last executing test programs: 18.92702359s ago: executing program 2 (id=2406): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (fail_nth: 15) 17.304922319s ago: executing program 2 (id=2409): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (rerun: 64) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) (async) r7 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async, rerun: 32) recvmsg$kcm(r7, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xa1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x202, 0xfffffffe, 0x6}, {0x3, 0x5, 0x20f, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0x7}, 0x94) r9 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETLINK(r8, 0x400454cd, 0x336) (async) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4000, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) (async) openat$cgroup(r1, 0x0, 0x200002, 0x0) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async, rerun: 32) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)={r9}) 16.673549044s ago: executing program 2 (id=2411): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x400000, 0x1}, 0x46, 0x0}, 0x260408d0) 16.405380481s ago: executing program 2 (id=2413): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xbe1}, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000b1710000050800080000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r8, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="080000000400"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.393539146s ago: executing program 2 (id=2416): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a936", 0x1b}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0xf83c2c426d60a72, 0x80, 0x4, 0x9, 0x7, 0xe, 0x0, 0x7, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xde9, 0x2, @perf_bp={&(0x7f00000000c0), 0xd}, 0x840, 0x5, 0xc566, 0x5, 0x2ba, 0x7, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x80000000) 15.109862133s ago: executing program 2 (id=2420): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x889}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e"], 0xfdef) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r3, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)=' *:* ') r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r10 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="62152a3a2a206d00"], 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) 4.183484069s ago: executing program 0 (id=2464): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000900)=ANY=[], &(0x7f0000000a80)='syzkaller\x00', 0x80000000, 0xb2, &(0x7f0000000380)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x9, 0x1, 0x40}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0xffffffffffffffff, r3, r3, r3], &(0x7f0000000d80)=[{0x5, 0x3, 0x6, 0x7}, {0x4, 0x5, 0xa}, {0x5, 0x5, 0x0, 0x2}], 0x10, 0x8000}, 0x94) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) 4.094969691s ago: executing program 3 (id=2465): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r4, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 3.864877816s ago: executing program 0 (id=2466): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r4, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 3.607120332s ago: executing program 3 (id=2468): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x240a, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0xe, 0x0, &(0x7f0000000700)="0300000000000000a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.463024176s ago: executing program 0 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'pimreg\x00', 0x600}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1000, 0xe2, 0xf9, 0x9}]}) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x1, 0x5, 0xd, 0x0, 0x1ff, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xffff, 0x2}, 0x100810, 0x7fff, 0x1, 0x1, 0x9, 0xf4, 0x2, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x2b, 0xf7, 0xa, 0x0, 0x8, 0x8800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_config_ext={0x10, 0x4}, 0x10, 0x2, 0x100, 0x8, 0x6, 0x7ff, 0xffff, 0x0, 0x8c2f, 0x0, 0x3080}, r3, 0xd, r4, 0x1) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000280)=0x4) recvmsg$unix(r2, &(0x7f00000014c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}, 0x40002101) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000001500)=0x66) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001680)={0x0, r1}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xa, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0x8}, @union={0x6, 0x6, 0x0, 0x5, 0x0, 0xdb21, [{0xa, 0x3, 0x81}, {0x10, 0x3, 0x10000}, {0xf, 0x2, 0x5}, {0x5, 0x5, 0x2}, {0x9, 0x4, 0x6}, {0x5, 0x4, 0x800}]}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x1}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x2e, 0x5f, 0x5f, 0x0]}}, &(0x7f0000001600)=""/38, 0xae, 0x26, 0x0, 0xe00000, 0x10000, @value=r5}, 0x28) socketpair(0xf, 0x6, 0x7fff, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r8, &(0x7f0000002b40)={&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/247, 0xf7}, {&(0x7f0000002880)=""/146, 0x92}, {&(0x7f0000002940)=""/184, 0xb8}, {&(0x7f0000002a00)=""/140, 0x8c}], 0x5}, 0x40010000) close(r2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b80), 0x2c0, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000002bc0)) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = perf_event_open(&(0x7f0000002c00)={0x2, 0x80, 0x2, 0x9, 0x76, 0x4, 0x0, 0x3ef3, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x280b3893, 0x4, @perf_config_ext={0x5, 0x10001}, 0x116000, 0x2, 0x6, 0x1, 0x9, 0x8, 0x3, 0x0, 0xa, 0x0, 0x9}, r3, 0xe, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000002c80)='\x00') ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000002cc0)={r10}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x16, &(0x7f0000002d00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], &(0x7f0000002dc0)='syzkaller\x00', 0x3ff, 0x19, &(0x7f0000002e00)=""/25, 0x40f00, 0x1, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002e40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002e80)={0x1, 0x4, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002ec0)=[0x1, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000002f00)=[{0x2, 0x2, 0x7, 0x2}, {0x5, 0x1, 0xe, 0x8}], 0x10, 0xfffffff9}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000003000)=r13, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003040)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003340), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000033c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000003080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @ringbuf_query], &(0x7f0000003180)='syzkaller\x00', 0x7, 0xec, &(0x7f00000031c0)=""/236, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000032c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003300)={0x1, 0x6, 0x3e7b, 0x3}, 0x10, 0x1c44f, r15, 0x1, 0x0, &(0x7f0000003380)=[{0x3, 0x1, 0x10, 0x9}], 0x10, 0x80000000}, 0x94) r16 = perf_event_open$cgroup(&(0x7f0000003480)={0x4, 0x80, 0x21, 0x2, 0x9, 0x4, 0x0, 0x5, 0x20088, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x41, 0xffff}, 0x10, 0x8000000000000001, 0x80, 0x7, 0x100, 0x7bbe523f, 0x6, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r11, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r16, 0xc008240a, &(0x7f0000003500)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000003580)=""/126) 2.786008092s ago: executing program 3 (id=2472): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48800) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5411, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e422", 0x28}, {0x0}], 0x2, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x4040081) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 2.783199072s ago: executing program 0 (id=2479): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff9000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x7f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c4", 0x45}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x83, 0x25, &(0x7f0000000240)="35a0af28fbdf23e63167ae332799ae7624ee051ec01ded3e65f4d9a72746079b68f7768d51b0131ad1eb0c58c44a0ee8b57462bc2391ad68a283279daf944f23192bce43dc776f3106c888d80453150db11ad73775330f3324534dacd24daa0914f9183223982ecefcc2acf15f9901a38b3e7377d6dbd99fc3158da12a9e3f29e4bcaf", &(0x7f0000000380)=""/37, 0xffff7fff, 0x0, 0xd3, 0xb7, &(0x7f0000000500)="95341ec5eb489b5bcddcb6eb7e2af1323d9ff3560a5fb6dbe161d0fa153a2d5e3268017b1ef2d23a1430233a3ed06f204cfc30606450f3758173864fd93769519212eed29ff28b651874e8defdc9e36ebf2885e5b92fec51edc5acc57596f7cd367ad74a64c81dc2aaaa4124572fef2601f03dbbef5936cae48dbefdc8c31366befd2f69d089058139106b8608cc7ed073a6d12c3e2d834d9535a438fb6ab45ce2b8476767858f0de04512f517c2aa6bb7cba84c1d1cd9bf893548beab0f8edbcce84b1f229414152aa83b6fc73dc6be2efc6d", &(0x7f0000000940)="c515486ca4b5d2c2fcca06943f1f1399d092c41ee6b3ad13e83aeafa2400fdfa34dc249ceaa08891ca7cc8861379a443b8e79929384c8efffc8f86336d4f5a11a7dde5ae5794156888fcea59138a01c507a9715941000375c445c5e0c942e40f40163bcf132bea36823ae313ba48a84ceea0c9a25edc29a340706d40949f16e566aad813e9f838066c53c67b5fdab434b749d9d5fb4c759e92d6f01cac3ef998f0b77020cf2f2a76f00c144055329497807dd17ff5b573", 0x1, 0x0, 0x7fff}, 0x50) socket$kcm(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xff, &(0x7f0000000600)=""/255, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x3, 0x0, 0x2}, {0x0, 0x5, 0x8, 0xb}, {0xd, 0x1, 0x4, 0x2}, {0x0, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x1}, 0x94) r6 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x2}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000f40)='~%\\\xa7F\xffr\x1c\xdb~\xfa\x00\x00\x12FCG\x1c\xb3\xfe\xbf\xb1\x8b\xd0\x8c\x1a\x98Jz%\xebia\x9eG\xe4\xbd\xcb5\\\xdd\x15I(\xca\xfc\xe9\xc1q`\xee=\xfb_\x87[!\x1d\xd1kV3\x8a\xa2{S\x0e\x98F\xfe\x89\xae\xee&\xc0g\x87\x8a3\xcc\x98?\xc5\x1a\xb8\x88e3y2\xfeim\x854\xb6\x860N\rT{>79\x9eG\b\x00ni\x85\x9a\xd0|\x1f\xc0\xe8a!\x98\xbe\xf0\x18\xd1]~p\x8d|l\x94\x13#\xcb\x06\x0f\xb70\xa0ex\x1f\x8f\xc9\xff\xd45[\xeeAm\xfe \xc1\r`\'\xe3\xc7\xfe\t\x03\xc2\x83\x04\x7fj\xa1\"\x02\xcdg\xf6\xc2g\xf9\xfc\xfb\xa4u2/\xbeow\xa7C\xf4,\"\x89\xec\x0e\xc1\xf8T\xf8nA\t\x83.DZ\x0e\xa1\xad\xc8\xd5/9\x10\xdd\x83\x133N\xec\x1a\x1f\xd6\x16\xdc\xedZ\xba\vA\x88\xbdGB\x0fL\x9d\x8ck\x87B\xad\x9f\x99\xee\x87@@P\x97,\x9c\xe6^0\x8f\xbb#v\xf2\x96B\xf4\x94\xd5Z\'s \xc7m\xa4&\x12\x92\x1c\xbc\xa6\x14\tf\x02V\x17\x97\xa7\xe6\xfb\x8e\xedk\x98E\xd3\x00\xff\x12\xfdD@$z\xb1\xe5nbqC\xdc\xd1X\xdaZ\xd8\xa9N\x86\xb0+ \xf0') (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) 1.284154639s ago: executing program 1 (id=2474): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3fb9dd5689b66a65, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r2, 0x12) (async) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) gettid() (async) socket$kcm(0x2, 0x3, 0x2) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r10}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) 1.031737625s ago: executing program 1 (id=2475): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r4, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 856.810999ms ago: executing program 1 (id=2476): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r4, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 663.034254ms ago: executing program 3 (id=2477): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0xfffffffffffffffd}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x10140) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000007c0)=r5, 0x12) sendmsg$kcm(r6, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="9eb8a2c0e2", 0x5}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES64=r0], 0x9a) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x39, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @generic={0x0, 0x7, 0xd, 0x4, 0x401}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xd, &(0x7f0000000280)=""/13, 0x0, 0x8, '\x00', 0x0, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)=[r8], &(0x7f00000004c0)=[{0x5, 