last executing test programs: 20.944192995s ago: executing program 2 (id=5760): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, 0x0, 0x0) 19.958220876s ago: executing program 2 (id=5771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x6, &(0x7f0000000000)=[{0x4, 0xac, 0xb5, 0x8}, {0x2, 0x1, 0x6, 0x9}, {0x8, 0x6, 0x7f, 0x8ba6}, {0x5, 0xa, 0x7, 0xf}, {0x7, 0x4, 0x5, 0x4151}, {0x6, 0x2, 0xe, 0x3}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 19.486704567s ago: executing program 2 (id=5776): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 18.982271118s ago: executing program 2 (id=5782): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b885d9405c5ba6488784d33b46fbe87454b6ce4bf00000000", 0x1b}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359e6a3807d9181abfbd8d9ad9bd93e89a528e4585e60fa3f837e7480f408a5b286c81a5103e240fc07e74b65ab810bee62242fe6893e41", 0x7c}, {&(0x7f0000000340)="12c39a00e0afe61bf7be1383722dc41b141b2e325c18bc7d1f9c2c0d4e8f7e8055e109410dbf093ac0342c3e9ca417cba49e00b2cf6f2bc1f61db74fdb8c4e5e8f714f2f8d23c88475d5aeae3ac10e941d563de1fe9444a84395911574c4a28d2172c585a5bf79232e4c901cae38ac974b8cd2b2d2066aab8669743043ebca311b81f25b2dd5df5af2085a117461cfc249bfc7837cb6d802f5db27dd5f3a5530e6d9f2fef425106e61817f428f46890dde4e0aaf39a899e97cac2cf8b13b12b4f013c8cf1718fce8882a1a6b3469beedc74cd098e8ca41cd0af438d44004437c7359386972149f5ab5b3a0e5", 0xec}], 0x4}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000380)="c109000000000000001d1e02", 0xc}, {&(0x7f0000000240)="0563", 0x2}, {&(0x7f0000000500)="2fe1", 0x2}], 0x3}, 0x20040000) 18.655567746s ago: executing program 2 (id=5784): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000007508094f161e0000"], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) close(0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 15.552056055s ago: executing program 2 (id=5790): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000003000000420000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x82d7) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x6, 0x0, 0x0, 0x0, 0x7fffffff, 0x8e80a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x11000, 0xfffffffffffffffc, 0xffffffff, 0x8, 0x100000002, 0xfffffffc, 0x10}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x200400c1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x3}, 0x102c02, 0x46b, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = syz_clone(0x8000200, &(0x7f00000002c0)="da821c092aae6c110e447ee9569c968f3c8fbcfd0834038a50859f7c2ef51bd4e5801fa6f724e22d5bf980aa77879b76a2bc0f4161bac8ca50508ea4c29d05bcbecc59dd6c2d1bf19a43dfeb740812fdcbf22d95c0e02c2f650871e579286a983e6f000804034081619414b0ba23233522b123626b08cb278db35383e3d8dd3e9cbe3a223566f42890b73ee9f02327cfc2c69943d8bc26c39a28fecc1da38601e35d0c60a1adb9707e21c512c4cf809c1027bd439a7afd7f5a2ff67e98b018e0999553", 0xc3, &(0x7f0000000040), &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x5, 0x10, 0x0, 0x0, 0x8000000000000000, 0x80262, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x4208, 0x200, 0x8d, 0x4, 0x6, 0xffffffff, 0x8, 0x0, 0xffff97b9}, r6, 0xffffffbffffffffa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pim6reg\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8.026131282s ago: executing program 3 (id=5826): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000007508094f161e0000"], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) close(0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 7.732862368s ago: executing program 3 (id=5829): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="706eed4c04303e3b07a6a123686a0fe8fecfbb7b8acd036474bc539a1f27797c762c9e47eb889bd01b6a8f274899f64d7037fa79a152152a76c5f06d25cacf8d54b7dce655ffec0e37a2786cc4e6d34c3405391fe3ba9d3bda19e68a51373f765dc850b5331e26ded26de13e2a7d57ac971d4906527521cf62c9781e8f576b32eb76a1a49f7d435a8aa0842e3ace0014cbbbf0fedd90c7cf25014c85a175969796135402bcad417c39811e80348cf36f6adb6815be", 0xb5}, {&(0x7f0000000300)="4cc5d1f8eb9ce5196821bd9286477e5becc13e09eddb872f55273c7478d4b9b0518a43476cfacd47a967a7571d37e6f96515b726d86a2a35215723c90f90efd291566a1ef4be0b27649a07c4c5d2ba053553b3", 0x53}, {&(0x7f0000000380)="77638d7167b167eb43db7f76114b57141163ff20d78b50ac4b3190958c8ce9da9c2f1cc9c18ee4dbe2bb9752cc9777", 0x2f}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000000000000100000081ffffff00000000140000000000000000000000020000000500000000000000000001000000000000003c000000000000000000000007000000830b8c00000000ac14143901830f38ffffffffac1414437f0000010194040100008809c3b98e4f1b53400000000000001400000000000000000000000100000000010000000000001400000000000000000000000100000009000000000000001100000000000000000000000100000086000000000000002800000000000000000000000700000044181ef00000000600007fff000000020000000700000005"], 0xf8}, 0x4008800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x67}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000dd08ac000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, 0x0, 0x840) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000028e10b0c6cb0c28b12e500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfdef}], 0x1}, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a82", 0x5f}, {&(0x7f0000000040)="ac781119aa83ed9a404aaab7bdeff186ddb3ddcc93ff8239895a6740a122c850d79f0557b9c8a751d17727960ef779b486be557282765ef059fca7c435f530a501da544042828361a5f0dd564b7d", 0x4e}, {&(0x7f0000000100)}], 0x3}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000006c0)={0x5, 0x80, 0x4, 0x2, 0x42, 0x1, 0x0, 0x81, 0x1052, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2fd, 0x0, @perf_config_ext={0x1, 0xb72}, 0x200, 0x9, 0x9, 0x3, 0xfdec, 0x314, 0x4, 0x0, 0x9, 0x0, 0xcf}) 7.468019954s ago: executing program 0 (id=5831): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8, @ANYRES64=r1], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b2388a84b83", @ANYRESDEC], 0xffdd) 7.148538031s ago: executing program 1 (id=5833): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={&(0x7f00000000c0)={0x2, 0x4e24, @empty=0xe0}, 0x10, 0x0}, 0x80) 6.732146041s ago: executing program 1 (id=5835): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 6.665149592s ago: executing program 3 (id=5836): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c008fc6da4fb2e98e5083aa3c0ad0d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103600033f0000000600081001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.651733452s ago: executing program 0 (id=5837): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba80", 0x20}, {&(0x7f0000000200)="cc182c338cba616175", 0x9}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000"], 0x28}, 0xfc40) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.156127174s ago: executing program 4 (id=5838): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000007508094f161e0000"], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) close(0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 5.548906547s ago: executing program 1 (id=5839): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000071c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 5.492260258s ago: executing program 3 (id=5840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000700000002000084ffffffff01000000050000000100000008000000050000000000000000612e001e5f2e612a"], &(0x7f0000000c40)=""/183, 0x46, 0xb7, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000b000000000000000071101900000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$kcm(0xa, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x7, &(0x7f0000000000)=r8, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 5.471065409s ago: executing program 0 (id=5841): socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001ff00000024000000000000000000000007000000441407a1010b71ac1414aa00d203960993d1b8da00000500000000140000000000000000000000010000000900000000000000"], 0x60}, 0x200040c4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01231800"], &(0x7f00000003c0)=""/144, 0x38, 0x90, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01231800"], &(0x7f00000003c0)=""/144, 0x38, 0x90, 0x1}, 0x28) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000480)=""/239, 0xef}], 0x2, &(0x7f00000005c0)=""/113, 0x71}, 0x100) 5.4038081s ago: executing program 4 (id=5842): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a82", 0x5f}, {&(0x7f0000000040)="ac781119aa83ed9a404aaab7bdeff186ddb3ddcc93ff8239895a6740a122c850d79f0557b9c8a751d17727960ef779b486be557282765ef059fca7c435f530a501da544042828361a5f0dd564b7d", 0x4e}, {&(0x7f0000000100)}], 0x3}, 0x8) (fail_nth: 6) 5.271934143s ago: executing program 1 (id=5843): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/\x05\x00\x00\x00\x00\x00\x00\x00\xbd\xc2\x98!YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000002000000072000000000000000001009b2b2fad0284ebf807000000000000d54751502ee8427d185d43b5a9a7620c3d034929da2fb9104c776f777b3d6066b7057fc74d2bcf25787a71854ea6cb0e8f521927f4679b160da5ddc0bc283fbbbe218b2c3ae796f0d45893bc771138ef9a97cd3fcaa0093801236640e3d362d689cb186dc25e654ee221e15be220ae0e71b749cc493ee67300017337737742e1a0844e9157121e533cfb5c4c7da17817199c9bac3908000000000000001befcd62b9017ec9cd91cd87479b27962b7d840008fdd06901a318e750cb2c910cdacf9ad2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x114, 0xa, 0x0, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.881617422s ago: executing program 4 (id=5844): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095985903000000fd1a3fa825a37fec19961044d3901f694255a275a6bb5374cfe9eb632f9d13a44e0cc45c1978b945217366a05fccbf1f73ee00fd21d2e2e9e2940e15e60c957b87dcbbc9f797be2e0d306cf3f9684852355f0c1679b29aaaa83c93d540accd74f6412d9bee4066675339beac427c09c04212da7da0eb8a5b258f9558fb92ecc3315b9796d30a9dc11fd949ec197c9b1950e5fe7a24ae7694f7ec90f0e920", @ANYBLOB="90ab3e75bb728093d6881e0312aaa525fffd39bc73c5ae25bbc44f67f7", @ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r2, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000006c0)="a3bd8ed0aebd1cf8e39165f5b9786fb2af10bd6ef22f19e3dcf8a474566e79a977255e36b3a22da5e03c980edc38b0c5fe36b54788e62102ce01b8a411fbe6b3d99d93b5bab8f8d1025e6272ce5b936d71c2dfd8916a917a975fd3c7dcde1ff88617e322249d44455b7b2d943aa1f1b352f9ab1550cc3f189b2ab1b09aebdddaab3db8f612e99bf8ab2fa9f784cdf4a79689a0f864db4c80ee892338ff6168d52ec66cb502033ee61e08468c911868d58855ab19a5493a7e4037355b73ecd56da03722b66e3770cfcd5a3f69fc072c42f29fbbfa261c3141344a86e01f3104", 0xdf}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @private=0xa010100}}}], 0x20}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) socket$kcm(0xa, 0x1, 0x106) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x42, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x83, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000440)=0xd7fc, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.51397975s ago: executing program 1 (id=5845): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf5ffffff}, 0x48) 4.380205703s ago: executing program 0 (id=5846): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffe00000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0000000000070000000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 3.437978814s ago: executing program 1 (id=5847): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES32, @ANYRES8, @ANYRES64=r1], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b2388a84b83", @ANYRESDEC], 0xffdd) 3.397168125s ago: executing program 0 (id=5848): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 3.351194216s ago: executing program 3 (id=5849): socket$kcm(0x2, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000002000061194000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r0, 0xe, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60c881, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x400, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES64], 0x48) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.343494246s ago: executing program 4 (id=5850): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba80", 0x20}, {&(0x7f0000000200)="cc182c338cba616175", 0x9}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000"], 0x28}, 0xfc40) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.025961163s ago: executing program 0 (id=5851): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000370000007508094f161e0000"], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) close(0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 179.842926ms ago: executing program 3 (id=5852): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x120, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 179.082216ms ago: executing program 4 (id=5853): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89400100120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a82", 0x5f}, {&(0x7f0000000040)="ac781119aa83ed9a404aaab7bdeff186ddb3ddcc93ff8239895a6740a122c850d79f0557b9c8a751d17727960ef779b486be557282765ef059fca7c435f530a501da544042828361a5f0dd564b7d", 0x4e}, {&(0x7f0000000100)}], 0x3}, 0x8) 0s ago: executing program 4 (id=5854): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) (async) write$cgroup_int(r0, &(0x7f0000000080), 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYRES64=r0, @ANYRES8], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYRES64=r0, @ANYRES8], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) (async) close(r3) socket$kcm(0x2, 0x1, 0x84) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) (async) close(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000001080)={0x6, 0xfffffffffffffd9c, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 53.596383][T18901] do_syscall_64+0x4c/0xa0 [ 853.600837][T18901] ? clear_bhb_loop+0x60/0xb0 [ 853.605535][T18901] ? clear_bhb_loop+0x60/0xb0 [ 853.610243][T18901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.616157][T18901] RIP: 0033:0x7fa39659de99 [ 853.620616][T18901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.640237][T18901] RSP: 002b:00007fa3947f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.648673][T18901] RAX: ffffffffffffffda RBX: 00007fa396826090 RCX: 00007fa39659de99 [ 853.656657][T18901] RDX: 0000000008040880 RSI: 0000200000000080 RDI: 0000000000000008 [ 853.664648][T18901] RBP: 00007fa3947f6090 R08: 0000000000000000 R09: 0000000000000000 [ 853.672634][T18901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.680616][T18901] R13: 00007fa396826128 R14: 00007fa396826090 R15: 00007ffcfd0a1618 [ 853.688618][T18901] [ 854.221381][T18838] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.228768][T18838] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.290933][T18909] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.4919'. [ 854.321271][T18838] device bridge_slave_0 entered promiscuous mode [ 854.379166][T18838] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.386311][T18838] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.420106][T18838] device bridge_slave_1 entered promiscuous mode [ 854.998105][T18838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.080986][T18838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.129240][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 855.356696][T18927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4925'. [ 855.409306][T18942] netlink: 'syz.3.4928': attribute type 1 has an invalid length. [ 855.443658][T18936] -: renamed from syzkaller0 [ 855.474813][T18838] team0: Port device team_slave_0 added [ 855.515096][ T4638] device hsr_slave_0 left promiscuous mode [ 855.568989][ T4638] device hsr_slave_1 left promiscuous mode [ 855.585235][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.619051][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.629771][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.637192][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.662562][T18949] FAULT_INJECTION: forcing a failure. [ 855.662562][T18949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.696101][ T4638] batman_adv: batadv0: Interface deactivated: vlan1 [ 855.696099][T18949] CPU: 0 PID: 18949 Comm: syz.1.4929 Not tainted syzkaller #0 [ 855.696120][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.720273][T18949] Call Trace: [ 855.723574][T18949] [ 855.726532][T18949] dump_stack_lvl+0x188/0x24e [ 855.729193][ T4638] batman_adv: batadv0: Removing interface: vlan1 [ 855.731235][T18949] ? show_regs_print_info+0x12/0x12 [ 855.742783][T18949] ? load_image+0x410/0x410 [ 855.747321][T18949] ? __lock_acquire+0x7c40/0x7c40 [ 855.752386][T18949] should_fail_ex+0x390/0x4c0 [ 855.757105][T18949] _copy_from_user+0x2c/0x170 [ 855.761825][T18949] __sys_bpf+0x2ea/0x780 [ 855.766121][T18949] ? bpf_link_show_fdinfo+0x380/0x380 [ 855.771543][T18949] ? lock_chain_count+0x20/0x20 [ 855.776452][T18949] __x64_sys_bpf+0x78/0x90 [ 855.780913][T18949] do_syscall_64+0x4c/0xa0 [ 855.785364][T18949] ? clear_bhb_loop+0x60/0xb0 [ 855.790066][T18949] ? clear_bhb_loop+0x60/0xb0 [ 855.794778][T18949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.800700][T18949] RIP: 0033:0x7f084159de99 [ 855.805139][T18949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.824777][T18949] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.833223][T18949] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 855.841222][T18949] RDX: 000000000000000c RSI: 0000200000000340 RDI: 000000000000000a [ 855.849217][T18949] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 855.857239][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.865241][T18949] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 855.873261][T18949] [ 855.878091][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.889998][ T4638] device bridge_slave_0 left promiscuous mode [ 855.896608][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.962510][ T4638] device veth0_macvtap left promiscuous mode [ 855.976053][ T4638] device veth1_vlan left promiscuous mode [ 856.042404][T18955] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.4931'. [ 857.043519][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.216440][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 857.470270][ T4638] bond0 (unregistering): Released all slaves [ 857.553837][T18838] team0: Port device team_slave_1 added [ 857.575174][T18964] device syzkaller0 entered promiscuous mode [ 857.714268][T18838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.726229][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.803680][T18838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.829972][T18978] FAULT_INJECTION: forcing a failure. [ 857.829972][T18978] name failslab, interval 1, probability 0, space 0, times 0 [ 857.852579][T18838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.869916][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.933938][T18978] CPU: 0 PID: 18978 Comm: syz.0.4936 Not tainted syzkaller #0 [ 857.941471][T18978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.951561][T18978] Call Trace: [ 857.954879][T18978] [ 857.957849][T18978] dump_stack_lvl+0x188/0x24e [ 857.962592][T18978] ? show_regs_print_info+0x12/0x12 [ 857.967848][T18978] ? load_image+0x410/0x410 [ 857.972396][T18978] ? __might_sleep+0xd0/0xd0 [ 857.977026][T18978] ? __lock_acquire+0x7c40/0x7c40 [ 857.982100][T18978] should_fail_ex+0x390/0x4c0 [ 857.986822][T18978] should_failslab+0x5/0x20 [ 857.991357][T18978] slab_pre_alloc_hook+0x59/0x300 [ 857.996421][T18978] ? apparmor_sk_alloc_security+0x74/0x100 [ 858.002280][T18978] __kmem_cache_alloc_node+0x4f/0x270 [ 858.007686][T18978] ? apparmor_sk_alloc_security+0x74/0x100 [ 858.013532][T18978] kmalloc_trace+0x26/0xe0 [ 858.018007][T18978] apparmor_sk_alloc_security+0x74/0x100 [ 858.023697][T18978] security_sk_alloc+0x6a/0xa0 [ 858.028509][T18978] sk_prot_alloc+0x101/0x210 [ 858.033128][T18978] ? sk_alloc+0x20/0x330 [ 858.037429][T18978] sk_alloc+0x36/0x330 [ 858.041533][T18978] ? bpf_ctx_init+0x154/0x190 [ 858.046246][T18978] bpf_prog_test_run_skb+0x36d/0x18e0 [ 858.051657][T18978] ? __fget_files+0x28/0x460 [ 858.056284][T18978] ? __fget_files+0x3fc/0x460 [ 858.061012][T18978] ? cpu_online+0xa0/0xa0 [ 858.065378][T18978] bpf_prog_test_run+0x31c/0x390 [ 858.070358][T18978] __sys_bpf+0x62b/0x780 [ 858.074651][T18978] ? bpf_link_show_fdinfo+0x380/0x380 [ 858.080070][T18978] ? lock_chain_count+0x20/0x20 [ 858.084972][T18978] __x64_sys_bpf+0x78/0x90 [ 858.089432][T18978] do_syscall_64+0x4c/0xa0 [ 858.093884][T18978] ? clear_bhb_loop+0x60/0xb0 [ 858.098590][T18978] ? clear_bhb_loop+0x60/0xb0 [ 858.103288][T18978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.109230][T18978] RIP: 0033:0x7f6a6b79de99 [ 858.113676][T18978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.133335][T18978] RSP: 002b:00007f6a6c6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.141800][T18978] RAX: ffffffffffffffda RBX: 00007f6a6ba25fa0 RCX: 00007f6a6b79de99 [ 858.149806][T18978] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 858.157812][T18978] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 858.165919][T18978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.173938][T18978] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 858.181965][T18978] [ 858.195400][T18838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.243488][T18838] device hsr_slave_0 entered promiscuous mode [ 858.280317][T18838] device hsr_slave_1 entered promiscuous mode [ 858.295452][T18838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.320848][T18838] Cannot create hsr debugfs directory [ 858.554936][T18995] netlink: 'syz.3.4942': attribute type 4 has an invalid length. [ 858.573821][T18995] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4942'. [ 858.775605][T19003] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.4943'. [ 859.004935][T19011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4945'. [ 859.299733][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 859.461282][T19023] device syzkaller0 entered promiscuous mode [ 859.745853][T18838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.810535][T18838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.920687][T18838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.988202][T18838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 860.185816][T18838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.242932][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.262591][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.273989][T19041] FAULT_INJECTION: forcing a failure. [ 860.273989][T19041] name failslab, interval 1, probability 0, space 0, times 0 [ 860.289507][T18838] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.329292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.338116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.357967][T19041] CPU: 1 PID: 19041 Comm: syz.0.4955 Not tainted syzkaller #0 [ 860.365571][T19041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.375662][T19041] Call Trace: [ 860.378975][T19041] [ 860.381939][T19041] dump_stack_lvl+0x188/0x24e [ 860.386673][T19041] ? show_regs_print_info+0x12/0x12 [ 860.391917][T19041] ? load_image+0x410/0x410 [ 860.396480][T19041] ? __might_sleep+0xd0/0xd0 [ 860.401105][T19041] ? __lock_acquire+0x7c40/0x7c40 [ 860.406160][T19041] should_fail_ex+0x390/0x4c0 [ 860.410865][T19041] should_failslab+0x5/0x20 [ 860.415390][T19041] slab_pre_alloc_hook+0x59/0x300 [ 860.420444][T19041] ? __inet_diag_dump_start+0x8b/0x970 [ 860.426014][T19041] __kmem_cache_alloc_node+0x4f/0x270 [ 860.431419][T19041] ? __inet_diag_dump_start+0x8b/0x970 [ 860.436895][T19041] kmalloc_trace+0x26/0xe0 [ 860.441346][T19041] __inet_diag_dump_start+0x8b/0x970 [ 860.446651][T19041] ? netlink_lookup+0x30/0x200 [ 860.451442][T19041] __netlink_dump_start+0x3f0/0x6f0 [ 860.456668][T19041] inet_diag_rcv_msg_compat+0x207/0x420 [ 860.462245][T19041] ? __inet_diag_dump+0x380/0x380 [ 860.467298][T19041] ? sock_diag_rcv_msg+0x137/0x5e0 [ 860.472491][T19041] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 860.478262][T19041] ? inet_diag_dump_start_compat+0x20/0x20 [ 860.484088][T19041] ? inet_diag_dump+0x50/0x50 [ 860.488784][T19041] ? trace_raw_output_contention_end+0xd0/0xd0 [ 860.494963][T19041] ? __inet_diag_dump+0x380/0x380 [ 860.500009][T19041] sock_diag_rcv_msg+0x3c7/0x5e0 [ 860.504993][T19041] netlink_rcv_skb+0x1ef/0x440 [ 860.509793][T19041] ? sock_diag_bind+0xa0/0xa0 [ 860.514501][T19041] ? netlink_ack+0x1160/0x1160 [ 860.519295][T19041] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.524510][T19041] sock_diag_rcv+0x26/0x40 [ 860.528971][T19041] netlink_unicast+0x7ad/0x920 [ 860.533770][T19041] netlink_sendmsg+0x8ad/0xbd0 [ 860.538583][T19041] ? netlink_getsockopt+0x550/0x550 [ 860.543810][T19041] ? apparmor_socket_sendmsg+0x8a/0x330 [ 860.549384][T19041] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 860.554689][T19041] ? security_socket_sendmsg+0x7c/0xa0 [ 860.560173][T19041] ? netlink_getsockopt+0x550/0x550 [ 860.565399][T19041] ____sys_sendmsg+0x5ed/0x9a0 [ 860.570196][T19041] ? __sys_sendmsg_sock+0x30/0x30 [ 860.575244][T19041] ? __import_iovec+0x306/0x510 [ 860.580129][T19041] ? import_iovec+0x6f/0xa0 [ 860.584668][T19041] ___sys_sendmsg+0x2a2/0x360 [ 860.589377][T19041] ? __sys_sendmsg+0x2a0/0x2a0 [ 860.594179][T19041] ? __lock_acquire+0x7c40/0x7c40 [ 860.599252][T19041] __se_sys_sendmsg+0x1c3/0x2b0 [ 860.604138][T19041] ? __x64_sys_sendmsg+0x80/0x80 [ 860.609121][T19041] ? lockdep_hardirqs_on+0x94/0x140 [ 860.614350][T19041] do_syscall_64+0x4c/0xa0 [ 860.618789][T19041] ? clear_bhb_loop+0x60/0xb0 [ 860.623489][T19041] ? clear_bhb_loop+0x60/0xb0 [ 860.628194][T19041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.634114][T19041] RIP: 0033:0x7f6a6b79de99 [ 860.638551][T19041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.658182][T19041] RSP: 002b:00007f6a6c6df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.666626][T19041] RAX: ffffffffffffffda RBX: 00007f6a6ba25fa0 RCX: 00007f6a6b79de99 [ 860.674625][T19041] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 860.682637][T19041] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 860.690646][T19041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.698638][T19041] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 860.706649][T19041] [ 860.739683][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.746837][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.780325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 860.801984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 860.815486][T19045] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.4957'. [ 860.869539][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.876769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.929644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 860.976283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 860.991847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 861.009957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 861.027610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 861.076667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 861.087954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 861.098332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 861.107237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 861.116379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 861.129306][T19052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4959'. [ 861.143094][T18838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 861.191411][T18838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 861.211123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 861.229824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 861.472066][T19063] device syzkaller0 entered promiscuous mode [ 861.491637][T19061] netlink: 'syz.2.4961': attribute type 2 has an invalid length. [ 861.511091][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'. [ 861.771988][T19077] netlink: 'syz.1.4965': attribute type 29 has an invalid length. [ 861.830338][T19077] netlink: 'syz.1.4965': attribute type 29 has an invalid length. [ 861.902805][T19086] netlink: 'syz.1.4965': attribute type 29 has an invalid length. [ 862.486832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.549272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.598962][T18838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.014586][T19107] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.4970'. [ 864.138498][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 864.172330][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 864.247536][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 864.269886][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 864.317806][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 864.351690][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.386357][T18838] device veth0_vlan entered promiscuous mode [ 864.423912][T18838] device veth1_vlan entered promiscuous mode [ 864.508647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 864.537381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 864.573491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 864.612516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 864.662221][T18838] device veth0_macvtap entered promiscuous mode [ 864.695431][T18838] device veth1_macvtap entered promiscuous mode [ 864.768200][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.807696][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.820040][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.837222][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.848726][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.866507][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.885392][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.906687][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.920667][T18838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.961829][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.001735][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.029606][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.056491][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.098968][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.116788][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.134405][T19128] FAULT_INJECTION: forcing a failure. [ 865.134405][T19128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.147736][T18838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.158716][T19128] CPU: 0 PID: 19128 Comm: syz.3.4971 Not tainted syzkaller #0 [ 865.166246][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.166661][T18838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.176322][T19128] Call Trace: [ 865.176332][T19128] [ 865.176340][T19128] dump_stack_lvl+0x188/0x24e [ 865.176374][T19128] ? show_regs_print_info+0x12/0x12 [ 865.202394][T19128] ? load_image+0x410/0x410 [ 865.206922][T19128] ? __might_fault+0xa6/0x120 [ 865.211623][T19128] should_fail_ex+0x390/0x4c0 [ 865.216328][T19128] copyin+0x1b/0x120 [ 865.220256][T19128] _copy_from_iter+0x559/0x1130 [ 865.225131][T19128] ? copyout_mc+0x110/0x110 [ 865.229648][T19128] ? __virt_addr_valid+0x188/0x540 [ 865.234785][T19128] ? __virt_addr_valid+0x188/0x540 [ 865.239950][T19128] ? __virt_addr_valid+0x467/0x540 [ 865.245084][T19128] ? __phys_addr_symbol+0x2b/0x70 [ 865.250136][T19128] ? __check_object_size+0x4f6/0xa70 [ 865.255438][T19128] netlink_sendmsg+0x755/0xbd0 [ 865.260224][T19128] ? netlink_getsockopt+0x550/0x550 [ 865.265444][T19128] ? apparmor_socket_sendmsg+0x8a/0x330 [ 865.271010][T19128] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 865.276311][T19128] ? security_socket_sendmsg+0x7c/0xa0 [ 865.281797][T19128] ? netlink_getsockopt+0x550/0x550 [ 865.287029][T19128] ____sys_sendmsg+0x5ed/0x9a0 [ 865.291826][T19128] ? __sys_sendmsg_sock+0x30/0x30 [ 865.296872][T19128] ? __import_iovec+0x306/0x510 [ 865.301750][T19128] ? import_iovec+0x6f/0xa0 [ 865.306279][T19128] ___sys_sendmsg+0x2a2/0x360 [ 865.310983][T19128] ? __sys_sendmsg+0x2a0/0x2a0 [ 865.315779][T19128] ? __lock_acquire+0x7c40/0x7c40 [ 865.320852][T19128] __se_sys_sendmsg+0x1c3/0x2b0 [ 865.325738][T19128] ? ct_nmi_exit+0x145/0x1c0 [ 865.330346][T19128] ? __x64_sys_sendmsg+0x80/0x80 [ 865.335307][T19128] ? lockdep_hardirqs_on+0x94/0x140 [ 865.340534][T19128] do_syscall_64+0x4c/0xa0 [ 865.344979][T19128] ? clear_bhb_loop+0x60/0xb0 [ 865.349683][T19128] ? clear_bhb_loop+0x60/0xb0 [ 865.354385][T19128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.360296][T19128] RIP: 0033:0x7fa39659de99 [ 865.364724][T19128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.384347][T19128] RSP: 002b:00007fa39738b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.392768][T19128] RAX: ffffffffffffffda RBX: 00007fa396825fa0 RCX: 00007fa39659de99 [ 865.400752][T19128] RDX: 000000000000c000 RSI: 0000200000003980 RDI: 0000000000000003 [ 865.408733][T19128] RBP: 00007fa39738b090 R08: 0000000000000000 R09: 0000000000000000 [ 865.416714][T19128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.424694][T19128] R13: 00007fa396826038 R14: 00007fa396825fa0 R15: 00007ffcfd0a1618 [ 865.432699][T19128] [ 865.459199][T18838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.469672][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 865.489632][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 865.498034][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 