last executing test programs: 2m31.13699796s ago: executing program 1 (id=2608): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012123) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f4, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8927, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x99, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000840), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0xd0, &(0x7f0000000600)=""/208, 0x41100, 0x0, '\x00', r7, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x1, r6], &(0x7f0000000ac0)=[{0x3, 0x1, 0x0, 0xf9c48070f00a3606}, {0x4, 0x3, 0x5, 0x4}, {0x5, 0x3, 0xa, 0x5}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) r8 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x78, &(0x7f0000000040)=r9, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r3}, 0x18) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x9, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5b97}, [@ldst={0x3, 0x3, 0x4, 0x3, 0x0, 0x84, 0xfffffffffffffffc}, @generic={0x6, 0x2, 0x7, 0x81, 0xb}, @printk={@lli}, @printk]}, &(0x7f0000000040)='syzkaller\x00', 0x69d, 0xe8, &(0x7f00000001c0)=""/232, 0x0, 0xc, '\x00', r7, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r10, r11], 0x0, 0x10, 0x7}, 0x94) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9b86ec19670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb6825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15", 0x2eb}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651", 0x1d4}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9d2537bd2c77917d4f662d263471d5f77a9016e0577754f5ec2acc3f04a86ad4434e4b1b4b12cad8ecf5afbb0ea73569216033db177cc3cf50b0326c587d59ca51a7d8132ad604390453d4d7f7a4ddbeaa1fffcdb5724465ebe8b14d5d73bc8f742c16be9b0f45a831bc16d34c0c7bb14931e6789051b3a34c906d1efc84d59b1b9dd2b14c033c5a5dbb79582d8cf1524eef9326c16e9b521eeab824121929639a92b7df1834a93fd9ab88744a832c4c00ce928f65759c4c8b1e116e55b264297552777035cd1ac57c5521ca7eaabaa98ca220793308b8a10b0d76b0460fb700996a94571fc9b17ef6eabb3689f786eeb7fd2d5a8ed3", 0xf6}], 0x1}, 0x0) 2m31.018179021s ago: executing program 1 (id=2612): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000300ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m30.942111211s ago: executing program 1 (id=2614): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000c07ad9e54112"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x404c000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a0005480100010000000000b0000b00ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6f4e9ef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 2m30.818379972s ago: executing program 1 (id=2618): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x95, &(0x7f0000000180)=""/149}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYRES32, @ANYRESHEX=r3, @ANYRES8=r2, @ANYBLOB="b10275737c370c4f663795b35673116daa155299c1db1fd1a24a4f504010bc7e84ca2eadc33aec865ef5c550f0db1adf585d057360aaa7e86d92065d3d07d46438e52e8bce86d0dd5ff9fcf7befe048379c040e8171bd7d379cd57c2e40c6a0a266412ca42d32297c7e7d198ec189c9f6533a7cc8cdb6a1970113390646bf403a8ca2fd1c426853cacef4f3f42a773f1c1bccb5a1f502097", @ANYRES16, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000001400)) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000e70000000000000544000000000000cfc9a91214d6bfc348469936c3ed53eb6ed2a304693e090a155eaa18", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000030000001200000001000000", @ANYRES32, @ANYBLOB="0000200030e947525e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x80, 0x6, 0x6, 0x68, 0x3, 0x0, 0x3, 0x30084, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbd, 0x1, @perf_bp={&(0x7f0000000300), 0x7}, 0x0, 0xc, 0xc00, 0x6, 0x5, 0x80000001, 0x5, 0x0, 0x5, 0x0, 0xff}, r0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x6, 0x4, 0xa, 0xa, 0x0, 0x9, 0x52080, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x108001, 0xffff, 0x7fffffff, 0x7, 0x3, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xe, r6, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)="31be3403f221c7b934fe7e3e767ce905000000f3eb4529816dcec1cf969b2b73fb72d1a565a8816b4cb1efb51f8751f2362c1067338b0ff88768de81e4a50daf775364710a18f19b8462edcb851490f80789134bf9c6eae17c2f87441935f8e4000000000000007dc4f1dcee4f3a4a4e22465d3dd39e3f33aa4243a7376bd2044b6423c2355fdcc132c1edca09fb2086bd414a6af2a22544f4a29564081984a0b6ac4e6ae7d148a9707b19532fddf8bf0b097b9415ea76f2754b18b724dac7404d45a3cbeedd51cbf1cd24", 0xffffffffffffff3c}, {&(0x7f00000008c0)="02b61717010b271f252aa30fad4a787a53cdc14e579669a211e188b43a11a834880180057501f2fbd1f9dfa4545cb60165092cc0f180765af6af75981a9d73a91b3c226d49393bf0e06494a58ffe2fe14faa232fa78c93df6bbd5c5b491fa09163b07982d9a906ddd429ff7440233f60b2cf64511b117a33778c5dfa3f8e8cc5861dacaeda5df65a63ea251f52e7214b615575a03ba32130af529f2c65", 0x9d}, {&(0x7f0000000700)="c14bbc8efa8f527c2394d3cde0fdda67e322fb7ce9b0604b004f07000000941d95397b14dd567d0d684064b81c92a837", 0x30}], 0x3}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.627934826s ago: executing program 4 (id=4283): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x40020400, &(0x7f0000000740)="a4c7fbc44183456786d58812085021b0699f66607dcc4bbb467b1b4a11e0623c03f60b10b3b2b1a68365a772115aaaf05a6b1399158fa3b58ba0e6e331f3ad503343df29be7dc9caf0cd720d803b21f1e36181dc7be7ff012b26614a8bd488617a222280c7084739653fe6c056146fb142179e18d9c38cc5f481539739c96ecbdd6f356a0bdc086caf2bbcffa338784ddb83aca49ac367b4f962ea4e34c8e49b44257f1d513294d434d1144aca82ed084be27b3724a3178f1c41da290f9bd94347d67ea039c2880e9a98b8b1e45268fdce4974f58f4ffbf23fc1025c", 0xdc, &(0x7f0000000440), &(0x7f0000000840), &(0x7f0000000880)="c0b9d1071a9372d02a8d6197805d14a87946b9862cef11cd7acacd9dd9604bfd6427f9fbaecd4e7fd1f9698dd05378a7f3e4c503fe956143770dda7e3274dba7d4c37e4acf085952cb3b35c3ff2ec2b5c9203bd0729c91b1ef2cd8ea0204a1be8e098af3ee8be634") perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x92, 0x0, 0x0, 0x2, 0x0, 0xbe, 0x840, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0x4}, 0x110000, 0x100000001, 0x3, 0x2, 0xfff, 0x6, 0x1, 0x0, 0x8, 0x0, 0xffff}, r8, 0x3, r7, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x8001, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2eb}, {&(0x7f0000002b40)="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", 0x1d4}], 0x2}, 0x8400) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x64}, 0x2}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r1}, 0xc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9d2537bd2c77917d4f662d263471d5f77a9016e0577754f5ec2acc3f04a86ad4434e4b1b4b12cad8ecf5afbb0ea73569216033db177cc3cf50b0326c587d59ca51a7d8132ad604390453d4d7f7a4ddbeaa1fffcdb5724465ebe8b14d5d73bc8f742c16be9b0f45a831bc16d34c0c7bb14931e6789051b3a34c906d1efc84d59b1b9dd2b14c033c5a5dbb79582d8cf1524eef9326c16e9b521eeab824121929639a92b7df1834a93fd9ab88744a832c4c00ce928f65759c4c8b1e116e55b264297552777035cd1ac57c5521ca7eaabaa98ca220793308b8a10b0d76b0460fb700996a94571fc9b17ef6eabb3689f786eeb7fd2d5a8ed3", 0xf6}], 0x1}, 0x0) 2.856384494s ago: executing program 0 (id=4326): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x47e5e8f367377498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\r,-\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0xb85, 0x1, 0x1, 0x10202, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r7}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200edff03000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x23, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x3}, @ldst={0x0, 0x1, 0x2, 0x5, 0x2, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x728, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x30, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r2, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r11, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x10, 0x5}], 0x10, 0xff}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) close(r4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 2.564464196s ago: executing program 0 (id=4330): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012123) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f4, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8927, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x99, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000840), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0xd0, &(0x7f0000000600)=""/208, 0x41100, 0x0, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x1, r4], &(0x7f0000000ac0)=[{0x3, 0x1, 0x0, 0xf9c48070f00a3606}, {0x4, 0x3, 0x5, 0x4}, {0x5, 0x3, 0xa, 0x5}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x78, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5b97}, [@ldst={0x3, 0x3, 0x4, 0x3, 0x0, 0x84, 0xfffffffffffffffc}, @generic={0x6, 0x2, 0x7, 0x81, 0xb}, @printk={@lli}, @printk]}, &(0x7f0000000040)='syzkaller\x00', 0x69d, 0xe8, &(0x7f00000001c0)=""/232, 0x0, 0xc, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r7, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 2.381961688s ago: executing program 0 (id=4332): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x2b, &(0x7f0000000900), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000b00ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 2.343321968s ago: executing program 5 (id=4333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010009000000000000000000000000000000e80000000000000000"], 0x50) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 2.114487319s ago: executing program 0 (id=4337): bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb4) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c333, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000000000096bf35"], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x830d}, 0x4800, 0x2, 0xfffffffe, 0x6, 0x0, 0x661, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="809c", 0x2}], 0x1}, 0x240c0841) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="809c", 0x2}], 0x1}, 0x240c0841) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x48044) (async) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x48044) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000042) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) 1.84047345s ago: executing program 0 (id=4340): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x47e5e8f367377498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\r,-\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0xb85, 0x1, 0x1, 0x10202, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r7}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200edff03000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x23, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x3}, @ldst={0x0, 0x1, 0x2, 0x5, 0x2, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x728, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x30, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r2, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r11, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x10, 0x5}], 0x10, 0xff}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) close(r4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 1.680588011s ago: executing program 3 (id=4343): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012123) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f4, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8927, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x99, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000840), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0xd0, &(0x7f0000000600)=""/208, 0x41100, 0x0, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x1, r4], &(0x7f0000000ac0)=[{0x3, 0x1, 0x0, 0xf9c48070f00a3606}, {0x4, 0x3, 0x5, 0x4}, {0x5, 0x3, 0xa, 0x5}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x78, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5b97}, [@ldst={0x3, 0x3, 0x4, 0x3, 0x0, 0x84, 0xfffffffffffffffc}, @generic={0x6, 0x2, 0x7, 0x81, 0xb}, @printk={@lli}, @printk]}, &(0x7f0000000040)='syzkaller\x00', 0x69d, 0xe8, &(0x7f00000001c0)=""/232, 0x0, 0xc, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r7, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 749.525356ms ago: executing program 3 (id=4345): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0xc03e) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="5c412ad77446e6d6a0981cfc7e7fdb134cdcdb0000", 0x15}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x10, 0x2, 0x0) 689.245777ms ago: executing program 0 (id=4346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a0000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) close(r0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0xc20, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5, 0x8, 0x1, 0x0, 0xb, 0x802, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0xe}, 0x400, 0x8, 0x1ff, 0x1, 0x6f6, 0x7, 0x80, 0x0, 0x1a2, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 688.728677ms ago: executing program 5 (id=4347): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0xff8d, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041) 660.517327ms ago: executing program 3 (id=4348): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0xa98, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) close(0x3) 596.861657ms ago: executing program 2 (id=4349): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="141c000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 579.493777ms ago: executing program 2 (id=4350): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x30, 0x0, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b8e7000400000100", &(0x7f0000000300)=""/8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) close(r8) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x12, &(0x7f0000000200), 0x4) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r10, 0x8) r11 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x2, 0x0, 0x3, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000080)) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x40) 550.161448ms ago: executing program 3 (id=4351): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x13, 0x0, 0x0) 504.340528ms ago: executing program 5 (id=4352): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002ffc300ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 459.994288ms ago: executing program 3 (id=4353): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0xfffffffffffffd7d, 0x2}}, &(0x7f0000000680)=""/173, 0xd, 0xad, 0x0, 0x7}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000690005"], 0xfe33) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640)) ioctl$SIOCSIFHWADDR(r0, 0xc0045878, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001240)={r7, 0x3, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r0, &(0x7f0000004040)={&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000001b40)=""/214, 0xd6}, {&(0x7f0000001c40)=""/183, 0xb7}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/158, 0x9e}, {&(0x7f0000002dc0)=""/80, 0x50}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/130, 0x82}, {&(0x7f0000003f00)=""/108, 0x6c}], 0x8, &(0x7f0000004000)=[@cred={{0x1c}}], 0x20}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) recvmsg(r0, &(0x7f0000001a00)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)=""/166, 0xa6}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000940)=""/179, 0xb3}], 0x4, &(0x7f0000000a00)=""/4096, 0x1000}, 0x10001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000480), 0x0, 0x0, &(0x7f00000004c0)=""/81, 0x51}}, 0x10) 363.780338ms ago: executing program 5 (id=4354): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x805}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1db3, 0xfffa}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xb0]}}, 0x0, 0x2d}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 257.341179ms ago: executing program 4 (id=4355): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x80, 0x8, 0x0, 0x0, 0x80000000000, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010075, 0x37ed, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0xa, 0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) 256.765699ms ago: executing program 2 (id=4356): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012123) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f4, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8927, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x99, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000840), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0xd0, &(0x7f0000000600)=""/208, 0x41100, 0x0, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x1, r4], &(0x7f0000000ac0)=[{0x3, 0x1, 0x0, 0xf9c48070f00a3606}, {0x4, 0x3, 0x5, 0x4}, {0x5, 0x3, 0xa, 0x5}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x78, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5b97}, [@ldst={0x3, 0x3, 0x4, 0x3, 0x0, 0x84, 0xfffffffffffffffc}, @generic={0x6, 0x2, 0x7, 0x81, 0xb}, @printk={@lli}, @printk]}, &(0x7f0000000040)='syzkaller\x00', 0x69d, 0xe8, &(0x7f00000001c0)=""/232, 0x0, 0xc, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r7, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 254.956559ms ago: executing program 3 (id=4357): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x47e5e8f367377498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\r,-\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0xb85, 0x1, 0x1, 0x10202, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r7}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200edff03000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x23, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x3}, @ldst={0x0, 0x1, 0x2, 0x5, 0x2, 0xffffffffffffffc0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x728, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x30, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r2, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r11, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x10, 0x5}], 0x10, 0xff}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) close(r4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 190.370369ms ago: executing program 5 (id=4358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010009000000000000000000000000000000e80000000000000000"], 0x50) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 189.770699ms ago: executing program 2 (id=4359): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0xc03e) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="5c412ad77446e6d6a0981cfc7e7fdb134cdcdb0000", 0x15}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x10, 0x2, 0x0) 139.267169ms ago: executing program 4 (id=4360): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x56940, 0x0) socket$kcm(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x5d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r0, 0x0, 0xc7, &(0x7f0000000640)='\xa8\xef\xb1\xee\x17\xf5z\\\xea\xe3\xca\xa6\xca\xe0\xae\xccBbvL\xcf\x81\x89\x02i9\xf24q\r\x8b\x13\xe5\xf3\x81\xdavr\xba`>\xc9\xf4S\x9a-\xed\xf9\xbd\x16>\xf8\xe6s\xbf\xfe\x90]\xbe\f\xf4\xeb\xf5\xdcBG\xfe\x9e\xfaC\x1b7\x9c\xdc\xd5M\f\xb5\xee\x15\xf2u\xdd\x1bUO\xce\a\xfc\x1b\x9b\x19\xab@r\x91\xb7{\xe4\xc5\xc9\xc9@\\\xe5\xb1\x83\xa2Un\x1c\t\x91\x86#\xd2H3\xbb\xac\xe2z\xd3?