0x4, 0x9, 0x2}, {0x3, 0x1, 0x3, 0x6}, {0x4, 0x5, 0x3, 0x1}, {0x3, 0x1, 0x8, 0x693e4ca93ccd0ece}, {0x5, 0x1, 0xe}, {0x4, 0x2, 0x5, 0x2}], 0x10, 0x8000}, 0x94) openat$cgroup_ro(r8, &(0x7f0000000800)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r10, r11}, 0xc) 536.199167ms ago: executing program 1 (id=2478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x0, 0xb, 0x8, 0x3adf236a2b9bcc0b}, @jmp={0x5, 0x1, 0x0, 0xa, 0x2, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x70096338}, @generic={0x7, 0x7, 0x7, 0x7, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x16, &(0x7f00000001c0)=""/22, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x80, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000340)=[{0x4, 0x5, 0x10, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000021000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 462.927399ms ago: executing program 0 (id=2480): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 416.90615ms ago: executing program 3 (id=2481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000001300)=[0x0, 0x0], 0x0, 0xf0, &(0x7f0000001340)=[{}, {}], 0x10, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0xc, [{0x6, 0xe, 0xffff8c98}, {0x6, 0x8, 0xd111}, {0x7, 0xa, 0x1dee8830}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x30, 0x0, 0x30, 0x30, 0x30, 0x5f, 0x61]}}, &(0x7f0000001600)=""/54, 0x54, 0x36, 0x0, 0x9b, 0x10000}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b515155764a4fdd3794f00"], &(0x7f00000000c0)='GPL\x00', 0x10000, 0x34, &(0x7f00000001c0)=""/52, 0x41000, 0x4, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000001680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0x2, 0xf, 0x9d}, 0x10, r6, 0x0, 0x3, &(0x7f00000017c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r7], &(0x7f0000001800)=[{0x4, 0x3, 0x6, 0x2}, {0x1, 0x1, 0x0, 0x5}, {0x0, 0x2, 0x9, 0xc}], 0x10, 0x6}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000eaffffffb704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000eaffffffb704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x17, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r10 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x29, 0x22, &(0x7f0000000100)=r11, 0x18) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x100000000002, 0x4) socket$kcm(0x10, 0x2, 0x10) r12 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, 0x0) socket$kcm(0x2, 0x3, 0x84) 342.941412ms ago: executing program 1 (id=2482): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r1, &(0x7f0000000400), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x0, 0x24, 0x0, 0x53) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$sock(r6, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 83.104528ms ago: executing program 1 (id=2483): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64138, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x55) socket$kcm(0x21, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0xfffffffffffffd9f}, 0x28) 48.818459ms ago: executing program 0 (id=2484): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r4, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 0s ago: executing program 3 (id=2485): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d44d9da835797b309f7ff008406ec32b6010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0), 0x10) socket$kcm(0xa, 0x2, 0x0) (async) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000039000000000202"], 0x18}, 0x0) kernel console output (not intermixed with test programs): tion, please check. [ 440.202314][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209026][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.227382][T12420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2060'. [ 442.316052][T12425] netlink: 'syz.0.2062': attribute type 9 has an invalid length. [ 442.333584][T12425] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2062'. [ 442.512055][T12434] FAULT_INJECTION: forcing a failure. [ 442.512055][T12434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.533626][T12434] CPU: 1 PID: 12434 Comm: syz.0.2064 Not tainted syzkaller #0 [ 442.541172][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.551281][T12434] Call Trace: [ 442.554639][T12434] [ 442.557617][T12434] dump_stack_lvl+0x18c/0x250 [ 442.562350][T12434] ? show_regs_print_info+0x20/0x20 [ 442.567602][T12434] ? load_image+0x420/0x420 [ 442.572165][T12434] ? __might_fault+0xaa/0x120 [ 442.576894][T12434] ? __lock_acquire+0x7d80/0x7d80 [ 442.582007][T12434] should_fail_ex+0x394/0x4c0 [ 442.586748][T12434] _copy_from_user+0x2f/0xe0 [ 442.591384][T12434] __sys_bpf+0x23e/0x890 [ 442.595700][T12434] ? bpf_link_show_fdinfo+0x390/0x390 [ 442.601137][T12434] ? lock_chain_count+0x20/0x20 [ 442.606044][T12434] __x64_sys_bpf+0x7c/0x90 [ 442.610537][T12434] do_syscall_64+0x55/0xb0 [ 442.614994][T12434] ? clear_bhb_loop+0x40/0x90 [ 442.619749][T12434] ? clear_bhb_loop+0x40/0x90 [ 442.624480][T12434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.630425][T12434] RIP: 0033:0x7ff41fb9e0d9 [ 442.634888][T12434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.654541][T12434] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.662987][T12434] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 442.670976][T12434] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 442.678974][T12434] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 442.686969][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.694968][T12434] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 442.702984][T12434] [ 442.947217][T12445] netlink: 'syz.2.2066': attribute type 3 has an invalid length. [ 442.966744][T12445] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2066'. [ 443.557699][T12468] FAULT_INJECTION: forcing a failure. [ 443.557699][T12468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.577929][T12468] CPU: 1 PID: 12468 Comm: syz.3.2074 Not tainted syzkaller #0 [ 443.585522][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.595638][T12468] Call Trace: [ 443.598971][T12468] [ 443.601960][T12468] dump_stack_lvl+0x18c/0x250 [ 443.606699][T12468] ? show_regs_print_info+0x20/0x20 [ 443.611967][T12468] ? load_image+0x420/0x420 [ 443.616543][T12468] ? __lock_acquire+0x7d80/0x7d80 [ 443.621626][T12468] ? snprintf+0xe9/0x140 [ 443.625935][T12468] should_fail_ex+0x394/0x4c0 [ 443.630674][T12468] _copy_to_user+0x2f/0xa0 [ 443.635187][T12468] simple_read_from_buffer+0xe7/0x150 [ 443.640624][T12468] proc_fail_nth_read+0x1e8/0x260 [ 443.645716][T12468] ? proc_fault_inject_write+0x360/0x360 [ 443.651417][T12468] ? fsnotify_perm+0x271/0x5e0 [ 443.656237][T12468] ? proc_fault_inject_write+0x360/0x360 [ 443.661937][T12468] vfs_read+0x298/0x990 [ 443.666168][T12468] ? kernel_read+0x1e0/0x1e0 [ 443.670823][T12468] ? __fget_files+0x28/0x460 [ 443.675498][T12468] ? __fget_files+0x3fc/0x460 [ 443.680273][T12468] ? __fdget_pos+0x2a3/0x330 [ 443.684986][T12468] ? ksys_read+0x74/0x260 [ 443.689407][T12468] ksys_read+0x151/0x260 [ 443.693729][T12468] ? vfs_write+0x9a0/0x9a0 [ 443.698236][T12468] ? lockdep_hardirqs_on+0x98/0x150 [ 443.703517][T12468] do_syscall_64+0x55/0xb0 [ 443.708019][T12468] ? clear_bhb_loop+0x40/0x90 [ 443.712775][T12468] ? clear_bhb_loop+0x40/0x90 [ 443.717525][T12468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.723487][T12468] RIP: 0033:0x7f93a895e90e [ 443.728013][T12468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.747694][T12468] RSP: 002b:00007f93a6bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.756210][T12468] RAX: ffffffffffffffda RBX: 00007f93a6bf66c0 RCX: 00007f93a895e90e [ 443.764246][T12468] RDX: 000000000000000f RSI: 00007f93a6bf60a0 RDI: 0000000000000004 [ 443.772278][T12468] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.780327][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.788363][T12468] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 443.796421][T12468] [ 443.864914][T12476] netlink: 'syz.2.2076': attribute type 4 has an invalid length. [ 443.873292][T12476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2076'. [ 444.136051][T12488] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.2080'. [ 444.325860][T12498] netlink: 'syz.1.2084': attribute type 4 has an invalid length. [ 444.471318][T12504] FAULT_INJECTION: forcing a failure. [ 444.471318][T12504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.486970][T12504] CPU: 0 PID: 12504 Comm: syz.1.2087 Not tainted syzkaller #0 [ 444.494505][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.504613][T12504] Call Trace: [ 444.507941][T12504] [ 444.510913][T12504] dump_stack_lvl+0x18c/0x250 [ 444.515660][T12504] ? show_regs_print_info+0x20/0x20 [ 444.520921][T12504] ? load_image+0x420/0x420 [ 444.525490][T12504] ? __might_fault+0xaa/0x120 [ 444.530222][T12504] ? __lock_acquire+0x7d80/0x7d80 [ 444.535303][T12504] should_fail_ex+0x394/0x4c0 [ 444.540047][T12504] _copy_from_user+0x2f/0xe0 [ 444.544691][T12504] __sys_bpf+0x23e/0x890 [ 444.548990][T12504] ? bpf_link_show_fdinfo+0x390/0x390 [ 444.554515][T12504] ? lock_chain_count+0x20/0x20 [ 444.559420][T12504] __x64_sys_bpf+0x7c/0x90 [ 444.563894][T12504] do_syscall_64+0x55/0xb0 [ 444.568367][T12504] ? clear_bhb_loop+0x40/0x90 [ 444.573096][T12504] ? clear_bhb_loop+0x40/0x90 [ 444.577825][T12504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.583772][T12504] RIP: 0033:0x7f6dee59e0d9 [ 444.588237][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.607930][T12504] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.616410][T12504] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 444.624440][T12504] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 444.632466][T12504] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 444.640595][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.648620][T12504] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 444.656660][T12504] [ 444.766746][T12507] netlink: 'syz.2.2088': attribute type 21 has an invalid length. [ 444.803324][T12507] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.125410][T12530] pim6reg0: tun_chr_ioctl cmd 35111 [ 446.517198][T12538] netlink: 'syz.1.2098': attribute type 4 has an invalid length. [ 446.544662][T12538] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2098'. [ 447.101755][T12550] netlink: 'syz.3.2103': attribute type 2 has an invalid length. [ 447.112793][T12550] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 447.143229][T12550] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2103'. [ 447.373251][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 447.442196][T12565] tun0: tun_chr_ioctl cmd 1074025673 [ 447.468165][T12566] tun0: tun_chr_ioctl cmd 1074812118 [ 447.480506][T12565] tun0: tun_chr_ioctl cmd 35108 [ 447.486141][T12569] netlink: 36363 bytes leftover after parsing attributes in process `syz.3.2110'. [ 447.496823][T12566] tun0: tun_chr_ioctl cmd 35108 [ 447.864552][T12582] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2114'. [ 447.883807][T12582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.995884][T12586] FAULT_INJECTION: forcing a failure. [ 447.995884][T12586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.010409][T12586] CPU: 1 PID: 12586 Comm: syz.1.2116 Not tainted syzkaller #0 [ 448.017974][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.028084][T12586] Call Trace: [ 448.031404][T12586] [ 448.034386][T12586] dump_stack_lvl+0x18c/0x250 [ 448.039132][T12586] ? show_regs_print_info+0x20/0x20 [ 448.044385][T12586] ? load_image+0x420/0x420 [ 448.048950][T12586] ? __might_fault+0xaa/0x120 [ 448.053686][T12586] ? __lock_acquire+0x7d80/0x7d80 [ 448.058775][T12586] ? __virt_addr_valid+0x10c/0x380 [ 448.063985][T12586] should_fail_ex+0x394/0x4c0 [ 448.068723][T12586] _copy_from_user+0x2f/0xe0 [ 448.073383][T12586] ___bpf_copy_key+0xb0/0x100 [ 448.078111][T12586] map_update_elem+0x265/0x710 [ 448.082932][T12586] __sys_bpf+0x6b5/0x890 [ 448.087227][T12586] ? bpf_link_show_fdinfo+0x390/0x390 [ 448.092661][T12586] ? lock_chain_count+0x20/0x20 [ 