865.529728][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 865.570803][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 865.598692][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.621230][T18838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.636945][T18838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.654096][T18838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.675533][T18838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.821001][T19133] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4973'. [ 865.887282][ T8370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.927574][ T8370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.983107][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 866.018654][T19142] device syzkaller0 entered promiscuous mode [ 866.036547][ T8370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.054860][ T8370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.341537][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 866.588887][T19162] -: renamed from syzkaller0 [ 866.640952][T19167] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.4982'. [ 868.006815][T19212] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4989'. [ 869.915838][T19241] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.4994'. [ 870.012301][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.018786][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.272232][T19258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5002'. [ 870.736213][T19274] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5004'. [ 870.999083][T19283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.006480][T19283] IPv6: NLM_F_CREATE should be set when creating new route [ 871.276907][T19287] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5009'. [ 871.796640][T19293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5011'. [ 871.971134][T19292] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5011'. [ 872.005177][T19292] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 872.734292][T19326] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5019'. [ 872.954561][T19333] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.618635][T19354] FAULT_INJECTION: forcing a failure. [ 873.618635][T19354] name failslab, interval 1, probability 0, space 0, times 0 [ 873.668191][T19354] CPU: 0 PID: 19354 Comm: syz.2.5033 Not tainted syzkaller #0 [ 873.675730][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.685829][T19354] Call Trace: [ 873.689159][T19354] [ 873.692141][T19354] dump_stack_lvl+0x188/0x24e [ 873.696887][T19354] ? show_regs_print_info+0x12/0x12 [ 873.702153][T19354] ? load_image+0x410/0x410 [ 873.706715][T19354] ? __might_sleep+0xd0/0xd0 [ 873.711384][T19354] ? __lock_acquire+0x7c40/0x7c40 [ 873.716469][T19354] should_fail_ex+0x390/0x4c0 [ 873.721387][T19354] should_failslab+0x5/0x20 [ 873.725937][T19354] slab_pre_alloc_hook+0x59/0x300 [ 873.731029][T19354] ? tomoyo_encode+0x28a/0x550 [ 873.735851][T19354] __kmem_cache_alloc_node+0x4f/0x270 [ 873.741285][T19354] ? tomoyo_encode+0x28a/0x550 [ 873.746104][T19354] __kmalloc+0xa3/0x240 [ 873.750325][T19354] tomoyo_encode+0x28a/0x550 [ 873.754974][T19354] tomoyo_realpath_from_path+0x578/0x5c0 [ 873.760675][T19354] ? tomoyo_domain+0xd2/0x120 [ 873.765408][T19354] ? tomoyo_path_number_perm+0x205/0x650 [ 873.771088][T19354] tomoyo_path_number_perm+0x22f/0x650 [ 873.776617][T19354] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 873.782147][T19354] ? ksys_write+0x1ce/0x260 [ 873.786721][T19354] ? common_file_perm+0x171/0x1c0 [ 873.791914][T19354] ? __fget_files+0x28/0x460 [ 873.796596][T19354] security_file_ioctl+0x6c/0xa0 [ 873.801595][T19354] __se_sys_ioctl+0x48/0x170 [ 873.806242][T19354] do_syscall_64+0x4c/0xa0 [ 873.810709][T19354] ? clear_bhb_loop+0x60/0xb0 [ 873.815431][T19354] ? clear_bhb_loop+0x60/0xb0 [ 873.820160][T19354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.826101][T19354] RIP: 0033:0x7f058f99de99 [ 873.830563][T19354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.850218][T19354] RSP: 002b:00007f0590844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.858678][T19354] RAX: ffffffffffffffda RBX: 00007f058fc25fa0 RCX: 00007f058f99de99 [ 873.866689][T19354] RDX: 0000200000000080 RSI: 000000000000541b RDI: 0000000000000005 [ 873.874692][T19354] RBP: 00007f0590844090 R08: 0000000000000000 R09: 0000000000000000 [ 873.882691][T19354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.890697][T19354] R13: 00007f058fc26038 R14: 00007f058fc25fa0 R15: 00007ffc55b79088 [ 873.898737][T19354] [ 874.009178][T19354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.353601][T19361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5035'. [ 875.181225][T19389] netlink: 'syz.0.5045': attribute type 3 has an invalid length. [ 875.210969][T19389] netlink: 'syz.0.5045': attribute type 1 has an invalid length. [ 875.277722][T19389] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.5045'. [ 876.138194][T19417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5054'. [ 876.211079][T19417] bond0: (slave bond_slave_0): Releasing backup interface [ 876.281274][T19417] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 876.884763][T19437] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5062'. [ 877.304209][T19444] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5066'. [ 878.138185][T19474] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5076'. [ 878.179992][T19474] device vlan1 entered promiscuous mode [ 878.348666][T19479] FAULT_INJECTION: forcing a failure. [ 878.348666][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 878.367198][T19479] CPU: 0 PID: 19479 Comm: syz.1.5078 Not tainted syzkaller #0 [ 878.374713][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.384797][T19479] Call Trace: [ 878.388103][T19479] [ 878.391064][T19479] dump_stack_lvl+0x188/0x24e [ 878.395788][T19479] ? show_regs_print_info+0x12/0x12 [ 878.401020][T19479] ? load_image+0x410/0x410 [ 878.405580][T19479] ? kasan_set_track+0x60/0x70 [ 878.410398][T19479] ? ip_options_get+0x4c/0x4e0 [ 878.415205][T19479] ? raw_sendmsg+0x57c/0x1940 [ 878.419934][T19479] should_fail_ex+0x390/0x4c0 [ 878.424667][T19479] should_failslab+0x5/0x20 [ 878.429197][T19479] slab_pre_alloc_hook+0x59/0x300 [ 878.434268][T19479] kmem_cache_alloc+0x56/0x2f0 [ 878.439066][T19479] ? dst_alloc+0x101/0x160 [ 878.443535][T19479] dst_alloc+0x101/0x160 [ 878.447826][T19479] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 878.454016][T19479] ? ip_route_output_key_hash+0x139/0x330 [ 878.459780][T19479] ip_route_output_key_hash+0x1ef/0x330 [ 878.465354][T19479] ? kfree+0x30/0x1a0 [ 878.469363][T19479] ? ip_route_input_rcu+0x30a0/0x30a0 [ 878.474772][T19479] ? ip_cmsg_send+0x9a5/0xa50 [ 878.479468][T19479] ip_route_output_flow+0x26/0x150 [ 878.484614][T19479] ? security_sk_classify_flow+0x77/0x90 [ 878.490267][T19479] raw_sendmsg+0xf7c/0x1940 [ 878.494803][T19479] ? compat_raw_ioctl+0x60/0x60 [ 878.499677][T19479] ? aa_sk_perm+0x81f/0x950 [ 878.504197][T19479] ? __might_fault+0xa6/0x120 [ 878.508894][T19479] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 878.515328][T19479] ? aa_sock_msg_perm+0x94/0x150 [ 878.520283][T19479] ? sock_rps_record_flow+0x19/0x3f0 [ 878.525590][T19479] ? inet_sendmsg+0x7a/0x2a0 [ 878.530194][T19479] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 878.535487][T19479] ? inet_send_prepare+0x250/0x250 [ 878.540646][T19479] ____sys_sendmsg+0x5ed/0x9a0 [ 878.545439][T19479] ? __lock_acquire+0x7c40/0x7c40 [ 878.550540][T19479] ? __sys_sendmsg_sock+0x30/0x30 [ 878.555582][T19479] ? __import_iovec+0x306/0x510 [ 878.560474][T19479] ? import_iovec+0x6f/0xa0 [ 878.565000][T19479] ___sys_sendmsg+0x2a2/0x360 [ 878.569703][T19479] ? __sys_sendmsg+0x2a0/0x2a0 [ 878.574514][T19479] ? __lock_acquire+0x7c40/0x7c40 [ 878.579591][T19479] __se_sys_sendmsg+0x1c3/0x2b0 [ 878.584465][T19479] ? __x64_sys_sendmsg+0x80/0x80 [ 878.589436][T19479] ? lockdep_hardirqs_on+0x94/0x140 [ 878.594648][T19479] do_syscall_64+0x4c/0xa0 [ 878.599083][T19479] ? clear_bhb_loop+0x60/0xb0 [ 878.603781][T19479] ? clear_bhb_loop+0x60/0xb0 [ 878.608482][T19479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.614415][T19479] RIP: 0033:0x7f084159de99 [ 878.618840][T19479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.638457][T19479] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.646879][T19479] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 878.654857][T19479] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 878.662840][T19479] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 878.670825][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.678828][T19479] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 878.686830][T19479] [ 879.039049][T19489] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.5082'. [ 879.898787][T19519] netlink: 'syz.1.5094': attribute type 21 has an invalid length. [ 879.967794][T19519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5094'. [ 880.106468][T19527] FAULT_INJECTION: forcing a failure. [ 880.106468][T19527] name failslab, interval 1, probability 0, space 0, times 0 [ 880.200670][T19527] CPU: 1 PID: 19527 Comm: syz.0.5096 Not tainted syzkaller #0 [ 880.208199][T19527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.218283][T19527] Call Trace: [ 880.221591][T19527] [ 880.224550][T19527] dump_stack_lvl+0x188/0x24e [ 880.229285][T19527] ? show_regs_print_info+0x12/0x12 [ 880.234522][T19527] ? load_image+0x410/0x410 [ 880.239067][T19527] ? __might_sleep+0xd0/0xd0 [ 880.243711][T19527] ? __lock_acquire+0x7c40/0x7c40 [ 880.248774][T19527] ? mark_lock+0x94/0x320 [ 880.253147][T19527] should_fail_ex+0x390/0x4c0 [ 880.257872][T19527] should_failslab+0x5/0x20 [ 880.262422][T19527] slab_pre_alloc_hook+0x59/0x300 [ 880.267491][T19527] kmem_cache_alloc_node+0x5a/0x310 [ 880.272724][T19527] ? __alloc_skb+0xf9/0x7d0 [ 880.277271][T19527] __alloc_skb+0xf9/0x7d0 [ 880.281653][T19527] pep_ioctl+0x1a7/0x750 [ 880.286014][T19527] ? pn_socket_ioctl+0x9c/0x350 [ 880.290902][T19527] sock_do_ioctl+0xfb/0x320 [ 880.295460][T19527] ? sock_show_fdinfo+0xb0/0xb0 [ 880.300377][T19527] sock_ioctl+0x48a/0x700 [ 880.304769][T19527] ? sock_poll+0x420/0x420 [ 880.309234][T19527] ? bpf_lsm_file_ioctl+0x5/0x10 [ 880.314221][T19527] ? security_file_ioctl+0x7c/0xa0 [ 880.319369][T19527] ? sock_poll+0x420/0x420 [ 880.323834][T19527] __se_sys_ioctl+0xfa/0x170 [ 880.328467][T19527] do_syscall_64+0x4c/0xa0 [ 880.332916][T19527] ? clear_bhb_loop+0x60/0xb0 [ 880.337625][T19527] ? clear_bhb_loop+0x60/0xb0 [ 880.342334][T19527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.348280][T19527] RIP: 0033:0x7f6a6b79de99 [ 880.352716][T19527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.372358][T19527] RSP: 002b:00007f6a6c6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.380809][T19527] RAX: ffffffffffffffda RBX: 00007f6a6ba25fa0 RCX: 00007f6a6b79de99 [ 880.388811][T19527] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 880.396813][T19527] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 880.404818][T19527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.412819][T19527] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 880.420842][T19527] [ 880.810126][T19539] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5100'. [ 880.946334][T19546] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5104'. [ 880.986625][T19543] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5102'. [ 883.986876][T19605] FAULT_INJECTION: forcing a failure. [ 883.986876][T19605] name failslab, interval 1, probability 0, space 0, times 0 [ 884.008586][T19605] CPU: 1 PID: 19605 Comm: syz.1.5124 Not tainted syzkaller #0 [ 884.016101][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.026188][T19605] Call Trace: [ 884.029495][T19605] [ 884.032448][T19605] dump_stack_lvl+0x188/0x24e [ 884.037163][T19605] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.043369][T19605] ? show_regs_print_info+0x12/0x12 [ 884.048609][T19605] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.054813][T19605] should_fail_ex+0x390/0x4c0 [ 884.059530][T19605] should_failslab+0x5/0x20 [ 884.064099][T19605] slab_pre_alloc_hook+0x59/0x300 [ 884.069162][T19605] kmem_cache_alloc_node+0x5a/0x310 [ 884.074398][T19605] ? __alloc_skb+0xf9/0x7d0 [ 884.078961][T19605] __alloc_skb+0xf9/0x7d0 [ 884.083336][T19605] __ip6_append_data+0x2b5e/0x3e30 [ 884.088505][T19605] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 884.093384][T19605] ? ip6_setup_cork+0xff0/0xff0 [ 884.098271][T19605] ? ip6_setup_cork+0xa4a/0xff0 [ 884.103149][T19605] ip6_append_data+0x1c8/0x3d0 [ 884.107949][T19605] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 884.112820][T19605] l2tp_ip6_sendmsg+0x11ea/0x1650 [ 884.117870][T19605] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 884.123186][T19605] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 884.129631][T19605] ? sock_rps_record_flow+0x19/0x3f0 [ 884.134941][T19605] ? inet_sendmsg+0x7a/0x2a0 [ 884.139547][T19605] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 884.144843][T19605] ? inet_send_prepare+0x250/0x250 [ 884.149978][T19605] ____sys_sendmsg+0x5ed/0x9a0 [ 884.154769][T19605] ? __sys_sendmsg_sock+0x30/0x30 [ 884.159814][T19605] ? __import_iovec+0x306/0x510 [ 884.164689][T19605] ? import_iovec+0x6f/0xa0 [ 884.169216][T19605] ___sys_sendmsg+0x2a2/0x360 [ 884.173916][T19605] ? __sys_sendmsg+0x2a0/0x2a0 [ 884.178716][T19605] ? __lock_acquire+0x7c40/0x7c40 [ 884.183779][T19605] __se_sys_sendmsg+0x1c3/0x2b0 [ 884.188647][T19605] ? perf_trace_preemptirq_template+0x268/0x320 [ 884.194918][T19605] ? __x64_sys_sendmsg+0x80/0x80 [ 884.199892][T19605] ? lockdep_hardirqs_on+0x94/0x140 [ 884.205113][T19605] do_syscall_64+0x4c/0xa0 [ 884.209543][T19605] ? clear_bhb_loop+0x60/0xb0 [ 884.214240][T19605] ? clear_bhb_loop+0x60/0xb0 [ 884.218931][T19605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.224837][T19605] RIP: 0033:0x7f084159de99 [ 884.229266][T19605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.248879][T19605] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.257305][T19605] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 884.265303][T19605] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 884.273295][T19605] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 884.281281][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.289263][T19605] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 884.297267][T19605] [ 885.198634][T19623] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5129'. [ 885.269130][T19623] device hsr_slave_0 left promiscuous mode [ 885.335983][T19623] device hsr_slave_1 left promiscuous mode [ 885.691156][T19636] : port 1(ip6gretap0) entered blocking state [ 885.697470][T19636] : port 1(ip6gretap0) entered disabled state [ 885.721477][T19636] device ip6gretap0 entered promiscuous mode [ 885.795543][T19638] device ip6gretap0 left promiscuous mode [ 885.838045][T19638] : port 1(ip6gretap0) entered disabled state [ 886.050208][T19640] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5134'. [ 886.085502][T19641] delete_channel: no stack [ 886.272883][T19653] netlink: 'syz.0.5136': attribute type 3 has an invalid length. [ 886.288389][T19650] FAULT_INJECTION: forcing a failure. [ 886.288389][T19650] name failslab, interval 1, probability 0, space 0, times 0 [ 886.333511][T19653] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5136'. [ 886.341361][T19650] CPU: 0 PID: 19650 Comm: syz.3.5138 Not tainted syzkaller #0 [ 886.350403][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.360471][T19650] Call Trace: [ 886.363756][T19650] [ 886.366696][T19650] dump_stack_lvl+0x188/0x24e [ 886.371398][T19650] ? show_regs_print_info+0x12/0x12 [ 886.376617][T19650] ? load_image+0x410/0x410 [ 886.381136][T19650] ? __might_sleep+0xd0/0xd0 [ 886.385740][T19650] ? __lock_acquire+0x7c40/0x7c40 [ 886.390786][T19650] should_fail_ex+0x390/0x4c0 [ 886.395483][T19650] should_failslab+0x5/0x20 [ 886.400001][T19650] slab_pre_alloc_hook+0x59/0x300 [ 886.405059][T19650] kmem_cache_alloc_node+0x5a/0x310 [ 886.410272][T19650] ? __alloc_skb+0xf9/0x7d0 [ 886.414800][T19650] __alloc_skb+0xf9/0x7d0 [ 886.419170][T19650] netlink_sendmsg+0x654/0xbd0 [ 886.423977][T19650] ? netlink_getsockopt+0x550/0x550 [ 886.429196][T19650] ? apparmor_socket_sendmsg+0x8a/0x330 [ 886.434773][T19650] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 886.440073][T19650] ? security_socket_sendmsg+0x7c/0xa0 [ 886.445546][T19650] ? netlink_getsockopt+0x550/0x550 [ 886.450808][T19650] ____sys_sendmsg+0x5ed/0x9a0 [ 886.455607][T19650] ? __sys_sendmsg_sock+0x30/0x30 [ 886.460650][T19650] ? __import_iovec+0x306/0x510 [ 886.465525][T19650] ? import_iovec+0x6f/0xa0 [ 886.470066][T19650] ___sys_sendmsg+0x2a2/0x360 [ 886.474762][T19650] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 886.480939][T19650] ? __sys_sendmsg+0x2a0/0x2a0 [ 886.485736][T19650] ? __lock_acquire+0x7c40/0x7c40 [ 886.490790][T19650] __se_sys_sendmsg+0x1c3/0x2b0 [ 886.495654][T19650] ? ct_nmi_exit+0x145/0x1c0 [ 886.500250][T19650] ? __x64_sys_sendmsg+0x80/0x80 [ 886.505213][T19650] ? lockdep_hardirqs_on+0x94/0x140 [ 886.510421][T19650] do_syscall_64+0x4c/0xa0 [ 886.514851][T19650] ? clear_bhb_loop+0x60/0xb0 [ 886.519540][T19650] ? clear_bhb_loop+0x60/0xb0 [ 886.524246][T19650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.530155][T19650] RIP: 0033:0x7fa39659de99 [ 886.534580][T19650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.554196][T19650] RSP: 002b:00007fa39738b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.562619][T19650] RAX: ffffffffffffffda RBX: 00007fa396825fa0 RCX: 00007fa39659de99 [ 886.570598][T19650] RDX: 0000000008040880 RSI: 0000200000000080 RDI: 0000000000000007 [ 886.578587][T19650] RBP: 00007fa39738b090 R08: 0000000000000000 R09: 0000000000000000 [ 886.586563][T19650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.594541][T19650] R13: 00007fa396826038 R14: 00007fa396825fa0 R15: 00007ffcfd0a1618 [ 886.602539][T19650] [ 886.988377][T19665] netlink: 'syz.3.5141': attribute type 2 has an invalid length. [ 887.729023][T19688] : port 1(ip6gretap0) entered blocking state [ 887.757100][T19688] : port 1(ip6gretap0) entered disabled state [ 887.792034][T19688] device ip6gretap0 entered promiscuous mode [ 887.885043][T19687] netlink: 'syz.1.5146': attribute type 2 has an invalid length. [ 887.918606][T19683] device ip6gretap0 left promiscuous mode [ 887.935005][T19683] : port 1(ip6gretap0) entered disabled state [ 890.488666][T19686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5149'. [ 891.376170][T19725] netlink: 'syz.1.5160': attribute type 15 has an invalid length. [ 891.401939][T19727] FAULT_INJECTION: forcing a failure. [ 891.401939][T19727] name failslab, interval 1, probability 0, space 0, times 0 [ 891.414124][T19725] netlink: 'syz.1.5160': attribute type 7 has an invalid length. [ 891.480780][T19727] CPU: 0 PID: 19727 Comm: syz.4.5163 Not tainted syzkaller #0 [ 891.488317][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.498400][T19727] Call Trace: [ 891.501693][T19727] [ 891.504639][T19727] dump_stack_lvl+0x188/0x24e [ 891.509342][T19727] ? show_regs_print_info+0x12/0x12 [ 891.514558][T19727] ? load_image+0x410/0x410 [ 891.519073][T19727] ? __might_sleep+0xd0/0xd0 [ 891.523676][T19727] ? __lock_acquire+0x7c40/0x7c40 [ 891.528715][T19727] should_fail_ex+0x390/0x4c0 [ 891.533409][T19727] should_failslab+0x5/0x20 [ 891.537919][T19727] slab_pre_alloc_hook+0x59/0x300 [ 891.542984][T19727] ? sk_prot_alloc+0xe7/0x210 [ 891.547671][T19727] __kmem_cache_alloc_node+0x4f/0x270 [ 891.553052][T19727] ? sk_prot_alloc+0xe7/0x210 [ 891.557735][T19727] __kmalloc+0xa3/0x240 [ 891.561933][T19727] sk_prot_alloc+0xe7/0x210 [ 891.566460][T19727] ? sk_alloc+0x20/0x330 [ 891.570715][T19727] sk_alloc+0x36/0x330 [ 891.574789][T19727] ? bpf_ctx_init+0x154/0x190 [ 891.579476][T19727] bpf_prog_test_run_skb+0x36d/0x18e0 [ 891.584854][T19727] ? __fget_files+0x28/0x460 [ 891.589461][T19727] ? __fget_files+0x3fc/0x460 [ 891.594164][T19727] ? cpu_online+0xa0/0xa0 [ 891.598516][T19727] bpf_prog_test_run+0x31c/0x390 [ 891.603477][T19727] __sys_bpf+0x62b/0x780 [ 891.607735][T19727] ? bpf_link_show_fdinfo+0x380/0x380 [ 891.613134][T19727] ? lock_chain_count+0x20/0x20 [ 891.618034][T19727] __x64_sys_bpf+0x78/0x90 [ 891.622466][T19727] do_syscall_64+0x4c/0xa0 [ 891.626918][T19727] ? clear_bhb_loop+0x60/0xb0 [ 891.631613][T19727] ? clear_bhb_loop+0x60/0xb0 [ 891.636312][T19727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.642230][T19727] RIP: 0033:0x7fc05e39de99 [ 891.646672][T19727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.666286][T19727] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.674708][T19727] RAX: ffffffffffffffda RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 891.682687][T19727] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 891.690668][T19727] RBP: 00007fc05f2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 891.698658][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.706642][T19727] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 891.714635][T19727] [ 891.905092][T19740] netlink: 'syz.0.5166': attribute type 10 has an invalid length. [ 891.922505][T19740] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5166'. [ 892.428054][T19762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.435470][T19762] IPv6: NLM_F_CREATE should be set when creating new route [ 893.423818][T19809] netlink: 'syz.1.5190': attribute type 10 has an invalid length. [ 893.762905][T19821] netlink: 'syz.1.5193': attribute type 21 has an invalid length. [ 893.783567][T19821] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5193'. [ 893.796880][T19821] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5193'. [ 894.045161][T19836] netlink: 'syz.3.5196': attribute type 4 has an invalid length. [ 894.938833][T19876] netlink: 'syz.3.5214': attribute type 10 has an invalid length. [ 895.806773][T19917] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 895.813667][T19917] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 899.606180][T19969] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5241'. [ 899.707786][T19972] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5242'. [ 899.782708][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5242'. [ 899.825135][T19972] tap0: tun_chr_ioctl cmd 1074025677 [ 899.838603][T19972] tap0: linktype set to 823 [ 899.928376][T19983] netlink: 'syz.2.5246': attribute type 29 has an invalid length. [ 899.950679][T19983] netlink: 'syz.2.5246': attribute type 29 has an invalid length. [ 899.970529][T19983] netlink: 'syz.2.5246': attribute type 29 has an invalid length. [ 902.170988][T20046] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5255'. [ 902.246152][T20046] netlink: 'syz.1.5255': attribute type 2 has an invalid length. [ 902.428629][T20054] FAULT_INJECTION: forcing a failure. [ 902.428629][T20054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.466841][T20052] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5258'. [ 902.485022][T20054] CPU: 0 PID: 20054 Comm: syz.2.5259 Not tainted syzkaller #0 [ 902.492529][T20054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.502613][T20054] Call Trace: [ 902.505914][T20054] [ 902.508861][T20054] dump_stack_lvl+0x188/0x24e [ 902.513598][T20054] ? show_regs_print_info+0x12/0x12 [ 902.518832][T20054] ? load_image+0x410/0x410 [ 902.523387][T20054] ? __lock_acquire+0x7c40/0x7c40 [ 902.528458][T20054] should_fail_ex+0x390/0x4c0 [ 902.533194][T20054] _copy_to_user+0x2c/0x130 [ 902.537735][T20054] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 902.543407][T20054] ? sock_gen_cookie+0x60/0x60 [ 902.548222][T20054] ? sock_gen_cookie+0x60/0x60 [ 902.553025][T20054] bpf_prog_test_run+0x31c/0x390 [ 902.558025][T20054] __sys_bpf+0x62b/0x780 [ 902.562309][T20054] ? bpf_link_show_fdinfo+0x380/0x380 [ 902.567723][T20054] ? lock_chain_count+0x20/0x20 [ 902.572620][T20054] __x64_sys_bpf+0x78/0x90 [ 902.577077][T20054] do_syscall_64+0x4c/0xa0 [ 902.581539][T20054] ? clear_bhb_loop+0x60/0xb0 [ 902.586244][T20054] ? clear_bhb_loop+0x60/0xb0 [ 902.590953][T20054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.596871][T20054] RIP: 0033:0x7f058f99de99 [ 902.601310][T20054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.620950][T20054] RSP: 002b:00007f0590844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.629387][T20054] RAX: ffffffffffffffda RBX: 00007f058fc25fa0 RCX: 00007f058f99de99 [ 902.637391][T20054] RDX: 000000000000000c RSI: 0000200000000340 RDI: 000000000000000a [ 902.645407][T20054] RBP: 00007f0590844090 R08: 0000000000000000 R09: 0000000000000000 [ 902.653421][T20054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.661507][T20054] R13: 00007f058fc26038 R14: 00007f058fc25fa0 R15: 00007ffc55b79088 [ 902.669543][T20054] [ 903.222208][T20068] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 903.249304][T20068] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 903.280083][T20067] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 903.296432][T20072] netlink: 'syz.3.5267': attribute type 3 has an invalid length. [ 903.318766][T20073] device syzkaller0 entered promiscuous mode [ 903.335560][T20072] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5267'. [ 903.356998][T20074] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 903.694787][T20082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5269'. [ 904.047004][T20096] -: renamed from syzkaller0 [ 904.246011][T20102] FAULT_INJECTION: forcing a failure. [ 904.246011][T20102] name failslab, interval 1, probability 0, space 0, times 0 [ 904.265479][T20102] CPU: 0 PID: 20102 Comm: syz.1.5275 Not tainted syzkaller #0 [ 904.272982][T20102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.283080][T20102] Call Trace: [ 904.286377][T20102] [ 904.289329][T20102] dump_stack_lvl+0x188/0x24e [ 904.294064][T20102] ? show_regs_print_info+0x12/0x12 [ 904.299293][T20102] ? load_image+0x410/0x410 [ 904.303836][T20102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 904.309858][T20102] ? __lock_acquire+0x7c40/0x7c40 [ 904.314921][T20102] should_fail_ex+0x390/0x4c0 [ 904.319631][T20102] should_failslab+0x5/0x20 [ 904.324172][T20102] slab_pre_alloc_hook+0x59/0x300 [ 904.329239][T20102] kmem_cache_alloc+0x56/0x2f0 [ 904.334038][T20102] ? __build_skb+0x27/0x3b0 [ 904.338577][T20102] __build_skb+0x27/0x3b0 [ 904.342927][T20102] ? build_skb+0x14/0x230 [ 904.347268][T20102] build_skb+0x1e/0x230 [ 904.351438][T20102] bpf_prog_test_run_skb+0x38d/0x18e0 [ 904.356818][T20102] ? __fget_files+0x28/0x460 [ 904.361425][T20102] ? __fget_files+0x3fc/0x460 [ 904.366122][T20102] ? cpu_online+0xa0/0xa0 [ 904.370466][T20102] bpf_prog_test_run+0x31c/0x390 [ 904.375423][T20102] __sys_bpf+0x62b/0x780 [ 904.379682][T20102] ? bpf_link_show_fdinfo+0x380/0x380 [ 904.385076][T20102] ? lock_chain_count+0x20/0x20 [ 904.389943][T20102] __x64_sys_bpf+0x78/0x90 [ 904.394369][T20102] do_syscall_64+0x4c/0xa0 [ 904.398801][T20102] ? clear_bhb_loop+0x60/0xb0 [ 904.403496][T20102] ? clear_bhb_loop+0x60/0xb0 [ 904.408190][T20102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.414094][T20102] RIP: 0033:0x7f084159de99 [ 904.418517][T20102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.438165][T20102] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 904.446604][T20102] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 904.454599][T20102] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 904.462580][T20102] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 904.470560][T20102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.478537][T20102] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 904.486523][T20102] [ 904.733034][T20109] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5278'. [ 904.797419][T20112] netlink: 'syz.3.5279': attribute type 2 has an invalid length. [ 904.825977][T20112] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.5279'. [ 905.361908][T20136] validate_nla: 1 callbacks suppressed [ 905.361951][T20136] netlink: 'syz.0.5285': attribute type 4 has an invalid length. [ 905.450594][T20136] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5285'. [ 906.242894][T20160] netlink: 'syz.0.5294': attribute type 29 has an invalid length. [ 906.265446][T20160] netlink: 'syz.0.5294': attribute type 29 has an invalid length. [ 906.387531][T20162] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5296'. [ 906.419427][T20163] netlink: 'syz.0.5294': attribute type 29 has an invalid length. [ 906.482673][T20163] netlink: 'syz.0.5294': attribute type 29 has an invalid length. [ 906.636108][T20166] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 907.836610][T20174] FAULT_INJECTION: forcing a failure. [ 907.836610][T20174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.887363][T20174] CPU: 0 PID: 20174 Comm: syz.0.5299 Not tainted syzkaller #0 [ 907.894906][T20174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.904988][T20174] Call Trace: [ 907.908309][T20174] [ 907.911274][T20174] dump_stack_lvl+0x188/0x24e [ 907.916004][T20174] ? show_regs_print_info+0x12/0x12 [ 907.921257][T20174] ? load_image+0x410/0x410 [ 907.925798][T20174] ? __might_fault+0xa6/0x120 [ 907.930512][T20174] should_fail_ex+0x390/0x4c0 [ 907.935235][T20174] copyin+0x1b/0x120 [ 907.939171][T20174] _copy_from_iter+0x447/0x1130 [ 907.944073][T20174] ? copyout_mc+0x110/0x110 [ 907.948618][T20174] ? __virt_addr_valid+0x188/0x540 [ 907.953768][T20174] ? __virt_addr_valid+0x188/0x540 [ 907.958919][T20174] ? __virt_addr_valid+0x467/0x540 [ 907.964082][T20174] ? __phys_addr_symbol+0x2b/0x70 [ 907.969150][T20174] ? __check_object_size+0x4f6/0xa70 [ 907.974477][T20174] netlink_sendmsg+0x755/0xbd0 [ 907.979304][T20174] ? netlink_getsockopt+0x550/0x550 [ 907.984554][T20174] ? apparmor_socket_sendmsg+0x8a/0x330 [ 907.990167][T20174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 907.995577][T20174] ? security_socket_sendmsg+0x7c/0xa0 [ 908.001082][T20174] ? netlink_getsockopt+0x550/0x550 [ 908.006331][T20174] ____sys_sendmsg+0x5ed/0x9a0 [ 908.011212][T20174] ? __sys_sendmsg_sock+0x30/0x30 [ 908.016285][T20174] ? __import_iovec+0x306/0x510 [ 908.021188][T20174] ? import_iovec+0x6f/0xa0 [ 908.025734][T20174] ___sys_sendmsg+0x2a2/0x360 [ 908.030463][T20174] ? __sys_sendmsg+0x2a0/0x2a0 [ 908.035289][T20174] ? __lock_acquire+0x7c40/0x7c40 [ 908.040381][T20174] __se_sys_sendmsg+0x1c3/0x2b0 [ 908.045267][T20174] ? ct_nmi_exit+0x145/0x1c0 [ 908.049893][T20174] ? __x64_sys_sendmsg+0x80/0x80 [ 908.054903][T20174] ? lockdep_hardirqs_on+0x94/0x140 [ 908.060130][T20174] do_syscall_64+0x4c/0xa0 [ 908.064609][T20174] ? clear_bhb_loop+0x60/0xb0 [ 908.069322][T20174] ? clear_bhb_loop+0x60/0xb0 [ 908.074032][T20174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.079960][T20174] RIP: 0033:0x7f6a6b79de99 [ 908.084403][T20174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.104050][T20174] RSP: 002b:00007f6a6c6df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.112492][T20174] RAX: ffffffffffffffda RBX: 00007f6a6ba25fa0 RCX: 00007f6a6b79de99 [ 908.120490][T20174] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 908.128483][T20174] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 908.136475][T20174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.144477][T20174] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 908.152507][T20174] [ 909.801265][T20190] tap0: tun_chr_ioctl cmd 1074025677 [ 909.806916][T20190] tap0: linktype set to 823 [ 909.971950][T20197] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5309'. [ 912.698945][T20193] netlink: 22879 bytes leftover after parsing attributes in process `syz.4.5305'. [ 912.708552][T20198] netlink: 'syz.0.5308': attribute type 15 has an invalid length. [ 912.719168][T20198] netlink: 'syz.0.5308': attribute type 7 has an invalid length. [ 913.058013][T20209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5313'. [ 913.537403][T20233] FAULT_INJECTION: forcing a failure. [ 913.537403][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 913.574055][T20233] CPU: 1 PID: 20233 Comm: syz.3.5320 Not tainted syzkaller #0 [ 913.581573][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.591643][T20233] Call Trace: [ 913.594938][T20233] [ 913.597906][T20233] dump_stack_lvl+0x188/0x24e [ 913.602606][T20233] ? show_regs_print_info+0x12/0x12 [ 913.607825][T20233] ? load_image+0x410/0x410 [ 913.612345][T20233] ? __might_sleep+0xd0/0xd0 [ 913.616951][T20233] ? __lock_acquire+0x7c40/0x7c40 [ 913.622006][T20233] should_fail_ex+0x390/0x4c0 [ 913.626701][T20233] should_failslab+0x5/0x20 [ 913.631218][T20233] slab_pre_alloc_hook+0x59/0x300 [ 913.636257][T20233] ? do_syscall_64+0x4c/0xa0 [ 913.640864][T20233] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.646949][T20233] kmem_cache_alloc_node+0x5a/0x310 [ 913.652162][T20233] ? __alloc_skb+0xf9/0x7d0 [ 913.656686][T20233] __alloc_skb+0xf9/0x7d0 [ 913.661042][T20233] netlink_dump+0x1e1/0xcd0 [ 913.665574][T20233] ? apparmor_capable+0x12c/0x190 [ 913.670613][T20233] ? netlink_lookup+0x200/0x200 [ 913.675481][T20233] ? __inet_diag_dump_start+0x805/0x970 [ 913.681045][T20233] __netlink_dump_start+0x52c/0x6f0 [ 913.686269][T20233] inet_diag_rcv_msg_compat+0x207/0x420 [ 913.691836][T20233] ? __inet_diag_dump+0x380/0x380 [ 