\x1eR\x14\xf4\xd0\x86\xd3drNr9\xce\xac\xad\x94\x94\x1f\xeb\xba\x826\xcf\xd7\x0f\xe0\xc5\x8d\xa5(\x11\xd3\x12\xbd\xbbs\x15\xb8\xa4\xb6\xa2\xcc\xb3\x9f^\xe7\x80\x06\xae\xb6\x85\xa3h\xfb\'\b\x02%%\x0e\x00\x00\x00\x00\x00\x00\x00Z\x8e\xb4\xdd\xc8\xfeTP'}, 0x61) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000080000", @ANYRES32, @ANYRES32=r4], 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000030000000300"/21], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000036c0)=""/4110, 0x100e}], 0xa}, 0x40012100) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa11"], 0xfdef) 89.26482ms ago: executing program 2 (id=4361): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0xa98, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) close(0x3) 15.0117ms ago: executing program 2 (id=4362): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) 0s ago: executing program 5 (id=4363): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x410a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x7}, 0xffffffffffffffff, 0x4000000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x3, 0x53, &(0x7f0000000200)=""/83, 0x1f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xd, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f00000001c0)={'full', 0x20, 0x1000000008004}, 0x2f) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r1, 0x8008743f, &(0x7f0000000180)) socketpair(0x10, 0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x40000) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x3e8) kernel console output (not intermixed with test programs): bridge0: port 3(ipvlan1) entered disabled state [ 364.532436][T13828] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 364.662581][T13830] netlink: 'syz.4.3109': attribute type 10 has an invalid length. [ 364.706984][T13552] device veth1_vlan entered promiscuous mode [ 364.713759][T13832] netlink: 'syz.0.3111': attribute type 41 has an invalid length. [ 364.753726][ T154] device veth1_macvtap left promiscuous mode [ 364.760063][ T154] device veth0_macvtap left promiscuous mode [ 364.766583][T13833] delete_channel: no stack [ 364.994371][T13850] FAULT_INJECTION: forcing a failure. [ 364.994371][T13850] name failslab, interval 1, probability 0, space 0, times 0 [ 365.007272][T13850] CPU: 0 PID: 13850 Comm: syz.5.3117 Not tainted syzkaller #0 [ 365.014734][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.024791][T13850] Call Trace: [ 365.028064][T13850] [ 365.030996][T13850] dump_stack_lvl+0x168/0x230 [ 365.035671][T13850] ? kmem_cache_alloc+0x100/0x290 [ 365.040707][T13850] ? ip6_pol_route+0x8ed/0x1290 [ 365.045570][T13850] ? show_regs_print_info+0x20/0x20 [ 365.050764][T13850] ? load_image+0x3b0/0x3b0 [ 365.055264][T13850] ? tun_chr_write_iter+0x112/0x1e0 [ 365.060474][T13850] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.066577][T13850] should_fail+0x38c/0x4c0 [ 365.071027][T13850] should_failslab+0x5/0x20 [ 365.075529][T13850] slab_pre_alloc_hook+0x51/0xc0 [ 365.080489][T13850] __kmalloc_node+0x6e/0x3b0 [ 365.085084][T13850] ? memcg_alloc_page_obj_cgroups+0x81/0x120 [ 365.091069][T13850] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 365.096887][T13850] slab_post_alloc_hook+0xba/0x380 [ 365.102012][T13850] ? dst_alloc+0x101/0x160 [ 365.106418][T13850] kmem_cache_alloc+0x100/0x290 [ 365.111264][T13850] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 365.116892][T13850] dst_alloc+0x101/0x160 [ 365.121144][T13850] ip6_pol_route+0x8ed/0x1290 [ 365.125821][T13850] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 365.131468][T13850] fib6_rule_lookup+0x2fc/0x570 [ 365.136322][T13850] ? ip6_route_input_lookup+0xc0/0xc0 [ 365.141752][T13850] ? fib6_lookup+0x2c0/0x2c0 [ 365.146361][T13850] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 365.152108][T13850] ip6_route_input+0x6bf/0xa40 [ 365.156898][T13850] ? ip6_multipath_l3_keys+0x5f0/0x5f0 [ 365.162394][T13850] ? __lock_acquire+0x7c60/0x7c60 [ 365.167408][T13850] ? ip6_rcv_finish_core+0x21d/0x420 [ 365.172694][T13850] ip6_rcv_finish+0x136/0x240 [ 365.177378][T13850] ? refcount_add+0x80/0x80 [ 365.181890][T13850] NF_HOOK+0x2d6/0x360 [ 365.185959][T13850] ? refcount_add+0x80/0x80 [ 365.190447][T13850] ? ip6_rcv_core+0x1620/0x1620 [ 365.195298][T13850] ? refcount_add+0x80/0x80 [ 365.199811][T13850] ? ip6_rcv_finish_core+0x420/0x420 [ 365.205085][T13850] __netif_receive_skb+0xcc/0x290 [ 365.210098][T13850] ? ktime_get_with_offset+0x2d7/0x320 [ 365.215563][T13850] netif_receive_skb+0x19e/0x6c0 [ 365.220511][T13850] ? rcu_nmi_exit+0x6f/0xf0 [ 365.225010][T13850] ? netif_receive_skb_core+0x210/0x210 [ 365.230574][T13850] tun_rx_batched+0x5a1/0x6d0 [ 365.235258][T13850] ? local_bh_enable+0x20/0x20 [ 365.240027][T13850] ? __local_bh_enable_ip+0x12a/0x1b0 [ 365.245387][T13850] ? read_lock_is_recursive+0x10/0x10 [ 365.250750][T13850] ? __local_bh_enable_ip+0x12a/0x1b0 [ 365.256115][T13850] ? _local_bh_enable+0xa0/0xa0 [ 365.260980][T13850] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 365.266957][T13850] tun_get_user+0x23f0/0x38d0 [ 365.271618][T13850] ? perf_trace_lock+0x2ec/0x370 [ 365.276583][T13850] ? tun_ring_recv+0xc30/0xc30 [ 365.281365][T13850] ? rcu_lock_release+0x5/0x20 [ 365.286120][T13850] ? __lock_acquire+0x7c60/0x7c60 [ 365.291152][T13850] tun_chr_write_iter+0x112/0x1e0 [ 365.296183][T13850] vfs_write+0x712/0xd00 [ 365.300446][T13850] ? file_end_write+0x250/0x250 [ 365.305309][T13850] ? __fget_files+0x40f/0x480 [ 365.309991][T13850] ? __fdget_pos+0x1e2/0x370 [ 365.314574][T13850] ? ksys_write+0x71/0x250 [ 365.319008][T13850] ksys_write+0x14d/0x250 [ 365.323360][T13850] ? __ia32_sys_read+0x80/0x80 [ 365.328110][T13850] ? lockdep_hardirqs_on+0x94/0x140 [ 365.333309][T13850] do_syscall_64+0x4c/0xa0 [ 365.337748][T13850] ? clear_bhb_loop+0x30/0x80 [ 365.342428][T13850] ? clear_bhb_loop+0x30/0x80 [ 365.347109][T13850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.353101][T13850] RIP: 0033:0x7f4071ac6fc9 [ 365.357530][T13850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.377147][T13850] RSP: 002b:00007f406fd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.385575][T13850] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 365.393543][T13850] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 365.401517][T13850] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 365.409479][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.417454][T13850] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 365.425458][T13850] [ 365.498392][ T154] team0 (unregistering): Port device geneve1 removed [ 365.575235][ T154] team0 (unregistering): Port device team_slave_1 removed [ 365.589179][ T154] team0 (unregistering): Port device team_slave_0 removed [ 365.701876][T13832] netlink: 'syz.0.3111': attribute type 41 has an invalid length. [ 365.795860][T13851] mac80211_hwsim hwsim25 »»»»»»: renamed from wlan0 [ 365.847919][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 365.898500][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.915173][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.935185][T13552] device veth0_macvtap entered promiscuous mode [ 365.991502][T13552] device veth1_macvtap entered promiscuous mode [ 366.041205][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.054580][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.080040][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.102087][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.112461][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.130143][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.143695][T13552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.160318][T13868] netlink: 'syz.5.3123': attribute type 10 has an invalid length. [ 366.192154][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3123'. [ 366.201412][T13868] bridge0: port 3(ipvlan1) entered blocking state [ 366.264809][T13868] bridge0: port 3(ipvlan1) entered disabled state [ 366.285907][T13868] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 366.330701][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.346396][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.360183][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.369833][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.380012][T13872] netlink: 'syz.3.3125': attribute type 10 has an invalid length. [ 366.394137][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.418982][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.429408][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.440691][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.451068][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.467850][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.478707][T13552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.540466][T13552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.579562][T13552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.598516][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.619522][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.650502][T13552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.661527][T13552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.672138][T13552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.686687][T13552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.689943][T13883] netlink: 'syz.5.3129': attribute type 41 has an invalid length. [ 366.716613][T13883] netlink: 'syz.5.3129': attribute type 41 has an invalid length. [ 366.831087][ T4563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.855329][ T4563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.866125][ T433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.875357][ T433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.894706][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.932882][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.123192][T13894] ªªªªªª: renamed from vlan0 [ 367.536990][T13912] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 367.581865][T13912] netlink: 'syz.4.3139': attribute type 3 has an invalid length. [ 367.632095][T13912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3139'. [ 368.232968][T13926] chnl_net:caif_netlink_parms(): no params data found [ 368.333715][T13926] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.351224][T13926] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.375678][T13926] device bridge_slave_0 entered promiscuous mode [ 368.415094][T13926] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.427748][T13961] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 368.446185][T13926] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.453691][T13961] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3151'. [ 368.471290][T13926] device bridge_slave_1 entered promiscuous mode [ 368.570812][T13926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.607929][T13926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.727391][T13926] team0: Port device team_slave_0 added [ 368.747569][T13926] team0: Port device team_slave_1 added [ 368.800600][T13926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.817878][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.850604][T13926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.864194][T13926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.877839][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.933961][T13926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.067648][T13926] device hsr_slave_0 entered promiscuous mode [ 369.080539][T13926] device hsr_slave_1 entered promiscuous mode [ 369.107253][T13926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.126296][T13926] Cannot create hsr debugfs directory [ 369.319722][T13996] netlink: 'syz.3.3164': attribute type 41 has an invalid length. [ 369.453910][T13996] netlink: 'syz.3.3164': attribute type 41 has an invalid length. [ 369.657190][T14006] netlink: 'syz.4.3167': attribute type 41 has an invalid length. [ 369.744217][T14006] netlink: 'syz.4.3167': attribute type 41 has an invalid length. [ 369.852119][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 369.943040][T14014] FAULT_INJECTION: forcing a failure. [ 369.943040][T14014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.956580][T14014] CPU: 0 PID: 14014 Comm: syz.3.3170 Not tainted syzkaller #0 [ 369.964061][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.974117][T14014] Call Trace: [ 369.977391][T14014] [ 369.980311][T14014] dump_stack_lvl+0x168/0x230 [ 369.984980][T14014] ? show_regs_print_info+0x20/0x20 [ 369.990163][T14014] ? load_image+0x3b0/0x3b0 [ 369.994650][T14014] ? __lock_acquire+0x7c60/0x7c60 [ 369.999658][T14014] ? vfs_write+0x84d/0xd00 [ 370.004057][T14014] should_fail+0x38c/0x4c0 [ 370.008458][T14014] _copy_from_user+0x2e/0x170 [ 370.013116][T14014] __sys_bpf+0x21b/0x670 [ 370.017347][T14014] ? bpf_link_show_fdinfo+0x340/0x340 [ 370.022709][T14014] ? vtime_user_exit+0x2dc/0x400 [ 370.027662][T14014] __x64_sys_bpf+0x78/0x90 [ 370.032061][T14014] do_syscall_64+0x4c/0xa0 [ 370.036471][T14014] ? clear_bhb_loop+0x30/0x80 [ 370.041126][T14014] ? clear_bhb_loop+0x30/0x80 [ 370.045789][T14014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.051662][T14014] RIP: 0033:0x7fabcc3b5fc9 [ 370.056062][T14014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.075649][T14014] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.084051][T14014] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 370.092007][T14014] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 0000000000000005 [ 370.099958][T14014] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 370.107909][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.115859][T14014] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 370.123823][T14014] [ 370.405578][T14031] bond0: (slave bond_slave_0): Releasing backup interface [ 370.539957][T13926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.574814][T14034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3176'. [ 370.603515][T14034] bridge0: port 3(ipvlan1) entered blocking state [ 370.610287][T14034] bridge0: port 3(ipvlan1) entered disabled state [ 370.631663][T14034] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.652593][T13926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.673326][T13926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.688909][T13926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.946861][T14060] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3183'. [ 370.988908][T13926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.011712][T14063] bond_slave_1: mtu less than device minimum [ 371.066942][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.086297][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.158322][T13926] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.195175][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.210106][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.227962][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.235116][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.271653][T14073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3188'. [ 371.286464][T14071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3189'. [ 371.296061][T14071] bridge0: port 3(ipvlan1) entered blocking state [ 371.302968][T14071] bridge0: port 3(ipvlan1) entered disabled state [ 371.311282][T14071] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 371.312613][T14073] __sock_release: fasync list not empty! [ 371.339596][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.348350][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.368526][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.380168][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.387289][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.403636][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.444334][T14076] validate_nla: 7 callbacks suppressed [ 371.444348][T14076] netlink: 'syz.5.3190': attribute type 10 has an invalid length. [ 