448.097569][T12586] __x64_sys_bpf+0x7c/0x90 [ 448.102024][T12586] do_syscall_64+0x55/0xb0 [ 448.106484][T12586] ? clear_bhb_loop+0x40/0x90 [ 448.111210][T12586] ? clear_bhb_loop+0x40/0x90 [ 448.115946][T12586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.121881][T12586] RIP: 0033:0x7f6dee59e0d9 [ 448.126324][T12586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.145984][T12586] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.154444][T12586] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 448.162462][T12586] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000002 [ 448.170472][T12586] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 448.178472][T12586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.186468][T12586] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 448.194482][T12586] [ 448.325635][T12595] netlink: 'syz.1.2119': attribute type 2 has an invalid length. [ 448.336317][T12595] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2119'. [ 448.356798][T12595] netlink: 'syz.1.2119': attribute type 2 has an invalid length. [ 448.368686][T12595] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2119'. [ 448.869649][T12608] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2121'. [ 449.319588][T12616] netlink: 'syz.3.2124': attribute type 2 has an invalid length. [ 449.339528][T12616] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2124'. [ 449.533256][T12621] FAULT_INJECTION: forcing a failure. [ 449.533256][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.547735][T12621] CPU: 1 PID: 12621 Comm: syz.0.2126 Not tainted syzkaller #0 [ 449.555301][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.565409][T12621] Call Trace: [ 449.568736][T12621] [ 449.571713][T12621] dump_stack_lvl+0x18c/0x250 [ 449.576451][T12621] ? show_regs_print_info+0x20/0x20 [ 449.581792][T12621] ? load_image+0x420/0x420 [ 449.586388][T12621] ? __might_fault+0xaa/0x120 [ 449.591127][T12621] ? __lock_acquire+0x7d80/0x7d80 [ 449.596199][T12621] ? __virt_addr_valid+0x10c/0x380 [ 449.601369][T12621] should_fail_ex+0x394/0x4c0 [ 449.606127][T12621] _copy_from_user+0x2f/0xe0 [ 449.610764][T12621] generic_map_update_batch+0x58c/0x800 [ 449.616372][T12621] ? rcu_read_unlock+0xa0/0xa0 [ 449.621167][T12621] ? __fdget+0x180/0x210 [ 449.625467][T12621] ? rcu_read_unlock+0xa0/0xa0 [ 449.630257][T12621] bpf_map_do_batch+0x3f2/0x600 [ 449.635138][T12621] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 449.640633][T12621] __sys_bpf+0x381/0x890 [ 449.644910][T12621] ? bpf_link_show_fdinfo+0x390/0x390 [ 449.650413][T12621] ? lock_chain_count+0x20/0x20 [ 449.655296][T12621] __x64_sys_bpf+0x7c/0x90 [ 449.659741][T12621] do_syscall_64+0x55/0xb0 [ 449.664182][T12621] ? clear_bhb_loop+0x40/0x90 [ 449.668888][T12621] ? clear_bhb_loop+0x40/0x90 [ 449.673592][T12621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.679518][T12621] RIP: 0033:0x7ff41fb9e0d9 [ 449.683955][T12621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.703588][T12621] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.712028][T12621] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 449.720026][T12621] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 449.728022][T12621] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 449.736012][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.744007][T12621] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 449.752009][T12621] [ 450.125506][T12633] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2132'. [ 450.291314][T12646] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2134'. [ 450.544788][T12656] FAULT_INJECTION: forcing a failure. [ 450.544788][T12656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.593019][T12656] CPU: 0 PID: 12656 Comm: syz.3.2138 Not tainted syzkaller #0 [ 450.600579][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.610687][T12656] Call Trace: [ 450.614008][T12656] [ 450.616981][T12656] dump_stack_lvl+0x18c/0x250 [ 450.621713][T12656] ? show_regs_print_info+0x20/0x20 [ 450.626970][T12656] ? load_image+0x420/0x420 [ 450.631542][T12656] ? __might_fault+0xaa/0x120 [ 450.636269][T12656] ? __lock_acquire+0x7d80/0x7d80 [ 450.641343][T12656] ? __virt_addr_valid+0x10c/0x380 [ 450.646520][T12656] should_fail_ex+0x394/0x4c0 [ 450.651260][T12656] _copy_from_user+0x2f/0xe0 [ 450.655899][T12656] generic_map_update_batch+0x53e/0x800 [ 450.661505][T12656] ? rcu_read_unlock+0xa0/0xa0 [ 450.666323][T12656] ? __fdget+0x180/0x210 [ 450.670622][T12656] ? rcu_read_unlock+0xa0/0xa0 [ 450.675435][T12656] bpf_map_do_batch+0x3f2/0x600 [ 450.680337][T12656] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 450.685840][T12656] __sys_bpf+0x381/0x890 [ 450.690110][T12656] ? bpf_link_show_fdinfo+0x390/0x390 [ 450.695542][T12656] ? lock_chain_count+0x20/0x20 [ 450.700426][T12656] __x64_sys_bpf+0x7c/0x90 [ 450.704874][T12656] do_syscall_64+0x55/0xb0 [ 450.709314][T12656] ? clear_bhb_loop+0x40/0x90 [ 450.714019][T12656] ? clear_bhb_loop+0x40/0x90 [ 450.718721][T12656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.724655][T12656] RIP: 0033:0x7f93a899e0d9 [ 450.729091][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.748721][T12656] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.757162][T12656] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 450.765161][T12656] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 450.773163][T12656] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.781168][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.789163][T12656] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 450.797172][T12656] [ 451.149723][ T5788] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 451.805452][T12689] FAULT_INJECTION: forcing a failure. [ 451.805452][T12689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.826897][T12689] CPU: 1 PID: 12689 Comm: syz.1.2149 Not tainted syzkaller #0 [ 451.834408][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.844504][T12689] Call Trace: [ 451.847815][T12689] [ 451.850775][T12689] dump_stack_lvl+0x18c/0x250 [ 451.855500][T12689] ? show_regs_print_info+0x20/0x20 [ 451.860742][T12689] ? load_image+0x420/0x420 [ 451.865330][T12689] ? __might_fault+0xaa/0x120 [ 451.870077][T12689] ? __lock_acquire+0x7d80/0x7d80 [ 451.875152][T12689] ? __virt_addr_valid+0x10c/0x380 [ 451.880323][T12689] should_fail_ex+0x394/0x4c0 [ 451.885070][T12689] _copy_from_user+0x2f/0xe0 [ 451.889710][T12689] generic_map_update_batch+0x58c/0x800 [ 451.895328][T12689] ? rcu_read_unlock+0xa0/0xa0 [ 451.900157][T12689] ? __fdget+0x180/0x210 [ 451.904451][T12689] ? rcu_read_unlock+0xa0/0xa0 [ 451.909261][T12689] bpf_map_do_batch+0x3f2/0x600 [ 451.914160][T12689] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 451.919675][T12689] __sys_bpf+0x381/0x890 [ 451.923965][T12689] ? bpf_link_show_fdinfo+0x390/0x390 [ 451.929412][T12689] ? lock_chain_count+0x20/0x20 [ 451.934378][T12689] __x64_sys_bpf+0x7c/0x90 [ 451.938873][T12689] do_syscall_64+0x55/0xb0 [ 451.943355][T12689] ? clear_bhb_loop+0x40/0x90 [ 451.948090][T12689] ? clear_bhb_loop+0x40/0x90 [ 451.952830][T12689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.958779][T12689] RIP: 0033:0x7f6dee59e0d9 [ 451.963263][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.982927][T12689] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.991487][T12689] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 451.999517][T12689] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 452.007536][T12689] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 452.015553][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.023569][T12689] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 452.031597][T12689] [ 452.578450][T12700] FAULT_INJECTION: forcing a failure. [ 452.578450][T12700] name failslab, interval 1, probability 0, space 0, times 0 [ 452.605443][T12700] CPU: 1 PID: 12700 Comm: syz.0.2154 Not tainted syzkaller #0 [ 452.612990][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.623076][T12700] Call Trace: [ 452.626379][T12700] [ 452.629368][T12700] dump_stack_lvl+0x18c/0x250 [ 452.634080][T12700] ? show_regs_print_info+0x20/0x20 [ 452.639325][T12700] ? load_image+0x420/0x420 [ 452.643868][T12700] ? __lock_acquire+0x7d80/0x7d80 [ 452.648924][T12700] should_fail_ex+0x394/0x4c0 [ 452.653813][T12700] should_failslab+0x9/0x20 [ 452.658345][T12700] slab_pre_alloc_hook+0x59/0x300 [ 452.663411][T12700] ? security_sk_alloc+0x4b/0x130 [ 452.668455][T12700] ? security_sk_alloc+0x4b/0x130 [ 452.673498][T12700] __kmem_cache_alloc_node+0x53/0x250 [ 452.678908][T12700] ? security_sk_alloc+0x4b/0x130 [ 452.683956][T12700] __kmalloc+0xa7/0x240 [ 452.688145][T12700] ? sk_prot_alloc+0xe7/0x210 [ 452.692854][T12700] security_sk_alloc+0x4b/0x130 [ 452.697734][T12700] sk_prot_alloc+0x101/0x210 [ 452.702354][T12700] ? sk_alloc+0x24/0x350 [ 452.706628][T12700] sk_alloc+0x3a/0x350 [ 452.710730][T12700] ? bpf_ctx_init+0x154/0x190 [ 452.715442][T12700] bpf_prog_test_run_skb+0x371/0x18f0 [ 452.720849][T12700] ? __fget_files+0x28/0x460 [ 452.725467][T12700] ? __fget_files+0x3fc/0x460 [ 452.730180][T12700] ? cpu_online+0x60/0x60 [ 452.734544][T12700] bpf_prog_test_run+0x31f/0x390 [ 452.739511][T12700] __sys_bpf+0x49d/0x890 [ 452.743781][T12700] ? bpf_link_show_fdinfo+0x390/0x390 [ 452.749193][T12700] ? lock_chain_count+0x20/0x20 [ 452.754071][T12700] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 452.760084][T12700] __x64_sys_bpf+0x7c/0x90 [ 452.764532][T12700] do_syscall_64+0x55/0xb0 [ 452.768970][T12700] ? clear_bhb_loop+0x40/0x90 [ 452.773674][T12700] ? clear_bhb_loop+0x40/0x90 [ 452.778376][T12700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.784296][T12700] RIP: 0033:0x7ff41fb9e0d9 [ 452.788739][T12700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.808375][T12700] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.816906][T12700] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 452.824927][T12700] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 452.833007][T12700] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 452.841171][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.849168][T12700] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 452.857447][T12700] [ 452.904361][T12702] __nla_validate_parse: 4 callbacks suppressed [ 452.904380][T12702] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2155'. [ 453.296554][T12717] FAULT_INJECTION: forcing a failure. [ 453.296554][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.309792][T12717] CPU: 0 PID: 12717 Comm: syz.2.2160 Not tainted syzkaller #0 [ 453.317299][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.327402][T12717] Call Trace: [ 453.330721][T12717] [ 453.333700][T12717] dump_stack_lvl+0x18c/0x250 [ 453.338442][T12717] ? show_regs_print_info+0x20/0x20 [ 453.343690][T12717] ? load_image+0x420/0x420 [ 453.348260][T12717] ? __lock_acquire+0x7d80/0x7d80 [ 453.353343][T12717] ? __virt_addr_valid+0x10c/0x380 [ 453.358516][T12717] should_fail_ex+0x394/0x4c0 [ 453.363259][T12717] _copy_from_user+0x2f/0xe0 [ 453.367907][T12717] map_update_elem+0x501/0x710 [ 453.372730][T12717] __sys_bpf+0x6b5/0x890 [ 453.377036][T12717] ? bpf_link_show_fdinfo+0x390/0x390 [ 453.382484][T12717] ? lock_chain_count+0x20/0x20 [ 453.387398][T12717] __x64_sys_bpf+0x7c/0x90 [ 453.391881][T12717] do_syscall_64+0x55/0xb0 [ 453.396352][T12717] ? clear_bhb_loop+0x40/0x90 [ 453.401081][T12717] ? clear_bhb_loop+0x40/0x90 [ 453.405819][T12717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.411766][T12717] RIP: 0033:0x7f148ad9e0d9 [ 453.416234][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.435894][T12717] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.444374][T12717] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 453.452394][T12717] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000002 [ 453.460415][T12717] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 453.468437][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.476466][T12717] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 