913.696881][T20233] ? sock_diag_rcv_msg+0x137/0x5e0 [ 913.702019][T20233] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 913.707758][T20233] ? inet_diag_dump_start_compat+0x20/0x20 [ 913.713573][T20233] ? inet_diag_dump+0x50/0x50 [ 913.718273][T20233] ? trace_raw_output_contention_end+0xd0/0xd0 [ 913.724461][T20233] ? __inet_diag_dump+0x380/0x380 [ 913.729512][T20233] sock_diag_rcv_msg+0x3c7/0x5e0 [ 913.734480][T20233] netlink_rcv_skb+0x1ef/0x440 [ 913.739268][T20233] ? sock_diag_bind+0xa0/0xa0 [ 913.743975][T20233] ? netlink_ack+0x1160/0x1160 [ 913.748776][T20233] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.754001][T20233] sock_diag_rcv+0x26/0x40 [ 913.758454][T20233] netlink_unicast+0x7ad/0x920 [ 913.763253][T20233] netlink_sendmsg+0x8ad/0xbd0 [ 913.768048][T20233] ? netlink_getsockopt+0x550/0x550 [ 913.773283][T20233] ? apparmor_socket_sendmsg+0x8a/0x330 [ 913.778857][T20233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 913.784159][T20233] ? security_socket_sendmsg+0x7c/0xa0 [ 913.789643][T20233] ? netlink_getsockopt+0x550/0x550 [ 913.794873][T20233] ____sys_sendmsg+0x5ed/0x9a0 [ 913.799665][T20233] ? __sys_sendmsg_sock+0x30/0x30 [ 913.804700][T20233] ? __import_iovec+0x306/0x510 [ 913.809566][T20233] ? import_iovec+0x6f/0xa0 [ 913.814083][T20233] ___sys_sendmsg+0x2a2/0x360 [ 913.818778][T20233] ? __sys_sendmsg+0x2a0/0x2a0 [ 913.823589][T20233] ? __lock_acquire+0x7c40/0x7c40 [ 913.828651][T20233] __se_sys_sendmsg+0x1c3/0x2b0 [ 913.833523][T20233] ? __x64_sys_sendmsg+0x80/0x80 [ 913.838517][T20233] ? lockdep_hardirqs_on+0x94/0x140 [ 913.843751][T20233] do_syscall_64+0x4c/0xa0 [ 913.848216][T20233] ? clear_bhb_loop+0x60/0xb0 [ 913.852933][T20233] ? clear_bhb_loop+0x60/0xb0 [ 913.857636][T20233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.863546][T20233] RIP: 0033:0x7fa39659de99 [ 913.867987][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.887633][T20233] RSP: 002b:00007fa39738b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.896070][T20233] RAX: ffffffffffffffda RBX: 00007fa396825fa0 RCX: 00007fa39659de99 [ 913.904063][T20233] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 913.912052][T20233] RBP: 00007fa39738b090 R08: 0000000000000000 R09: 0000000000000000 [ 913.920031][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.928014][T20233] R13: 00007fa396826038 R14: 00007fa396825fa0 R15: 00007ffcfd0a1618 [ 913.936011][T20233] [ 914.207255][T20243] FAULT_INJECTION: forcing a failure. [ 914.207255][T20243] name failslab, interval 1, probability 0, space 0, times 0 [ 914.245955][T20245] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.5325'. [ 914.258238][T20243] CPU: 1 PID: 20243 Comm: syz.4.5324 Not tainted syzkaller #0 [ 914.265745][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 914.275835][T20243] Call Trace: [ 914.279140][T20243] [ 914.282095][T20243] dump_stack_lvl+0x188/0x24e [ 914.286840][T20243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 914.293081][T20243] ? show_regs_print_info+0x12/0x12 [ 914.298323][T20243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 914.304525][T20243] should_fail_ex+0x390/0x4c0 [ 914.309230][T20243] should_failslab+0x5/0x20 [ 914.313743][T20243] slab_pre_alloc_hook+0x59/0x300 [ 914.318785][T20243] ? apparmor_sk_alloc_security+0x74/0x100 [ 914.324610][T20243] __kmem_cache_alloc_node+0x4f/0x270 [ 914.330000][T20243] ? apparmor_sk_alloc_security+0x74/0x100 [ 914.335830][T20243] kmalloc_trace+0x26/0xe0 [ 914.340273][T20243] apparmor_sk_alloc_security+0x74/0x100 [ 914.345923][T20243] security_sk_alloc+0x6a/0xa0 [ 914.350706][T20243] sk_prot_alloc+0x101/0x210 [ 914.355311][T20243] ? sk_alloc+0x20/0x330 [ 914.359581][T20243] sk_alloc+0x36/0x330 [ 914.363660][T20243] ? bpf_ctx_init+0x154/0x190 [ 914.368347][T20243] bpf_prog_test_run_skb+0x36d/0x18e0 [ 914.373734][T20243] ? lockdep_hardirqs_on+0x94/0x140 [ 914.378953][T20243] ? cpu_online+0xa0/0xa0 [ 914.383294][T20243] bpf_prog_test_run+0x31c/0x390 [ 914.388252][T20243] __sys_bpf+0x62b/0x780 [ 914.392539][T20243] ? bpf_link_show_fdinfo+0x380/0x380 [ 914.397941][T20243] ? lock_chain_count+0x20/0x20 [ 914.402807][T20243] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 914.408816][T20243] __x64_sys_bpf+0x78/0x90 [ 914.413254][T20243] do_syscall_64+0x4c/0xa0 [ 914.417686][T20243] ? clear_bhb_loop+0x60/0xb0 [ 914.422375][T20243] ? clear_bhb_loop+0x60/0xb0 [ 914.427069][T20243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.432970][T20243] RIP: 0033:0x7fc05e39de99 [ 914.437404][T20243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.457047][T20243] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 914.465473][T20243] RAX: ffffffffffffffda RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 914.473453][T20243] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 914.481432][T20243] RBP: 00007fc05f2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 914.489416][T20243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.497400][T20243] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 914.505389][T20243] [ 914.516969][T20241] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5323'. [ 914.539957][T20248] netlink: 'syz.3.5325': attribute type 10 has an invalid length. [ 914.637036][T20248] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 914.776804][T20254] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5328'. [ 915.385000][T20281] netlink: 'syz.3.5336': attribute type 10 has an invalid length. [ 915.410164][T20281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5336'. [ 915.436480][T20281] device vlan1 left promiscuous mode [ 915.449953][T20281] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 915.484689][T20284] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5337'. [ 915.590132][T20287] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5338'. [ 918.481548][T20288] netlink: 'syz.2.5335': attribute type 2 has an invalid length. [ 918.498341][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'. [ 918.657367][T20284] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 918.728977][T20284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 918.738688][T20284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 918.891635][T20301] netlink: 'syz.1.5339': attribute type 29 has an invalid length. [ 918.930753][T20301] netlink: 'syz.1.5339': attribute type 29 has an invalid length. [ 919.016006][T20305] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5340'. [ 919.056245][T20308] netlink: 'syz.1.5339': attribute type 29 has an invalid length. [ 919.140443][T20305] netlink: 'syz.0.5340': attribute type 21 has an invalid length. [ 919.148706][T20305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5340'. [ 919.180670][T20305] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 919.813189][T20317] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5344'. [ 919.845339][T20321] netlink: 'syz.4.5346': attribute type 10 has an invalid length. [ 919.860352][T20321] team0: Device bond0 is up. Set it down before adding it as a team port [ 920.249178][T20334] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5350'. [ 920.473818][T20343] -: renamed from syzkaller0 [ 920.868197][T20363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5360'. [ 921.334898][T20374] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5364'. [ 921.846595][T20398] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5371'. [ 922.219822][T20415] FAULT_INJECTION: forcing a failure. [ 922.219822][T20415] name failslab, interval 1, probability 0, space 0, times 0 [ 922.245956][T20415] CPU: 1 PID: 20415 Comm: syz.3.5376 Not tainted syzkaller #0 [ 922.253479][T20415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 922.263567][T20415] Call Trace: [ 922.266871][T20415] [ 922.269843][T20415] dump_stack_lvl+0x188/0x24e [ 922.274576][T20415] ? show_regs_print_info+0x12/0x12 [ 922.279826][T20415] ? load_image+0x410/0x410 [ 922.284366][T20415] ? perf_trace_lock+0xf8/0x390 [ 922.289256][T20415] ? verify_lock_unused+0x140/0x140 [ 922.294519][T20415] ? perf_trace_lock+0xf8/0x390 [ 922.299417][T20415] should_fail_ex+0x390/0x4c0 [ 922.304144][T20415] should_failslab+0x5/0x20 [ 922.308683][T20415] slab_pre_alloc_hook+0x59/0x300 [ 922.313776][T20415] kmem_cache_alloc+0x56/0x2f0 [ 922.318605][T20415] ? skb_clone+0x1e7/0x370 [ 922.323079][T20415] skb_clone+0x1e7/0x370 [ 922.327369][T20415] __netlink_deliver_tap+0x3e4/0x7e0 [ 922.332705][T20415] ? netlink_deliver_tap+0x2e/0x1b0 [ 922.337944][T20415] netlink_deliver_tap+0x19c/0x1b0 [ 922.343097][T20415] netlink_unicast+0x777/0x920 [ 922.347929][T20415] netlink_sendmsg+0x8ad/0xbd0 [ 922.352737][T20415] ? netlink_getsockopt+0x550/0x550 [ 922.357989][T20415] ? apparmor_socket_sendmsg+0x8a/0x330 [ 922.363588][T20415] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 922.368915][T20415] ? security_socket_sendmsg+0x7c/0xa0 [ 922.374411][T20415] ? netlink_getsockopt+0x550/0x550 [ 922.379667][T20415] ____sys_sendmsg+0x5ed/0x9a0 [ 922.384492][T20415] ? __sys_sendmsg_sock+0x30/0x30 [ 922.389700][T20415] ? __import_iovec+0x306/0x510 [ 922.394601][T20415] ? import_iovec+0x6f/0xa0 [ 922.399150][T20415] ___sys_sendmsg+0x2a2/0x360 [ 922.403886][T20415] ? __sys_sendmsg+0x2a0/0x2a0 [ 922.408714][T20415] ? __lock_acquire+0x7c40/0x7c40 [ 922.413806][T20415] __se_sys_sendmsg+0x1c3/0x2b0 [ 922.418702][T20415] ? __x64_sys_sendmsg+0x80/0x80 [ 922.423699][T20415] ? lockdep_hardirqs_on+0x94/0x140 [ 922.428933][T20415] do_syscall_64+0x4c/0xa0 [ 922.433386][T20415] ? clear_bhb_loop+0x60/0xb0 [ 922.438099][T20415] ? clear_bhb_loop+0x60/0xb0 [ 922.442823][T20415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.448768][T20415] RIP: 0033:0x7fa39659de99 [ 922.453238][T20415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.472884][T20415] RSP: 002b:00007fa39738b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.481335][T20415] RAX: ffffffffffffffda RBX: 00007fa396825fa0 RCX: 00007fa39659de99 [ 922.489385][T20415] RDX: 000000000000c000 RSI: 0000200000003980 RDI: 0000000000000003 [ 922.497394][T20415] RBP: 00007fa39738b090 R08: 0000000000000000 R09: 0000000000000000 [ 922.505396][T20415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.513396][T20415] R13: 00007fa396826038 R14: 00007fa396825fa0 R15: 00007ffcfd0a1618 [ 922.521437][T20415] [ 922.722104][T20421] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5378'. [ 923.317347][T20445] sctp: [Deprecated]: syz.1.5386 (pid 20445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 923.317347][T20445] Use struct sctp_sack_info instead [ 923.407097][T20448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5387'. [ 923.587641][T20457] device syzkaller0 entered promiscuous mode [ 923.730015][T20464] FAULT_INJECTION: forcing a failure. [ 923.730015][T20464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.737031][T20463] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5392'. [ 923.759357][T20464] CPU: 1 PID: 20464 Comm: syz.0.5391 Not tainted syzkaller #0 [ 923.766873][T20464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 923.776961][T20464] Call Trace: [ 923.780277][T20464] [ 923.783231][T20464] dump_stack_lvl+0x188/0x24e [ 923.787940][T20464] ? show_regs_print_info+0x12/0x12 [ 923.793170][T20464] ? load_image+0x410/0x410 [ 923.797698][T20464] ? __lock_acquire+0x7c40/0x7c40 [ 923.802748][T20464] should_fail_ex+0x390/0x4c0 [ 923.807443][T20464] _copy_from_iter+0x1c0/0x1130 [ 923.812315][T20464] ? copyout_mc+0x110/0x110 [ 923.816857][T20464] tun_get_user+0x1f3/0x3c20 [ 923.821615][T20464] ? rcu_read_unlock+0xa0/0xa0 [ 923.826407][T20464] ? tun_get+0x1c/0x2e0 [ 923.830591][T20464] ? __lock_acquire+0x7c40/0x7c40 [ 923.835665][T20464] ? tun_get+0x1c/0x2e0 [ 923.839842][T20464] tun_chr_write_iter+0x112/0x1f0 [ 923.844878][T20464] vfs_write+0x482/0x9a0 [ 923.849144][T20464] ? file_end_write+0x250/0x250 [ 923.854020][T20464] ? __fget_files+0x3fc/0x460 [ 923.858741][T20464] ? __fdget_pos+0x1d4/0x360 [ 923.863363][T20464] ? ksys_write+0x70/0x260 [ 923.867816][T20464] ksys_write+0x14d/0x260 [ 923.872176][T20464] ? __ia32_sys_read+0x80/0x80 [ 923.876961][T20464] ? lockdep_hardirqs_on+0x94/0x140 [ 923.882174][T20464] do_syscall_64+0x4c/0xa0 [ 923.886609][T20464] ? clear_bhb_loop+0x60/0xb0 [ 923.891310][T20464] ? clear_bhb_loop+0x60/0xb0 [ 923.896008][T20464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.901923][T20464] RIP: 0033:0x7f6a6b79de99 [ 923.906351][T20464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.925969][T20464] RSP: 002b:00007f6a6c6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.934401][T20464] RAX: ffffffffffffffda RBX: 00007f6a6ba26090 RCX: 00007f6a6b79de99 [ 923.942395][T20464] RDX: 000000000000ffdd RSI: 00002000000002c0 RDI: 0000000000000004 [ 923.950380][T20464] RBP: 00007f6a6c6be090 R08: 0000000000000000 R09: 0000000000000000 [ 923.958367][T20464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.966348][T20464] R13: 00007f6a6ba26128 R14: 00007f6a6ba26090 R15: 00007ffd833a88d8 [ 923.974347][T20464] [ 924.019301][T20459] device syzkaller0 entered promiscuous mode [ 924.076210][T20467] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5393'. [ 924.449527][T20480] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.5396'. [ 924.815986][T20488] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5402'. [ 925.312364][T20501] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5406'. [ 926.345079][T20517] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5410'. [ 926.603001][T20518] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.5410'. [ 926.667016][T20518] netlink: zone id is out of range [ 926.695949][T20518] netlink: zone id is out of range [ 926.736926][T20518] netlink: zone id is out of range [ 926.799047][T20518] netlink: zone id is out of range [ 926.804247][T20518] netlink: zone id is out of range [ 926.867250][T20518] netlink: zone id is out of range [ 926.872729][T20518] netlink: zone id is out of range [ 926.878048][T20518] netlink: zone id is out of range [ 926.893857][T20518] netlink: zone id is out of range [ 926.914206][T20518] netlink: zone id is out of range [ 927.265413][T20524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5413'. [ 927.595697][T20533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5416'. [ 927.980680][T20543] netlink: 'syz.3.5417': attribute type 10 has an invalid length. [ 927.997144][T20541] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5418'. [ 928.131863][T20543] team0: Port device bridge_slave_1 removed [ 928.152249][T20543] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 928.657100][T20570] netlink: 'syz.0.5428': attribute type 2 has an invalid length. [ 928.689188][T20570] device 0 entered promiscuous mode [ 928.743365][T20563] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 928.932540][T20575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 928.939866][T20575] IPv6: NLM_F_CREATE should be set when creating new route [ 929.076618][T20570] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.5428'. [ 929.174464][T20576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5430'. [ 929.291536][T20585] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5433'. [ 929.302759][T20582] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5432'. [ 929.407691][T20588] device syzkaller0 entered promiscuous mode [ 929.680729][T20595] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5436'. [ 929.712478][T20595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 929.833976][T20597] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 930.101530][T20604] netlink: 'syz.3.5441': attribute type 10 has an invalid length. [ 930.131241][T20604] batman_adv: batadv0: Adding interface: vlan1 [ 930.137635][T20604] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.161071][T20609] netlink: 'syz.0.5442': attribute type 4 has an invalid length. [ 930.183772][T20609] netlink: 'syz.0.5442': attribute type 8 has an invalid length. [ 930.198684][T20604] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 930.948160][T20629] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 931.459444][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.465821][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.883654][T20658] FAULT_INJECTION: forcing a failure. [ 931.883654][T20658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.930167][T20658] CPU: 1 PID: 20658 Comm: syz.1.5462 Not tainted syzkaller #0 [ 931.937709][T20658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 931.947798][T20658] Call Trace: [ 931.951115][T20658] [ 931.954080][T20658] dump_stack_lvl+0x188/0x24e [ 931.958829][T20658] ? show_regs_print_info+0x12/0x12 [ 931.964068][T20658] ? load_image+0x410/0x410 [ 931.968618][T20658] ? __lock_acquire+0x7c40/0x7c40 [ 931.973688][T20658] ? snprintf+0xe5/0x140 [ 931.977992][T20658] should_fail_ex+0x390/0x4c0 [ 931.982732][T20658] _copy_to_user+0x2c/0x130 [ 931.987292][T20658] simple_read_from_buffer+0xe3/0x150 [ 931.992757][T20658] proc_fail_nth_read+0x1a6/0x220 [ 931.997832][T20658] ? proc_fault_inject_write+0x310/0x310 [ 932.003528][T20658] ? fsnotify_perm+0x248/0x550 [ 932.008360][T20658] ? proc_fault_inject_write+0x310/0x310 [ 932.014049][T20658] vfs_read+0x2db/0x960 [ 932.018270][T20658] ? kernel_read+0x1e0/0x1e0 [ 932.022914][T20658] ? __fget_files+0x28/0x460 [ 932.027562][T20658] ? __fget_files+0x3fc/0x460 [ 932.032309][T20658] ? __fdget_pos+0x2ae/0x360 [ 932.036951][T20658] ? ksys_read+0x70/0x260 [ 932.041347][T20658] ksys_read+0x14d/0x260 [ 932.045677][T20658] ? vfs_write+0x9a0/0x9a0 [ 932.050160][T20658] ? lockdep_hardirqs_on+0x94/0x140 [ 932.055429][T20658] do_syscall_64+0x4c/0xa0 [ 932.059898][T20658] ? clear_bhb_loop+0x60/0xb0 [ 932.064618][T20658] ? clear_bhb_loop+0x60/0xb0 [ 932.069318][T20658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.075229][T20658] RIP: 0033:0x7f084155e6ce [ 932.079657][T20658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 932.099279][T20658] RSP: 002b:00007f084246ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 932.107718][T20658] RAX: ffffffffffffffda RBX: 00007f08424706c0 RCX: 00007f084155e6ce [ 932.115713][T20658] RDX: 000000000000000f RSI: 00007f08424700a0 RDI: 0000000000000006 [ 932.123710][T20658] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 932.131701][T20658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.139692][T20658] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 932.147702][T20658] [ 932.177130][T20657] __nla_validate_parse: 4 callbacks suppressed [ 932.177164][T20657] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5461'. [ 932.368422][T20667] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5464'. [ 932.594113][T20674] netlink: 'syz.3.5468': attribute type 10 has an invalid length. [ 932.646075][T20674] device hsr0 entered promiscuous mode [ 932.674950][T20674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 932.698797][T20674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 932.706671][T20674] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 933.315001][T20705] netlink: 'syz.3.5478': attribute type 10 has an invalid length. [ 933.351978][T20705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.379548][T20705] team0: Port device bond0 added [ 933.543495][T20709] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5479'. [ 933.639537][T20715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5483'. [ 933.648718][T20715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 933.693713][T20715] net_ratelimit: 3654 callbacks suppressed [ 933.693731][T20715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.795225][T20712] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5481'. [ 934.388221][T20739] netlink: 'syz.0.5490': attribute type 21 has an invalid length. [ 934.438280][T20739] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5490'. [ 934.471236][T20739] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5490'. [ 934.868172][T20751] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5494'. [ 935.542463][T20768] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5498'. [ 936.093095][T20780] device syzkaller0 entered promiscuous mode [ 936.381871][T20783] netlink: 'syz.3.5504': attribute type 10 has an invalid length. [ 936.957113][T20783] team0 (unregistering): Port device team_slave_0 removed [ 937.018782][T20783] team0 (unregistering): Port device team_slave_1 removed [ 937.066830][T20783] team0 (unregistering): Port device bond0 removed [ 937.128625][T20792] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5507'. [ 937.448123][T20798] __nla_validate_parse: 1 callbacks suppressed [ 937.448161][T20798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5512'. [ 937.865273][T20821] device syzkaller0 entered promiscuous mode [ 938.227839][T20840] netlink: 'syz.1.5524': attribute type 10 has an invalid length. [ 938.268975][T20840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5524'. [ 938.390610][T20842] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5523'. [ 938.823508][T20850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5527'. [ 939.087649][T20868] FAULT_INJECTION: forcing a failure. [ 939.087649][T20868] name failslab, interval 1, probability 0, space 0, times 0 [ 939.109424][T20868] CPU: 1 PID: 20868 Comm: syz.4.5533 Not tainted syzkaller #0 [ 939.117000][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.127094][T20868] Call Trace: [ 939.130409][T20868] [ 939.133363][T20868] dump_stack_lvl+0x188/0x24e [ 939.138075][T20868] ? show_regs_print_info+0x12/0x12 [ 939.143309][T20868] ? load_image+0x410/0x410 [ 939.147842][T20868] ? kasan_set_track+0x60/0x70 [ 939.152636][T20868] ? __kasan_slab_alloc+0x6b/0x80 [ 939.157698][T20868] ? slab_post_alloc_hook+0x4b/0x490 [ 939.163004][T20868] ? kmem_cache_alloc+0x18b/0x2f0 [ 939.168061][T20868] ? dst_alloc+0x101/0x160 [ 939.172524][T20868] ? ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 939.178813][T20868] ? ip_route_output_key_hash+0x1ef/0x330 [ 939.184576][T20868] should_fail_ex+0x390/0x4c0 [ 939.189284][T20868] should_failslab+0x5/0x20 [ 939.193806][T20868] slab_pre_alloc_hook+0x59/0x300 [ 939.198862][T20868] ? ref_tracker_alloc+0x14f/0x490 [ 939.204000][T20868] __kmem_cache_alloc_node+0x4f/0x270 [ 939.209400][T20868] ? ref_tracker_alloc+0x14f/0x490 [ 939.214537][T20868] kmalloc_trace+0x26/0xe0 [ 939.218999][T20868] ref_tracker_alloc+0x14f/0x490 [ 939.223964][T20868] ? ref_tracker_dir_print+0x150/0x150 [ 939.229457][T20868] ? __kasan_slab_alloc+0x6b/0x80 [ 939.234514][T20868] ? slab_post_alloc_hook+0x67/0x490 [ 939.239824][T20868] ? slab_pre_alloc_hook+0x59/0x300 [ 939.245054][T20868] ? rcu_is_watching+0x11/0xa0 [ 939.249854][T20868] dst_init+0xb1/0x400 [ 939.253962][T20868] dst_alloc+0x12a/0x160 [ 939.258249][T20868] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 939.264362][T20868] ? ip_route_output_key_hash+0x139/0x330 [ 939.270153][T20868] ip_route_output_key_hash+0x1ef/0x330 [ 939.275735][T20868] ? kfree+0x30/0x1a0 [ 939.279751][T20868] ? ip_route_input_rcu+0x30a0/0x30a0 [ 939.285164][T20868] ? ip_cmsg_send+0x9a5/0xa50 [ 939.289879][T20868] ip_route_output_flow+0x26/0x150 [ 939.295026][T20868] ? security_sk_classify_flow+0x77/0x90 [ 939.300697][T20868] raw_sendmsg+0xf7c/0x1940 [ 939.305245][T20868] ? compat_raw_ioctl+0x60/0x60 [ 939.310136][T20868] ? aa_sk_perm+0x81f/0x950 [ 939.314667][T20868] ? __might_fault+0xa6/0x120 [ 939.319379][T20868] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 939.325817][T20868] ? aa_sock_msg_perm+0x94/0x150 [ 939.330811][T20868] ? sock_rps_record_flow+0x19/0x3f0 [ 939.336132][T20868] ? inet_sendmsg+0x7a/0x2a0 [ 939.340755][T20868] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 939.346063][T20868] ? inet_send_prepare+0x250/0x250 [ 939.351209][T20868] ____sys_sendmsg+0x5ed/0x9a0 [ 939.356001][T20868] ? __lock_acquire+0x7c40/0x7c40 [ 939.361061][T20868] ? __sys_sendmsg_sock+0x30/0x30 [ 939.366116][T20868] ? __import_iovec+0x306/0x510 [ 939.371014][T20868] ? import_iovec+0x6f/0xa0 [ 939.375556][T20868] ___sys_sendmsg+0x2a2/0x360 [ 939.380268][T20868] ? __sys_sendmsg+0x2a0/0x2a0 [ 939.385077][T20868] ? __lock_acquire+0x7c40/0x7c40 [ 939.390163][T20868] __se_sys_sendmsg+0x1c3/0x2b0 [ 939.395044][T20868] ? __x64_sys_sendmsg+0x80/0x80 [ 939.400026][T20868] ? lockdep_hardirqs_on+0x94/0x140 [ 939.405266][T20868] do_syscall_64+0x4c/0xa0 [ 939.409732][T20868] ? clear_bhb_loop+0x60/0xb0 [ 939.414436][T20868] ? clear_bhb_loop+0x60/0xb0 [ 939.419153][T20868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.425080][T20868] RIP: 0033:0x7fc05e39de99 [ 939.429527][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.449158][T20868] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.457595][T20868] RAX: ffffffffffffffda RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 939.465596][T20868] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 939.473590][T20868] RBP: 00007fc05f2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 939.481603][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.489607][T20868] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 939.497617][T20868] [ 939.675726][T20870] device syzkaller0 entered promiscuous mode [ 940.353308][T20885] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5539'. [ 941.070371][T20900] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5544'. [ 941.081297][T20902] netlink: 'syz.0.5543': attribute type 2 has an invalid length. [ 941.098963][T20902] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5543'. [ 941.652172][T20919] device syzkaller0 entered promiscuous mode [ 942.157993][T20929] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5553'. [ 942.787441][T20948] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5560'. [ 942.867295][T20950] device bridge_slave_1 left promiscuous mode [ 942.882202][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.924415][T20950] device bridge_slave_0 left promiscuous mode [ 942.933892][T20950] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.258986][T20951] : port 1(ip6gretap0) entered blocking state [ 943.265315][T20951] : port 1(ip6gretap0) entered disabled state [ 943.275561][T20951] device ip6gretap0 entered promiscuous mode [ 943.293933][T20946] device ip6gretap0 left promiscuous mode [ 943.311902][T20946] : port 1(ip6gretap0) entered disabled state [ 943.768402][T20961] device syzkaller0 entered promiscuous mode [ 943.776392][T20973] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.5568'. [ 944.199497][T20981] device pim6reg1 entered promiscuous mode [ 944.675919][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5576'. [ 944.816412][T21008] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5580'. [ 945.033147][T21013] device syzkaller0 entered promiscuous mode [ 945.085687][T21011] netlink: 'syz.0.5582': attribute type 3 has an invalid length. [ 945.109430][T21011] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5582'. [ 945.237247][T21023] netlink: 'syz.3.5585': attribute type 21 has an invalid length. [ 947.991942][T21057] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5593'. [ 948.065109][T21060] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5594'. [ 948.344106][T21070] device syzkaller0 entered promiscuous mode [ 949.698081][T21102] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5607'. [ 949.888517][T21109] netlink: 'syz.1.5609': attribute type 3 has an invalid length. [ 949.915083][T21109] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.5609'. [ 950.013486][T21110] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5610'. [ 950.401521][T21113] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5612'. [ 950.640751][T21128] device syzkaller0 entered promiscuous mode [ 951.297433][T21150] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5623'. [ 951.483200][T21158] netlink: 'syz.1.5628': attribute type 2 has an invalid length. [ 951.523778][T21152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5626'. [ 951.747559][T21164] device syzkaller0 entered promiscuous mode [ 951.920768][T21173] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5635'. [ 952.110939][T21176] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5636'. [ 952.174117][T21174] netlink: 'syz.4.5633': attribute type 3 has an invalid length. [ 952.183569][T21178] netlink: 'syz.2.5637': attribute type 2 has an invalid length. [ 952.349628][T21181] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 952.380777][T21181] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 952.429132][T21181] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 953.000233][T21197] __nla_validate_parse: 4 callbacks suppressed [ 953.000272][T21197] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5642'. [ 953.348275][T21209] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5647'. [ 953.378573][T21211] device syzkaller0 entered promiscuous mode [ 953.662139][T21223] netlink: 'syz.3.5652': attribute type 4 has an invalid length. [ 953.721559][T21225] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5653'. [ 954.232821][T21232] C: renamed from team_slave_0 [ 954.286639][T21232] netlink: 'syz.1.5653': attribute type 3 has an invalid length. [ 954.316764][T21232] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5653'. [ 954.358516][T21232] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 954.377414][T21233] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5655'. [ 955.213717][T21250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5660'. [ 955.411823][T21258] device syzkaller0 entered promiscuous mode [ 955.535238][T21260] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5665'. [ 955.557648][T21263] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 955.564676][T21263] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 955.832701][T21268] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5668'. [ 956.763373][T21296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5677'. [ 956.792606][T21298] device syzkaller0 entered promiscuous mode [ 956.929047][T21300] device wlan1 entered promiscuous mode [ 957.159228][T21310] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5683'. [ 957.412125][T21320] FAULT_INJECTION: forcing a failure. [ 957.412125][T21320] name failslab, interval 1, probability 0, space 0, times 0 [ 957.443229][T21320] CPU: 0 PID: 21320 Comm: syz.1.5686 Not tainted syzkaller #0 [ 957.450788][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.460895][T21320] Call Trace: [ 957.464214][T21320] [ 957.467191][T21320] dump_stack_lvl+0x188/0x24e [ 957.471934][T21320] ? show_regs_print_info+0x12/0x12 [ 957.477197][T21320] ? load_image+0x410/0x410 [ 957.481754][T21320] ? __might_sleep+0xd0/0xd0 [ 957.486400][T21320] ? __lock_acquire+0x7c40/0x7c40 [ 957.491492][T21320] should_fail_ex+0x390/0x4c0 [ 957.496233][T21320] should_failslab+0x5/0x20 [ 957.500788][T21320] slab_pre_alloc_hook+0x59/0x300 [ 957.505864][T21320] ? apparmor_sk_alloc_security+0x74/0x100 [ 957.511703][T21320] __kmem_cache_alloc_node+0x4f/0x270 [ 957.517108][T21320] ? apparmor_sk_alloc_security+0x74/0x100 [ 957.522966][T21320] kmalloc_trace+0x26/0xe0 [ 957.527420][T21320] apparmor_sk_alloc_security+0x74/0x100 [ 957.533080][T21320] security_sk_alloc+0x6a/0xa0 [ 957.537878][T21320] sk_prot_alloc+0x101/0x210 [ 957.542490][T21320] ? sk_alloc+0x20/0x330 [ 957.546765][T21320] sk_alloc+0x36/0x330 [ 957.550856][T21320] ? bpf_ctx_init+0x154/0x190 [ 957.555563][T21320] bpf_prog_test_run_skb+0x36d/0x18e0 [ 957.560964][T21320] ? __fget_files+0x28/0x460 [ 957.565592][T21320] ? __fget_files+0x3fc/0x460 [ 957.570307][T21320] ? cpu_online+0xa0/0xa0 [ 957.574660][T21320] bpf_prog_test_run+0x31c/0x390 [ 957.579638][T21320] __sys_bpf+0x62b/0x780 [ 957.583922][T21320] ? bpf_link_show_fdinfo+0x380/0x380 [ 957.589338][T21320] ? lock_chain_count+0x20/0x20 [ 957.594226][T21320] __x64_sys_bpf+0x78/0x90 [ 957.598677][T21320] do_syscall_64+0x4c/0xa0 [ 957.603132][T21320] ? clear_bhb_loop+0x60/0xb0 [ 957.607850][T21320] ? clear_bhb_loop+0x60/0xb0 [ 957.612562][T21320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.618488][T21320] RIP: 0033:0x7f084159de99 [ 957.622932][T21320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.642566][T21320] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 957.651010][T21320] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 957.659012][T21320] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 957.667009][T21320] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 957.675004][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.683001][T21320] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 957.691034][T21320] [ 957.722880][T21324] netlink: 'syz.3.5689': attribute type 10 has an invalid length. [ 957.783461][T21326] netlink: 'syz.2.5690': attribute type 3 has an invalid length. [ 957.816281][T21327] netlink: 'syz.0.5688': attribute type 3 has an invalid length. [ 957.832257][T21327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.897280][T21327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.941955][T21327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.964978][T21327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.973990][T21327] batman_adv: batadv0: Interface deactivated: vlan1 [ 957.995305][T21327] batman_adv: batadv0: Removing interface: vlan1 [ 958.010572][T21327] batman_adv: batadv0: Removing interface: netdevsim0 [ 