371.464856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.489063][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.506559][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.539302][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.573763][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.600005][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.623496][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.638955][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.659472][T13926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.680062][T13926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.722405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.730910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.736230][T14092] netlink: 'syz.5.3196': attribute type 1 has an invalid length. [ 371.756487][T14092] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.3196'. [ 371.814315][T14097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3198'. [ 371.848508][T14097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3198'. [ 371.870428][T14099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3198'. [ 371.932341][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 371.939245][T14097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3198'. [ 372.023943][T14105] netlink: 'syz.5.3200': attribute type 10 has an invalid length. [ 372.039098][T14105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3200'. [ 372.066170][T14105] bridge0: port 3(ipvlan1) entered blocking state [ 372.079917][T14105] bridge0: port 3(ipvlan1) entered disabled state [ 372.098243][T14105] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 372.178669][T13926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.226965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.243387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.328526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.349429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.474971][T14114] netlink: 'syz.3.3202': attribute type 10 has an invalid length. [ 372.622032][T14124] netlink: 'syz.4.3205': attribute type 10 has an invalid length. [ 372.650651][T14124] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.665442][T14124] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.692422][T14124] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.715792][T14124] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.765796][T14124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.791571][T14124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.801324][T14124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.832048][T14124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.858855][T14124] team0: Port device geneve1 added [ 372.865005][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.880893][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.893854][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.912691][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.946436][T13926] device veth0_vlan entered promiscuous mode [ 372.961557][T13926] device veth1_vlan entered promiscuous mode [ 373.047097][ T154] device veth0_to_team left promiscuous mode [ 373.060892][ T154] Ÿë: port 1(veth0_to_team) entered disabled state [ 373.079865][ T154] device hsr_slave_0 left promiscuous mode [ 373.087347][ T154] device hsr_slave_1 left promiscuous mode [ 373.095189][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.115320][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.128777][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.136981][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.339847][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.348583][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.358354][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.397186][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.433242][T13926] device veth0_macvtap entered promiscuous mode [ 373.450905][T13926] device veth1_macvtap entered promiscuous mode [ 373.490898][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.502933][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.512884][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.523527][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.533443][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.543973][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.554143][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.568872][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.584441][T13926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.601627][T14143] netlink: 'syz.3.3212': attribute type 10 has an invalid length. [ 373.611517][T14143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3212'. [ 373.632746][T14143] bridge0: port 3(ipvlan1) entered blocking state [ 373.639393][T14143] bridge0: port 3(ipvlan1) entered disabled state [ 373.647920][T14143] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 373.664603][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.674960][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.684743][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.697595][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.709670][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.720215][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.731017][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.741252][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.752153][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.762493][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.773466][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.785463][T13926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.826805][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.855293][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.882729][T13926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.908325][T13926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.921917][T13926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.931149][T13926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.002377][ T4191] Bluetooth: hci0: command 0x040f tx timeout [ 374.048119][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.087873][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.145118][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.154472][T14158] netlink: 'syz.4.3217': attribute type 10 has an invalid length. [ 374.170333][ T433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.178954][ T433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.199754][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 374.472396][T14163] netlink: 'syz.0.3135': attribute type 10 has an invalid length. [ 375.193589][T14177] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 375.236094][T14177] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3225'. [ 375.477929][T14182] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 376.021629][T14197] ªªªªªª: renamed from vlan0 [ 376.095113][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 376.608418][T14223] validate_nla: 4 callbacks suppressed [ 376.608433][T14223] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 377.058593][T14233] netlink: 'syz.0.3246': attribute type 41 has an invalid length. [ 377.100127][T14233] netlink: 'syz.0.3246': attribute type 41 has an invalid length. [ 377.528441][T14250] __nla_validate_parse: 1 callbacks suppressed [ 377.528459][T14250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3252'. [ 377.662906][T14254] FAULT_INJECTION: forcing a failure. [ 377.662906][T14254] name failslab, interval 1, probability 0, space 0, times 0 [ 377.749453][T14254] CPU: 0 PID: 14254 Comm: syz.4.3254 Not tainted syzkaller #0 [ 377.756975][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.767057][T14254] Call Trace: [ 377.770380][T14254] [ 377.773325][T14254] dump_stack_lvl+0x168/0x230 [ 377.778044][T14254] ? show_regs_print_info+0x20/0x20 [ 377.783274][T14254] ? load_image+0x3b0/0x3b0 [ 377.787812][T14254] ? __might_sleep+0xf0/0xf0 [ 377.792422][T14254] ? __lock_acquire+0x7c60/0x7c60 [ 377.797475][T14254] should_fail+0x38c/0x4c0 [ 377.801928][T14254] should_failslab+0x5/0x20 [ 377.806443][T14254] slab_pre_alloc_hook+0x51/0xc0 [ 377.811400][T14254] __kmalloc_node+0x6e/0x3b0 [ 377.815998][T14254] ? kvmalloc_node+0x84/0x130 [ 377.820705][T14254] kvmalloc_node+0x84/0x130 [ 377.825231][T14254] generic_map_delete_batch+0x221/0x650 [ 377.830808][T14254] ? __fget_files+0x40f/0x480 [ 377.835504][T14254] ? bpf_map_inc_not_zero+0x100/0x100 [ 377.840899][T14254] ? __fdget+0x18b/0x210 [ 377.845158][T14254] ? bpf_map_inc_not_zero+0x100/0x100 [ 377.850527][T14254] bpf_map_do_batch+0x466/0x600 [ 377.855403][T14254] __sys_bpf+0x601/0x670 [ 377.859664][T14254] ? bpf_link_show_fdinfo+0x340/0x340 [ 377.865068][T14254] ? vtime_user_exit+0x2dc/0x400 [ 377.870034][T14254] __x64_sys_bpf+0x78/0x90 [ 377.874460][T14254] do_syscall_64+0x4c/0xa0 [ 377.878885][T14254] ? clear_bhb_loop+0x30/0x80 [ 377.883567][T14254] ? clear_bhb_loop+0x30/0x80 [ 377.888266][T14254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.894171][T14254] RIP: 0033:0x7f8402473fc9 [ 377.898597][T14254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.918209][T14254] RSP: 002b:00007f84006db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.926633][T14254] RAX: ffffffffffffffda RBX: 00007f84026cafa0 RCX: 00007f8402473fc9 [ 377.934606][T14254] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 377.942579][T14254] RBP: 00007f84006db090 R08: 0000000000000000 R09: 0000000000000000 [ 377.950572][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.958548][T14254] R13: 00007f84026cb038 R14: 00007f84026cafa0 R15: 00007fffea0231f8 [ 377.966551][T14254] [ 378.140995][T14261] netlink: 'syz.3.3257': attribute type 10 has an invalid length. [ 378.265460][T14268] netlink: 'syz.5.3258': attribute type 10 has an invalid length. [ 378.408972][T14268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.413668][T14276] netlink: 'syz.4.3262': attribute type 41 has an invalid length. [ 378.442036][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.448407][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.484721][T14268] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 378.539019][T14276] netlink: 'syz.4.3262': attribute type 41 has an invalid length. [ 379.229631][T14296] netlink: 'syz.3.3269': attribute type 10 has an invalid length. [ 379.342085][T14296] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.366605][T14296] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.673650][T14309] netlink: 'syz.2.3272': attribute type 10 has an invalid length. [ 379.717415][T14309] bond0: (slave bond_slave_0): Releasing backup interface [ 379.851296][T14330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3280'. [ 380.125867][T14337] netlink: 'syz.5.3282': attribute type 10 has an invalid length. [ 381.964499][T14402] validate_nla: 1 callbacks suppressed [ 381.964514][T14402] netlink: 'syz.5.3308': attribute type 10 has an invalid length. [ 382.008772][T14402] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3308'. [ 382.022082][T14402] bridge0: port 3(ipvlan1) entered blocking state [ 382.039496][T14402] bridge0: port 3(ipvlan1) entered disabled state [ 382.056098][T14402] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 382.436576][T14412] netlink: 'syz.5.3314': attribute type 41 has an invalid length. [ 382.482126][T14412] netlink: 'syz.5.3314': attribute type 41 has an invalid length. [ 383.177384][T14438] netlink: 'syz.4.3318': attribute type 10 has an invalid length. [ 383.210055][T14446] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 383.347080][T14457] netlink: 'syz.2.3329': attribute type 21 has an invalid length. [ 383.363778][T14457] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3329'. [ 383.388763][T14458] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3327'. [ 383.680914][T14477] netlink: 'syz.5.3336': attribute type 41 has an invalid length. [ 383.716217][T14477] netlink: 'syz.5.3336': attribute type 41 has an invalid length. [ 383.832425][T14484] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.3338'. [ 383.900645][T14481] netlink: 'syz.2.3338': attribute type 16 has an invalid length. [ 384.160109][T14496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3342'. [ 384.394891][T14508] netlink: 'syz.2.3350': attribute type 41 has an invalid length. [ 384.431859][T14508] netlink: 'syz.2.3350': attribute type 41 has an invalid length. [ 384.444951][T14506] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3349'. [ 384.500933][T14514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3353'. [ 384.557540][T14514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3353'. [ 384.618443][T14518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3353'. [ 386.552839][T14576] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3373'. [ 386.692507][T14585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3376'. [ 386.727511][T14585] bridge0: port 3(ipvlan1) entered blocking state [ 386.741593][T14585] bridge0: port 3(ipvlan1) entered disabled state [ 386.761179][T14585] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 386.798667][T14583] device team0 entered promiscuous mode [ 386.819094][T14583] device team_slave_0 entered promiscuous mode [ 386.829738][T14583] device team_slave_1 entered promiscuous mode [ 386.843804][T14583] bridge0: port 3(team0) entered blocking state [ 386.851163][T14583] bridge0: port 3(team0) entered disabled state [ 386.942893][T14583] bridge0: port 3(team0) entered blocking state [ 386.950106][T14583] bridge0: port 3(team0) entered forwarding state [ 387.277025][T14596] validate_nla: 5 callbacks suppressed [ 387.277057][T14596] netlink: 'syz.2.3380': attribute type 10 has an invalid length. [ 387.479935][T14596] team0: Port device geneve1 added [ 387.584899][T14607] netlink: 'syz.4.3384': attribute type 41 has an invalid length. [ 387.614554][T14607] netlink: 'syz.4.3384': attribute type 41 has an invalid length. [ 388.024449][T14622] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 388.094629][T14622] bridge0: port 3(ipvlan1) entered blocking state [ 388.103920][T14626] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 388.132341][T14622] bridge0: port 3(ipvlan1) entered disabled state [ 388.154618][T14622] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 388.230420][T14626] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 388.703945][T14648] __nla_validate_parse: 3 callbacks suppressed [ 388.703963][T14648] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3399'. [ 389.117781][T14664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3405'. [ 389.156585][T14667] netlink: 'syz.4.3407': attribute type 41 has an invalid length. [ 389.189540][T14667] netlink: 'syz.4.3407': attribute type 41 has an invalid length. [ 389.233741][T14672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3405'. [ 389.326939][T14675] netlink: 'syz.3.3406': attribute type 10 has an invalid length. [ 389.343351][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3406'. [ 389.370455][T14675] bridge0: port 3(ipvlan1) entered blocking state [ 389.399274][T14675] bridge0: port 3(ipvlan1) entered disabled state [ 389.471541][T14675] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 389.693711][T14685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 390.083730][T14704] FAULT_INJECTION: forcing a failure. [ 390.083730][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 390.119073][T14705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.137582][T14705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.176437][T14704] CPU: 1 PID: 14704 Comm: syz.2.3417 Not tainted syzkaller #0 [ 390.183936][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.193992][T14704] Call Trace: [ 390.197279][T14704] [ 390.200219][T14704] dump_stack_lvl+0x168/0x230 [ 390.204916][T14704] ? show_regs_print_info+0x20/0x20 [ 390.210123][T14704] ? load_image+0x3b0/0x3b0 [ 390.214641][T14704] ? __might_sleep+0xf0/0xf0 [ 390.219237][T14704] ? __lock_acquire+0x7c60/0x7c60 [ 390.224277][T14704] should_fail+0x38c/0x4c0 [ 390.228738][T14704] should_failslab+0x5/0x20 [ 390.233249][T14704] slab_pre_alloc_hook+0x51/0xc0 [ 390.238194][T14704] kmem_cache_alloc_node+0x47/0x2d0 [ 390.243396][T14704] ? __alloc_skb+0xf4/0x750 [ 390.247898][T14704] __alloc_skb+0xf4/0x750 [ 390.252228][T14704] ovs_ct_limit_cmd_set+0xf7/0xae0 [ 390.257330][T14704] ? __nla_parse+0x3c/0x50 [ 390.261739][T14704] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 390.268057][T14704] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 390.274375][T14704] genl_rcv_msg+0xbc6/0xf40 [ 390.278886][T14704] ? genl_bind+0x370/0x370 [ 390.283299][T14704] ? verify_lock_unused+0x140/0x140 [ 390.288494][T14704] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 390.294032][T14704] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 390.300614][T14704] ? dev_queue_xmit+0x20/0x20 [ 390.305276][T14704] ? rcu_lock_release+0x20/0x20 [ 390.310126][T14704] netlink_rcv_skb+0x1e0/0x430 [ 390.314898][T14704] ? genl_bind+0x370/0x370 [ 390.319315][T14704] ? netlink_ack+0xb60/0xb60 [ 390.323980][T14704] ? __lock_acquire+0x7c60/0x7c60 [ 390.329002][T14704] ? preempt_count_add+0x8d/0x190 [ 390.334016][T14704] ? down_read+0x1aa/0x2e0 [ 390.338424][T14704] genl_rcv+0x24/0x40 [ 390.342397][T14704] netlink_unicast+0x774/0x920 [ 390.347158][T14704] netlink_sendmsg+0x8ab/0xbc0 [ 390.351913][T14704] ? netlink_getsockopt+0x560/0x560 [ 390.357094][T14704] ? aa_sock_msg_perm+0x94/0x150 [ 390.362014][T14704] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 390.367281][T14704] ? security_socket_sendmsg+0x7c/0xa0 [ 390.372723][T14704] ? netlink_getsockopt+0x560/0x560 [ 390.377903][T14704] ____sys_sendmsg+0x5a2/0x8c0 [ 390.382656][T14704] ? memset+0x1e/0x40 [ 390.386619][T14704] ? __sys_sendmsg_sock+0x30/0x30 [ 390.391631][T14704] ? import_iovec+0x6f/0xa0 [ 390.396125][T14704] ___sys_sendmsg+0x1f0/0x260 [ 390.400794][T14704] ? __sys_sendmsg+0x250/0x250 [ 