453.484511][T12717] [ 453.775973][T12728] FAULT_INJECTION: forcing a failure. [ 453.775973][T12728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.789619][T12728] CPU: 1 PID: 12728 Comm: syz.2.2163 Not tainted syzkaller #0 [ 453.797168][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.807316][T12728] Call Trace: [ 453.810671][T12728] [ 453.813683][T12728] dump_stack_lvl+0x18c/0x250 [ 453.818452][T12728] ? show_regs_print_info+0x20/0x20 [ 453.823765][T12728] ? load_image+0x420/0x420 [ 453.828371][T12728] ? __might_fault+0xaa/0x120 [ 453.833139][T12728] ? __lock_acquire+0x7d80/0x7d80 [ 453.838260][T12728] ? __virt_addr_valid+0x10c/0x380 [ 453.843450][T12728] should_fail_ex+0x394/0x4c0 [ 453.848216][T12728] _copy_from_user+0x2f/0xe0 [ 453.852949][T12728] generic_map_update_batch+0x53e/0x800 [ 453.858596][T12728] ? rcu_read_unlock+0xa0/0xa0 [ 453.863451][T12728] ? __fdget+0x180/0x210 [ 453.867783][T12728] ? rcu_read_unlock+0xa0/0xa0 [ 453.872596][T12728] bpf_map_do_batch+0x3f2/0x600 [ 453.877510][T12728] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 453.883037][T12728] __sys_bpf+0x381/0x890 [ 453.887342][T12728] ? bpf_link_show_fdinfo+0x390/0x390 [ 453.892820][T12728] ? lock_chain_count+0x20/0x20 [ 453.897739][T12728] __x64_sys_bpf+0x7c/0x90 [ 453.902225][T12728] do_syscall_64+0x55/0xb0 [ 453.906705][T12728] ? clear_bhb_loop+0x40/0x90 [ 453.911442][T12728] ? clear_bhb_loop+0x40/0x90 [ 453.916184][T12728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.922151][T12728] RIP: 0033:0x7f148ad9e0d9 [ 453.926627][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.946299][T12728] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.954815][T12728] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 453.962849][T12728] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 453.970869][T12728] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 453.978900][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.986923][T12728] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 453.995011][T12728] [ 455.090683][T12747] FAULT_INJECTION: forcing a failure. [ 455.090683][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 455.111958][T12747] CPU: 1 PID: 12747 Comm: syz.2.2170 Not tainted syzkaller #0 [ 455.119509][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.129631][T12747] Call Trace: [ 455.132959][T12747] [ 455.135937][T12747] dump_stack_lvl+0x18c/0x250 [ 455.140719][T12747] ? show_regs_print_info+0x20/0x20 [ 455.146011][T12747] ? load_image+0x420/0x420 [ 455.150602][T12747] ? __might_sleep+0xe0/0xe0 [ 455.155337][T12747] ? __lock_acquire+0x7d80/0x7d80 [ 455.160414][T12747] ? lockdep_hardirqs_on+0x98/0x150 [ 455.165674][T12747] should_fail_ex+0x394/0x4c0 [ 455.170416][T12747] should_failslab+0x9/0x20 [ 455.174981][T12747] slab_pre_alloc_hook+0x59/0x300 [ 455.180102][T12747] ? __get_vm_area_node+0x125/0x370 [ 455.185364][T12747] __kmem_cache_alloc_node+0x53/0x250 [ 455.190898][T12747] ? __get_vm_area_node+0x125/0x370 [ 455.196540][T12747] kmalloc_node_trace+0x26/0xe0 [ 455.201463][T12747] __get_vm_area_node+0x125/0x370 [ 455.206552][T12747] __vmalloc_node_range+0x36f/0x1320 [ 455.211889][T12747] ? netlink_sendmsg+0x602/0xbf0 [ 455.216959][T12747] ? netlink_insert+0x1094/0x1390 [ 455.222300][T12747] ? netlink_insert+0x2ba/0x1390 [ 455.227288][T12747] ? free_vm_area+0x50/0x50 [ 455.231849][T12747] ? netlink_sendmsg+0x602/0xbf0 [ 455.236836][T12747] vmalloc+0x79/0x90 [ 455.240774][T12747] ? netlink_sendmsg+0x602/0xbf0 [ 455.245752][T12747] netlink_sendmsg+0x602/0xbf0 [ 455.250566][T12747] ? netlink_getsockopt+0x590/0x590 [ 455.255807][T12747] ? apparmor_socket_sendmsg+0x8e/0x330 [ 455.261388][T12747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 455.266723][T12747] ? security_socket_sendmsg+0x80/0xa0 [ 455.272222][T12747] ? netlink_getsockopt+0x590/0x590 [ 455.277463][T12747] ____sys_sendmsg+0x61b/0x980 [ 455.282279][T12747] ? __asan_memset+0x22/0x40 [ 455.286920][T12747] ? __sys_sendmsg_sock+0x30/0x30 [ 455.291991][T12747] ? __import_iovec+0x5f2/0x850 [ 455.296904][T12747] ? import_iovec+0x73/0xa0 [ 455.301457][T12747] ___sys_sendmsg+0x2a6/0x360 [ 455.306187][T12747] ? get_pid_task+0x20/0x1e0 [ 455.310835][T12747] ? __sys_sendmsg+0x2b0/0x2b0 [ 455.315664][T12747] ? __lock_acquire+0x7d80/0x7d80 [ 455.320788][T12747] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.325688][T12747] ? __x64_sys_sendmsg+0x80/0x80 [ 455.330685][T12747] ? lockdep_hardirqs_on+0x98/0x150 [ 455.335937][T12747] do_syscall_64+0x55/0xb0 [ 455.340390][T12747] ? clear_bhb_loop+0x40/0x90 [ 455.345104][T12747] ? clear_bhb_loop+0x40/0x90 [ 455.349881][T12747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.355831][T12747] RIP: 0033:0x7f148ad9e0d9 [ 455.360288][T12747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.380733][T12747] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.389203][T12747] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 455.397222][T12747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 455.405232][T12747] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 455.413243][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.421254][T12747] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 455.429280][T12747] [ 455.463632][T12747] syz.2.2170: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 455.495928][T12747] CPU: 0 PID: 12747 Comm: syz.2.2170 Not tainted syzkaller #0 [ 455.503482][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.513590][T12747] Call Trace: [ 455.516913][T12747] [ 455.519887][T12747] dump_stack_lvl+0x18c/0x250 [ 455.524627][T12747] ? show_regs_print_info+0x20/0x20 [ 455.529877][T12747] ? load_image+0x420/0x420 [ 455.534444][T12747] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 455.540955][T12747] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 455.547529][T12747] warn_alloc+0x246/0x340 [ 455.551902][T12747] ? __get_vm_area_node+0x125/0x370 [ 455.557162][T12747] ? zone_watermark_ok_safe+0x230/0x230 [ 455.562758][T12747] ? rcu_is_watching+0x15/0xb0 [ 455.567590][T12747] ? __get_vm_area_node+0x356/0x370 [ 455.572854][T12747] __vmalloc_node_range+0x394/0x1320 [ 455.578200][T12747] ? netlink_insert+0x1094/0x1390 [ 455.583289][T12747] ? netlink_insert+0x2ba/0x1390 [ 455.588287][T12747] ? free_vm_area+0x50/0x50 [ 455.592857][T12747] ? netlink_sendmsg+0x602/0xbf0 [ 455.597847][T12747] vmalloc+0x79/0x90 [ 455.601802][T12747] ? netlink_sendmsg+0x602/0xbf0 [ 455.606794][T12747] netlink_sendmsg+0x602/0xbf0 [ 455.611715][T12747] ? netlink_getsockopt+0x590/0x590 [ 455.616970][T12747] ? apparmor_socket_sendmsg+0x8e/0x330 [ 455.622574][T12747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 455.627923][T12747] ? security_socket_sendmsg+0x80/0xa0 [ 455.633439][T12747] ? netlink_getsockopt+0x590/0x590 [ 455.638696][T12747] ____sys_sendmsg+0x61b/0x980 [ 455.643518][T12747] ? __asan_memset+0x22/0x40 [ 455.648156][T12747] ? __sys_sendmsg_sock+0x30/0x30 [ 455.653219][T12747] ? __import_iovec+0x5f2/0x850 [ 455.658120][T12747] ? import_iovec+0x73/0xa0 [ 455.662680][T12747] ___sys_sendmsg+0x2a6/0x360 [ 455.667398][T12747] ? get_pid_task+0x20/0x1e0 [ 455.672035][T12747] ? __sys_sendmsg+0x2b0/0x2b0 [ 455.676865][T12747] ? __lock_acquire+0x7d80/0x7d80 [ 455.681957][T12747] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.686851][T12747] ? __x64_sys_sendmsg+0x80/0x80 [ 455.691846][T12747] ? lockdep_hardirqs_on+0x98/0x150 [ 455.697101][T12747] do_syscall_64+0x55/0xb0 [ 455.701558][T12747] ? clear_bhb_loop+0x40/0x90 [ 455.706277][T12747] ? clear_bhb_loop+0x40/0x90 [ 455.710998][T12747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.716941][T12747] RIP: 0033:0x7f148ad9e0d9 [ 455.721399][T12747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.741044][T12747] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.749505][T12747] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 455.757546][T12747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 455.765548][T12747] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 455.773592][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.781602][T12747] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 455.789632][T12747] [ 455.880980][T12747] Mem-Info: [ 455.889916][T12747] active_anon:12945 inactive_anon:0 isolated_anon:0 [ 455.889916][T12747] active_file:16468 inactive_file:40097 isolated_file:0 [ 455.889916][T12747] unevictable:768 dirty:258 writeback:25 [ 455.889916][T12747] slab_reclaimable:10669 slab_unreclaimable:93774 [ 455.889916][T12747] mapped:24720 shmem:1361 pagetables:552 [ 455.889916][T12747] sec_pagetables:0 bounce:0 [ 455.889916][T12747] kernel_misc_reclaimable:0 [ 455.889916][T12747] free:1334067 free_pcp:14009 free_cma:0 [ 455.993151][T12747] Node 0 active_anon:51680kB inactive_anon:0kB active_file:65872kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98880kB dirty:1032kB writeback:100kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11452kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no [ 456.133058][T12747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 456.228261][T12747] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.336340][T12747] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 456.342389][T12747] Node 0 DMA32 free:1431004kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:51768kB inactive_anon:0kB active_file:66372kB inactive_file:159364kB unevictable:1536kB writepending:1500kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:35052kB local_pcp:14488kB free_cma:0kB [ 456.447430][T12754] netlink: 119264 bytes leftover after parsing attributes in process `syz.1.2171'. [ 456.468470][T12747] lowmem_reserve[]: 0 0 0 0 0 [ 456.498152][T12747] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 456.583085][T12747] lowmem_reserve[]: 0 0 0 0 0 [ 456.588041][T12747] Node 1 Normal free:3889652kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20708kB local_pcp:9508kB free_cma:0kB [ 456.620255][T12747] lowmem_reserve[]: 0 0 0 0 0 [ 456.625194][T12747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 456.638325][T12747] Node 0 DMA32: 1*4kB (U) 159*8kB (UME) 848*16kB (UM) 645*32kB (UME) 757*64kB (UME) 546*128kB (UME) 217*256kB (UME) 78*512kB (UM) 42*1024kB (UME) 6*2048kB (UM) 275*4096kB (UM) = 1431004kB [ 456.704391][T12747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 456.716288][T12747] Node 1 Normal: 239*4kB (UME) 45*8kB (UME) 47*16kB (UME) 49*32kB (UME) 19*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889652kB [ 456.734229][T12747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.744228][T12747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.756090][T12747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.767974][T12747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.793082][T12747] 58076 total pagecache pages [ 456.799144][T12747] 0 pages in swap cache [ 456.806929][T12747] Free swap = 124996kB [ 456.819883][T12747] Total swap = 124996kB [ 456.829893][T12747] 2097051 pages RAM [ 456.849808][T12747] 0 pages HighMem/MovableOnly [ 456.861520][T12747] 416958 pages reserved [ 456.893195][T12747] 0 pages cma reserved [ 457.075219][T12771] netlink: 'syz.2.2176': attribute type 13 has an invalid length. [ 457.094155][T12768] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2175'. [ 457.106642][T12771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2176'. [ 457.138486][T12771] syz_tun: refused to change device tx_queue_len [ 457.154768][T12771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 457.381190][T12777] FAULT_INJECTION: forcing a failure. [ 457.381190][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 457.411022][T12777] CPU: 1 PID: 12777 Comm: syz.3.2178 Not tainted syzkaller #0 [ 457.418668][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.428795][T12777] Call Trace: [ 457.432129][T12777] [ 457.435113][T12777] dump_stack_lvl+0x18c/0x250 [ 457.439867][T12777] ? show_regs_print_info+0x20/0x20 [ 457.445144][T12777] ? load_image+0x420/0x420 [ 457.449728][T12777] ? __might_sleep+0xe0/0xe0 [ 