958.187711][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.203592][T21326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.244206][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.260170][T21326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.275866][T21326] batman_adv: batadv0: Removing interface: vlan1 [ 958.432239][T21343] __nla_validate_parse: 2 callbacks suppressed [ 958.432274][T21343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5692'. [ 958.522538][T21344] device syzkaller0 entered promiscuous mode [ 958.915279][T21355] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5699'. [ 959.092334][T21367] FAULT_INJECTION: forcing a failure. [ 959.092334][T21367] name failslab, interval 1, probability 0, space 0, times 0 [ 959.125664][T21367] CPU: 0 PID: 21367 Comm: syz.2.5702 Not tainted syzkaller #0 [ 959.133229][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.143332][T21367] Call Trace: [ 959.146657][T21367] [ 959.149642][T21367] dump_stack_lvl+0x188/0x24e [ 959.154378][T21367] ? show_regs_print_info+0x12/0x12 [ 959.159637][T21367] ? load_image+0x410/0x410 [ 959.164192][T21367] ? __might_sleep+0xd0/0xd0 [ 959.168827][T21367] ? __lock_acquire+0x7c40/0x7c40 [ 959.173932][T21367] should_fail_ex+0x390/0x4c0 [ 959.178702][T21367] should_failslab+0x5/0x20 [ 959.183254][T21367] slab_pre_alloc_hook+0x59/0x300 [ 959.188342][T21367] kmem_cache_alloc+0x56/0x2f0 [ 959.193162][T21367] ? getname_flags+0xb7/0x500 [ 959.197904][T21367] getname_flags+0xb7/0x500 [ 959.202459][T21367] do_sys_openat2+0xdd/0x4f0 [ 959.207110][T21367] ? do_sys_open+0xe0/0xe0 [ 959.211580][T21367] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 959.217620][T21367] ? lock_chain_count+0x20/0x20 [ 959.222524][T21367] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 959.228555][T21367] __x64_sys_openat+0x135/0x160 [ 959.233447][T21367] do_syscall_64+0x4c/0xa0 [ 959.237901][T21367] ? clear_bhb_loop+0x60/0xb0 [ 959.242612][T21367] ? clear_bhb_loop+0x60/0xb0 [ 959.247323][T21367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.253252][T21367] RIP: 0033:0x7f058f95e6ce [ 959.257787][T21367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.277433][T21367] RSP: 002b:00007f0590843ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 959.285893][T21367] RAX: ffffffffffffffda RBX: 00007f05908446c0 RCX: 00007f058f95e6ce [ 959.293890][T21367] RDX: 0000000000000002 RSI: 00007f0590843f90 RDI: ffffffffffffff9c [ 959.301894][T21367] RBP: 00007f0590844090 R08: 0000000000000000 R09: 0000000000000000 [ 959.309921][T21367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.317922][T21367] R13: 00007f058fc26038 R14: 00007f058fc25fa0 R15: 00007ffc55b79088 [ 959.325948][T21367] [ 959.708262][T21387] device syzkaller0 entered promiscuous mode [ 959.791398][T21385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5709'. [ 960.131104][T21403] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5716'. [ 960.143605][T21403] netlink: 'syz.4.5716': attribute type 21 has an invalid length. [ 960.152751][T21403] netlink: 'syz.4.5716': attribute type 6 has an invalid length. [ 960.161129][T21403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5716'. [ 960.237578][T21401] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5715'. [ 960.526120][T21411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 960.533799][T21411] IPv6: NLM_F_CREATE should be set when creating new route [ 960.919369][T21419] device syzkaller0 entered promiscuous mode [ 961.323158][T21421] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5722'. [ 961.350940][T21423] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5724'. [ 961.776830][T21439] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5729'. [ 961.780414][T21433] ¥: port 1(syz_tun) entered blocking state [ 961.855368][T21433] ¥: port 1(syz_tun) entered disabled state [ 962.359406][T21433] device syz_tun entered promiscuous mode [ 962.656194][T21461] netlink: 'syz.1.5738': attribute type 21 has an invalid length. [ 962.682479][T21461] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5738'. [ 962.834288][T21466] netlink: 'syz.2.5739': attribute type 4 has an invalid length. [ 962.939664][T21469] device syzkaller0 entered promiscuous mode [ 963.986557][T21503] __nla_validate_parse: 5 callbacks suppressed [ 963.986599][T21503] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5755'. [ 964.062017][T21506] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5756'. [ 964.786966][T21525] netlink: 'syz.1.5764': attribute type 10 has an invalid length. [ 964.839328][T21525] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 965.515771][T21546] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.5772'. [ 965.645373][T21550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5773'. [ 965.826406][T21552] netlink: 'syz.1.5775': attribute type 21 has an invalid length. [ 965.857322][T21552] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5775'. [ 965.900226][T21552] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5775'. [ 966.046091][T21557] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 966.052662][T21557] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 966.152534][T21563] FAULT_INJECTION: forcing a failure. [ 966.152534][T21563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.165948][T21563] CPU: 1 PID: 21563 Comm: syz.1.5780 Not tainted syzkaller #0 [ 966.173493][T21563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 966.183616][T21563] Call Trace: [ 966.186940][T21563] [ 966.189918][T21563] dump_stack_lvl+0x188/0x24e [ 966.194664][T21563] ? show_regs_print_info+0x12/0x12 [ 966.199919][T21563] ? load_image+0x410/0x410 [ 966.204484][T21563] ? __might_fault+0xa6/0x120 [ 966.209223][T21563] should_fail_ex+0x390/0x4c0 [ 966.213964][T21563] copyin+0x1b/0x120 [ 966.217920][T21563] _copy_from_iter+0x447/0x1130 [ 966.222850][T21563] ? copyout_mc+0x110/0x110 [ 966.227412][T21563] ? __virt_addr_valid+0x188/0x540 [ 966.232585][T21563] ? __virt_addr_valid+0x188/0x540 [ 966.237757][T21563] ? __virt_addr_valid+0x467/0x540 [ 966.242923][T21563] ? __phys_addr_symbol+0x2b/0x70 [ 966.248014][T21563] ? __check_object_size+0x4f6/0xa70 [ 966.253363][T21563] netlink_sendmsg+0x755/0xbd0 [ 966.258219][T21563] ? netlink_getsockopt+0x550/0x550 [ 966.263486][T21563] ? apparmor_socket_sendmsg+0x8a/0x330 [ 966.269094][T21563] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 966.274429][T21563] ? security_socket_sendmsg+0x7c/0xa0 [ 966.279959][T21563] ? netlink_getsockopt+0x550/0x550 [ 966.285229][T21563] ____sys_sendmsg+0x5ed/0x9a0 [ 966.290065][T21563] ? __sys_sendmsg_sock+0x30/0x30 [ 966.295150][T21563] ? __import_iovec+0x306/0x510 [ 966.300064][T21563] ? import_iovec+0x6f/0xa0 [ 966.304633][T21563] ___sys_sendmsg+0x2a2/0x360 [ 966.309376][T21563] ? __sys_sendmsg+0x2a0/0x2a0 [ 966.314233][T21563] ? __lock_acquire+0x7c40/0x7c40 [ 966.319338][T21563] __se_sys_sendmsg+0x1c3/0x2b0 [ 966.324250][T21563] ? __x64_sys_sendmsg+0x80/0x80 [ 966.329258][T21563] ? lockdep_hardirqs_on+0x94/0x140 [ 966.334507][T21563] do_syscall_64+0x4c/0xa0 [ 966.338974][T21563] ? clear_bhb_loop+0x60/0xb0 [ 966.343706][T21563] ? clear_bhb_loop+0x60/0xb0 [ 966.348445][T21563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.354394][T21563] RIP: 0033:0x7f084159de99 [ 966.358849][T21563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.378496][T21563] RSP: 002b:00007f0842470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.386938][T21563] RAX: ffffffffffffffda RBX: 00007f0841825fa0 RCX: 00007f084159de99 [ 966.394937][T21563] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 966.402942][T21563] RBP: 00007f0842470090 R08: 0000000000000000 R09: 0000000000000000 [ 966.410940][T21563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.418935][T21563] R13: 00007f0841826038 R14: 00007f0841825fa0 R15: 00007ffe76536fd8 [ 966.426945][T21563] [ 967.238706][T21587] FAULT_INJECTION: forcing a failure. [ 967.238706][T21587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.292975][T21587] CPU: 0 PID: 21587 Comm: syz.1.5786 Not tainted syzkaller #0 [ 967.300588][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.310687][T21587] Call Trace: [ 967.314004][T21587] [ 967.316965][T21587] dump_stack_lvl+0x188/0x24e [ 967.321682][T21587] ? show_regs_print_info+0x12/0x12 [ 967.326922][T21587] ? load_image+0x410/0x410 [ 967.331459][T21587] ? __might_fault+0xa6/0x120 [ 967.336171][T21587] should_fail_ex+0x390/0x4c0 [ 967.340896][T21587] copyin+0x1b/0x120 [ 967.344826][T21587] _copy_from_iter+0x447/0x1130 [ 967.349719][T21587] ? copyout_mc+0x110/0x110 [ 967.354260][T21587] ? __virt_addr_valid+0x188/0x540 [ 967.359406][T21587] ? __virt_addr_valid+0x188/0x540 [ 967.364548][T21587] ? __virt_addr_valid+0x467/0x540 [ 967.369697][T21587] ? __phys_addr_symbol+0x2b/0x70 [ 967.374763][T21587] ? __check_object_size+0x4f6/0xa70 [ 967.380098][T21587] netlink_sendmsg+0x755/0xbd0 [ 967.384917][T21587] ? netlink_getsockopt+0x550/0x550 [ 967.390157][T21587] ? apparmor_socket_sendmsg+0x8a/0x330 [ 967.395744][T21587] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 967.401058][T21587] ? security_socket_sendmsg+0x7c/0xa0 [ 967.406553][T21587] ? netlink_getsockopt+0x550/0x550 [ 967.411789][T21587] ____sys_sendmsg+0x5ed/0x9a0 [ 967.416606][T21587] ? __sys_sendmsg_sock+0x30/0x30 [ 967.421662][T21587] ? __import_iovec+0x306/0x510 [ 967.426553][T21587] ? import_iovec+0x6f/0xa0 [ 967.431094][T21587] ___sys_sendmsg+0x2a2/0x360 [ 967.435805][T21587] ? __sys_sendmsg+0x2a0/0x2a0 [ 967.440619][T21587] ? __lock_acquire+0x7c40/0x7c40 [ 967.445699][T21587] __se_sys_sendmsg+0x1c3/0x2b0 [ 967.450619][T21587] ? __x64_sys_sendmsg+0x80/0x80 [ 967.455602][T21587] ? lockdep_hardirqs_on+0x94/0x140 [ 967.460838][T21587] do_syscall_64+0x4c/0xa0 [ 967.465294][T21587] ? clear_bhb_loop+0x60/0xb0 [ 967.470011][T21587] ? clear_bhb_loop+0x60/0xb0 [ 967.474740][T21587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.480668][T21587] RIP: 0033:0x7f084159de99 [ 967.485106][T21587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.504738][T21587] RSP: 002b:00007f084244f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.513179][T21587] RAX: ffffffffffffffda RBX: 00007f0841826090 RCX: 00007f084159de99 [ 967.521179][T21587] RDX: 0000000008040880 RSI: 0000200000000080 RDI: 0000000000000008 [ 967.529179][T21587] RBP: 00007f084244f090 R08: 0000000000000000 R09: 0000000000000000 [ 967.537174][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.545171][T21587] R13: 00007f0841826128 R14: 00007f0841826090 R15: 00007ffe76536fd8 [ 967.553211][T21587] [ 969.936851][T21592] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5788'. [ 969.950658][T21594] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5789'. [ 971.066276][T21614] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5796'. [ 971.154016][T21615] netlink: 'syz.4.5796': attribute type 39 has an invalid length. [ 971.862316][T12586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 971.908074][T12586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 971.923788][T12586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 971.932520][T12586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 971.941457][T12586] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 971.949245][T12586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.077690][T21631] netlink: 'syz.3.5798': attribute type 11 has an invalid length. [ 972.143135][T21631] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5798'. [ 972.225933][T21638] FAULT_INJECTION: forcing a failure. [ 972.225933][T21638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.259004][T21638] CPU: 0 PID: 21638 Comm: syz.0.5799 Not tainted syzkaller #0 [ 972.266558][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 972.276663][T21638] Call Trace: [ 972.279998][T21638] [ 972.282975][T21638] dump_stack_lvl+0x188/0x24e [ 972.287741][T21638] ? show_regs_print_info+0x12/0x12 [ 972.293009][T21638] ? load_image+0x410/0x410 [ 972.297571][T21638] ? __lock_acquire+0x7c40/0x7c40 [ 972.302661][T21638] ? snprintf+0xe5/0x140 [ 972.306955][T21638] should_fail_ex+0x390/0x4c0 [ 972.311705][T21638] _copy_to_user+0x2c/0x130 [ 972.316259][T21638] simple_read_from_buffer+0xe3/0x150 [ 972.321687][T21638] proc_fail_nth_read+0x1a6/0x220 [ 972.326765][T21638] ? proc_fault_inject_write+0x310/0x310 [ 972.332458][T21638] ? fsnotify_perm+0x248/0x550 [ 972.337286][T21638] ? proc_fault_inject_write+0x310/0x310 [ 972.343024][T21638] vfs_read+0x2db/0x960 [ 972.347252][T21638] ? kernel_read+0x1e0/0x1e0 [ 972.351921][T21638] ? __fget_files+0x28/0x460 [ 972.356597][T21638] ? __fget_files+0x3fc/0x460 [ 972.361347][T21638] ? __fdget_pos+0x2ae/0x360 [ 972.366006][T21638] ? ksys_read+0x70/0x260 [ 972.370411][T21638] ksys_read+0x14d/0x260 [ 972.374721][T21638] ? vfs_write+0x9a0/0x9a0 [ 972.379200][T21638] ? lockdep_hardirqs_on+0x94/0x140 [ 972.384434][T21638] do_syscall_64+0x4c/0xa0 [ 972.388884][T21638] ? clear_bhb_loop+0x60/0xb0 [ 972.393593][T21638] ? clear_bhb_loop+0x60/0xb0 [ 972.398305][T21638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.404231][T21638] RIP: 0033:0x7f6a6b75e6ce [ 972.408686][T21638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.428330][T21638] RSP: 002b:00007f6a6c6defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.436786][T21638] RAX: ffffffffffffffda RBX: 00007f6a6c6df6c0 RCX: 00007f6a6b75e6ce [ 972.444821][T21638] RDX: 000000000000000f RSI: 00007f6a6c6df0a0 RDI: 0000000000000006 [ 972.452818][T21638] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 972.460906][T21638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.468911][T21638] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 972.476934][T21638] [ 972.707442][T21627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.730015][T21629] chnl_net:caif_netlink_parms(): no params data found [ 972.825950][T21629] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.833538][T21629] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.842760][T21629] device bridge_slave_0 entered promiscuous mode [ 972.855419][T21629] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.869193][T21629] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.882257][T21652] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5802'. [ 972.883002][T21629] device bridge_slave_1 entered promiscuous mode [ 972.923551][T21629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.937214][T21629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.980106][T21629] team0: Port device team_slave_0 added [ 972.991008][T21629] team0: Port device team_slave_1 added [ 973.021437][T21629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.028599][T21629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.057247][T21629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.072183][T21629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.079597][T21629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.159200][T21629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.479025][T21663] netlink: 'syz.1.5803': attribute type 7 has an invalid length. [ 973.486942][T21663] netlink: 'syz.1.5803': attribute type 7 has an invalid length. [ 973.500063][T21663] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5803'. [ 973.971739][T21675] netlink: 'syz.4.5807': attribute type 27 has an invalid length. [ 973.982848][T21675] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5807'. [ 974.009059][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 974.442763][T21629] device hsr_slave_0 entered promiscuous mode [ 974.486195][T21629] device hsr_slave_1 entered promiscuous mode [ 974.544319][T21671] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5805'. [ 974.569118][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 974.672110][T21679] netlink: 'syz.0.5809': attribute type 3 has an invalid length. [ 974.701382][T19999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.731719][T21679] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5809'. [ 974.929539][T19999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.077322][T19999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.149606][T21688] netlink: 'syz.0.5811': attribute type 4 has an invalid length. [ 975.222055][T21688] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.5811'. [ 975.293673][T19999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.317995][T21692] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5813'. [ 975.492350][T21694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5815'. [ 976.089183][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 976.148628][T21713] FAULT_INJECTION: forcing a failure. [ 976.148628][T21713] name failslab, interval 1, probability 0, space 0, times 0 [ 976.190587][T21713] CPU: 1 PID: 