390.405554][T14704] ? vfs_write+0x84d/0xd00 [ 390.409979][T14704] ? __fdget+0x18b/0x210 [ 390.414204][T14704] __se_sys_sendmsg+0x190/0x250 [ 390.419042][T14704] ? __x64_sys_sendmsg+0x80/0x80 [ 390.423957][T14704] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 390.429930][T14704] ? lockdep_hardirqs_on+0x94/0x140 [ 390.435111][T14704] do_syscall_64+0x4c/0xa0 [ 390.439515][T14704] ? clear_bhb_loop+0x30/0x80 [ 390.444180][T14704] ? clear_bhb_loop+0x30/0x80 [ 390.448837][T14704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.454716][T14704] RIP: 0033:0x7f187e925fc9 [ 390.459117][T14704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.478703][T14704] RSP: 002b:00007f187cb8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.487098][T14704] RAX: ffffffffffffffda RBX: 00007f187eb7cfa0 RCX: 00007f187e925fc9 [ 390.495061][T14704] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 390.503015][T14704] RBP: 00007f187cb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 390.510968][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.518931][T14704] R13: 00007f187eb7d038 R14: 00007f187eb7cfa0 R15: 00007ffd811fc648 [ 390.526943][T14704] [ 390.532935][T14706] netlink: zone id is out of range [ 390.538062][T14706] netlink: set zone limit has 8 unknown bytes [ 393.164150][T14705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.172330][T14705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.234448][T14705] bond0: (slave batadv0): Releasing backup interface [ 393.380705][T14731] netlink: 'syz.3.3424': attribute type 41 has an invalid length. [ 393.398144][T14731] netlink: 'syz.3.3424': attribute type 41 has an invalid length. [ 393.469196][T14736] netlink: 'syz.4.3427': attribute type 10 has an invalid length. [ 393.518881][T14736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3427'. [ 393.543616][T14741] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3429'. [ 393.561949][T14736] bridge0: port 3(ipvlan1) entered blocking state [ 393.591169][T14736] bridge0: port 3(ipvlan1) entered disabled state [ 393.600849][T14747] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3429'. [ 393.610861][T14741] netlink: del zone limit has 8 unknown bytes [ 393.622946][T14736] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 393.686892][T14749] FAULT_INJECTION: forcing a failure. [ 393.686892][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 393.701285][T14749] CPU: 0 PID: 14749 Comm: syz.0.3431 Not tainted syzkaller #0 [ 393.708757][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.718795][T14749] Call Trace: [ 393.722061][T14749] [ 393.724976][T14749] dump_stack_lvl+0x168/0x230 [ 393.729644][T14749] ? show_regs_print_info+0x20/0x20 [ 393.734824][T14749] ? load_image+0x3b0/0x3b0 [ 393.739316][T14749] ? memset+0x1e/0x40 [ 393.743285][T14749] ? memset+0x1e/0x40 [ 393.747254][T14749] should_fail+0x38c/0x4c0 [ 393.751659][T14749] should_failslab+0x5/0x20 [ 393.756146][T14749] slab_pre_alloc_hook+0x51/0xc0 [ 393.761098][T14749] ? __build_skb+0x26/0x2e0 [ 393.765586][T14749] kmem_cache_alloc+0x3d/0x290 [ 393.770343][T14749] __build_skb+0x26/0x2e0 [ 393.774657][T14749] build_skb+0x1e/0x170 [ 393.778799][T14749] bpf_prog_test_run_skb+0x260/0x1180 [ 393.784156][T14749] ? __fget_files+0x40f/0x480 [ 393.788823][T14749] ? cpu_online+0x60/0x60 [ 393.793137][T14749] bpf_prog_test_run+0x31e/0x390 [ 393.798060][T14749] __sys_bpf+0x535/0x670 [ 393.802289][T14749] ? bpf_link_show_fdinfo+0x340/0x340 [ 393.807649][T14749] ? rcu_nmi_exit+0x6f/0xf0 [ 393.812142][T14749] ? vtime_user_exit+0x2dc/0x400 [ 393.817067][T14749] __x64_sys_bpf+0x78/0x90 [ 393.821467][T14749] do_syscall_64+0x4c/0xa0 [ 393.825865][T14749] ? clear_bhb_loop+0x30/0x80 [ 393.830521][T14749] ? clear_bhb_loop+0x30/0x80 [ 393.835181][T14749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.841059][T14749] RIP: 0033:0x7f1d87322fc9 [ 393.845459][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.865046][T14749] RSP: 002b:00007f1d8558a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.873454][T14749] RAX: ffffffffffffffda RBX: 00007f1d87579fa0 RCX: 00007f1d87322fc9 [ 393.881405][T14749] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 393.889355][T14749] RBP: 00007f1d8558a090 R08: 0000000000000000 R09: 0000000000000000 [ 393.897313][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.905264][T14749] R13: 00007f1d8757a038 R14: 00007f1d87579fa0 R15: 00007fff18b10248 [ 393.913230][T14749] [ 394.040469][T14757] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3435'. [ 394.076826][T14753] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 394.084401][T14753] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 394.110430][T14757] netlink: 'syz.3.3435': attribute type 2 has an invalid length. [ 394.125739][T14757] netlink: 'syz.3.3435': attribute type 1 has an invalid length. [ 394.379501][T14776] FAULT_INJECTION: forcing a failure. [ 394.379501][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 394.415862][T14776] CPU: 1 PID: 14776 Comm: syz.3.3440 Not tainted syzkaller #0 [ 394.423367][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.433430][T14776] Call Trace: [ 394.436716][T14776] [ 394.439652][T14776] dump_stack_lvl+0x168/0x230 [ 394.444350][T14776] ? show_regs_print_info+0x20/0x20 [ 394.449904][T14776] ? load_image+0x3b0/0x3b0 [ 394.454397][T14776] ? __might_sleep+0xf0/0xf0 [ 394.458969][T14776] ? __lock_acquire+0x7c60/0x7c60 [ 394.463976][T14776] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 394.469942][T14776] should_fail+0x38c/0x4c0 [ 394.474345][T14776] should_failslab+0x5/0x20 [ 394.478830][T14776] slab_pre_alloc_hook+0x51/0xc0 [ 394.483749][T14776] kmem_cache_alloc_node+0x47/0x2d0 [ 394.488931][T14776] ? __alloc_skb+0xf4/0x750 [ 394.493446][T14776] __alloc_skb+0xf4/0x750 [ 394.497783][T14776] kcm_sendmsg+0x1cdc/0x2130 [ 394.502377][T14776] ? __might_sleep+0xf0/0xf0 [ 394.506972][T14776] ? lock_release+0x584/0x870 [ 394.511659][T14776] ? aa_sk_perm+0x7b4/0x8f0 [ 394.516175][T14776] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 394.522590][T14776] ? kcm_getsockopt+0x280/0x280 [ 394.527452][T14776] ? aa_sock_msg_perm+0x94/0x150 [ 394.532397][T14776] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 394.537687][T14776] ? security_socket_sendmsg+0x7c/0xa0 [ 394.543157][T14776] ? kcm_getsockopt+0x280/0x280 [ 394.548015][T14776] ____sys_sendmsg+0x5a2/0x8c0 [ 394.552792][T14776] ? memset+0x1e/0x40 [ 394.556795][T14776] ? __sys_sendmsg_sock+0x30/0x30 [ 394.561840][T14776] ? import_iovec+0x6f/0xa0 [ 394.566349][T14776] ___sys_sendmsg+0x1f0/0x260 [ 394.571035][T14776] ? __sys_sendmsg+0x250/0x250 [ 394.575807][T14776] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 394.582432][T14776] ? __fdget+0x18b/0x210 [ 394.586673][T14776] __se_sys_sendmsg+0x190/0x250 [ 394.591522][T14776] ? __x64_sys_sendmsg+0x80/0x80 [ 394.596455][T14776] ? lockdep_hardirqs_on+0x94/0x140 [ 394.601670][T14776] do_syscall_64+0x4c/0xa0 [ 394.606075][T14776] ? clear_bhb_loop+0x30/0x80 [ 394.610747][T14776] ? clear_bhb_loop+0x30/0x80 [ 394.615419][T14776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.621303][T14776] RIP: 0033:0x7fabcc3b5fc9 [ 394.625713][T14776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.645313][T14776] RSP: 002b:00007fabca5fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.653723][T14776] RAX: ffffffffffffffda RBX: 00007fabcc60d090 RCX: 00007fabcc3b5fc9 [ 394.661689][T14776] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000005 [ 394.669654][T14776] RBP: 00007fabca5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 394.677620][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.685584][T14776] R13: 00007fabcc60d128 R14: 00007fabcc60d090 R15: 00007ffcfe6a9e18 [ 394.693685][T14776] [ 394.763987][T14786] netlink: 'syz.4.3445': attribute type 41 has an invalid length. [ 394.780364][T14786] netlink: 'syz.4.3445': attribute type 41 has an invalid length. [ 394.790623][T14788] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3444'. [ 395.028944][T14790] FAULT_INJECTION: forcing a failure. [ 395.028944][T14790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.059751][T14790] CPU: 0 PID: 14790 Comm: syz.2.3446 Not tainted syzkaller #0 [ 395.067262][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.077321][T14790] Call Trace: [ 395.080592][T14790] [ 395.083518][T14790] dump_stack_lvl+0x168/0x230 [ 395.088194][T14790] ? show_regs_print_info+0x20/0x20 [ 395.093389][T14790] ? load_image+0x3b0/0x3b0 [ 395.097894][T14790] ? __lock_acquire+0x7c60/0x7c60 [ 395.102919][T14790] should_fail+0x38c/0x4c0 [ 395.107338][T14790] _copy_to_user+0x2e/0x130 [ 395.111835][T14790] put_user_ifreq+0x74/0xb0 [ 395.116337][T14790] sock_ioctl+0x6ad/0x6e0 [ 395.120671][T14790] ? sock_poll+0x3f0/0x3f0 [ 395.125095][T14790] ? bpf_lsm_file_ioctl+0x5/0x10 [ 395.130016][T14790] ? security_file_ioctl+0x7c/0xa0 [ 395.135119][T14790] ? sock_poll+0x3f0/0x3f0 [ 395.139530][T14790] __se_sys_ioctl+0xfa/0x170 [ 395.144117][T14790] do_syscall_64+0x4c/0xa0 [ 395.148523][T14790] ? clear_bhb_loop+0x30/0x80 [ 395.153188][T14790] ? clear_bhb_loop+0x30/0x80 [ 395.157861][T14790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.163743][T14790] RIP: 0033:0x7f187e925fc9 [ 395.168150][T14790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.187745][T14790] RSP: 002b:00007f187cb8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.196153][T14790] RAX: ffffffffffffffda RBX: 00007f187eb7cfa0 RCX: 00007f187e925fc9 [ 395.204119][T14790] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000d [ 395.212079][T14790] RBP: 00007f187cb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 395.220038][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.227997][T14790] R13: 00007f187eb7d038 R14: 00007f187eb7cfa0 R15: 00007ffd811fc648 [ 395.235986][T14790] [ 395.350979][T14795] netlink: 'syz.0.3448': attribute type 10 has an invalid length. [ 395.372966][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3448'. [ 395.393903][T14795] bridge0: port 4(ipvlan1) entered blocking state [ 395.400806][T14795] bridge0: port 4(ipvlan1) entered disabled state [ 395.454943][T14795] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 395.592032][T14801] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 395.710043][T14812] netlink: 'syz.3.3457': attribute type 41 has an invalid length. [ 395.726858][T14816] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3458'. [ 396.045985][T14827] device syzkaller0 entered promiscuous mode [ 396.261594][T14839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3468'. [ 396.698818][T14853] FAULT_INJECTION: forcing a failure. [ 396.698818][T14853] name failslab, interval 1, probability 0, space 0, times 0 [ 396.716585][T14853] CPU: 0 PID: 14853 Comm: syz.4.3473 Not tainted syzkaller #0 [ 396.724075][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.734144][T14853] Call Trace: [ 396.737430][T14853] [ 396.740366][T14853] dump_stack_lvl+0x168/0x230 [ 396.745059][T14853] ? show_regs_print_info+0x20/0x20 [ 396.750269][T14853] ? load_image+0x3b0/0x3b0 [ 396.754779][T14853] ? __might_sleep+0xf0/0xf0 [ 396.759361][T14853] ? __lock_acquire+0x7c60/0x7c60 [ 396.764380][T14853] ? __mutex_lock_common+0x14ce/0x2390 [ 396.769834][T14853] should_fail+0x38c/0x4c0 [ 396.774246][T14853] should_failslab+0x5/0x20 [ 396.778742][T14853] slab_pre_alloc_hook+0x51/0xc0 [ 396.783670][T14853] kmem_cache_alloc_node+0x47/0x2d0 [ 396.788851][T14853] ? __alloc_skb+0xf4/0x750 [ 396.793345][T14853] __alloc_skb+0xf4/0x750 [ 396.797669][T14853] netlink_dump+0x1d3/0xcd0 [ 396.802161][T14853] ? __netlink_dump_start+0x11f/0x700 [ 396.807523][T14853] ? mutex_lock_io_nested+0x60/0x60 [ 396.812711][T14853] ? netlink_lookup+0x1d0/0x1d0 [ 396.817557][T14853] __netlink_dump_start+0x523/0x700 [ 396.822753][T14853] rtnetlink_rcv_msg+0xb2b/0xe90 [ 396.827768][T14853] ? rtnl_fdb_dump+0xf90/0xf90 [ 396.832523][T14853] ? rtnetlink_bind+0x80/0x80 [ 396.837220][T14853] ? dev_queue_xmit+0x20/0x20 [ 396.841884][T14853] ? memcpy+0x3c/0x60 [ 396.845857][T14853] ? __copy_skb_header+0x417/0x5a0 [ 396.850969][T14853] ? rtnl_fdb_dump+0xf90/0xf90 [ 396.855746][T14853] ? __skb_clone+0x480/0x790 [ 396.860345][T14853] netlink_rcv_skb+0x1e0/0x430 [ 396.865110][T14853] ? rtnetlink_bind+0x80/0x80 [ 396.869784][T14853] ? netlink_ack+0xb60/0xb60 [ 396.874382][T14853] netlink_unicast+0x774/0x920 [ 396.879156][T14853] netlink_sendmsg+0x8ab/0xbc0 [ 396.883915][T14853] ? netlink_getsockopt+0x560/0x560 [ 396.889110][T14853] ? aa_sock_msg_perm+0x94/0x150 [ 396.894033][T14853] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 396.899305][T14853] ? security_socket_sendmsg+0x7c/0xa0 [ 396.904746][T14853] ? netlink_getsockopt+0x560/0x560 [ 396.909944][T14853] ____sys_sendmsg+0x5a2/0x8c0 [ 396.914716][T14853] ? memset+0x1e/0x40 [ 396.918692][T14853] ? __sys_sendmsg_sock+0x30/0x30 [ 396.923730][T14853] ? import_iovec+0x6f/0xa0 [ 396.928234][T14853] ___sys_sendmsg+0x1f0/0x260 [ 396.932912][T14853] ? __sys_sendmsg+0x250/0x250 [ 396.937673][T14853] ? vfs_write+0x84d/0xd00 [ 396.942178][T14853] ? __fdget+0x18b/0x210 [ 396.946409][T14853] __se_sys_sendmsg+0x190/0x250 [ 396.951253][T14853] ? __x64_sys_sendmsg+0x80/0x80 [ 396.956181][T14853] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 396.962158][T14853] ? lockdep_hardirqs_on+0x94/0x140 [ 396.967347][T14853] do_syscall_64+0x4c/0xa0 [ 396.971752][T14853] ? clear_bhb_loop+0x30/0x80 [ 396.976414][T14853] ? clear_bhb_loop+0x30/0x80 [ 396.981080][T14853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.986959][T14853] RIP: 0033:0x7f8402473fc9 [ 396.991360][T14853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.010957][T14853] RSP: 002b:00007f84006db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.019362][T14853] RAX: ffffffffffffffda RBX: 00007f84026cafa0 RCX: 00007f8402473fc9 [ 397.027321][T14853] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 397.035277][T14853] RBP: 00007f84006db090 R08: 0000000000000000 R09: 0000000000000000 [ 397.043235][T14853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.051194][T14853] R13: 00007f84026cb038 R14: 00007f84026cafa0 R15: 00007fffea0231f8 [ 397.059167][T14853] [ 397.367071][T14873] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3480'. [ 398.458255][T14925] validate_nla: 13 callbacks suppressed [ 398.458272][T14925] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 398.560777][T14920] netlink: 'syz.0.3502': attribute type 10 has an invalid length. [ 398.586532][T14920] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.3502'. [ 398.642647][T14920] openvswitch: netlink: Message has 4 unknown bytes. [ 399.341271][T14946] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3512'. [ 399.351255][T14947] mac80211_hwsim hwsim21 »»»»»»: renamed from wlan0 [ 399.707894][T14956] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 399.923921][T14964] netlink: 'syz.5.3520': attribute type 29 has an invalid length. [ 399.962169][T14964] netlink: 'syz.5.3520': attribute type 29 has an invalid length. [ 400.013241][T14970] netlink: 'syz.4.3523': attribute type 41 has an invalid length. [ 400.075432][T14970] netlink: 'syz.4.3523': attribute type 41 has an invalid length. [ 400.132167][T14971] netlink: 'syz.2.3522': attribute type 10 has an invalid length. [ 400.578121][T14991] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3529'. [ 400.820034][T14993] netlink: 'syz.5.3531': attribute type 10 has an invalid length. [ 401.045047][T15001] netlink: 'syz.4.3534': attribute type 29 has an invalid length. [ 402.466078][T15033] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3546'. [ 403.373637][T15060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3556'. [ 403.414796][T15060] bridge0: port 3(ipvlan1) entered blocking state [ 403.427698][T15064] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3558'. [ 403.431692][T15060] bridge0: port 3(ipvlan1) entered disabled state [ 403.456258][T15060] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 403.778693][T15078] FAULT_INJECTION: forcing a failure. [ 403.778693][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 403.825234][T15078] CPU: 1 PID: 15078 Comm: syz.3.3563 Not tainted syzkaller #0 [ 403.832745][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.842805][T15078] Call Trace: [ 403.845128][T15083] validate_nla: 9 callbacks suppressed [ 403.845142][T15083] netlink: 'syz.2.3565': attribute type 41 has an invalid length. [ 403.846084][T15078] [ 403.846095][T15078] dump_stack_lvl+0x168/0x230 [ 403.852566][T15083] netlink: 'syz.2.3565': attribute type 41 has an invalid length. [ 403.859316][T15078] ? show_regs_print_info+0x20/0x20 [ 403.879863][T15078] ? load_image+0x3b0/0x3b0 [ 403.884383][T15078] ? __lock_acquire+0x7c60/0x7c60 [ 403.889422][T15078] should_fail+0x38c/0x4c0 [ 403.893840][T15078] should_failslab+0x5/0x20 [ 403.898343][T15078] slab_pre_alloc_hook+0x51/0xc0 [ 403.903280][T15078] __kmalloc_node+0x6e/0x3b0 [ 403.907854][T15078] ? bpf_map_area_alloc+0x47/0xe0 [ 403.912869][T15078] bpf_map_area_alloc+0x47/0xe0 [ 403.917703][T15078] dev_map_alloc+0x23a/0x520 [ 403.922278][T15078] map_create+0x485/0x2350 [ 403.926684][T15078] __sys_bpf+0x2a4/0x670 [ 403.930913][T15078] ? bpf_link_show_fdinfo+0x340/0x340 [ 403.936282][T15078] __x64_sys_bpf+0x78/0x90 [ 403.940680][T15078] do_syscall_64+0x4c/0xa0 [ 403.945077][T15078] ? clear_bhb_loop+0x30/0x80 [ 403.949741][T15078] ? clear_bhb_loop+0x30/0x80 [ 403.954400][T15078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.960272][T15078] RIP: 0033:0x7fabcc3b5fc9 [ 403.964669][T15078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.984256][T15078] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.992652][T15078] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 404.000609][T15078] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 