457.454385][T12777] ? __lock_acquire+0x7d80/0x7d80 [ 457.459481][T12777] should_fail_ex+0x394/0x4c0 [ 457.464287][T12777] should_failslab+0x9/0x20 [ 457.468871][T12777] slab_pre_alloc_hook+0x59/0x300 [ 457.473989][T12777] ? __lock_acquire+0x7d80/0x7d80 [ 457.479386][T12777] kmem_cache_alloc_node+0x5e/0x310 [ 457.484672][T12777] ? __alloc_skb+0x103/0x2c0 [ 457.489339][T12777] __alloc_skb+0x103/0x2c0 [ 457.493838][T12777] netlink_sendmsg+0x66a/0xbf0 [ 457.498687][T12777] ? netlink_getsockopt+0x590/0x590 [ 457.504010][T12777] ? apparmor_socket_sendmsg+0x8e/0x330 [ 457.509641][T12777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 457.514997][T12777] ? security_socket_sendmsg+0x80/0xa0 [ 457.520712][T12777] ? netlink_getsockopt+0x590/0x590 [ 457.526071][T12777] ____sys_sendmsg+0x61b/0x980 [ 457.530911][T12777] ? __asan_memset+0x22/0x40 [ 457.535574][T12777] ? __sys_sendmsg_sock+0x30/0x30 [ 457.540766][T12777] ? __import_iovec+0x5f2/0x850 [ 457.545695][T12777] ? import_iovec+0x73/0xa0 [ 457.550270][T12777] ___sys_sendmsg+0x2a6/0x360 [ 457.555020][T12777] ? get_pid_task+0x20/0x1e0 [ 457.559686][T12777] ? __sys_sendmsg+0x2b0/0x2b0 [ 457.564540][T12777] ? __lock_acquire+0x7d80/0x7d80 [ 457.569666][T12777] __se_sys_sendmsg+0x1d0/0x2c0 [ 457.574574][T12777] ? __x64_sys_sendmsg+0x80/0x80 [ 457.579588][T12777] ? lockdep_hardirqs_on+0x98/0x150 [ 457.584850][T12777] do_syscall_64+0x55/0xb0 [ 457.589319][T12777] ? clear_bhb_loop+0x40/0x90 [ 457.594099][T12777] ? clear_bhb_loop+0x40/0x90 [ 457.598834][T12777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.604786][T12777] RIP: 0033:0x7f93a899e0d9 [ 457.609250][T12777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.628930][T12777] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.637404][T12777] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 457.645435][T12777] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 457.653451][T12777] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.661468][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.669490][T12777] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 457.677537][T12777] [ 457.858629][T12791] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2184'. [ 457.870983][T12791] netlink: 'syz.1.2184': attribute type 4 has an invalid length. [ 457.879157][T12791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2184'. [ 458.718470][T12796] netlink: 119264 bytes leftover after parsing attributes in process `syz.1.2185'. [ 459.022477][T12811] netlink: 'syz.3.2189': attribute type 13 has an invalid length. [ 459.031605][T12811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2189'. [ 459.048399][T12811] syz_tun: refused to change device tx_queue_len [ 459.055377][T12811] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 460.376179][T12843] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2201'. [ 460.469907][T12847] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 460.478131][T12847] netlink: 'syz.3.2202': attribute type 4 has an invalid length. [ 460.487524][T12847] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2202'. [ 460.501927][T12847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 460.520537][ T5788] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 460.580177][T12852] FAULT_INJECTION: forcing a failure. [ 460.580177][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.596570][T12852] CPU: 0 PID: 12852 Comm: syz.0.2204 Not tainted syzkaller #0 [ 460.604101][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.614185][T12852] Call Trace: [ 460.617495][T12852] [ 460.620457][T12852] dump_stack_lvl+0x18c/0x250 [ 460.625172][T12852] ? show_regs_print_info+0x20/0x20 [ 460.630400][T12852] ? load_image+0x420/0x420 [ 460.634942][T12852] ? __might_fault+0xaa/0x120 [ 460.639657][T12852] ? __lock_acquire+0x7d80/0x7d80 [ 460.644724][T12852] should_fail_ex+0x394/0x4c0 [ 460.649446][T12852] _copy_from_iter+0x1cd/0x1290 [ 460.654349][T12852] ? rcu_is_watching+0x15/0xb0 [ 460.659181][T12852] ? copyout_mc+0x70/0x70 [ 460.663554][T12852] ? __virt_addr_valid+0x10c/0x380 [ 460.668718][T12852] ? __virt_addr_valid+0x10c/0x380 [ 460.673901][T12852] ? __virt_addr_valid+0x10c/0x380 [ 460.679050][T12852] ? __check_object_size+0x4fc/0xa40 [ 460.684373][T12852] netlink_sendmsg+0x76b/0xbf0 [ 460.689210][T12852] ? netlink_getsockopt+0x590/0x590 [ 460.694468][T12852] ? apparmor_socket_sendmsg+0x8e/0x330 [ 460.700047][T12852] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 460.705379][T12852] ? security_socket_sendmsg+0x80/0xa0 [ 460.710869][T12852] ? netlink_getsockopt+0x590/0x590 [ 460.716099][T12852] ____sys_sendmsg+0x61b/0x980 [ 460.720938][T12852] ? __asan_memset+0x22/0x40 [ 460.725565][T12852] ? __sys_sendmsg_sock+0x30/0x30 [ 460.730624][T12852] ? __import_iovec+0x5f2/0x850 [ 460.735522][T12852] ? import_iovec+0x73/0xa0 [ 460.740108][T12852] ___sys_sendmsg+0x2a6/0x360 [ 460.744828][T12852] ? __sys_sendmsg+0x2b0/0x2b0 [ 460.749638][T12852] ? trace_call_bpf+0xc3/0x6c0 [ 460.754454][T12852] __se_sys_sendmsg+0x1d0/0x2c0 [ 460.759366][T12852] ? perf_trace_preemptirq_template+0x269/0x330 [ 460.765651][T12852] ? __x64_sys_sendmsg+0x80/0x80 [ 460.770670][T12852] ? lockdep_hardirqs_on+0x98/0x150 [ 460.775934][T12852] do_syscall_64+0x55/0xb0 [ 460.780385][T12852] ? clear_bhb_loop+0x40/0x90 [ 460.785091][T12852] ? clear_bhb_loop+0x40/0x90 [ 460.789798][T12852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.795900][T12852] RIP: 0033:0x7ff41fb9e0d9 [ 460.800347][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.819999][T12852] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.828474][T12852] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 460.836572][T12852] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 460.844751][T12852] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 460.852746][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.860741][T12852] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 460.868751][T12852] [ 461.061546][T12859] FAULT_INJECTION: forcing a failure. [ 461.061546][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 461.074599][T12859] CPU: 1 PID: 12859 Comm: syz.2.2207 Not tainted syzkaller #0 [ 461.082153][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.092266][T12859] Call Trace: [ 461.095601][T12859] [ 461.098575][T12859] dump_stack_lvl+0x18c/0x250 [ 461.103304][T12859] ? show_regs_print_info+0x20/0x20 [ 461.108566][T12859] ? load_image+0x420/0x420 [ 461.113149][T12859] should_fail_ex+0x394/0x4c0 [ 461.117900][T12859] should_failslab+0x9/0x20 [ 461.122560][T12859] slab_pre_alloc_hook+0x59/0x300 [ 461.127664][T12859] kmem_cache_alloc+0x5a/0x2c0 [ 461.132500][T12859] ? skb_clone+0x1eb/0x370 [ 461.136987][T12859] skb_clone+0x1eb/0x370 [ 461.141293][T12859] bpf_clone_redirect+0x16d/0x4a0 [ 461.146474][T12859] ? perf_trace_preemptirq_template+0x269/0x330 [ 461.152803][T12859] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 461.158321][T12859] ? perf_event_ksymbol+0x320/0x400 [ 461.163573][T12859] ? lock_chain_count+0x20/0x20 [ 461.168490][T12859] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.174703][T12859] ? lockdep_hardirqs_on+0x98/0x150 [ 461.179968][T12859] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 461.185310][T12859] ? bpf_test_run+0x174/0x870 [ 461.190052][T12859] ? __local_bh_disable_ip+0x108/0x1a0 [ 461.195564][T12859] ? __cant_sleep+0x220/0x220 [ 461.200297][T12859] ? _local_bh_enable+0xa0/0xa0 [ 461.205204][T12859] ? bpf_test_timer_continue+0x135/0x380 [ 461.210900][T12859] ? bpf_test_run+0x174/0x870 [ 461.215639][T12859] bpf_test_run+0x2df/0x870 [ 461.220260][T12859] ? bpf_test_run+0x174/0x870 [ 461.224995][T12859] ? dst_hold+0x70/0x70 [ 461.229216][T12859] ? eth_get_headlen+0x210/0x210 [ 461.234305][T12859] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 461.235733][T12860] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2205'. [ 461.239737][T12859] ? cpu_online+0x60/0x60 [ 461.239786][T12859] bpf_prog_test_run+0x31f/0x390 [ 461.258469][T12859] __sys_bpf+0x49d/0x890 [ 461.262778][T12859] ? bpf_link_show_fdinfo+0x390/0x390 [ 461.268221][T12859] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.274448][T12859] __x64_sys_bpf+0x7c/0x90 [ 461.278922][T12859] do_syscall_64+0x55/0xb0 [ 461.283392][T12859] ? clear_bhb_loop+0x40/0x90 [ 461.288124][T12859] ? clear_bhb_loop+0x40/0x90 [ 461.292863][T12859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.298805][T12859] RIP: 0033:0x7f148ad9e0d9 [ 461.303257][T12859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.322929][T12859] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.331405][T12859] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 461.339429][T12859] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 461.347449][T12859] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 461.355474][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.363500][T12859] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 461.371551][T12859] [ 462.130901][T12867] netlink: 119264 bytes leftover after parsing attributes in process `syz.2.2209'. [ 463.209210][T12879] netlink: 119264 bytes leftover after parsing attributes in process `syz.1.2211'. [ 463.343113][T12878] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2211'. [ 463.626093][T12891] FAULT_INJECTION: forcing a failure. [ 463.626093][T12891] name failslab, interval 1, probability 0, space 0, times 0 [ 463.640059][T12891] CPU: 1 PID: 12891 Comm: syz.1.2215 Not tainted syzkaller #0 [ 463.647611][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.657720][T12891] Call Trace: [ 463.661053][T12891] [ 463.664029][T12891] dump_stack_lvl+0x18c/0x250 [ 463.668774][T12891] ? show_regs_print_info+0x20/0x20 [ 463.674033][T12891] ? load_image+0x420/0x420 [ 463.678607][T12891] ? __might_sleep+0xe0/0xe0 [ 463.683258][T12891] ? __lock_acquire+0x7d80/0x7d80 [ 463.688341][T12891] should_fail_ex+0x394/0x4c0 [ 463.693077][T12891] should_failslab+0x9/0x20 [ 463.697648][T12891] slab_pre_alloc_hook+0x59/0x300 [ 463.702743][T12891] ? rtnl_newlink+0x10d/0x2170 [ 463.707556][T12891] __kmem_cache_alloc_node+0x53/0x250 [ 463.712988][T12891] ? rtnl_newlink+0x10d/0x2170 [ 463.717805][T12891] kmalloc_trace+0x2a/0xe0 [ 463.722296][T12891] rtnl_newlink+0x10d/0x2170 [ 463.726961][T12891] ? verify_lock_unused+0x140/0x140 [ 463.732223][T12891] ? __mutex_trylock_common+0x160/0x270 [ 463.737820][T12891] ? rtnl_setlink+0x4e0/0x4e0 [ 463.742554][T12891] ? trace_raw_output_contention_end+0xd0/0xd0 [ 463.748771][T12891] ? rcu_is_watching+0x15/0xb0 [ 463.753617][T12891] ? trace_contention_end+0x39/0xe0 [ 463.758865][T12891] ? __mutex_lock+0x30d/0xc80 [ 463.763701][T12891] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 463.768872][T12891] ? mutex_lock_nested+0x20/0x20 [ 463.773879][T12891] ? rtnl_setlink+0x4e0/0x4e0 [ 463.778616][T12891] rtnetlink_rcv_msg+0x843/0xf90 [ 463.783605][T12891] ? rtnetlink_rcv_msg+0x220/0xf90 [ 463.788783][T12891] ? rtnetlink_bind+0x80/0x80 [ 463.793506][T12891] ? mark_lock+0x94/0x320 [ 463.797899][T12891] ? __lock_acquire+0x1262/0x7d80 [ 463.802996][T12891] ? mark_lock+0x94/0x320 [ 463.807389][T12891] ? mark_lock+0x94/0x320 [ 463.811778][T12891] ? __lock_acquire+0x1262/0x7d80 [ 463.816963][T12891] ? kmalloc_reserve+0x95/0x240 [ 463.821866][T12891] ? verify_lock_unused+0x140/0x140 [ 463.827172][T12891] ? verify_lock_unused+0x140/0x140 [ 463.832442][T12891] netlink_rcv_skb+0x235/0x4c0 [ 463.837260][T12891] ? rtnetlink_bind+0x80/0x80 [ 463.842002][T12891] ? netlink_ack+0x1160/0x1160 [ 463.846825][T12891] ? __lock_acquire+0x7d80/0x7d80 [ 463.851901][T12891] ? net_generic+0x1e/0x240 [ 463.856549][T12891] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.861806][T12891] netlink_unicast+0x7b1/0x930 [ 463.866641][T12891] netlink_sendmsg+0x8d0/0xbf0 [ 463.871467][T12891] ? netlink_getsockopt+0x590/0x590 [ 463.876721][T12891] ? apparmor_socket_sendmsg+0x8e/0x330 [ 463.882319][T12891] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.887664][T12891] ? security_socket_sendmsg+0x80/0xa0 [ 463.893179][T12891] ? netlink_getsockopt+0x590/0x590 [ 463.898445][T12891] ____sys_sendmsg+0x61b/0x980 [ 463.903288][T12891] ? __asan_memset+0x22/0x40 [ 463.907955][T12891] ? __sys_sendmsg_sock+0x30/0x30 [ 463.913044][T12891] ? __import_iovec+0x5f2/0x850 [ 463.918005][T12891] ? import_iovec+0x73/0xa0 [ 463.922588][T12891] ___sys_sendmsg+0x2a6/0x360 [ 463.927329][T12891] ? get_pid_task+0x20/0x1e0 [ 463.931998][T12891] ? __sys_sendmsg+0x2b0/0x2b0 [ 463.936845][T12891] ? __lock_acquire+0x7d80/0x7d80 [ 463.941964][T12891] __se_sys_sendmsg+0x1d0/0x2c0 [ 463.946910][T12891] ? __x64_sys_sendmsg+0x80/0x80 [ 463.951925][T12891] ? lockdep_hardirqs_on+0x98/0x150 [ 463.957189][T12891] do_syscall_64+0x55/0xb0 [ 463.961665][T12891] ? clear_bhb_loop+0x40/0x90 [ 463.966417][T12891] ? clear_bhb_loop+0x40/0x90 [ 463.971184][T12891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.977132][T12891] RIP: 0033:0x7f6dee59e0d9 [ 463.981629][T12891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.001300][T12891] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.009785][T12891] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 464.017851][T12891] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 464.025917][T12891] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 464.033953][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.041978][T12891] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 464.050052][T12891] [ 464.428022][T12903] netlink: 'syz.2.2219': attribute type 33 has an invalid length. [ 464.447510][T12903] netlink: 'syz.2.2219': attribute type 1 has an invalid length. [ 464.461772][T12903] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2219'. [ 465.206405][T12924] netlink: 'syz.2.2225': attribute type 13 has an invalid length. [ 465.224550][T12924] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2225'. [ 465.255760][T12924] syz_tun: refused to change device tx_queue_len [ 465.262215][T12924] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 465.303044][T12926] FAULT_INJECTION: forcing a failure. [ 465.303044][T12926] name failslab, interval 1, probability 0, space 0, times 0 [ 465.334550][T12926] CPU: 0 PID: 12926 Comm: syz.0.2226 Not tainted syzkaller #0 [ 465.342105][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.352212][T12926] Call Trace: [ 465.355526][T12926] [ 465.358485][T12926] dump_stack_lvl+0x18c/0x250 [ 465.363203][T12926] ? show_regs_print_info+0x20/0x20 [ 465.368437][T12926] ? load_image+0x420/0x420 [ 465.372985][T12926] ? __might_sleep+0xe0/0xe0 [ 465.377606][T12926] ? __lock_acquire+0x7d80/0x7d80 [ 465.382665][T12926] should_fail_ex+0x394/0x4c0 [ 465.387382][T12926] should_failslab+0x9/0x20 [ 465.391919][T12926] slab_pre_alloc_hook+0x59/0x300 [ 465.397002][T12926] ? finish_task_switch+0x262/0x8f0 [ 465.402244][T12926] ? rtnl_newlink+0x10d/0x2170 [ 465.407053][T12926] __kmem_cache_alloc_node+0x53/0x250 [ 465.412477][T12926] ? rtnl_newlink+0x10d/0x2170 [ 465.417275][T12926] kmalloc_trace+0x2a/0xe0 [ 465.421765][T12926] rtnl_newlink+0x10d/0x2170 [ 465.426423][T12926] ? __mutex_lock+0x919/0xc80 [ 465.431146][T12926] ? __lock_acquire+0x7d80/0x7d80 [ 465.436207][T12926] ? do_raw_spin_lock+0x11f/0x2b0 [ 465.441272][T12926] ? rtnl_setlink+0x4e0/0x4e0 [ 465.446066][T12926] ? __rwlock_init+0x150/0x150 [ 465.450866][T12926] ? do_raw_spin_unlock+0x121/0x230 [ 465.456098][T12926] ? __mutex_lock+0x923/0xc80 [ 465.460907][T12926] ? __mutex_lock+0x4d2/0xc80 [ 465.465616][T12926] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 465.470755][T12926] ? mutex_lock_nested+0x20/0x20 [ 465.475743][T12926] ? rtnl_setlink+0x4e0/0x4e0 [ 465.480446][T12926] rtnetlink_rcv_msg+0x843/0xf90 [ 465.485419][T12926] ? rtnetlink_rcv_msg+0x220/0xf90 [ 465.490567][T12926] ? rtnetlink_bind+0x80/0x80 [ 465.495279][T12926] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 465.501289][T12926] ? lock_chain_count+0x20/0x20 [ 465.506168][T12926] ? __local_bh_enable_ip+0x13a/0x1c0 [ 465.511568][T12926] ? lockdep_hardirqs_on+0x98/0x150 [ 465.516801][T12926] ? __local_bh_enable_ip+0x13a/0x1c0 [ 465.522227][T12926] ? _local_bh_enable+0xa0/0xa0 [ 465.527125][T12926] ? __dev_queue_xmit+0x275/0x3630 [ 465.532374][T12926] ? __dev_queue_xmit+0x1bc2/0x3630 [ 465.537622][T12926] ? __dev_queue_xmit+0x275/0x3630 [ 465.542798][T12926] ? ref_tracker_free+0x686/0x830 [ 465.547860][T12926] netlink_rcv_skb+0x235/0x4c0 [ 465.552659][T12926] ? rtnetlink_bind+0x80/0x80 [ 465.557366][T12926] ? netlink_ack+0x1160/0x1160 [ 465.562167][T12926] ? __lock_acquire+0x7d80/0x7d80 [ 465.567234][T12926] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.572548][T12926] netlink_unicast+0x7b1/0x930 [ 465.577356][T12926] netlink_sendmsg+0x8d0/0xbf0 [ 465.582161][T12926] ? netlink_getsockopt+0x590/0x590 [ 465.587395][T12926] ? apparmor_socket_sendmsg+0x8e/0x330 [ 465.592976][T12926] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 465.598291][T12926] ? security_socket_sendmsg+0x80/0xa0 [ 465.603779][T12926] ? netlink_getsockopt+0x590/0x590 [ 465.609039][T12926] ____sys_sendmsg+0x61b/0x980 [ 465.613841][T12926] ? __asan_memset+0x22/0x40 [ 465.618468][T12926] ? __sys_sendmsg_sock+0x30/0x30 [ 465.623523][T12926] ? __import_iovec+0x5f2/0x850 [ 465.628420][T12926] ? import_iovec+0x73/0xa0 [ 465.632978][T12926] ___sys_sendmsg+0x2a6/0x360 [ 465.637735][T12926] ? get_pid_task+0x20/0x1e0 [ 465.642364][T12926] ? __sys_sendmsg+0x2b0/0x2b0 [ 465.647184][T12926] ? __lock_acquire+0x7d80/0x7d80 [ 465.652259][T12926] __se_sys_sendmsg+0x1d0/0x2c0 [ 465.657144][T12926] ? __x64_sys_sendmsg+0x80/0x80 [ 465.662128][T12926] ? lockdep_hardirqs_on+0x98/0x150 [ 465.667379][T12926] do_syscall_64+0x55/0xb0 [ 465.671832][T12926] ? clear_bhb_loop+0x40/0x90 [ 465.676573][T12926] ? clear_bhb_loop+0x40/0x90 [ 465.681319][T12926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.687257][T12926] RIP: 0033:0x7ff41fb9e0d9 [ 465.691801][T12926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.711614][T12926] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.720087][T12926] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 465.728134][T12926] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 465.736155][T12926] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 465.744170][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.752179][T12926] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 465.760251][T12926] [ 466.735720][T12952] FAULT_INJECTION: forcing a failure. [ 466.735720][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 466.748851][T12952] CPU: 0 PID: 12952 Comm: syz.1.2233 Not tainted syzkaller #0 [ 466.756404][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.766703][T12952] Call Trace: [ 466.770037][T12952] [ 466.773022][T12952] dump_stack_lvl+0x18c/0x250 [ 466.777763][T12952] ? show_regs_print_info+0x20/0x20 [ 466.783020][T12952] ? load_image+0x420/0x420 [ 466.787594][T12952] should_fail_ex+0x394/0x4c0 [ 466.792337][T12952] should_failslab+0x9/0x20 [ 466.796901][T12952] slab_pre_alloc_hook+0x59/0x300 [ 466.801987][T12952] kmem_cache_alloc+0x5a/0x2c0 [ 466.806812][T12952] ? skb_clone+0x1eb/0x370 [ 466.811287][T12952] skb_clone+0x1eb/0x370 [ 466.815608][T12952] bpf_clone_redirect+0x16d/0x4a0 [ 466.820695][T12952] ? perf_trace_preemptirq_template+0x269/0x330 [ 466.827110][T12952] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 466.832650][T12952] ? perf_event_ksymbol+0x320/0x400 [ 466.837926][T12952] ? lock_chain_count+0x20/0x20 [ 466.842931][T12952] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.849146][T12952] ? lockdep_hardirqs_on+0x98/0x150 [ 466.854408][T12952] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 466.859757][T12952] ? bpf_test_run+0x174/0x870 [ 466.864527][T12952] ? __local_bh_disable_ip+0x108/0x1a0 [ 466.870057][T12952] ? __cant_sleep+0x220/0x220 [ 466.874808][T12952] ? _local_bh_enable+0xa0/0xa0 [ 466.879720][T12952] ? bpf_test_timer_continue+0x135/0x380 [ 466.885443][T12952] ? bpf_test_run+0x174/0x870 [ 466.890188][T12952] bpf_test_run+0x2df/0x870 [ 466.894785][T12952] ? bpf_test_run+0x174/0x870 [ 466.899525][T12952] ? dst_hold+0x70/0x70 [ 466.903754][T12952] ? convert___skb_to_skb+0x511/0x590 [ 466.909217][T12952] ? dst_hold+0x25/0x70 [ 466.913448][T12952] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 466.918913][T12952] ? cpu_online+0x60/0x60 [ 466.923313][T12952] bpf_prog_test_run+0x31f/0x390 [ 466.928306][T12952] __sys_bpf+0x49d/0x890 [ 466.932596][T12952] ? bpf_link_show_fdinfo+0x390/0x390 [ 466.938043][T12952] ? lock_chain_count+0x20/0x20 [ 466.942970][T12952] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 466.949002][T12952] __x64_sys_bpf+0x7c/0x90 [ 466.953633][T12952] do_syscall_64+0x55/0xb0 [ 466.958125][T12952] ? clear_bhb_loop+0x40/0x90 [ 466.962876][T12952] ? clear_bhb_loop+0x40/0x90 [ 466.967711][T12952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.973666][T12952] RIP: 0033:0x7f6dee59e0d9 [ 466.978134][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.997884][T12952] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.006362][T12952] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 467.014410][T12952] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 467.022436][T12952] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 467.030465][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.038492][T12952] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 467.046574][T12952] [ 467.286723][T12958] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2235'. [ 467.813918][T12971] netlink: 'syz.1.2238': attribute type 13 has an invalid length. [ 467.821932][T12971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2238'. [ 467.833197][T12971] syz_tun: refused to change device tx_queue_len [ 467.839616][T12971] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 467.969333][T12973] netlink: 'syz.1.2239': attribute type 13 has an invalid length. [ 467.988075][T12973] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2239'. [ 467.998144][T12973] FAULT_INJECTION: forcing a failure. [ 467.998144][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 468.014972][T12973] CPU: 0 PID: 12973 Comm: syz.1.2239 Not tainted syzkaller #0 [ 468.022511][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.032616][T12973] Call Trace: [ 468.035942][T12973] [ 468.038920][T12973] dump_stack_lvl+0x18c/0x250 [ 468.043666][T12973] ? show_regs_print_info+0x20/0x20 [ 468.048923][T12973] ? load_image+0x420/0x420 [ 468.053492][T12973] ? __lock_acquire+0x7d80/0x7d80 [ 468.058582][T12973] should_fail_ex+0x394/0x4c0 [ 468.063339][T12973] should_failslab+0x9/0x20 [ 468.067906][T12973] slab_pre_alloc_hook+0x59/0x300 [ 468.072995][T12973] ? br_netlink_fini+0x30/0x30 [ 468.077881][T12973] kmem_cache_alloc_node+0x5e/0x310 [ 468.083133][T12973] ? __alloc_skb+0x103/0x2c0 [ 468.087745][T12973] __alloc_skb+0x103/0x2c0 [ 468.092176][T12973] rtmsg_ifinfo_build_skb+0x83/0x260 [ 468.097484][T12973] rtnetlink_event+0x1b7/0x260 [ 468.102266][T12973] notifier_call_chain+0x18f/0x380 [ 468.107440][T12973] dev_set_mac_address+0x38e/0x4d0 [ 468.112572][T12973] ? dev_pre_changeaddr_notify+0x120/0x120 [ 468.118395][T12973] ? down_write+0x16e/0x200 [ 468.122947][T12973] ? rcu_is_watching+0x15/0xb0 [ 468.127775][T12973] dev_set_mac_address_user+0x31/0x50 [ 468.133198][T12973] do_setlink+0x78f/0x3f40 [ 468.137660][T12973] ? load_image+0x420/0x420 [ 468.142201][T12973] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 468.148575][T12973] ? stack_trace_save+0xaa/0x100 [ 468.153548][T12973] ? rcu_is_watching+0x15/0xb0 [ 468.158344][T12973] ? do_trace_netlink_extack+0x7e/0x1a0 [ 468.163949][T12973] ? __nla_validate+0x50/0x50 [ 468.168691][T12973] ? validate_linkmsg+0x719/0x910 [ 468.173755][T12973] rtnl_newlink+0x1848/0x2170 [ 468.178479][T12973] ? rtnl_newlink+0x4c1/0x2170 [ 468.183307][T12973] ? rtnl_setlink+0x4e0/0x4e0 [ 468.188015][T12973] ? trace_raw_output_contention_end+0xd0/0xd0 [ 468.194205][T12973] ? rcu_is_watching+0x15/0xb0 [ 468.199004][T12973] ? trace_contention_end+0x39/0xe0 [ 468.204229][T12973] ? __mutex_lock+0x30d/0xc80 [ 