21713 Comm: syz.0.5819 Not tainted syzkaller #0 [ 976.198248][T21713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 976.208356][T21713] Call Trace: [ 976.211700][T21713] [ 976.214684][T21713] dump_stack_lvl+0x188/0x24e [ 976.219435][T21713] ? show_regs_print_info+0x12/0x12 [ 976.224705][T21713] ? load_image+0x410/0x410 [ 976.229283][T21713] should_fail_ex+0x390/0x4c0 [ 976.234034][T21713] should_failslab+0x5/0x20 [ 976.238593][T21713] slab_pre_alloc_hook+0x59/0x300 [ 976.243680][T21713] ? __kernel_text_address+0x9/0x30 [ 976.249019][T21713] ? unwind_get_return_address+0x49/0x80 [ 976.254720][T21713] kmem_cache_alloc+0x56/0x2f0 [ 976.259541][T21713] ? skb_clone+0x1e7/0x370 [ 976.264029][T21713] skb_clone+0x1e7/0x370 [ 976.268340][T21713] bpf_clone_redirect+0x169/0x4a0 [ 976.273433][T21713] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 976.278975][T21713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 976.285031][T21713] ? __lock_acquire+0x7c40/0x7c40 [ 976.290124][T21713] ? lock_chain_count+0x20/0x20 [ 976.295080][T21713] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 976.301388][T21713] ? lockdep_hardirqs_on+0x94/0x140 [ 976.306647][T21713] ? ktime_get+0x7b/0x270 [ 976.311090][T21713] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 976.317560][T21713] ? ktime_get_real_ts64+0x440/0x440 [ 976.322913][T21713] ? read_lock_is_recursive+0x10/0x10 [ 976.328373][T21713] ? __cant_sleep+0x220/0x220 [ 976.333105][T21713] ? ktime_get+0x247/0x270 [ 976.337600][T21713] bpf_test_run+0x2b6/0x830 [ 976.342179][T21713] ? dst_hold+0xb0/0xb0 [ 976.346400][T21713] ? eth_get_headlen+0x200/0x200 [ 976.351493][T21713] ? __build_skb+0x24b/0x3b0 [ 976.356151][T21713] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 976.361620][T21713] ? cpu_online+0xa0/0xa0 [ 976.366005][T21713] bpf_prog_test_run+0x31c/0x390 [ 976.371024][T21713] __sys_bpf+0x62b/0x780 [ 976.375338][T21713] ? bpf_link_show_fdinfo+0x380/0x380 [ 976.380817][T21713] ? lock_chain_count+0x20/0x20 [ 976.385740][T21713] __x64_sys_bpf+0x78/0x90 [ 976.390224][T21713] do_syscall_64+0x4c/0xa0 [ 976.394702][T21713] ? clear_bhb_loop+0x60/0xb0 [ 976.399444][T21713] ? clear_bhb_loop+0x60/0xb0 [ 976.404176][T21713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.410142][T21713] RIP: 0033:0x7f6a6b79de99 [ 976.414615][T21713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.434280][T21713] RSP: 002b:00007f6a6c6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.442764][T21713] RAX: ffffffffffffffda RBX: 00007f6a6ba25fa0 RCX: 00007f6a6b79de99 [ 976.450792][T21713] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 976.458820][T21713] RBP: 00007f6a6c6df090 R08: 0000000000000000 R09: 0000000000000000 [ 976.466861][T21713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.474900][T21713] R13: 00007f6a6ba26038 R14: 00007f6a6ba25fa0 R15: 00007ffd833a88d8 [ 976.483134][T21713] [ 976.584449][T21712] -: renamed from syzkaller0 [ 977.129445][T21734] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5822'. [ 977.217211][T21739] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5825'. [ 977.443304][T21629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 977.596613][T21755] netlink: 'syz.1.5830': attribute type 29 has an invalid length. [ 977.607114][T21755] netlink: 'syz.1.5830': attribute type 29 has an invalid length. [ 977.674282][T21629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 977.781966][T21756] netlink: 'syz.1.5830': attribute type 29 has an invalid length. [ 977.819485][T21629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 977.832782][T21629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 977.854563][T21755] netlink: 'syz.1.5830': attribute type 29 has an invalid length. [ 977.933263][T21760] netlink: 'syz.4.5832': attribute type 4 has an invalid length. [ 978.062607][T21760] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5832'. [ 978.179259][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 978.451740][T21629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.538532][T21629] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.565115][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 978.594551][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 978.646225][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 978.669818][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.695044][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.702357][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.782218][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 978.815944][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 978.853077][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.860335][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.881123][T21784] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5837'. [ 978.918226][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 979.565201][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 979.593922][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 979.615272][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 979.650378][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 979.676526][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.792788][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 979.845072][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.870438][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 979.904944][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.917676][T21809] FAULT_INJECTION: forcing a failure. [ 979.917676][T21809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.935980][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 979.949788][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.996985][T21809] CPU: 0 PID: 21809 Comm: syz.4.5842 Not tainted syzkaller #0 [ 980.004541][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 980.014642][T21809] Call Trace: [ 980.017962][T21809] [ 980.020926][T21809] dump_stack_lvl+0x188/0x24e [ 980.025654][T21809] ? show_regs_print_info+0x12/0x12 [ 980.030895][T21809] ? load_image+0x410/0x410 [ 980.035431][T21809] ? __might_fault+0xa6/0x120 [ 980.040147][T21809] should_fail_ex+0x390/0x4c0 [ 980.044859][T21809] copyin+0x1b/0x120 [ 980.048794][T21809] _copy_from_iter+0x559/0x1130 [ 980.053692][T21809] ? copyout_mc+0x110/0x110 [ 980.058228][T21809] ? __virt_addr_valid+0x188/0x540 [ 980.063373][T21809] ? __virt_addr_valid+0x188/0x540 [ 980.068520][T21809] ? __virt_addr_valid+0x467/0x540 [ 980.073670][T21809] ? __phys_addr_symbol+0x2b/0x70 [ 980.078734][T21809] ? __check_object_size+0x4f6/0xa70 [ 980.084056][T21809] netlink_sendmsg+0x755/0xbd0 [ 980.088868][T21809] ? netlink_getsockopt+0x550/0x550 [ 980.094114][T21809] ? apparmor_socket_sendmsg+0x8a/0x330 [ 980.099699][T21809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 980.105028][T21809] ? security_socket_sendmsg+0x7c/0xa0 [ 980.110531][T21809] ? netlink_getsockopt+0x550/0x550 [ 980.115858][T21809] ____sys_sendmsg+0x5ed/0x9a0 [ 980.120670][T21809] ? __sys_sendmsg_sock+0x30/0x30 [ 980.125738][T21809] ? __import_iovec+0x306/0x510 [ 980.130627][T21809] ? import_iovec+0x6f/0xa0 [ 980.135172][T21809] ___sys_sendmsg+0x2a2/0x360 [ 980.139891][T21809] ? __sys_sendmsg+0x2a0/0x2a0 [ 980.144706][T21809] ? __lock_acquire+0x7c40/0x7c40 [ 980.149796][T21809] __se_sys_sendmsg+0x1c3/0x2b0 [ 980.154728][T21809] ? __x64_sys_sendmsg+0x80/0x80 [ 980.159720][T21809] ? lockdep_hardirqs_on+0x94/0x140 [ 980.164955][T21809] do_syscall_64+0x4c/0xa0 [ 980.169414][T21809] ? clear_bhb_loop+0x60/0xb0 [ 980.174136][T21809] ? clear_bhb_loop+0x60/0xb0 [ 980.178857][T21809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.184874][T21809] RIP: 0033:0x7fc05e39de99 [ 980.189402][T21809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.209048][T21809] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.217498][T21809] RAX: ffffffffffffffda RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 980.225504][T21809] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 980.233518][T21809] RBP: 00007fc05f2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 980.241518][T21809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.249518][T21809] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 980.257536][T21809] [ 980.260771][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 980.292514][T21629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 980.629802][T19999] bond0: (slave wlan1): Releasing backup interface [ 980.654942][T21803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5840'. [ 981.721478][T21818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5844'. [ 981.822465][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 981.850417][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.872416][T19999] device hsr_slave_0 left promiscuous mode [ 981.926769][T19999] device hsr_slave_1 left promiscuous mode [ 981.944268][T19999] device bridge_slave_0 left promiscuous mode [ 981.953720][T19999] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.021489][T19999] device veth1_vlan left promiscuous mode [ 982.133462][T21833] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.5850'. [ 985.403814][T21849] ------------[ cut here ]------------ [ 985.409607][T21849] WARNING: CPU: 0 PID: 21849 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 985.419571][T21849] Modules linked in: [ 985.423534][T21849] CPU: 0 PID: 21849 Comm: syz.4.5854 Not tainted syzkaller #0 [ 985.431311][T21849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.441655][T21849] RIP: 0010:perf_pending_task+0x353/0x480 [ 985.447454][T21849] Code: e8 62 87 da ff 84 db 75 10 e8 f9 84 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e9 84 da ff e8 bc e6 58 ff eb e9 e8 dd 84 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 985.467618][T21849] RSP: 0018:ffffc900048d78e8 EFLAGS: 00010293 [ 985.473813][T21849] RAX: ffffffff81a79cc3 RBX: ffff8880505d2258 RCX: ffff88807d109e00 [ 985.481899][T21849] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 985.489994][T21849] RBP: ffff8880505d2020 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 985.498026][T21849] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88807d109e00 [ 985.506119][T21849] R13: ffff888055d3f960 R14: 0000000000000000 R15: 1ffff1100a0ba404 [ 985.514201][T21849] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 985.523237][T21849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.529930][T21849] CR2: 0000000000000000 CR3: 0000000036760000 CR4: 00000000003506f0 [ 985.537965][T21849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 985.546059][T21849] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 985.554147][T21849] Call Trace: [ 985.557480][T21849] [ 985.560520][T21849] task_work_run+0x1d0/0x260 [ 985.565183][T21849] ? task_work_cancel+0x220/0x220 [ 985.570324][T21849] ? do_raw_spin_unlock+0x11d/0x230 [ 985.575619][T21849] do_exit+0x9d5/0x2570 [ 985.579992][T21849] ? put_task_struct+0x80/0x80 [ 985.584820][T21849] ? ct_nmi_exit+0x145/0x1c0 [ 985.589523][T21849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 985.595569][T21849] ? _raw_spin_lock_irq+0x86/0xf0 [ 985.600716][T21849] ? lock_chain_count+0x20/0x20 [ 985.605630][T21849] ? _raw_spin_lock_irq+0xb7/0xf0 [ 985.610774][T21849] do_group_exit+0x229/0x2e0 [ 985.615435][T21849] ? lockdep_hardirqs_on+0x94/0x140 [ 985.620753][T21849] get_signal+0x1259/0x1340 [ 985.625441][T21849] arch_do_signal_or_restart+0xc4/0x1310 [ 985.631269][T21849] ? ct_nmi_exit+0x145/0x1c0 [ 985.635925][T21849] ? ct_irq_exit_irqson+0x113/0x170 [ 985.641314][T21849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 985.647361][T21849] ? get_sigframe_size+0x10/0x10 [ 985.652422][T21849] ? lock_chain_count+0x20/0x20 [ 985.657370][T21849] exit_to_user_mode_loop+0x70/0x110 [ 985.662849][T21849] exit_to_user_mode_prepare+0xee/0x180 [ 985.668466][T21849] syscall_exit_to_user_mode+0x16/0x40 [ 985.674068][T21849] do_syscall_64+0x58/0xa0 [ 985.678554][T21849] ? clear_bhb_loop+0x60/0xb0 [ 985.683345][T21849] ? clear_bhb_loop+0x60/0xb0 [ 985.688094][T21849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.694117][T21849] RIP: 0033:0x7fc05e39de99 [ 985.698590][T21849] Code: Unable to access opcode bytes at 0x7fc05e39de6f. [ 985.705715][T21849] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 985.714256][T21849] RAX: 0000000000000000 RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 985.722484][T21849] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 985.730573][T21849] RBP: 00007fc05e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 985.738609][T21849] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 985.746700][T21849] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 985.754806][T21849] [ 985.757888][T21849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 985.765223][T21849] CPU: 0 PID: 21849 Comm: syz.4.5854 Not tainted syzkaller #0 [ 985.772734][T21849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.782838][T21849] Call Trace: [ 985.786160][T21849] [ 985.789128][T21849] dump_stack_lvl+0x188/0x24e [ 985.793867][T21849] ? memcpy+0x3c/0x60 [ 985.797899][T21849] ? show_regs_print_info+0x12/0x12 [ 985.803160][T21849] ? load_image+0x410/0x410 [ 985.807730][T21849] panic+0x2d3/0x710 [ 985.811686][T21849] ? bpf_jit_dump+0xd0/0xd0 [ 985.816237][T21849] __warn+0x2f8/0x4f0 [ 985.820267][T21849] ? perf_pending_task+0x353/0x480 [ 985.825415][T21849] ? perf_pending_task+0x353/0x480 [ 985.830561][T21849] report_bug+0x2ba/0x4f0 [ 985.835016][T21849] ? perf_pending_task+0x353/0x480 [ 985.840159][T21849] handle_bug+0x3a/0x70 [ 985.844362][T21849] exc_invalid_op+0x16/0x40 [ 985.848903][T21849] asm_exc_invalid_op+0x16/0x20 [ 985.853809][T21849] RIP: 0010:perf_pending_task+0x353/0x480 [ 985.859559][T21849] Code: e8 62 87 da ff 84 db 75 10 e8 f9 84 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e9 84 da ff e8 bc e6 58 ff eb e9 e8 dd 84 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 985.879201][T21849] RSP: 0018:ffffc900048d78e8 EFLAGS: 00010293 [ 985.885315][T21849] RAX: ffffffff81a79cc3 RBX: ffff8880505d2258 RCX: ffff88807d109e00 [ 985.893318][T21849] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 985.901320][T21849] RBP: ffff8880505d2020 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 985.909332][T21849] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88807d109e00 [ 985.917358][T21849] R13: ffff888055d3f960 R14: 0000000000000000 R15: 1ffff1100a0ba404 [ 985.925386][T21849] ? perf_pending_task+0x353/0x480 [ 985.930544][T21849] ? perf_pending_task+0x353/0x480 [ 985.935692][T21849] task_work_run+0x1d0/0x260 [ 985.940317][T21849] ? task_work_cancel+0x220/0x220 [ 985.945372][T21849] ? do_raw_spin_unlock+0x11d/0x230 [ 985.950599][T21849] do_exit+0x9d5/0x2570 [ 985.954798][T21849] ? put_task_struct+0x80/0x80 [ 985.959592][T21849] ? ct_nmi_exit+0x145/0x1c0 [ 985.964214][T21849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 985.970225][T21849] ? _raw_spin_lock_irq+0x86/0xf0 [ 985.975285][T21849] ? lock_chain_count+0x20/0x20 [ 985.980173][T21849] ? _raw_spin_lock_irq+0xb7/0xf0 [ 985.985249][T21849] do_group_exit+0x229/0x2e0 [ 985.989871][T21849] ? lockdep_hardirqs_on+0x94/0x140 [ 985.995099][T21849] get_signal+0x1259/0x1340 [ 985.999656][T21849] arch_do_signal_or_restart+0xc4/0x1310 [ 986.005327][T21849] ? ct_nmi_exit+0x145/0x1c0 [ 986.009953][T21849] ? ct_irq_exit_irqson+0x113/0x170 [ 986.015186][T21849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 986.021202][T21849] ? get_sigframe_size+0x10/0x10 [ 986.026176][T21849] ? lock_chain_count+0x20/0x20 [ 986.031085][T21849] exit_to_user_mode_loop+0x70/0x110 [ 986.036409][T21849] exit_to_user_mode_prepare+0xee/0x180 [ 986.041993][T21849] syscall_exit_to_user_mode+0x16/0x40 [ 986.047488][T21849] do_syscall_64+0x58/0xa0 [ 986.051946][T21849] ? clear_bhb_loop+0x60/0xb0 [ 986.056655][T21849] ? clear_bhb_loop+0x60/0xb0 [ 986.061364][T21849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.067283][T21849] RIP: 0033:0x7fc05e39de99 [ 986.071723][T21849] Code: Unable to access opcode bytes at 0x7fc05e39de6f. [ 986.078757][T21849] RSP: 002b:00007fc05f2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 986.087199][T21849] RAX: 0000000000000000 RBX: 00007fc05e625fa0 RCX: 00007fc05e39de99 [ 986.095195][T21849] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 986.103197][T21849] RBP: 00007fc05e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 986.111197][T21849] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 986.119192][T21849] R13: 00007fc05e626038 R14: 00007fc05e625fa0 R15: 00007ffebbf302f8 [ 986.127209][T21849] [ 986.130960][T21849] Kernel Offset: disabled [ 986.135305][T21849] Rebooting in 86400 seconds..