d0/0xbf0 [ 894.458232][T16322] ? netlink_getsockopt+0x590/0x590 [ 894.463451][T16322] ? aa_sock_msg_perm+0x94/0x150 [ 894.468415][T16322] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 894.473713][T16322] ? security_socket_sendmsg+0x80/0xa0 [ 894.479185][T16322] ? netlink_getsockopt+0x590/0x590 [ 894.484403][T16322] ____sys_sendmsg+0x5ba/0x960 [ 894.489184][T16322] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 894.495373][T16322] ? __asan_memset+0x22/0x40 [ 894.499980][T16322] ? __sys_sendmsg_sock+0x30/0x30 [ 894.505022][T16322] ? __import_iovec+0x5f2/0x850 [ 894.509914][T16322] ? import_iovec+0x73/0xa0 [ 894.514446][T16322] ___sys_sendmsg+0x2a6/0x360 [ 894.519154][T16322] ? __sys_sendmsg+0x2a0/0x2a0 [ 894.523985][T16322] ? __lock_acquire+0x7d40/0x7d40 [ 894.529090][T16322] __se_sys_sendmsg+0x1c2/0x2b0 [ 894.533968][T16322] ? __x64_sys_sendmsg+0x80/0x80 [ 894.538962][T16322] ? syscall_enter_from_user_mode+0x2e/0x80 [ 894.544888][T16322] do_syscall_64+0x55/0xb0 [ 894.549335][T16322] ? clear_bhb_loop+0x40/0x90 [ 894.554020][T16322] ? clear_bhb_loop+0x40/0x90 [ 894.558715][T16322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.564623][T16322] RIP: 0033:0x7f72a039ce59 [ 894.569053][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.588679][T16322] RSP: 002b:00007f72a1173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.597113][T16322] RAX: ffffffffffffffda RBX: 00007f72a0615fa0 RCX: 00007f72a039ce59 [ 894.605104][T16322] RDX: 0000000000000850 RSI: 0000200000000000 RDI: 0000000000000005 [ 894.613087][T16322] RBP: 00007f72a1173090 R08: 0000000000000000 R09: 0000000000000000 [ 894.621072][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.629066][T16322] R13: 00007f72a0616038 R14: 00007f72a0615fa0 R15: 00007ffc361dd118 [ 894.637104][T16322] [ 894.689494][T16319] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3074'. [ 895.045352][T16327] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 895.071140][T16327] team0: Device ipvlan1 failed to register rx_handler [ 895.193550][T16328] netlink: 'syz.1.3077': attribute type 10 has an invalid length. [ 895.212455][T16328] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3077'. [ 895.392409][T16344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3082'. [ 895.706911][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'. [ 896.483369][T16363] netlink: 'syz.0.3088': attribute type 10 has an invalid length. [ 896.493382][T16363] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3088'. [ 896.579966][T16367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3091'. [ 897.268924][T16394] netlink: 'syz.0.3098': attribute type 10 has an invalid length. [ 897.277186][T16394] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3098'. [ 897.494299][T16404] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3101'. [ 897.547089][T16403] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3100'. [ 898.093782][T16420] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 898.105167][T16420] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3107'. [ 898.248481][T16429] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3110'. [ 898.647391][T16452] netlink: 'syz.2.3117': attribute type 10 has an invalid length. [ 899.685714][T16476] netlink: 'syz.1.3126': attribute type 10 has an invalid length. [ 901.702511][T16454] ------------[ cut here ]------------ [ 901.708118][T16454] WARNING: CPU: 0 PID: 16454 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 901.718925][T16454] Modules linked in: [ 901.722854][T16454] CPU: 0 PID: 16454 Comm: syz.2.3118 Not tainted syzkaller #0 [ 901.730560][T16454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 901.740679][T16454] RIP: 0010:perf_pending_task+0x35c/0x470 [ 901.746480][T16454] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 901.766239][T16454] RSP: 0018:ffffc900049d79c0 EFLAGS: 00010293 [ 901.772330][T16454] RAX: ffffffff81b1603c RBX: ffff888079cc0468 RCX: ffff88802bb08000 [ 901.780364][T16454] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 901.788416][T16454] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 901.796420][T16454] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802bb08000 [ 901.804392][T16454] R13: ffff88805df20130 R14: ffff888079cc0228 R15: 1ffff1100f398045 [ 901.813097][T16454] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 901.822270][T16454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.828940][T16454] CR2: 000020000000f000 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 901.837001][T16454] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 901.845067][T16454] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 901.853058][T16454] Call Trace: [ 901.856401][T16454] [ 901.859343][T16454] task_work_run+0x1d4/0x260 [ 901.863936][T16454] ? task_work_cancel+0x220/0x220 [ 901.869044][T16454] do_exit+0x95a/0x2460 [ 901.873226][T16454] ? put_task_struct+0xc0/0xc0 [ 901.878060][T16454] ? preempt_schedule_common+0x82/0xc0 [ 901.883543][T16454] ? preempt_schedule+0xc0/0xd0 [ 