468.208966][T12973] ? rtnl_setlink+0x4e0/0x4e0 [ 468.213672][T12973] rtnetlink_rcv_msg+0x843/0xf90 [ 468.218645][T12973] ? do_user_addr_fault+0xf5c/0x12d0 [ 468.223965][T12973] ? rtnetlink_rcv_msg+0x220/0xf90 [ 468.229113][T12973] ? rtnetlink_bind+0x80/0x80 [ 468.233846][T12973] ? mark_lock+0x94/0x320 [ 468.238209][T12973] ? __lock_acquire+0x1262/0x7d80 [ 468.243270][T12973] ? mark_lock+0x94/0x320 [ 468.247662][T12973] ? mark_lock+0x94/0x320 [ 468.252023][T12973] ? __lock_acquire+0x1262/0x7d80 [ 468.257096][T12973] ? verify_lock_unused+0x140/0x140 [ 468.262326][T12973] ? perf_trace_lock_acquire+0x105/0x400 [ 468.267986][T12973] ? verify_lock_unused+0x140/0x140 [ 468.273219][T12973] ? perf_trace_lock_acquire+0x105/0x400 [ 468.278902][T12973] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 468.285525][T12973] netlink_rcv_skb+0x235/0x4c0 [ 468.290326][T12973] ? rtnetlink_bind+0x80/0x80 [ 468.295035][T12973] ? netlink_ack+0x1160/0x1160 [ 468.299849][T12973] ? __lock_acquire+0x7d80/0x7d80 [ 468.304905][T12973] ? net_generic+0x1e/0x240 [ 468.309453][T12973] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.314683][T12973] netlink_unicast+0x7b1/0x930 [ 468.319497][T12973] netlink_sendmsg+0x8d0/0xbf0 [ 468.324303][T12973] ? netlink_getsockopt+0x590/0x590 [ 468.329531][T12973] ? apparmor_socket_sendmsg+0x8e/0x330 [ 468.335109][T12973] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.340425][T12973] ? security_socket_sendmsg+0x80/0xa0 [ 468.345912][T12973] ? netlink_getsockopt+0x590/0x590 [ 468.351143][T12973] ____sys_sendmsg+0x61b/0x980 [ 468.355945][T12973] ? __asan_memset+0x22/0x40 [ 468.360572][T12973] ? __sys_sendmsg_sock+0x30/0x30 [ 468.365621][T12973] ? __import_iovec+0x5f2/0x850 [ 468.370511][T12973] ? import_iovec+0x73/0xa0 [ 468.375059][T12973] ___sys_sendmsg+0x2a6/0x360 [ 468.379781][T12973] ? get_pid_task+0x20/0x1e0 [ 468.384424][T12973] ? __sys_sendmsg+0x2b0/0x2b0 [ 468.389232][T12973] ? __lock_acquire+0x7d80/0x7d80 [ 468.394324][T12973] __se_sys_sendmsg+0x1d0/0x2c0 [ 468.399214][T12973] ? __x64_sys_sendmsg+0x80/0x80 [ 468.404196][T12973] ? lockdep_hardirqs_on+0x98/0x150 [ 468.409435][T12973] do_syscall_64+0x55/0xb0 [ 468.413884][T12973] ? clear_bhb_loop+0x40/0x90 [ 468.418593][T12973] ? clear_bhb_loop+0x40/0x90 [ 468.423314][T12973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.429260][T12973] RIP: 0033:0x7f6dee59e0d9 [ 468.433724][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.453370][T12973] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.461820][T12973] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 468.469818][T12973] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 468.477818][T12973] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 468.485813][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.493807][T12973] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 468.501817][T12973] [ 468.517663][T12973] syz_tun: refused to change device tx_queue_len [ 468.524360][T12973] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 469.183030][T12985] netlink: 119264 bytes leftover after parsing attributes in process `syz.3.2243'. [ 470.318035][T13019] syzkaller0: entered promiscuous mode [ 470.328163][T13019] syzkaller0: entered allmulticast mode [ 470.339087][ T7251] syzkaller0: tun_net_xmit 48 [ 471.448582][T13026] netlink: 119264 bytes leftover after parsing attributes in process `syz.3.2257'. [ 471.631582][T13033] FAULT_INJECTION: forcing a failure. [ 471.631582][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 471.644601][T13033] CPU: 0 PID: 13033 Comm: syz.3.2259 Not tainted syzkaller #0 [ 471.652109][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.662189][T13033] Call Trace: [ 471.665510][T13033] [ 471.668475][T13033] dump_stack_lvl+0x18c/0x250 [ 471.673187][T13033] ? show_regs_print_info+0x20/0x20 [ 471.678420][T13033] ? load_image+0x420/0x420 [ 471.682981][T13033] should_fail_ex+0x394/0x4c0 [ 471.687733][T13033] should_failslab+0x9/0x20 [ 471.692318][T13033] slab_pre_alloc_hook+0x59/0x300 [ 471.697375][T13033] kmem_cache_alloc+0x5a/0x2c0 [ 471.702164][T13033] ? skb_clone+0x1eb/0x370 [ 471.706607][T13033] skb_clone+0x1eb/0x370 [ 471.710873][T13033] bpf_clone_redirect+0x16d/0x4a0 [ 471.715930][T13033] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 471.721436][T13033] ? perf_event_ksymbol+0x320/0x400 [ 471.726687][T13033] ? perf_trace_preemptirq_template+0x269/0x330 [ 471.732988][T13033] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 471.739037][T13033] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 471.744453][T13033] ? lock_chain_count+0x20/0x20 [ 471.749350][T13033] ? __local_bh_disable_ip+0x108/0x1a0 [ 471.754863][T13033] ? __cant_sleep+0x220/0x220 [ 471.759570][T13033] ? __local_bh_enable_ip+0x13a/0x1c0 [ 471.764985][T13033] ? _local_bh_enable+0xa0/0xa0 [ 471.769864][T13033] ? bpf_test_timer_continue+0x135/0x380 [ 471.775550][T13033] ? bpf_test_run+0x174/0x870 [ 471.780279][T13033] bpf_test_run+0x2df/0x870 [ 471.784834][T13033] ? bpf_test_run+0x174/0x870 [ 471.789562][T13033] ? dst_hold+0x70/0x70 [ 471.793779][T13033] ? eth_get_headlen+0x210/0x210 [ 471.798770][T13033] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 471.804182][T13033] ? cpu_online+0x60/0x60 [ 471.808547][T13033] bpf_prog_test_run+0x31f/0x390 [ 471.813531][T13033] __sys_bpf+0x49d/0x890 [ 471.817795][T13033] ? bpf_link_show_fdinfo+0x390/0x390 [ 471.823232][T13033] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 471.829442][T13033] __x64_sys_bpf+0x7c/0x90 [ 471.833988][T13033] do_syscall_64+0x55/0xb0 [ 471.838423][T13033] ? clear_bhb_loop+0x40/0x90 [ 471.843124][T13033] ? clear_bhb_loop+0x40/0x90 [ 471.847857][T13033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.853773][T13033] RIP: 0033:0x7f93a899e0d9 [ 471.858213][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.877886][T13033] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.886412][T13033] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 471.894447][T13033] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 471.902440][T13033] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.910455][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.918474][T13033] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 471.926499][T13033] [ 473.179012][T13024] C: renamed from team_slave_0 (while UP) [ 473.186893][T13024] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2256'. [ 473.196979][T13029] netlink: 'syz.0.2258': attribute type 4 has an invalid length. [ 473.205083][T13029] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2258'. [ 473.281949][ T5788] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 473.440929][T13047] netlink: 'syz.2.2263': attribute type 5 has an invalid length. [ 473.513309][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2263'. [ 474.109889][T13062] FAULT_INJECTION: forcing a failure. [ 474.109889][T13062] name failslab, interval 1, probability 0, space 0, times 0 [ 474.122943][T13062] CPU: 0 PID: 13062 Comm: syz.3.2269 Not tainted syzkaller #0 [ 474.130466][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.140553][T13062] Call Trace: [ 474.143867][T13062] [ 474.146841][T13062] dump_stack_lvl+0x18c/0x250 [ 474.151554][T13062] ? show_regs_print_info+0x20/0x20 [ 474.156788][T13062] ? load_image+0x420/0x420 [ 474.161346][T13062] should_fail_ex+0x394/0x4c0 [ 474.166081][T13062] should_failslab+0x9/0x20 [ 474.170645][T13062] slab_pre_alloc_hook+0x59/0x300 [ 474.175720][T13062] kmem_cache_alloc+0x5a/0x2c0 [ 474.181248][T13062] ? skb_clone+0x1eb/0x370 [ 474.185730][T13062] skb_clone+0x1eb/0x370 [ 474.190032][T13062] bpf_clone_redirect+0x16d/0x4a0 [ 474.195092][T13062] ? perf_trace_preemptirq_template+0x269/0x330 [ 474.201367][T13062] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 474.206866][T13062] ? trace_print_symbols_seq+0x200/0x280 [ 474.212567][T13062] ? lock_chain_count+0x20/0x20 [ 474.217482][T13062] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.223701][T13062] ? lockdep_hardirqs_on+0x98/0x150 [ 474.228947][T13062] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 474.234268][T13062] ? bpf_test_run+0x174/0x870 [ 474.239042][T13062] ? __local_bh_disable_ip+0x108/0x1a0 [ 474.244555][T13062] ? __cant_sleep+0x220/0x220 [ 474.249293][T13062] ? _local_bh_enable+0xa0/0xa0 [ 474.254202][T13062] ? bpf_test_timer_continue+0x135/0x380 [ 474.259887][T13062] ? bpf_test_run+0x174/0x870 [ 474.264618][T13062] bpf_test_run+0x2df/0x870 [ 474.269193][T13062] ? bpf_test_run+0x174/0x870 [ 474.273918][T13062] ? dst_hold+0x70/0x70 [ 474.278107][T13062] ? eth_get_headlen+0x210/0x210 [ 474.283084][T13062] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 474.288502][T13062] ? cpu_online+0x60/0x60 [ 474.292862][T13062] bpf_prog_test_run+0x31f/0x390 [ 474.297842][T13062] __sys_bpf+0x49d/0x890 [ 474.302115][T13062] ? bpf_link_show_fdinfo+0x390/0x390 [ 474.307530][T13062] ? lock_chain_count+0x20/0x20 [ 474.312415][T13062] __x64_sys_bpf+0x7c/0x90 [ 474.316860][T13062] do_syscall_64+0x55/0xb0 [ 474.321302][T13062] ? clear_bhb_loop+0x40/0x90 [ 474.326005][T13062] ? clear_bhb_loop+0x40/0x90 [ 474.330707][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.336627][T13062] RIP: 0033:0x7f93a899e0d9 [ 474.341070][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.360705][T13062] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.369151][T13062] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 474.377151][T13062] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 474.385147][T13062] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.393158][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.401169][T13062] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 474.409196][T13062] [ 474.588762][T13064] netlink: 'syz.0.2270': attribute type 13 has an invalid length. [ 474.615448][T13064] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.2270'. [ 474.664919][T13068] netlink: 'syz.0.2270': attribute type 11 has an invalid length. [ 474.760127][T13070] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2272'. [ 475.185008][T13082] netlink: 'syz.3.2275': attribute type 4 has an invalid length. [ 475.213041][T13082] netlink: 'syz.3.2275': attribute type 16 has an invalid length. [ 475.221074][T13082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2275'. [ 475.291431][T13078] netlink: 'syz.3.2275': attribute type 13 has an invalid length. [ 475.302221][T13078] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2275'. [ 475.329544][T13078] syz_tun: refused to change device tx_queue_len [ 475.340378][T13078] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 475.399411][ T5788] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 475.591003][T13088] FAULT_INJECTION: forcing a failure. [ 475.591003][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.623227][T13088] CPU: 1 PID: 13088 Comm: syz.1.2278 Not tainted syzkaller #0 [ 475.630784][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.640888][T13088] Call Trace: [ 475.644215][T13088] [ 475.647191][T13088] dump_stack_lvl+0x18c/0x250 [ 475.651935][T13088] ? show_regs_print_info+0x20/0x20 [ 475.657194][T13088] ? load_image+0x420/0x420 [ 475.661767][T13088] ? __might_fault+0xaa/0x120 [ 475.666494][T13088] ? __lock_acquire+0x7d80/0x7d80 [ 475.671534][T13088] ? __virt_addr_valid+0x10c/0x380 [ 475.676671][T13088] should_fail_ex+0x394/0x4c0 [ 475.681371][T13088] _copy_from_user+0x2f/0xe0 [ 475.685995][T13088] generic_map_update_batch+0x58c/0x800 [ 475.691604][T13088] ? rcu_read_unlock+0xa0/0xa0 [ 475.696424][T13088] ? __fdget+0x180/0x210 [ 475.700724][T13088] ? rcu_read_unlock+0xa0/0xa0 [ 475.705539][T13088] bpf_map_do_batch+0x3f2/0x600 [ 475.710447][T13088] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 475.715972][T13088] __sys_bpf+0x381/0x890 [ 475.720280][T13088] ? bpf_link_show_fdinfo+0x390/0x390 [ 475.725724][T13088] ? lock_chain_count+0x20/0x20 [ 475.730634][T13088] __x64_sys_bpf+0x7c/0x90 [ 475.735101][T13088] do_syscall_64+0x55/0xb0 [ 475.739560][T13088] ? clear_bhb_loop+0x40/0x90 [ 