404.008561][T15078] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 404.016515][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.024467][T15078] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 404.032434][T15078] [ 404.316325][T15096] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3566'. [ 405.440952][T15111] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3576'. [ 405.902619][T15139] netlink: 'syz.2.3583': attribute type 10 has an invalid length. [ 406.308090][T15160] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3597'. [ 406.359983][T15162] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3598'. [ 406.832188][T15179] netlink: 'syz.0.3604': attribute type 3 has an invalid length. [ 406.849993][T15179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3604'. [ 406.914884][T15174] netlink: 'syz.3.3601': attribute type 10 has an invalid length. [ 407.089019][ T1108] syzkaller0: tun_net_xmit 76 [ 407.101983][ T1108] syzkaller0: tun_net_xmit 48 [ 407.131122][ T4269] syzkaller0: tun_net_xmit 76 [ 407.706068][T15218] device wlan0 entered promiscuous mode [ 407.754346][T15211] netlink: 'syz.0.3615': attribute type 9 has an invalid length. [ 407.810704][T15211] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3615'. [ 408.542885][T15225] netlink: 'syz.3.3618': attribute type 10 has an invalid length. [ 408.587512][T15229] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3620'. [ 409.191573][T15257] netlink: 'syz.3.3628': attribute type 21 has an invalid length. [ 409.211904][T15257] netlink: 'syz.3.3628': attribute type 6 has an invalid length. [ 409.219666][T15257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3628'. [ 410.599797][T15274] netlink: 'syz.3.3634': attribute type 10 has an invalid length. [ 410.830238][T15300] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3642'. [ 410.922173][T15307] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3644'. [ 410.971262][T15306] netlink: 16374 bytes leftover after parsing attributes in process `syz.4.3644'. [ 411.016720][T15314] netlink: 'syz.5.3646': attribute type 29 has an invalid length. [ 411.085623][T15314] netlink: 'syz.5.3646': attribute type 29 has an invalid length. [ 411.104645][T15310] netlink: 'syz.5.3646': attribute type 29 has an invalid length. [ 411.291429][T15324] FAULT_INJECTION: forcing a failure. [ 411.291429][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 411.316396][T15324] CPU: 1 PID: 15324 Comm: syz.5.3649 Not tainted syzkaller #0 [ 411.323916][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.333991][T15324] Call Trace: [ 411.337281][T15324] [ 411.340218][T15324] dump_stack_lvl+0x168/0x230 [ 411.344933][T15324] ? show_regs_print_info+0x20/0x20 [ 411.350164][T15324] ? load_image+0x3b0/0x3b0 [ 411.354703][T15324] ? __might_sleep+0xf0/0xf0 [ 411.359322][T15324] ? __lock_acquire+0x7c60/0x7c60 [ 411.364525][T15324] should_fail+0x38c/0x4c0 [ 411.368975][T15324] should_failslab+0x5/0x20 [ 411.373564][T15324] slab_pre_alloc_hook+0x51/0xc0 [ 411.378502][T15324] kmem_cache_alloc_node+0x47/0x2d0 [ 411.383693][T15324] ? __alloc_skb+0xf4/0x750 [ 411.388202][T15324] __alloc_skb+0xf4/0x750 [ 411.392547][T15324] ? skb_put+0x117/0x210 [ 411.396791][T15324] __ip_append_data+0x2050/0x3230 [ 411.401857][T15324] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 411.406708][T15324] ? ip_setup_cork+0x890/0x890 [ 411.411463][T15324] ? memcpy+0x3c/0x60 [ 411.415441][T15324] ? ip_setup_cork+0x496/0x890 [ 411.420203][T15324] ip_make_skb+0x1d6/0x3e0 [ 411.424623][T15324] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 411.429473][T15324] ? ip_flush_pending_frames+0x250/0x250 [ 411.435149][T15324] udp_sendmsg+0x1a5a/0x2340 [ 411.439765][T15324] ? perf_trace_lock+0x2ec/0x370 [ 411.444732][T15324] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 411.449583][T15324] ? udp_cmsg_send+0x350/0x350 [ 411.454343][T15324] ? rcu_nmi_exit+0x6f/0xf0 [ 411.458855][T15324] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 411.464882][T15324] ? __local_bh_enable_ip+0x12a/0x1b0 [ 411.470255][T15324] ? _local_bh_enable+0xa0/0xa0 [ 411.475122][T15324] ? inet_sendmsg+0x147/0x2f0 [ 411.479811][T15324] ? inet_sendmsg+0x147/0x2f0 [ 411.484493][T15324] ? inet_send_prepare+0x260/0x260 [ 411.489601][T15324] ____sys_sendmsg+0x5a2/0x8c0 [ 411.494382][T15324] ? __sys_sendmsg_sock+0x30/0x30 [ 411.499418][T15324] ? import_iovec+0x6f/0xa0 [ 411.503926][T15324] ___sys_sendmsg+0x1f0/0x260 [ 411.508625][T15324] ? __sys_sendmsg+0x250/0x250 [ 411.513400][T15324] ? trace_event_raw_event_lock+0x250/0x250 [ 411.519283][T15324] ? vfs_write+0x84d/0xd00 [ 411.523721][T15324] ? __fdget+0x18b/0x210 [ 411.527963][T15324] __se_sys_sendmsg+0x190/0x250 [ 411.532810][T15324] ? __x64_sys_sendmsg+0x80/0x80 [ 411.537735][T15324] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 411.543727][T15324] ? lockdep_hardirqs_on+0x94/0x140 [ 411.548919][T15324] do_syscall_64+0x4c/0xa0 [ 411.553326][T15324] ? clear_bhb_loop+0x30/0x80 [ 411.557987][T15324] ? clear_bhb_loop+0x30/0x80 [ 411.562651][T15324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.568534][T15324] RIP: 0033:0x7f4071ac6fc9 [ 411.572950][T15324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.592566][T15324] RSP: 002b:00007f406fd2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.600969][T15324] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 411.608940][T15324] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000f [ 411.616897][T15324] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 411.624882][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.632860][T15324] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 411.640865][T15324] [ 411.876725][T15333] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 412.146260][T15344] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3657'. [ 412.268116][T15347] netlink: 'syz.3.3655': attribute type 9 has an invalid length. [ 412.351864][T15347] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3655'. [ 412.399177][T15352] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3660'. [ 413.034222][T15371] netlink: 'syz.0.3665': attribute type 23 has an invalid length. [ 413.060321][T15372] netlink: 'syz.2.3667': attribute type 10 has an invalid length. [ 413.530295][T15388] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3673'. [ 413.756320][T15404] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3680'. [ 414.001051][T15417] batman_adv: batadv0: Removing interface: team0 [ 414.079968][T15417] team0 (unregistering): Port device team_slave_0 removed [ 414.160358][T15417] team0 (unregistering): Port device team_slave_1 removed [ 414.217164][T15417] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.246998][T15417] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.258405][T15417] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.267677][T15417] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.292566][T15417] team0 (unregistering): Port device geneve1 removed [ 414.311589][T15425] delete_channel: no stack [ 414.728811][T15445] validate_nla: 2 callbacks suppressed [ 414.729027][T15445] netlink: 'syz.4.3694': attribute type 3 has an invalid length. [ 414.745511][T15445] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3694'. [ 414.976586][T15447] netlink: 'syz.3.3696': attribute type 10 has an invalid length. [ 415.351118][T15466] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3705'. [ 415.559959][T15465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.616271][T15465] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 415.629359][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.637733][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.665522][T15465] bond0 (unregistering): Released all slaves [ 415.924441][T15481] netlink: 'syz.0.3709': attribute type 10 has an invalid length. [ 416.098572][T15492] __nla_validate_parse: 1 callbacks suppressed [ 416.098607][T15492] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3715'. [ 416.108994][T15495] FAULT_INJECTION: forcing a failure. [ 416.108994][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 416.109137][T15495] CPU: 1 PID: 15495 Comm: syz.5.3716 Not tainted syzkaller #0 [ 416.109156][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.109168][T15495] Call Trace: [ 416.109175][T15495] [ 416.109184][T15495] dump_stack_lvl+0x168/0x230 [ 416.109214][T15495] ? show_regs_print_info+0x20/0x20 [ 416.109236][T15495] ? load_image+0x3b0/0x3b0 [ 416.109260][T15495] ? should_fail+0x339/0x4c0 [ 416.109283][T15495] ? kasan_check_range+0x77/0x290 [ 416.109313][T15495] should_fail+0x38c/0x4c0 [ 416.109338][T15495] should_failslab+0x5/0x20 [ 416.109355][T15495] slab_pre_alloc_hook+0x51/0xc0 [ 416.109377][T15495] kmem_cache_alloc_node_trace+0x4a/0x300 [ 416.109394][T15495] ? __get_vm_area_node+0x119/0x2d0 [ 416.109412][T15495] ? lock_chain_count+0x20/0x20 [ 416.109438][T15495] __get_vm_area_node+0x119/0x2d0 [ 416.109463][T15495] __vmalloc_node_range+0xef/0x8b0 [ 416.109481][T15495] ? netlink_sendmsg+0x5dd/0xbc0 [ 416.109511][T15495] ? netlink_sendmsg+0x5dd/0xbc0 [ 416.109528][T15495] vmalloc+0x75/0x80 [ 416.109546][T15495] ? netlink_sendmsg+0x5dd/0xbc0 [ 416.109563][T15495] netlink_sendmsg+0x5dd/0xbc0 [ 416.109586][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.109608][T15495] ? netlink_getsockopt+0x560/0x560 [ 416.109640][T15495] sock_write_iter+0x29c/0x380 [ 416.109665][T15495] ? sock_read_iter+0x340/0x340 [ 416.109683][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.109713][T15495] ? memset+0x1e/0x40 [ 416.109733][T15495] ? iov_iter_init+0xb4/0x170 [ 416.109756][T15495] vfs_write+0x712/0xd00 [ 416.109780][T15495] ? file_end_write+0x250/0x250 [ 416.109815][T15495] ? __fdget_pos+0x185/0x370 [ 416.109833][T15495] ? __fdget_pos+0x1e2/0x370 [ 416.109849][T15495] ? ksys_write+0x71/0x250 [ 416.109869][T15495] ksys_write+0x14d/0x250 [ 416.109889][T15495] ? __ia32_sys_read+0x80/0x80 [ 416.109912][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.109935][T15495] do_syscall_64+0x4c/0xa0 [ 416.109950][T15495] ? clear_bhb_loop+0x30/0x80 [ 416.109968][T15495] ? clear_bhb_loop+0x30/0x80 [ 416.109988][T15495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.110007][T15495] RIP: 0033:0x7f4071ac6fc9 [ 416.110023][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.110039][T15495] RSP: 002b:00007f406fd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.110060][T15495] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 416.110074][T15495] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 416.110086][T15495] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 416.110099][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.110110][T15495] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 416.110140][T15495] [ 416.110358][T15495] syz.5.3716: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 416.437004][T15495] CPU: 1 PID: 15495 Comm: syz.5.3716 Not tainted syzkaller #0 [ 416.444465][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.454502][T15495] Call Trace: [ 416.457770][T15495] [ 416.460687][T15495] dump_stack_lvl+0x168/0x230 [ 416.465354][T15495] ? rcu_lock_release+0x5/0x20 [ 416.470102][T15495] ? show_regs_print_info+0x20/0x20 [ 416.475719][T15495] ? load_image+0x3b0/0x3b0 [ 416.480221][T15495] warn_alloc+0x20e/0x2f0 [ 416.484541][T15495] ? zone_watermark_ok_safe+0x240/0x240 [ 416.490082][T15495] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 416.496054][T15495] ? __get_vm_area_node+0x119/0x2d0 [ 416.501258][T15495] __vmalloc_node_range+0x2b1/0x8b0 [ 416.506458][T15495] ? netlink_sendmsg+0x5dd/0xbc0 [ 416.511387][T15495] vmalloc+0x75/0x80 [ 416.515276][T15495] ? netlink_sendmsg+0x5dd/0xbc0 [ 416.520209][T15495] netlink_sendmsg+0x5dd/0xbc0 [ 416.524970][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.530166][T15495] ? netlink_getsockopt+0x560/0x560 [ 416.535359][T15495] sock_write_iter+0x29c/0x380 [ 416.540116][T15495] ? sock_read_iter+0x340/0x340 [ 416.544951][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.550143][T15495] ? memset+0x1e/0x40 [ 416.554128][T15495] ? iov_iter_init+0xb4/0x170 [ 416.558806][T15495] vfs_write+0x712/0xd00 [ 416.563043][T15495] ? file_end_write+0x250/0x250 [ 416.567894][T15495] ? __fdget_pos+0x185/0x370 [ 416.572471][T15495] ? __fdget_pos+0x1e2/0x370 [ 416.577043][T15495] ? ksys_write+0x71/0x250 [ 416.581445][T15495] ksys_write+0x14d/0x250 [ 416.585760][T15495] ? __ia32_sys_read+0x80/0x80 [ 416.590509][T15495] ? lockdep_hardirqs_on+0x94/0x140 [ 416.595699][T15495] do_syscall_64+0x4c/0xa0 [ 416.600093][T15495] ? clear_bhb_loop+0x30/0x80 [ 416.604747][T15495] ? clear_bhb_loop+0x30/0x80 [ 416.609404][T15495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.615278][T15495] RIP: 0033:0x7f4071ac6fc9 [ 416.619683][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.639268][T15495] RSP: 002b:00007f406fd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.647664][T15495] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 416.655617][T15495] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 416.663570][T15495] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 416.671528][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.679484][T15495] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 416.687453][T15495] [ 416.706197][T15495] Mem-Info: [ 416.709565][T15495] active_anon:289 inactive_anon:7122 isolated_anon:0 [ 416.709565][T15495] active_file:24985 inactive_file:36432 isolated_file:0 [ 416.709565][T15495] unevictable:768 dirty:98 writeback:0 [ 416.709565][T15495] slab_reclaimable:20538 slab_unreclaimable:96741 [ 416.709565][T15495] mapped:30198 shmem:1640 pagetables:676 bounce:0 [ 416.709565][T15495] kernel_misc_reclaimable:0 [ 416.709565][T15495] free:1365289 free_pcp:11762 free_cma:0 [ 416.760053][T15495] Node 0 active_anon:1124kB inactive_anon:27952kB active_file:99736kB inactive_file:145728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120792kB dirty:416kB writeback:0kB shmem:4484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11412kB pagetables:2688kB all_unreclaimable? no [ 416.816107][T15495] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 416.846784][T15495] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.932161][T15495] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 416.946800][T15504] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3719'. [ 416.948190][T15495] Node 0 DMA32 free:1524224kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1124kB inactive_anon:27852kB active_file:99736kB inactive_file:145728kB unevictable:1536kB writepending:564kB present:3129332kB managed:2608952kB mlocked:0kB bounce:0kB free_pcp:42752kB local_pcp:21648kB free_cma:0kB [ 417.017830][T15511] netlink: 'syz.3.3722': attribute type 41 has an invalid length. [ 417.026373][T15511] netlink: 'syz.3.3722': attribute type 41 has an invalid length. [ 417.034797][T15495] lowmem_reserve[]: 0 0 0 0 0 [ 417.039552][T15495] Node 0 Normal free:8kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 417.075877][T15495] lowmem_reserve[]: 0 0 0 0 0 [ 417.080684][T15495] Node 1 Normal free:3924512kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4248kB local_pcp:4248kB free_cma:0kB [ 417.109692][T15495] lowmem_reserve[]: 0 0 0 0 0 [ 417.114488][T15495] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.131408][T15495] Node 0 DMA32: 3155*4kB (UME) 1584*8kB (UME) 815*16kB (UME) 594*32kB (UME) 401*64kB (UME) 222*128kB (UME) 91*256kB (UME) 56*512kB (UME) 30*1024kB (UME) 14*2048kB (UME) 318*4096kB (UM) = 1525308kB [ 417.163621][T15515] device syzkaller0 entered promiscuous mode [ 417.167072][T15495] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 417.170465][T15515] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 417.190400][T15495] Node 1 Normal: 162*4kB (UE) 35*8kB (UME) 26*16kB (UME) 161*32kB (UE) 63*64kB (UME) 12*128kB (UME) 7*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (M) 954*4096kB (UM) = 3924512kB [ 417.208372][T15495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.218044][T15495] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.242192][T15495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.289532][T15495] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.333181][T15522] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3724'. [ 417.343489][T15495] 63057 total pagecache pages [ 417.348445][T15495] 0 pages in swap cache [ 417.352906][T15495] Swap cache stats: add 0, delete 0, find 0/0 [ 417.358980][T15495] Free swap = 124996kB [ 417.385973][T15495] Total swap = 124996kB [ 417.390591][T15495] 2097051 pages RAM [ 417.397300][T15525] netlink: 'syz.3.3725': attribute type 10 has an invalid length. [ 417.408422][T15495] 0 pages HighMem/MovableOnly [ 417.428005][T15495] 410826 pages reserved [ 417.433640][T15495] 0 pages cma reserved [ 417.544876][T15533] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3729'. [ 417.555158][T15536] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3730'. [ 417.794909][T15547] netlink: 'syz.0.3735': attribute type 41 has an invalid length. [ 417.849057][T15547] netlink: 'syz.0.3735': attribute type 41 has an invalid length. [ 418.086798][T15562] netlink: 'syz.4.3738': attribute type 21 has an invalid length. [ 418.100618][T15562] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3738'. [ 418.128246][T15561] netlink: 'syz.0.3740': attribute type 10 has an invalid length. [ 418.335491][T15575] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3745'. [ 419.165772][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3757'. [ 419.171381][T15613] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3761'. [ 419.190873][T15603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3757'. [ 419.436348][T15623] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 