901.888659][T16454] ? schedule_preempt_disabled+0x20/0x20 [ 901.894299][T16454] ? lock_chain_count+0x20/0x20 [ 901.899281][T16454] do_group_exit+0x21b/0x2d0 [ 901.903895][T16454] get_signal+0x12fc/0x13f0 [ 901.908492][T16454] arch_do_signal_or_restart+0xc2/0x800 [ 901.914458][T16454] ? mutex_unlock+0x10/0x10 [ 901.919329][T16454] ? get_sigframe_size+0x20/0x20 [ 901.924300][T16454] ? ksys_write+0x1fb/0x260 [ 901.928928][T16454] ? exit_to_user_mode_loop+0x3b/0x110 [ 901.934413][T16454] exit_to_user_mode_loop+0x70/0x110 [ 901.939748][T16454] exit_to_user_mode_prepare+0xee/0x180 [ 901.945384][T16454] syscall_exit_to_user_mode+0x1a/0x50 [ 901.950868][T16454] do_syscall_64+0x61/0xb0 [ 901.955332][T16454] ? clear_bhb_loop+0x40/0x90 [ 901.960019][T16454] ? clear_bhb_loop+0x40/0x90 [ 901.964688][T16454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.970747][T16454] RIP: 0033:0x7f07a399ce59 [ 901.975211][T16454] Code: Unable to access opcode bytes at 0x7f07a399ce2f. [ 901.982320][T16454] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 901.990841][T16454] RAX: 0000000000000012 RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 901.998863][T16454] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 902.006916][T16454] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 902.014907][T16454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.023475][T16454] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 902.031672][T16454] [ 902.034713][T16454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 902.041994][T16454] CPU: 0 PID: 16454 Comm: syz.2.3118 Not tainted syzkaller #0 [ 902.049443][T16454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.059500][T16454] Call Trace: [ 902.062772][T16454] [ 902.065703][T16454] dump_stack_lvl+0x18c/0x250 [ 902.070390][T16454] ? show_regs_print_info+0x20/0x20 [ 902.075591][T16454] ? load_image+0x420/0x420 [ 902.080099][T16454] panic+0x2dc/0x730 [ 902.083990][T16454] ? bpf_jit_dump+0xd0/0xd0 [ 902.088494][T16454] __warn+0x2e0/0x470 [ 902.092470][T16454] ? perf_pending_task+0x35c/0x470 [ 902.097575][T16454] ? perf_pending_task+0x35c/0x470 [ 902.102681][T16454] report_bug+0x2be/0x4f0 [ 902.107004][T16454] ? perf_pending_task+0x35c/0x470 [ 902.112110][T16454] ? perf_pending_task+0x35c/0x470 [ 902.117231][T16454] ? perf_pending_task+0x35e/0x470 [ 902.122341][T16454] handle_bug+0xcf/0x120 [ 902.126582][T16454] exc_invalid_op+0x1a/0x50 [ 902.131080][T16454] asm_exc_invalid_op+0x1a/0x20 [ 902.135928][T16454] RIP: 0010:perf_pending_task+0x35c/0x470 [ 902.141645][T16454] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 902.161246][T16454] RSP: 0018:ffffc900049d79c0 EFLAGS: 00010293 [ 902.167305][T16454] RAX: ffffffff81b1603c RBX: ffff888079cc0468 RCX: ffff88802bb08000 [ 902.175268][T16454] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 902.183229][T16454] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 902.191191][T16454] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802bb08000 [ 902.199185][T16454] R13: ffff88805df20130 R14: ffff888079cc0228 R15: 1ffff1100f398045 [ 902.207153][T16454] ? perf_pending_task+0x35c/0x470 [ 902.212273][T16454] task_work_run+0x1d4/0x260 [ 902.216863][T16454] ? task_work_cancel+0x220/0x220 [ 902.221887][T16454] do_exit+0x95a/0x2460 [ 902.226046][T16454] ? put_task_struct+0xc0/0xc0 [ 902.230803][T16454] ? preempt_schedule_common+0x82/0xc0 [ 902.236261][T16454] ? preempt_schedule+0xc0/0xd0 [ 902.241107][T16454] ? schedule_preempt_disabled+0x20/0x20 [ 902.246729][T16454] ? lock_chain_count+0x20/0x20 [ 902.251574][T16454] do_group_exit+0x21b/0x2d0 [ 902.256169][T16454] get_signal+0x12fc/0x13f0 [ 902.260682][T16454] arch_do_signal_or_restart+0xc2/0x800 [ 902.266223][T16454] ? mutex_unlock+0x10/0x10 [ 902.270719][T16454] ? get_sigframe_size+0x20/0x20 [ 902.275660][T16454] ? ksys_write+0x1fb/0x260 [ 902.280161][T16454] ? exit_to_user_mode_loop+0x3b/0x110 [ 902.285616][T16454] exit_to_user_mode_loop+0x70/0x110 [ 902.290895][T16454] exit_to_user_mode_prepare+0xee/0x180 [ 902.296437][T16454] syscall_exit_to_user_mode+0x1a/0x50 [ 902.301895][T16454] do_syscall_64+0x61/0xb0 [ 902.306307][T16454] ? clear_bhb_loop+0x40/0x90 [ 902.310976][T16454] ? clear_bhb_loop+0x40/0x90 [ 902.315643][T16454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.321536][T16454] RIP: 0033:0x7f07a399ce59 [ 902.325947][T16454] Code: Unable to access opcode bytes at 0x7f07a399ce2f. [ 902.332950][T16454] RSP: 002b:00007f07a4865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 902.341356][T16454] RAX: 0000000000000012 RBX: 00007f07a3c15fa0 RCX: 00007f07a399ce59 [ 902.349319][T16454] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 902.357282][T16454] RBP: 00007f07a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 902.365242][T16454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.373214][T16454] R13: 00007f07a3c16038 R14: 00007f07a3c15fa0 R15: 00007ffcfcaa6968 [ 902.381187][T16454] [ 902.384454][T16454] Kernel Offset: disabled [ 902.388767][T16454] Rebooting in 86400 seconds..