419.795984][T15639] validate_nla: 10 callbacks suppressed [ 419.796039][T15639] netlink: 'syz.4.3771': attribute type 13 has an invalid length. [ 420.122063][T15644] netlink: 'syz.0.3770': attribute type 10 has an invalid length. [ 420.250015][T15645] netlink: 'syz.5.3772': attribute type 9 has an invalid length. [ 420.439824][T15656] device syzkaller0 entered promiscuous mode [ 420.650621][T15664] FAULT_INJECTION: forcing a failure. [ 420.650621][T15664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.689981][T15670] netlink: 'syz.4.3781': attribute type 41 has an invalid length. [ 420.700802][T15664] CPU: 0 PID: 15664 Comm: syz.5.3778 Not tainted syzkaller #0 [ 420.708298][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.718360][T15664] Call Trace: [ 420.721633][T15664] [ 420.724564][T15664] dump_stack_lvl+0x168/0x230 [ 420.729246][T15664] ? show_regs_print_info+0x20/0x20 [ 420.734440][T15664] ? load_image+0x3b0/0x3b0 [ 420.738945][T15664] ? __lock_acquire+0x7c60/0x7c60 [ 420.743990][T15664] should_fail+0x38c/0x4c0 [ 420.748419][T15664] _copy_from_user+0x2e/0x170 [ 420.753095][T15664] kstrtouint_from_user+0xbe/0x200 [ 420.758205][T15664] ? kstrtol_from_user+0x260/0x260 [ 420.763336][T15664] proc_fail_nth_write+0x85/0x1f0 [ 420.768359][T15664] ? proc_fail_nth_read+0x210/0x210 [ 420.773552][T15664] ? common_file_perm+0x171/0x1c0 [ 420.778574][T15664] ? proc_fail_nth_read+0x210/0x210 [ 420.783767][T15664] vfs_write+0x300/0xd00 [ 420.788079][T15664] ? file_end_write+0x250/0x250 [ 420.792937][T15664] ? __fget_files+0x40f/0x480 [ 420.797619][T15664] ? mutex_lock_nested+0x17/0x20 [ 420.802544][T15664] ? __fdget_pos+0x2bf/0x370 [ 420.807118][T15664] ? ksys_write+0x71/0x250 [ 420.811532][T15664] ksys_write+0x14d/0x250 [ 420.815860][T15664] ? __ia32_sys_read+0x80/0x80 [ 420.820621][T15664] ? trace_sys_enter+0x1f/0x80 [ 420.825382][T15664] do_syscall_64+0x4c/0xa0 [ 420.829789][T15664] ? clear_bhb_loop+0x30/0x80 [ 420.834628][T15664] ? clear_bhb_loop+0x30/0x80 [ 420.839303][T15664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 420.845185][T15664] RIP: 0033:0x7f4071ac5a7f [ 420.849591][T15664] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 420.869184][T15664] RSP: 002b:00007f406fd2e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 420.877590][T15664] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4071ac5a7f [ 420.885552][T15664] RDX: 0000000000000001 RSI: 00007f406fd2e0a0 RDI: 000000000000000e [ 420.893507][T15664] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 420.901473][T15664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 420.909434][T15664] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 420.917424][T15664] [ 420.961935][T15670] netlink: 'syz.4.3781': attribute type 41 has an invalid length. [ 421.348963][T15682] FAULT_INJECTION: forcing a failure. [ 421.348963][T15682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.380638][T15682] CPU: 0 PID: 15682 Comm: syz.0.3784 Not tainted syzkaller #0 [ 421.388145][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.398212][T15682] Call Trace: [ 421.401505][T15682] [ 421.404446][T15682] dump_stack_lvl+0x168/0x230 [ 421.409150][T15682] ? show_regs_print_info+0x20/0x20 [ 421.414370][T15682] ? load_image+0x3b0/0x3b0 [ 421.418908][T15682] ? __lock_acquire+0x7c60/0x7c60 [ 421.423959][T15682] ? __alloc_skb+0xf4/0x750 [ 421.428480][T15682] ? ____sys_sendmsg+0x5a2/0x8c0 [ 421.433441][T15682] ? ___sys_sendmsg+0x1f0/0x260 [ 421.438306][T15682] ? __se_sys_sendmsg+0x190/0x250 [ 421.443360][T15682] should_fail+0x38c/0x4c0 [ 421.448160][T15682] prepare_alloc_pages+0x1e4/0x5f0 [ 421.453313][T15682] __alloc_pages+0x10e/0x470 [ 421.457941][T15682] ? zone_statistics+0x170/0x170 [ 421.462966][T15682] kmalloc_large_node+0x7d/0x190 [ 421.467976][T15682] __kmalloc_node_track_caller+0x22e/0x3a0 [ 421.473793][T15682] ? pfkey_sendmsg+0x186/0xff0 [ 421.478574][T15682] ? kmem_cache_alloc_node+0x162/0x2d0 [ 421.484048][T15682] ? __alloc_skb+0xf4/0x750 [ 421.488737][T15682] ? pfkey_sendmsg+0x186/0xff0 [ 421.493533][T15682] __alloc_skb+0x22c/0x750 [ 421.497989][T15682] pfkey_sendmsg+0x186/0xff0 [ 421.502609][T15682] ? __lock_acquire+0x12d9/0x7c60 [ 421.507668][T15682] ? __might_sleep+0xf0/0xf0 [ 421.512298][T15682] ? pfkey_release+0x310/0x310 [ 421.517103][T15682] ? aa_sk_perm+0x7b4/0x8f0 [ 421.521651][T15682] ? aa_af_perm+0x2b0/0x2b0 [ 421.526176][T15682] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 421.532723][T15682] ? aa_sock_msg_perm+0x94/0x150 [ 421.537694][T15682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.543001][T15682] ? security_socket_sendmsg+0x7c/0xa0 [ 421.548486][T15682] ? pfkey_release+0x310/0x310 [ 421.553283][T15682] ____sys_sendmsg+0x5a2/0x8c0 [ 421.558089][T15682] ? memset+0x1e/0x40 [ 421.562111][T15682] ? __sys_sendmsg_sock+0x30/0x30 [ 421.567276][T15682] ? import_iovec+0x6f/0xa0 [ 421.571822][T15682] ___sys_sendmsg+0x1f0/0x260 [ 421.576546][T15682] ? __sys_sendmsg+0x250/0x250 [ 421.581425][T15682] ? __fdget+0x18b/0x210 [ 421.585697][T15682] __se_sys_sendmsg+0x190/0x250 [ 421.590679][T15682] ? __x64_sys_sendmsg+0x80/0x80 [ 421.595763][T15682] ? trace_sys_enter+0x1f/0x80 [ 421.600559][T15682] do_syscall_64+0x4c/0xa0 [ 421.605169][T15682] ? clear_bhb_loop+0x30/0x80 [ 421.609857][T15682] ? clear_bhb_loop+0x30/0x80 [ 421.614730][T15682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.620896][T15682] RIP: 0033:0x7f1d87322fc9 [ 421.625332][T15682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.644959][T15682] RSP: 002b:00007f1d8558a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.653407][T15682] RAX: ffffffffffffffda RBX: 00007f1d87579fa0 RCX: 00007f1d87322fc9 [ 421.661400][T15682] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 421.669387][T15682] RBP: 00007f1d8558a090 R08: 0000000000000000 R09: 0000000000000000 [ 421.677378][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.685368][T15682] R13: 00007f1d8757a038 R14: 00007f1d87579fa0 R15: 00007fff18b10248 [ 421.693369][T15682] [ 421.932380][T15694] netlink: 'syz.5.3786': attribute type 10 has an invalid length. [ 422.150068][T15698] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 422.441220][T15714] __nla_validate_parse: 6 callbacks suppressed [ 422.441240][T15714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3796'. [ 422.643882][T15732] netlink: 'syz.0.3804': attribute type 41 has an invalid length. [ 422.658815][T15732] netlink: 'syz.0.3804': attribute type 41 has an invalid length. [ 422.887916][T15739] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 423.128649][T15745] bond0: (slave bond_slave_0): Releasing backup interface [ 423.326160][T15757] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3812'. [ 424.431567][T15817] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3834'. [ 424.838913][T15824] validate_nla: 7 callbacks suppressed [ 424.838932][T15824] netlink: 'syz.3.3836': attribute type 10 has an invalid length. [ 425.047043][T15831] netlink: 'syz.2.3840': attribute type 10 has an invalid length. [ 425.364742][T15855] netlink: 'syz.4.3849': attribute type 41 has an invalid length. [ 425.372805][T15855] netlink: 'syz.4.3849': attribute type 41 has an invalid length. [ 425.601296][T15864] netlink: 'syz.2.3852': attribute type 10 has an invalid length. [ 425.653165][T15862] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.3851'. [ 425.866285][T15876] netlink: 'syz.0.3853': attribute type 10 has an invalid length. [ 426.539555][T15904] netlink: 'syz.3.3867': attribute type 10 has an invalid length. [ 426.826839][T15916] netlink: 'syz.2.3873': attribute type 10 has an invalid length. [ 426.838586][T15918] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3874'. [ 427.419714][T15941] netlink: 'syz.0.3881': attribute type 10 has an invalid length. [ 427.675709][T15949] ref_ctr_offset mismatch. inode: 0x4d6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 427.844594][T15957] netlink: 'syz.0.3887': attribute type 10 has an invalid length. [ 427.915988][T15961] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3891'. [ 429.009811][T16014] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3910'. [ 429.068880][T16018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3912'. [ 429.851258][T16056] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3926'. [ 429.994939][T16059] validate_nla: 6 callbacks suppressed [ 429.994978][T16059] netlink: 'syz.5.3928': attribute type 3 has an invalid length. [ 429.995189][T16064] netlink: 'syz.2.3929': attribute type 29 has an invalid length. [ 430.000729][T16059] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3928'. [ 430.133945][T16064] netlink: 'syz.2.3929': attribute type 29 has an invalid length. [ 430.142526][T16068] netlink: 'syz.2.3929': attribute type 29 has an invalid length. [ 430.153393][T16071] netlink: 'syz.3.3931': attribute type 10 has an invalid length. [ 430.447037][T16083] netlink: 'syz.5.3937': attribute type 10 has an invalid length. [ 431.031285][T16110] netlink: 'syz.3.3945': attribute type 10 has an invalid length. [ 431.089283][T16112] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3948'. [ 431.201415][T16118] netlink: 'syz.3.3950': attribute type 10 has an invalid length. [ 432.091303][T16152] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3964'. [ 432.108634][T16154] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 432.333183][T16163] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 432.983321][T16195] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3981'. [ 434.126643][T16246] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4001'. [ 435.049757][T16288] validate_nla: 7 callbacks suppressed [ 435.049775][T16288] netlink: 'syz.0.4016': attribute type 10 has an invalid length. [ 435.073865][T16287] netlink: zone id is out of range [ 435.097177][T16287] netlink: set zone limit has 8 unknown bytes [ 435.169995][T16293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4019'. [ 435.491995][T16307] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.4025'. [ 435.680171][T16317] FAULT_INJECTION: forcing a failure. [ 435.680171][T16317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.721219][T16313] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 435.722165][T16317] CPU: 0 PID: 16317 Comm: syz.3.4027 Not tainted syzkaller #0 [ 435.736530][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.746589][T16317] Call Trace: [ 435.749872][T16317] [ 435.752809][T16317] dump_stack_lvl+0x168/0x230 [ 435.757516][T16317] ? show_regs_print_info+0x20/0x20 [ 435.762725][T16317] ? load_image+0x3b0/0x3b0 [ 435.767255][T16317] ? __lock_acquire+0x7c60/0x7c60 [ 435.772290][T16317] ? __might_sleep+0xf0/0xf0 [ 435.776899][T16317] should_fail+0x38c/0x4c0 [ 435.781329][T16317] _copy_from_user+0x2e/0x170 [ 435.786014][T16317] generic_map_update_batch+0x484/0x7c0 [ 435.791585][T16317] ? rcu_read_unlock+0x90/0x90 [ 435.796367][T16317] ? __fdget+0x18b/0x210 [ 435.800611][T16317] ? rcu_read_unlock+0x90/0x90 [ 435.805385][T16317] bpf_map_do_batch+0x466/0x600 [ 435.810250][T16317] __sys_bpf+0x601/0x670 [ 435.814502][T16317] ? bpf_link_show_fdinfo+0x340/0x340 [ 435.819889][T16317] ? perf_trace_sys_enter+0x130/0x150 [ 435.825271][T16317] __x64_sys_bpf+0x78/0x90 [ 435.829688][T16317] do_syscall_64+0x4c/0xa0 [ 435.834102][T16317] ? clear_bhb_loop+0x30/0x80 [ 435.838780][T16317] ? clear_bhb_loop+0x30/0x80 [ 435.843460][T16317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.849352][T16317] RIP: 0033:0x7fabcc3b5fc9 [ 435.853774][T16317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.873389][T16317] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.881823][T16317] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 435.889791][T16317] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 435.897769][T16317] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.905735][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.913710][T16317] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 435.921706][T16317] [ 436.047686][T16323] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4030'. [ 436.079505][T16323] netlink: 'syz.2.4030': attribute type 39 has an invalid length. [ 436.136746][T16323] netlink: 'syz.2.4030': attribute type 10 has an invalid length. [ 436.408141][T16323] team0: Port device dummy0 added [ 436.426917][T16335] netlink: 'syz.5.4033': attribute type 10 has an invalid length. [ 436.480114][T16323] syz.2.4030 (16323) used greatest stack depth: 18368 bytes left [ 436.654418][T16355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4041'. [ 436.676443][T16355] FAULT_INJECTION: forcing a failure. [ 436.676443][T16355] name failslab, interval 1, probability 0, space 0, times 0 [ 436.698373][T16355] CPU: 1 PID: 16355 Comm: syz.3.4041 Not tainted syzkaller #0 [ 436.705866][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.715925][T16355] Call Trace: [ 436.719204][T16355] [ 436.722137][T16355] dump_stack_lvl+0x168/0x230 [ 436.726830][T16355] ? show_regs_print_info+0x20/0x20 [ 436.732038][T16355] ? load_image+0x3b0/0x3b0 [ 436.736574][T16355] should_fail+0x38c/0x4c0 [ 436.741020][T16355] should_failslab+0x5/0x20 [ 436.745523][T16355] slab_pre_alloc_hook+0x51/0xc0 [ 436.750463][T16355] __kmalloc_node_track_caller+0x68/0x3a0 [ 436.756185][T16355] ? __neigh_notify+0x142/0x2e0 [ 436.761046][T16355] ? kmem_cache_alloc_node+0x162/0x2d0 [ 436.766516][T16355] ? __alloc_skb+0xf4/0x750 [ 436.771033][T16355] ? __neigh_notify+0x142/0x2e0 [ 436.775892][T16355] __alloc_skb+0x22c/0x750 [ 436.780322][T16355] __neigh_notify+0x142/0x2e0 [ 436.785008][T16355] __neigh_update+0xd1a/0x1ff0 [ 436.789807][T16355] neigh_add+0x985/0xcb0 [ 436.794064][T16355] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 436.800332][T16355] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 436.806579][T16355] rtnetlink_rcv_msg+0x7ff/0xe90 [ 436.811530][T16355] ? rtnetlink_bind+0x80/0x80 [ 436.816215][T16355] ? __local_bh_enable_ip+0x12a/0x1b0 [ 436.821599][T16355] ? lockdep_hardirqs_on+0x94/0x140 [ 436.826806][T16355] ? __local_bh_enable_ip+0x12a/0x1b0 [ 436.832179][T16355] ? _local_bh_enable+0xa0/0xa0 [ 436.837041][T16355] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 436.842258][T16355] ? dev_queue_xmit+0x20/0x20 [ 436.846929][T16355] ? memcpy+0x3c/0x60 [ 436.850914][T16355] ? __copy_skb_header+0x417/0x5a0 [ 436.856031][T16355] ? __skb_clone+0x480/0x790 [ 436.860631][T16355] netlink_rcv_skb+0x1e0/0x430 [ 436.865403][T16355] ? rtnetlink_bind+0x80/0x80 [ 436.870089][T16355] ? netlink_ack+0xb60/0xb60 [ 436.874697][T16355] netlink_unicast+0x774/0x920 [ 436.879475][T16355] netlink_sendmsg+0x8ab/0xbc0 [ 436.884247][T16355] ? netlink_getsockopt+0x560/0x560 [ 436.889451][T16355] ? aa_sock_msg_perm+0x94/0x150 [ 436.894390][T16355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.899682][T16355] ? security_socket_sendmsg+0x7c/0xa0 [ 436.905142][T16355] ? netlink_getsockopt+0x560/0x560 [ 436.910344][T16355] ____sys_sendmsg+0x5a2/0x8c0 [ 436.915119][T16355] ? memset+0x1e/0x40 [ 436.919103][T16355] ? __sys_sendmsg_sock+0x30/0x30 [ 436.924130][T16355] ? import_iovec+0x6f/0xa0 [ 436.928711][T16355] ___sys_sendmsg+0x1f0/0x260 [ 436.933375][T16355] ? __sys_sendmsg+0x250/0x250 [ 436.938127][T16355] ? vfs_write+0x84d/0xd00 [ 436.942544][T16355] ? __fdget+0x18b/0x210 [ 436.946782][T16355] __se_sys_sendmsg+0x190/0x250 [ 436.951636][T16355] ? __x64_sys_sendmsg+0x80/0x80 [ 436.956560][T16355] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 436.962533][T16355] ? lockdep_hardirqs_on+0x94/0x140 [ 436.967723][T16355] do_syscall_64+0x4c/0xa0 [ 436.972141][T16355] ? clear_bhb_loop+0x30/0x80 [ 436.976817][T16355] ? clear_bhb_loop+0x30/0x80 [ 436.981482][T16355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.987732][T16355] RIP: 0033:0x7fabcc3b5fc9 [ 436.992134][T16355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.011724][T16355] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.020139][T16355] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 437.028094][T16355] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 437.036047][T16355] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.043996][T16355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.051950][T16355] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 437.059931][T16355] [ 437.147823][T16362] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.4044'. [ 437.309900][T16369] netlink: 'syz.2.4043': attribute type 10 has an invalid length. [ 437.609957][T16378] netlink: 'syz.3.4050': attribute type 10 has an invalid length. [ 437.944825][T16405] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4060'. [ 437.978866][T16407] netlink: 'syz.0.4061': attribute type 10 has an invalid length. [ 438.162726][T16414] netlink: 'syz.2.4062': attribute type 10 has an invalid length. [ 438.350273][T16420] netlink: 'syz.2.4067': attribute type 10 has an invalid length. [ 438.594257][T16439] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4074'. [ 438.679644][T16438] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.4071'. [ 439.844867][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.851215][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.992406][T16491] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4093'. [ 440.100066][T16487] validate_nla: 5 callbacks suppressed [ 440.100082][T16487] netlink: 'syz.4.4091': attribute type 10 has an invalid length. [ 440.154371][T16497] device wlan0 entered promiscuous mode [ 440.243414][T16498] netlink: 'syz.2.4096': attribute type 21 has an invalid length. [ 440.324813][T16499] netlink: 'syz.5.4095': attribute type 10 has an invalid length. [ 440.942011][T16508] ªªªªªª: renamed from vlan0 [ 441.044939][T16530] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.4106'. [ 441.261813][T16541] netlink: 'syz.3.4108': attribute type 10 has an invalid length. [ 441.642222][T16563] netlink: 'syz.0.4116': attribute type 10 has an invalid length. [ 441.741003][T16574] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4122'. [ 442.008564][T16572] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.4120'. [ 442.067248][T16586] netlink: 'syz.3.4127': attribute type 2 has an invalid length. [ 442.098133][T16586] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4127'. [ 442.144102][T16586] FAULT_INJECTION: forcing a failure. [ 442.144102][T16586] name failslab, interval 1, probability 0, space 0, times 0 [ 442.166314][T16586] CPU: 0 PID: 16586 Comm: syz.3.4127 Not tainted syzkaller #0 [ 442.173804][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.183847][T16586] Call Trace: [ 442.187110][T16586] [ 442.190026][T16586] dump_stack_lvl+0x168/0x230 [ 442.194701][T16586] ? show_regs_print_info+0x20/0x20 [ 442.199888][T16586] ? load_image+0x3b0/0x3b0 [ 442.204380][T16586] ? __might_sleep+0xf0/0xf0 [ 442.208956][T16586] ? __lock_acquire+0x7c60/0x7c60 [ 442.213971][T16586] should_fail+0x38c/0x4c0 [ 442.218386][T16586] should_failslab+0x5/0x20 [ 442.222873][T16586] slab_pre_alloc_hook+0x51/0xc0 [ 442.227797][T16586] kmem_cache_alloc_trace+0x47/0x2a0 [ 442.233065][T16586] ? inet_rtm_newaddr+0xbfc/0x1800 [ 442.238174][T16586] inet_rtm_newaddr+0xbfc/0x1800 [ 442.243109][T16586] ? inet_netconf_fill_devconf+0x850/0x850 [ 442.248915][T16586] ? inet_netconf_fill_devconf+0x850/0x850 [ 442.254706][T16586] rtnetlink_rcv_msg+0x7ff/0xe90 [ 442.259638][T16586] ? rtnetlink_bind+0x80/0x80 [ 442.264303][T16586] ? __local_bh_enable_ip+0x12a/0x1b0 [ 442.269658][T16586] ? lockdep_hardirqs_on+0x94/0x140 [ 442.274843][T16586] ? __local_bh_enable_ip+0x12a/0x1b0 [ 442.280216][T16586] ? _local_bh_enable+0xa0/0xa0 [ 442.285106][T16586] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 442.290411][T16586] ? dev_queue_xmit+0x20/0x20 [ 442.295094][T16586] ? memcpy+0x3c/0x60 [ 442.299084][T16586] ? __copy_skb_header+0x417/0x5a0 [ 442.304192][T16586] ? __skb_clone+0x480/0x790 [ 442.308780][T16586] netlink_rcv_skb+0x1e0/0x430 [ 442.313538][T16586] ? rtnetlink_bind+0x80/0x80 [ 442.318210][T16586] ? netlink_ack+0xb60/0xb60 [ 442.322800][T16586] netlink_unicast+0x774/0x920 [ 442.327568][T16586] netlink_sendmsg+0x8ab/0xbc0 [ 442.332331][T16586] ? netlink_getsockopt+0x560/0x560 [ 442.337519][T16586] ? aa_sock_msg_perm+0x94/0x150 [ 442.342454][T16586] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 442.347726][T16586] ? security_socket_sendmsg+0x7c/0xa0 [ 442.353167][T16586] ? netlink_getsockopt+0x560/0x560 [ 442.358350][T16586] ____sys_sendmsg+0x5a2/0x8c0 [ 442.363107][T16586] ? memset+0x1e/0x40 [ 442.367074][T16586] ? __sys_sendmsg_sock+0x30/0x30 [ 442.372097][T16586] ? import_iovec+0x6f/0xa0 [ 442.376591][T16586] ___sys_sendmsg+0x1f0/0x260 [ 442.381261][T16586] ? __sys_sendmsg+0x250/0x250 [ 442.386022][T16586] ? vfs_write+0x84d/0xd00 [ 442.390443][T16586] ? __fdget+0x18b/0x210 [ 442.394675][T16586] __se_sys_sendmsg+0x190/0x250 [ 442.399516][T16586] ? __x64_sys_sendmsg+0x80/0x80 [ 442.404436][T16586] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.410436][T16586] ? trace_sys_enter+0x1f/0x80 [ 442.415218][T16586] do_syscall_64+0x4c/0xa0 [ 442.419637][T16586] ? clear_bhb_loop+0x30/0x80 [ 442.424304][T16586] ? clear_bhb_loop+0x30/0x80 [ 442.428989][T16586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.434870][T16586] RIP: 0033:0x7fabcc3b5fc9 [ 442.439282][T16586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.458876][T16586] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.467281][T16586] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 442.475257][T16586] RDX: 0000000024040094 RSI: 0000200000000080 RDI: 0000000000000004 [ 442.483223][T16586] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 442.491191][T16586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.499150][T16586] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 442.507140][T16586] [ 442.639155][T16597] netlink: 'syz.4.4128': attribute type 10 has an invalid length. [ 442.770827][T16600] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 442.908046][T16607] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4135'. [ 443.341601][T16622] netlink: 'syz.4.4139': attribute type 2 has an invalid length. [ 443.386876][T16622] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4139'. [ 443.570890][T16638] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4145'. [ 443.754089][T16640] netlink: 'syz.3.4146': attribute type 10 has an invalid length. [ 443.777333][T16648] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4149'. [ 444.135830][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 445.220989][T16696] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4166'. [ 445.663074][T16720] validate_nla: 8 callbacks suppressed [ 445.663089][T16720] netlink: 'syz.4.4175': attribute type 10 has an invalid length. [ 446.223384][T16736] netlink: 'syz.3.4180': attribute type 10 has an invalid length. [ 446.256301][T16737] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4183'. [ 447.054976][ T4191] Bluetooth: hci2: command 0x0406 tx timeout [ 447.097528][T16770] netlink: 'syz.5.4193': attribute type 10 has an invalid length. [ 447.268894][T16778] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4199'. [ 447.355599][T16783] netlink: 'syz.0.4201': attribute type 1 has an invalid length. [ 447.365773][T16783] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.4201'. [ 447.412948][T16783] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.4201'. [ 447.466637][T16784] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 447.485699][T16783] netlink: 'syz.0.4201': attribute type 2 has an invalid length. [ 447.494572][T16783] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4201'. [ 447.731617][T16790] netlink: 'syz.3.4202': attribute type 17 has an invalid length. [ 447.978949][T16814] netlink: 'syz.4.4213': attribute type 46 has an invalid length. [ 447.996236][T16814] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4213'. [ 448.069015][T16810] netlink: 'syz.2.4211': attribute type 10 has an invalid length. [ 448.204783][T16819] tap0: tun_chr_ioctl cmd 1074025677 [ 448.214882][T16819] tap0: linktype set to 769 [ 448.370197][T16822] netlink: 'syz.4.4215': attribute type 10 has an invalid length. [ 448.554202][T16838] FAULT_INJECTION: forcing a failure. [ 448.554202][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 448.637669][T16838] CPU: 1 PID: 16838 Comm: syz.5.4222 Not tainted syzkaller #0 [ 448.645175][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.655227][T16838] Call Trace: [ 448.658506][T16838] [ 448.661470][T16838] dump_stack_lvl+0x168/0x230 [ 448.666151][T16838] ? show_regs_print_info+0x20/0x20 [ 448.671356][T16838] ? load_image+0x3b0/0x3b0 [ 448.675898][T16838] ? __lock_acquire+0x7c60/0x7c60 [ 448.680924][T16838] should_fail+0x38c/0x4c0 [ 448.685349][T16838] should_failslab+0x5/0x20 [ 448.689842][T16838] slab_pre_alloc_hook+0x51/0xc0 [ 448.694776][T16838] kmem_cache_alloc_node_trace+0x4a/0x300 [ 448.700488][T16838] ? __get_vm_area_node+0x119/0x2d0 [ 448.705681][T16838] __get_vm_area_node+0x119/0x2d0 [ 448.710701][T16838] __vmalloc_node_range+0xef/0x8b0 [ 448.715801][T16838] ? copy_process+0x5b3/0x3e00 [ 448.720554][T16838] ? rcu_is_watching+0x11/0xa0 [ 448.725303][T16838] ? kmem_cache_alloc_node+0x162/0x2d0 [ 448.730751][T16838] dup_task_struct+0x3f5/0xb30 [ 448.735500][T16838] ? copy_process+0x5b3/0x3e00 [ 448.740256][T16838] copy_process+0x5b3/0x3e00 [ 448.744835][T16838] ? __lock_acquire+0x13ad/0x7c60 [ 448.749848][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 448.755750][T16838] ? __pidfd_prepare+0x140/0x140 [ 448.760679][T16838] ? perf_trace_lock+0xdf/0x370 [ 448.765530][T16838] kernel_clone+0x219/0x930 [ 448.770039][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 448.775933][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 448.781824][T16838] ? create_io_thread+0x130/0x130 [ 448.786846][T16838] ? __context_tracking_exit+0x4c/0x80 [ 448.792297][T16838] __x64_sys_clone+0x170/0x1c0 [ 448.797058][T16838] ? __ia32_sys_vfork+0xf0/0xf0 [ 448.801908][T16838] ? lockdep_hardirqs_on+0x94/0x140 [ 448.807116][T16838] do_syscall_64+0x4c/0xa0 [ 448.811529][T16838] ? clear_bhb_loop+0x30/0x80 [ 448.816201][T16838] ? clear_bhb_loop+0x30/0x80 [ 448.820876][T16838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.826855][T16838] RIP: 0033:0x7f4071ac6fc9 [ 448.831258][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.850852][T16838] RSP: 002b:00007f406fd2dfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 448.859254][T16838] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 448.867211][T16838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080001280 [ 448.875180][T16838] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.883134][T16838] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 448.891086][T16838] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 448.899063][T16838] [ 448.932572][T16838] syz.5.4222: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 448.953824][T16838] CPU: 0 PID: 16838 Comm: syz.5.4222 Not tainted syzkaller #0 [ 448.961324][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.971474][T16838] Call Trace: [ 448.974751][T16838] [ 448.977677][T16838] dump_stack_lvl+0x168/0x230 [ 448.982348][T16838] ? rcu_lock_release+0x5/0x20 [ 448.987102][T16838] ? show_regs_print_info+0x20/0x20 [ 448.992289][T16838] ? load_image+0x3b0/0x3b0 [ 448.996796][T16838] warn_alloc+0x20e/0x2f0 [ 449.001117][T16838] ? zone_watermark_ok_safe+0x240/0x240 [ 449.006643][T16838] ? rcu_is_watching+0x11/0xa0 [ 449.011394][T16838] ? __get_vm_area_node+0x119/0x2d0 [ 449.016578][T16838] ? __get_vm_area_node+0x2b5/0x2d0 [ 449.021764][T16838] __vmalloc_node_range+0x2b1/0x8b0 [ 449.026947][T16838] ? rcu_is_watching+0x11/0xa0 [ 449.031692][T16838] ? kmem_cache_alloc_node+0x162/0x2d0 [ 449.037147][T16838] dup_task_struct+0x3f5/0xb30 [ 449.041897][T16838] ? copy_process+0x5b3/0x3e00 [ 449.046656][T16838] copy_process+0x5b3/0x3e00 [ 449.051231][T16838] ? __lock_acquire+0x13ad/0x7c60 [ 449.056242][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 449.062140][T16838] ? __pidfd_prepare+0x140/0x140 [ 449.067068][T16838] ? perf_trace_lock+0xdf/0x370 [ 449.071904][T16838] kernel_clone+0x219/0x930 [ 449.076390][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 449.082265][T16838] ? trace_event_raw_event_lock+0x250/0x250 [ 449.088141][T16838] ? create_io_thread+0x130/0x130 [ 449.093157][T16838] ? __context_tracking_exit+0x4c/0x80 [ 449.098603][T16838] __x64_sys_clone+0x170/0x1c0 [ 449.103392][T16838] ? __ia32_sys_vfork+0xf0/0xf0 [ 449.108241][T16838] ? lockdep_hardirqs_on+0x94/0x140 [ 449.113422][T16838] do_syscall_64+0x4c/0xa0 [ 449.117820][T16838] ? clear_bhb_loop+0x30/0x80 [ 449.122483][T16838] ? clear_bhb_loop+0x30/0x80 [ 449.127238][T16838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.133115][T16838] RIP: 0033:0x7f4071ac6fc9 [ 449.137514][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.157100][T16838] RSP: 002b:00007f406fd2dfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 449.165497][T16838] RAX: ffffffffffffffda RBX: 00007f4071d1dfa0 RCX: 00007f4071ac6fc9 [ 449.173448][T16838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080001280 [ 449.181491][T16838] RBP: 00007f406fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 449.189445][T16838] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 449.197394][T16838] R13: 00007f4071d1e038 R14: 00007f4071d1dfa0 R15: 00007ffce8dbaf98 [ 449.205361][T16838] [ 449.237275][T16838] Mem-Info: [ 449.249841][T16838] active_anon:291 inactive_anon:7039 isolated_anon:0 [ 449.249841][T16838] active_file:24999 inactive_file:36432 isolated_file:0 [ 449.249841][T16838] unevictable:768 dirty:68 writeback:0 [ 449.249841][T16838] slab_reclaimable:21078 slab_unreclaimable:93944 [ 449.249841][T16838] mapped:30059 shmem:1640 pagetables:681 bounce:0 [ 449.249841][T16838] kernel_misc_reclaimable:0 [ 449.249841][T16838] free:1368221 free_pcp:11324 free_cma:0 [ 449.402594][T16838] Node 0 active_anon:1132kB inactive_anon:27648kB active_file:99792kB inactive_file:145728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120236kB dirty:268kB writeback:0kB shmem:4484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:2624kB all_unreclaimable? no [ 449.481876][T16838] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 449.539847][T16866] FAULT_INJECTION: forcing a failure. [ 449.539847][T16866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.546616][T16838] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.581801][T16866] CPU: 0 PID: 16866 Comm: syz.3.4230 Not tainted syzkaller #0 [ 449.604728][T16866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.614794][T16866] Call Trace: [ 449.618081][T16866] [ 449.621025][T16866] dump_stack_lvl+0x168/0x230 [ 449.625728][T16866] ? show_regs_print_info+0x20/0x20 [ 449.630958][T16866] ? load_image+0x3b0/0x3b0 [ 449.635480][T16866] ? __lock_acquire+0x7c60/0x7c60 [ 449.640520][T16866] ? __rwlock_init+0x140/0x140 [ 449.645288][T16866] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 449.650693][T16866] should_fail+0x38c/0x4c0 [ 449.655144][T16866] prepare_alloc_pages+0x1e4/0x5f0 [ 449.657369][T16838] lowmem_reserve[]: [ 449.660284][T16866] __alloc_pages+0x10e/0x470 [ 449.660320][T16866] ? zone_statistics+0x170/0x170 [ 449.673610][T16866] ? memset+0x1e/0x40 [ 449.677605][T16866] __get_free_pages+0x8/0x30 [ 449.682185][T16866] __genradix_ptr_alloc+0xda/0x350 [ 449.687295][T16866] __genradix_prealloc+0x3e/0x80 [ 449.692227][T16866] sctp_stream_init+0x139/0x400 [ 449.697078][T16866] sctp_association_new+0x10db/0x24a0 [ 449.702471][T16866] sctp_connect_new_asoc+0x2bb/0x690 [ 449.707762][T16866] ? __sctp_connect+0xd20/0xd20 [ 449.712604][T16866] ? __local_bh_enable_ip+0x12a/0x1b0 [ 449.717970][T16866] ? _local_bh_enable+0xa0/0xa0 [ 449.722816][T16866] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 449.728351][T16866] ? security_sctp_bind_connect+0x85/0xb0 [ 449.734065][T16866] sctp_sendmsg+0x15e0/0x2950 [ 449.738758][T16866] ? aa_sk_perm+0x7b4/0x8f0 [ 449.743248][T16866] ? sctp_getsockopt+0x8a0/0x8a0 [ 449.748177][T16866] ? aa_af_perm+0x2b0/0x2b0 [ 449.752665][T16866] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 449.759079][T16866] ? sock_rps_record_flow+0x17/0x3b0 [ 449.764383][T16866] ? inet_send_prepare+0x260/0x260 [ 449.769486][T16866] ? inet_sendmsg+0x78/0x2f0 [ 449.774061][T16866] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.779331][T16866] ? security_socket_sendmsg+0x7c/0xa0 [ 449.784771][T16866] ? inet_send_prepare+0x260/0x260 [ 449.789870][T16866] ____sys_sendmsg+0x5a2/0x8c0 [ 449.794636][T16866] ? memset+0x1e/0x40 [ 449.798612][T16866] ? __sys_sendmsg_sock+0x30/0x30 [ 449.803639][T16866] ? import_iovec+0x6f/0xa0 [ 449.808135][T16866] ___sys_sendmsg+0x1f0/0x260 [ 449.812817][T16866] ? __sys_sendmsg+0x250/0x250 [ 449.817590][T16866] ? trace_event_raw_event_lock+0x250/0x250 [ 449.823467][T16866] ? vfs_write+0x84d/0xd00 [ 449.827894][T16866] ? __fdget+0x18b/0x210 [ 449.832130][T16866] __se_sys_sendmsg+0x190/0x250 [ 449.836974][T16866] ? __x64_sys_sendmsg+0x80/0x80 [ 449.841896][T16866] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 449.847883][T16866] ? lockdep_hardirqs_on+0x94/0x140 [ 449.853072][T16866] do_syscall_64+0x4c/0xa0 [ 449.857474][T16866] ? clear_bhb_loop+0x30/0x80 [ 449.862141][T16866] ? clear_bhb_loop+0x30/0x80 [ 449.866811][T16866] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.872688][T16866] RIP: 0033:0x7fabcc3b5fc9 [ 449.877093][T16866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.896693][T16866] RSP: 002b:00007fabca61d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.905094][T16866] RAX: ffffffffffffffda RBX: 00007fabcc60cfa0 RCX: 00007fabcc3b5fc9 [ 449.913051][T16866] RDX: 00000000000080d1 RSI: 0000200000000300 RDI: 0000000000000004 [ 449.921008][T16866] RBP: 00007fabca61d090 R08: 0000000000000000 R09: 0000000000000000 [ 449.928964][T16866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.936917][T16866] R13: 00007fabcc60d038 R14: 00007fabcc60cfa0 R15: 00007ffcfe6a9e18 [ 449.944895][T16866] [ 449.991110][T16838] 0 2541 2542 2542 2542 [ 450.002415][T16838] Node 0 DMA32 free:1531116kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1132kB inactive_anon:27648kB active_file:99792kB inactive_file:145728kB unevictable:1536kB writepending:564kB present:3129332kB managed:2608952kB mlocked:0kB bounce:0kB free_pcp:42728kB local_pcp:21060kB free_cma:0kB [ 450.044411][T16838] lowmem_reserve[]: 0 0 0 0 0 [ 450.049270][T16838] Node 0 Normal free:8kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 450.080995][T16838] lowmem_reserve[]: 0 0 0 0 0 [ 450.097950][T16838] Node 1 Normal free:3925024kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3736kB local_pcp:3736kB free_cma:0kB [ 450.132809][T16838] lowmem_reserve[]: 0 0 0 0 0 [ 450.137867][T16838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.167368][T16838] Node 0 DMA32: 734*4kB (UME) 1470*8kB (UME) 627*16kB (UME) 870*32kB (UME) 523*64kB (UME) 230*128kB (UME) 91*256kB (UME) 56*512kB (UME) 29*1024kB (UM) 14*2048kB (UME) 318*4096kB (UM) = 1528344kB [ 450.211579][T16838] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 450.224001][T16838] Node 1 Normal: 162*4kB (UE) 35*8kB (UME) 26*16kB (UME) 163*32kB (UE) 66*64kB (UME) 12*128kB (UME) 8*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (M) 954*4096kB (UM) = 3925024kB [ 450.251837][T16838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.268201][T16838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.279519][T16838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.294911][T16838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.306454][T16838] 63071 total pagecache pages [ 450.311136][T16838] 0 pages in swap cache [ 450.344410][T16838] Swap cache stats: add 0, delete 0, find 0/0 [ 450.350516][T16838] Free swap = 124996kB [ 450.365289][T16838] Total swap = 124996kB [ 450.385490][T16838] 2097051 pages RAM [ 450.389326][T16838] 0 pages HighMem/MovableOnly [ 450.411965][T16838] 410826 pages reserved [ 450.416341][T16838] 0 pages cma reserved [ 450.632740][T16896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.791104][T16902] validate_nla: 1 callbacks suppressed [ 450.791150][T16902] netlink: 'syz.5.4243': attribute type 10 has an invalid length. [ 451.095339][T16917] netlink: 'syz.2.4247': attribute type 10 has an invalid length. [ 451.429259][T16939] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4256'. [ 451.514587][T16942] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 451.525277][T16939] device syzkaller0 entered promiscuous mode [ 452.109993][T16966] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.4268'. [ 452.172439][T16973] 7’ç÷ï: renamed from syzkaller0 [ 452.391012][T16980] netlink: 'syz.3.4272': attribute type 10 has an invalid length. [ 452.844957][T17004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4282'. [ 452.889330][T17009] netlink: 'syz.5.4285': attribute type 4 has an invalid length. [ 452.898741][T17009] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4285'. [ 452.969835][T17007] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 453.104803][T17007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 453.120680][T17015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4287'. [ 453.173678][T17015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4287'. [ 453.253117][T17016] netlink: 'syz.5.4288': attribute type 10 has an invalid length. [ 453.950439][T17053] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4301'. [ 454.331163][T17065] netlink: 'syz.3.4305': attribute type 10 has an invalid length. [ 454.633443][T17080] device wg2 entered promiscuous mode [ 454.740468][T17084] netlink: 'syz.0.4311': attribute type 10 has an invalid length. [ 455.185839][T17106] netlink: 'syz.3.4319': attribute type 10 has an invalid length. [ 456.051848][T17141] validate_nla: 1 callbacks suppressed [ 456.051864][T17141] netlink: 'syz.0.4332': attribute type 11 has an invalid length. [ 456.285250][T17151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 456.339245][T17150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 456.600784][T17159] FAULT_INJECTION: forcing a failure. [ 456.600784][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 456.651953][T17159] CPU: 1 PID: 17159 Comm: syz.2.4341 Not tainted syzkaller #0 [ 456.659464][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.669540][T17159] Call Trace: [ 456.672837][T17159] [ 456.675958][T17159] dump_stack_lvl+0x168/0x230 [ 456.680672][T17159] ? show_regs_print_info+0x20/0x20 [ 456.685896][T17159] ? load_image+0x3b0/0x3b0 [ 456.690426][T17159] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 456.696026][T17159] should_fail+0x38c/0x4c0 [ 456.700490][T17159] should_failslab+0x5/0x20 [ 456.705021][T17159] slab_pre_alloc_hook+0x51/0xc0 [ 456.709982][T17159] ? skb_clone+0x1bd/0x350 [ 456.714424][T17159] kmem_cache_alloc+0x3d/0x290 [ 456.719226][T17159] skb_clone+0x1bd/0x350 [ 456.723498][T17159] __netlink_deliver_tap+0x3cd/0x7c0 [ 456.728865][T17159] netlink_deliver_tap+0x16c/0x180 [ 456.734006][T17159] __netlink_sendskb+0x4b/0x90 [ 456.738901][T17159] netlink_dump+0x927/0xcd0 [ 456.743579][T17159] ? netlink_lookup+0x1d0/0x1d0 [ 456.748470][T17159] ? genl_start+0x2e3/0x4a0 [ 456.753022][T17159] __netlink_dump_start+0x523/0x700 [ 456.758283][T17159] genl_rcv_msg+0x93b/0xf40 [ 456.762837][T17159] ? smcr_nl_get_link+0x60/0x60 [ 456.767764][T17159] ? genl_bind+0x370/0x370 [ 456.772261][T17159] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 456.777835][T17159] ? genl_rcv_msg+0xf40/0xf40 [ 456.782522][T17159] ? genl_start+0x4a0/0x4a0 [ 456.787039][T17159] ? genl_lock_dumpit+0x90/0x90 [ 456.791918][T17159] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 456.798542][T17159] ? dev_queue_xmit+0x20/0x20 [ 456.803254][T17159] ? smcr_nl_get_link+0x60/0x60 [ 456.808172][T17159] netlink_rcv_skb+0x1e0/0x430 [ 456.812961][T17159] ? genl_bind+0x370/0x370 [ 456.817410][T17159] ? netlink_ack+0xb60/0xb60 [ 456.822030][T17159] ? __lock_acquire+0x7c60/0x7c60 [ 456.827091][T17159] ? preempt_count_add+0x8d/0x190 [ 456.832141][T17159] ? down_read+0x1aa/0x2e0 [ 456.836590][T17159] genl_rcv+0x24/0x40 [ 456.840584][T17159] netlink_unicast+0x774/0x920 [ 456.845407][T17159] netlink_sendmsg+0x8ab/0xbc0 [ 456.850227][T17159] ? netlink_getsockopt+0x560/0x560 [ 456.855463][T17159] ? aa_sock_msg_perm+0x94/0x150 [ 456.860430][T17159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.865735][T17159] ? security_socket_sendmsg+0x7c/0xa0 [ 456.871214][T17159] ? netlink_getsockopt+0x560/0x560 [ 456.876440][T17159] ____sys_sendmsg+0x5a2/0x8c0 [ 456.881251][T17159] ? memset+0x1e/0x40 [ 456.885257][T17159] ? __sys_sendmsg_sock+0x30/0x30 [ 456.890341][T17159] ? import_iovec+0x6f/0xa0 [ 456.894880][T17159] ___sys_sendmsg+0x1f0/0x260 [ 456.899610][T17159] ? __sys_sendmsg+0x250/0x250 [ 456.904441][T17159] ? vfs_write+0x84d/0xd00 [ 456.908938][T17159] ? __fdget+0x18b/0x210 [ 456.913243][T17159] __se_sys_sendmsg+0x190/0x250 [ 456.918130][T17159] ? __x64_sys_sendmsg+0x80/0x80 [ 456.923079][T17159] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 456.929134][T17159] ? lockdep_hardirqs_on+0x94/0x140 [ 456.934369][T17159] do_syscall_64+0x4c/0xa0 [ 456.938802][T17159] ? clear_bhb_loop+0x30/0x80 [ 456.943498][T17159] ? clear_bhb_loop+0x30/0x80 [ 456.948197][T17159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.954103][T17159] RIP: 0033:0x7f187e925fc9 [ 456.958541][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.978259][T17159] RSP: 002b:00007f187cb8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.986699][T17159] RAX: ffffffffffffffda RBX: 00007f187eb7cfa0 RCX: 00007f187e925fc9 [ 456.994689][T17159] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 457.002681][T17159] RBP: 00007f187cb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 457.010666][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.018662][T17159] R13: 00007f187eb7d038 R14: 00007f187eb7cfa0 R15: 00007ffd811fc648 [ 457.026712][T17159] [ 457.297088][ T4191] Bluetooth: hci5: command 0x0406 tx timeout [ 457.585250][T17168] netlink: 'syz.0.4340': attribute type 10 has an invalid length. [ 457.891672][T17186] netlink: 'syz.5.4352': attribute type 16 has an invalid length. [ 457.918716][T17186] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4352'. [ 457.961667][T17190] netlink: 'syz.3.4353': attribute type 41 has an invalid length. [ 457.991364][T17183] netlink: 'syz.2.4350': attribute type 3 has an invalid length. [ 458.000407][T17190] netlink: 'syz.3.4353': attribute type 41 has an invalid length. [ 458.009072][T17183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4350'. [ 458.264108][T17206] netlink: 'syz.3.4357': attribute type 10 has an invalid length. [ 458.299776][T17209] netlink: 'syz.5.4358': attribute type 10 has an invalid length. [ 458.375568][T17208] netlink: 'syz.4.4360': attribute type 29 has an invalid length. [ 458.397321][T17208] netlink: 'syz.4.4360': attribute type 29 has an invalid length. [ 458.405629][ T27] INFO: task syz.1.2632:12003 blocked for more than 143 seconds. [ 458.444088][ T27] Not tainted syzkaller #0 [ 458.466417][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.487354][ T27] task:syz.1.2632 state:D stack:23784 pid:12003 ppid: 4184 flags:0x00004002 [ 458.521456][ T27] Call Trace: [ 458.524855][ T27] [ 458.527805][ T27] __schedule+0x11bb/0x4390 [ 458.541087][ T27] ? __mutex_trylock_common+0x14f/0x250 [ 458.546731][ T27] ? perf_event_release_kernel+0x1ff/0x8c0 [ 458.563403][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 458.568474][ T27] ? release_firmware_map_entry+0x190/0x190 [ 458.574675][ T27] ? perf_trace_preemptirq_template+0x2be/0x380 [ 458.580957][ T27] schedule+0x11b/0x1e0 [ 458.585232][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 458.590624][ T27] ? perf_mmap+0x1400/0x1400 [ 458.597906][ T27] _free_event+0x34/0xe60 [ 458.602313][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 458.607618][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 458.621925][ T27] ? perf_mmap+0x1400/0x1400 [ 458.626550][ T27] ? perf_mmap+0x1400/0x1400 [ 458.631155][ T27] perf_event_release_kernel+0x832/0x8c0 [ 458.637357][ T27] ? __might_sleep+0xf0/0xf0 [ 458.646067][ T27] ? calc_timer_values+0x410/0x410 [ 458.662062][ T27] ? perf_mmap+0x1400/0x1400 [ 458.666703][ T27] perf_release+0x37/0x40 [ 458.671021][ T27] __fput+0x234/0x930 [ 458.689367][ T27] task_work_run+0x125/0x1a0 [ 458.694117][ T27] do_exit+0x61e/0x20a0 [ 458.698450][ T27] ? asm_sysvec_irq_work+0x16/0x20 [ 458.705580][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 458.710785][ T27] ? put_task_struct+0x80/0x80 [ 458.715666][ T27] ? asm_sysvec_irq_work+0x16/0x20 [ 458.720801][ T27] do_group_exit+0x12e/0x300 [ 458.725838][ T27] get_signal+0x6ca/0x12c0 [ 458.730281][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 458.736037][ T27] ? slab_free_freelist_hook+0xea/0x170 [ 458.741596][ T27] ? rcu_is_watching+0x11/0xa0 [ 458.746402][ T27] ? kmem_cache_free+0x14c/0x210 [ 458.751345][ T27] ? get_sigframe_size+0x10/0x10 [ 458.756518][ T27] ? do_sys_openat2+0x207/0x4a0 [ 458.761510][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 458.766847][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 458.772436][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 458.777733][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 458.783413][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 458.788981][ T27] do_syscall_64+0x58/0xa0 [ 458.793515][ T27] ? clear_bhb_loop+0x30/0x80 [ 458.798334][ T27] ? clear_bhb_loop+0x30/0x80 [ 458.803213][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.809120][ T27] RIP: 0033:0x7f012b377fc9 [ 458.815379][ T27] RSP: 002b:00007f01295df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.823866][ T27] RAX: 000000000000000d RBX: 00007f012b5cefa0 RCX: 00007f012b377fc9 [ 458.832073][ T27] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 000000000000000c [ 458.840068][ T27] RBP: 00007f012b3faf91 R08: 0000000000000000 R09: 0000000000000000 [ 458.848097][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.856140][ T27] R13: 00007f012b5cf038 R14: 00007f012b5cefa0 R15: 00007ffdf06ee608 [ 458.864185][ T27] [ 458.867385][ T27] [ 458.867385][ T27] Showing all locks held in the system: [ 458.875360][ T27] 1 lock held by khungtaskd/27: [ 458.880222][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 458.898070][ T27] 3 locks held by kworker/u4:4/1266: [ 458.903717][ T27] 2 locks held by klogd/3550: [ 458.908410][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 458.918513][ T27] #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: skb_queue_tail+0x2c/0xf0 [ 458.931097][ T27] 2 locks held by getty/3947: [ 458.935831][ T27] #0: ffff88802cdf0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 458.945629][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 458.955777][ T27] 2 locks held by kworker/1:9/9693: [ 458.960970][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 458.971350][ T27] #1: ffffc9000337fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 458.982767][ T27] 2 locks held by syz.5.4363/17216: [ 458.987971][ T27] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x86/0x1f0 [ 458.996897][ T27] #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 459.008142][ T27] [ 459.010487][ T27] ============================================= [ 459.010487][ T27] [ 459.020921][ T27] NMI backtrace for cpu 0 [ 459.025261][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 459.032444][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.042482][ T27] Call Trace: [ 459.045743][ T27] [ 459.048658][ T27] dump_stack_lvl+0x168/0x230 [ 459.053329][ T27] ? show_regs_print_info+0x20/0x20 [ 459.058506][ T27] ? load_image+0x3b0/0x3b0 [ 459.062995][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 459.068349][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 459.073449][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 459.078974][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 459.085549][ T27] ? _printk+0xcc/0x110 [ 459.089692][ T27] ? load_image+0x3b0/0x3b0 [ 459.094177][ T27] ? load_image+0x3b0/0x3b0 [ 459.098797][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 459.104850][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 459.110817][ T27] watchdog+0xe0f/0xe50 [ 459.114974][ T27] kthread+0x436/0x520 [ 459.119024][ T27] ? hungtask_pm_notify+0x40/0x40 [ 459.124029][ T27] ? kthread_blkcg+0xd0/0xd0 [ 459.128600][ T27] ret_from_fork+0x1f/0x30 [ 459.133004][ T27] [ 459.136484][ T27] Sending NMI from CPU 0 to CPUs 1: [ 459.141823][ C1] NMI backtrace for cpu 1 [ 459.141834][ C1] CPU: 1 PID: 3550 Comm: klogd Not tainted syzkaller #0 [ 459.141849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.141858][ C1] RIP: 0010:__lock_acquire+0x354/0x7c60 [ 459.141880][ C1] Code: c7 c6 60 43 0b 8a e8 9b a5 42 08 0f 0b e9 a9 56 00 00 31 c0 4c 89 64 24 70 48 8d 04 80 48 8b 4c 24 30 4c 8d a4 c1 f0 0a 00 00 <48> 8d 8c c1 10 0b 00 00 48 89 4c 24 18 48 c1 e9 03 48 89 4c 24 58 [ 459.141891][ C1] RSP: 0018:ffffc90002dff780 EFLAGS: 00000046 [ 459.141904][ C1] RAX: 0000000000000000 RBX: ffff88802ce09690 RCX: ffff88807dcd0000 [ 459.141915][ C1] RDX: 0000000000000567 RSI: 0000000000000000 RDI: ffff88802ce09690 [ 459.141925][ C1] RBP: ffffc90002dff9d0 R08: dffffc0000000000 R09: 0000000000000000 [ 459.141935][ C1] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88807dcd0af0 [ 459.141945][ C1] R13: 0000000000000000 R14: ffff88807dcd0ae8 R15: 0000000000001035 [ 459.141956][ C1] FS: 00007f94f27c7c80(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 459.141968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.141985][ C1] CR2: 00007f406f8cb000 CR3: 000000001ec94000 CR4: 00000000003506e0 [ 459.141998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.142006][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 459.142015][ C1] Call Trace: [ 459.142019][ C1] [ 459.142033][ C1] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 459.142049][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 459.142066][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 459.142081][ C1] ? verify_lock_unused+0x140/0x140 [ 459.142097][ C1] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 459.142114][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 459.142131][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 459.142146][ C1] ? rcu_lock_release+0x9/0x20 [ 459.142164][ C1] lock_acquire+0x197/0x3f0 [ 459.142178][ C1] ? unix_dgram_sendmsg+0xb0a/0x1890 [ 459.142198][ C1] ? read_lock_is_recursive+0x10/0x10 [ 459.142213][ C1] ? sk_filter_trim_cap+0x59c/0x810 [ 459.142228][ C1] ? init_wait_entry+0xd0/0xd0 [ 459.142244][ C1] ? __rwlock_init+0x140/0x140 [ 459.142256][ C1] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 459.142274][ C1] _raw_spin_lock+0x2a/0x40 [ 459.142288][ C1] ? unix_dgram_sendmsg+0xb0a/0x1890 [ 459.142301][ C1] unix_dgram_sendmsg+0xb0a/0x1890 [ 459.142325][ C1] ? unix_dgram_poll+0x660/0x660 [ 459.142338][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 459.142358][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 459.142373][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 459.142388][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 459.142402][ C1] __sys_sendto+0x423/0x580 [ 459.142418][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 459.142446][ C1] ? lock_chain_count+0x20/0x20 [ 459.142460][ C1] ? vtime_user_exit+0x2dc/0x400 [ 459.142477][ C1] __x64_sys_sendto+0xda/0xf0 [ 459.142493][ C1] do_syscall_64+0x4c/0xa0 [ 459.142506][ C1] ? clear_bhb_loop+0x30/0x80 [ 459.142519][ C1] ? clear_bhb_loop+0x30/0x80 [ 459.142533][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.142547][ C1] RIP: 0033:0x7f94f2917407 [ 459.142559][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 459.142570][ C1] RSP: 002b:00007ffe19a58cc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 459.142584][ C1] RAX: ffffffffffffffda RBX: 00007f94f27c7c80 RCX: 00007f94f2917407 [ 459.142594][ C1] RDX: 000000000000005e RSI: 00007ffe19a58e00 RDI: 0000000000000003 [ 459.142603][ C1] RBP: 00007ffe19a59230 R08: 0000000000000000 R09: 0000000000000000 [ 459.142612][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe19a59248 [ 459.142622][ C1] R13: 00007ffe19a58e00 R14: 0000000000000043 R15: 00007ffe19a58e00 [ 459.142639][ C1] [ 459.150521][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 459.536266][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 459.543437][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.553469][ T27] Call Trace: [ 459.556735][ T27] [ 459.559653][ T27] dump_stack_lvl+0x168/0x230 [ 459.564315][ T27] ? show_regs_print_info+0x20/0x20 [ 459.569497][ T27] ? load_image+0x3b0/0x3b0 [ 459.573988][ T27] panic+0x2c9/0x7f0 [ 459.577860][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 459.583481][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 459.588043][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 459.593574][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 459.599709][ T27] watchdog+0xe4e/0xe50 [ 459.603852][ T27] kthread+0x436/0x520 [ 459.607911][ T27] ? hungtask_pm_notify+0x40/0x40 [ 459.612914][ T27] ? kthread_blkcg+0xd0/0xd0 [ 459.617485][ T27] ret_from_fork+0x1f/0x30 [ 459.621892][ T27] [ 459.625114][ T27] Kernel Offset: disabled [ 459.629439][ T27] Rebooting in 86400 seconds..