475.744269][T13088] ? clear_bhb_loop+0x40/0x90 [ 475.748973][T13088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.754894][T13088] RIP: 0033:0x7f6dee59e0d9 [ 475.759341][T13088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.778976][T13088] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.787420][T13088] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 475.795418][T13088] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 475.803414][T13088] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 475.811408][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.819407][T13088] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 475.827416][T13088] [ 475.841190][T13094] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 475.875346][T13094] geneve0: entered promiscuous mode [ 476.117518][T13099] FAULT_INJECTION: forcing a failure. [ 476.117518][T13099] name failslab, interval 1, probability 0, space 0, times 0 [ 476.130884][T13099] CPU: 0 PID: 13099 Comm: syz.1.2281 Not tainted syzkaller #0 [ 476.138405][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.148512][T13099] Call Trace: [ 476.151842][T13099] [ 476.154816][T13099] dump_stack_lvl+0x18c/0x250 [ 476.159591][T13099] ? show_regs_print_info+0x20/0x20 [ 476.164865][T13099] ? load_image+0x420/0x420 [ 476.169447][T13099] should_fail_ex+0x394/0x4c0 [ 476.174194][T13099] should_failslab+0x9/0x20 [ 476.178755][T13099] slab_pre_alloc_hook+0x59/0x300 [ 476.183850][T13099] kmem_cache_alloc+0x5a/0x2c0 [ 476.188671][T13099] ? skb_clone+0x1eb/0x370 [ 476.193152][T13099] skb_clone+0x1eb/0x370 [ 476.197449][T13099] bpf_clone_redirect+0x16d/0x4a0 [ 476.202555][T13099] bpf_prog_bfd3cab142e322d3+0x5e/0x63 [ 476.208076][T13099] ? perf_event_ksymbol+0x320/0x400 [ 476.213335][T13099] ? perf_trace_preemptirq_template+0x269/0x330 [ 476.219652][T13099] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 476.225697][T13099] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 476.231046][T13099] ? lock_chain_count+0x20/0x20 [ 476.235964][T13099] ? __local_bh_disable_ip+0x108/0x1a0 [ 476.241477][T13099] ? __cant_sleep+0x220/0x220 [ 476.246205][T13099] ? __local_bh_enable_ip+0x13a/0x1c0 [ 476.251627][T13099] ? _local_bh_enable+0xa0/0xa0 [ 476.256534][T13099] ? bpf_test_timer_continue+0x135/0x380 [ 476.262227][T13099] ? bpf_test_run+0x174/0x870 [ 476.266962][T13099] bpf_test_run+0x2df/0x870 [ 476.271537][T13099] ? bpf_test_run+0x174/0x870 [ 476.276306][T13099] ? dst_hold+0x70/0x70 [ 476.280514][T13099] ? eth_get_headlen+0x210/0x210 [ 476.285511][T13099] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 476.290968][T13099] ? cpu_online+0x60/0x60 [ 476.295363][T13099] bpf_prog_test_run+0x31f/0x390 [ 476.300353][T13099] __sys_bpf+0x49d/0x890 [ 476.304653][T13099] ? bpf_link_show_fdinfo+0x390/0x390 [ 476.310088][T13099] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.316315][T13099] __x64_sys_bpf+0x7c/0x90 [ 476.320785][T13099] do_syscall_64+0x55/0xb0 [ 476.325250][T13099] ? clear_bhb_loop+0x40/0x90 [ 476.329980][T13099] ? clear_bhb_loop+0x40/0x90 [ 476.334715][T13099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.340663][T13099] RIP: 0033:0x7f6dee59e0d9 [ 476.345129][T13099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.364795][T13099] RSP: 002b:00007f6def4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.373276][T13099] RAX: ffffffffffffffda RBX: 00007f6dee825fa0 RCX: 00007f6dee59e0d9 [ 476.381306][T13099] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 476.389332][T13099] RBP: 00007f6def4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 476.397362][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.405383][T13099] R13: 00007f6dee826038 R14: 00007f6dee825fa0 R15: 00007ffcd5523b08 [ 476.413434][T13099] [ 476.442126][T13100] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2282'. [ 476.990309][ T5788] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 477.097128][T13119] netlink: 'syz.0.2288': attribute type 2 has an invalid length. [ 477.419582][T13105] C: renamed from team_slave_0 (while UP) [ 477.434726][T13105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2283'. [ 477.446719][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2289'. [ 477.566088][T13125] FAULT_INJECTION: forcing a failure. [ 477.566088][T13125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.579498][T13125] CPU: 0 PID: 13125 Comm: syz.3.2290 Not tainted syzkaller #0 [ 477.587000][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.597077][T13125] Call Trace: [ 477.600379][T13125] [ 477.603339][T13125] dump_stack_lvl+0x18c/0x250 [ 477.608054][T13125] ? show_regs_print_info+0x20/0x20 [ 477.613284][T13125] ? load_image+0x420/0x420 [ 477.617825][T13125] ? __might_fault+0xaa/0x120 [ 477.622526][T13125] ? __lock_acquire+0x7d80/0x7d80 [ 477.627577][T13125] ? __virt_addr_valid+0x10c/0x380 [ 477.632751][T13125] should_fail_ex+0x394/0x4c0 [ 477.637502][T13125] _copy_from_user+0x2f/0xe0 [ 477.642146][T13125] generic_map_update_batch+0x53e/0x800 [ 477.647743][T13125] ? rcu_read_unlock+0xa0/0xa0 [ 477.652547][T13125] ? __fdget+0x180/0x210 [ 477.656833][T13125] ? rcu_read_unlock+0xa0/0xa0 [ 477.661654][T13125] bpf_map_do_batch+0x3f2/0x600 [ 477.666548][T13125] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 477.672057][T13125] __sys_bpf+0x381/0x890 [ 477.676336][T13125] ? bpf_link_show_fdinfo+0x390/0x390 [ 477.681778][T13125] ? lock_chain_count+0x20/0x20 [ 477.686679][T13125] __x64_sys_bpf+0x7c/0x90 [ 477.691137][T13125] do_syscall_64+0x55/0xb0 [ 477.695591][T13125] ? clear_bhb_loop+0x40/0x90 [ 477.700311][T13125] ? clear_bhb_loop+0x40/0x90 [ 477.705081][T13125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.711026][T13125] RIP: 0033:0x7f93a899e0d9 [ 477.715485][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.735131][T13125] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.743583][T13125] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 477.751585][T13125] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 477.759593][T13125] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.767596][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.775599][T13125] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 477.783618][T13125] [ 478.049088][T13129] netlink: 'syz.1.2292': attribute type 21 has an invalid length. [ 478.395338][T13139] netlink: 'syz.2.2295': attribute type 13 has an invalid length. [ 478.413296][T13139] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2295'. [ 478.497525][T13147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.507041][T13147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.536304][T13139] netlink: 'syz.2.2295': attribute type 11 has an invalid length. [ 478.587475][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.604793][T13147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.637550][T13147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.654952][T13147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 478.749107][T13154] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2300'. [ 478.926826][T13160] netlink: 'syz.0.2302': attribute type 13 has an invalid length. [ 478.947868][T13160] syz_tun: refused to change device tx_queue_len [ 478.963408][T13160] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 479.602427][T13179] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 479.623431][T13179] netlink: 'syz.3.2308': attribute type 3 has an invalid length. [ 479.894749][ T5788] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 479.962639][T13189] netlink: 'syz.1.2310': attribute type 13 has an invalid length. [ 480.021515][T13189] netlink: 'syz.1.2310': attribute type 11 has an invalid length. [ 480.067977][T13196] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 481.103488][T13229] netlink: 'syz.1.2324': attribute type 10 has an invalid length. [ 484.475328][T13249] __nla_validate_parse: 7 callbacks suppressed [ 484.475345][T13249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2330'. [ 484.747747][T13251] netlink: 'syz.0.2331': attribute type 11 has an invalid length. [ 485.558189][ T5788] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 485.569110][T13276] sit0: left promiscuous mode [ 486.389380][T13302] netlink: 'syz.2.2346': attribute type 13 has an invalid length. [ 486.405267][T13302] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2346'. [ 486.416704][T13302] FAULT_INJECTION: forcing a failure. [ 486.416704][T13302] name failslab, interval 1, probability 0, space 0, times 0 [ 486.439081][T13302] CPU: 0 PID: 13302 Comm: syz.2.2346 Not tainted syzkaller #0 [ 486.446632][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.456745][T13302] Call Trace: [ 486.460091][T13302] [ 486.463066][T13302] dump_stack_lvl+0x18c/0x250 [ 486.467804][T13302] ? show_regs_print_info+0x20/0x20 [ 486.473063][T13302] ? load_image+0x420/0x420 [ 486.477628][T13302] ? __might_sleep+0xe0/0xe0 [ 486.482271][T13302] ? __lock_acquire+0x7d80/0x7d80 [ 486.487353][T13302] should_fail_ex+0x394/0x4c0 [ 486.492087][T13302] should_failslab+0x9/0x20 [ 486.496646][T13302] slab_pre_alloc_hook+0x59/0x300 [ 486.501731][T13302] ? trace_event_raw_event_lock+0x240/0x240 [ 486.507678][T13302] ? netdevice_event+0x3ab/0x890 [ 486.512796][T13302] __kmem_cache_alloc_node+0x53/0x250 [ 486.518247][T13302] ? netdevice_event+0x3ab/0x890 [ 486.523239][T13302] kmalloc_trace+0x2a/0xe0 [ 486.527710][T13302] netdevice_event+0x3ab/0x890 [ 486.532557][T13302] ? __up_read+0x2b8/0x6b0 [ 486.537027][T13302] ? inet6addr_event+0xd0/0xd0 [ 486.541852][T13302] ? netdevice_event+0x890/0x890 [ 486.546846][T13302] ? add_default_gids+0xe0/0xe0 [ 486.551752][T13302] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 486.558050][T13302] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 486.563740][T13302] ? netdev_upper_walk+0x210/0x210 [ 486.568904][T13302] ? add_default_gids+0xe0/0xe0 [ 486.573822][T13302] notifier_call_chain+0x18f/0x380 [ 486.579004][T13302] dev_set_mac_address+0x38e/0x4d0 [ 486.584170][T13302] ? dev_pre_changeaddr_notify+0x120/0x120 [ 486.590020][T13302] ? down_write+0x16e/0x200 [ 486.594592][T13302] ? rcu_is_watching+0x15/0xb0 [ 486.599413][T13302] dev_set_mac_address_user+0x31/0x50 [ 486.604836][T13302] do_setlink+0x78f/0x3f40 [ 486.609309][T13302] ? load_image+0x420/0x420 [ 486.613869][T13302] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 486.620068][T13302] ? stack_trace_save+0xaa/0x100 [ 486.625090][T13302] ? rcu_is_watching+0x15/0xb0 [ 486.629906][T13302] ? do_trace_netlink_extack+0x7e/0x1a0 [ 486.635561][T13302] ? __nla_validate+0x50/0x50 [ 486.640332][T13302] ? validate_linkmsg+0x719/0x910 [ 486.645417][T13302] rtnl_newlink+0x1848/0x2170 [ 486.650157][T13302] ? rtnl_newlink+0x4c1/0x2170 [ 486.654984][T13302] ? rtnl_setlink+0x4e0/0x4e0 [ 486.659709][T13302] ? trace_raw_output_contention_end+0xd0/0xd0 [ 486.665924][T13302] ? rcu_is_watching+0x15/0xb0 [ 486.670782][T13302] ? trace_contention_end+0x39/0xe0 [ 486.676020][T13302] ? __mutex_lock+0x30d/0xc80 [ 486.680771][T13302] ? rtnl_setlink+0x4e0/0x4e0 [ 486.685479][T13302] rtnetlink_rcv_msg+0x843/0xf90 [ 486.690460][T13302] ? rtnetlink_rcv_msg+0x220/0xf90 [ 486.695615][T13302] ? rtnetlink_bind+0x80/0x80 [ 486.700320][T13302] ? mark_lock+0x94/0x320 [ 486.704687][T13302] ? __lock_acquire+0x1262/0x7d80 [ 486.709752][T13302] ? mark_lock+0x94/0x320 [ 486.714122][T13302] ? mark_lock+0x94/0x320 [ 486.718487][T13302] ? __lock_acquire+0x1262/0x7d80 [ 486.723606][T13302] ? verify_lock_unused+0x140/0x140 [ 486.728833][T13302] ? perf_trace_lock+0xfc/0x3b0 [ 486.733715][T13302] ? verify_lock_unused+0x140/0x140 [ 486.738950][T13302] ? perf_trace_lock+0xfc/0x3b0 [ 486.743833][T13302] ? perf_trace_lock+0xfc/0x3b0 [ 486.748723][T13302] netlink_rcv_skb+0x235/0x4c0 [ 486.753523][T13302] ? rtnetlink_bind+0x80/0x80 [ 486.758246][T13302] ? netlink_ack+0x1160/0x1160 [ 486.763058][T13302] ? __lock_acquire+0x7d80/0x7d80 [ 486.768113][T13302] ? net_generic+0x1e/0x240 [ 486.772668][T13302] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.777902][T13302] netlink_unicast+0x7b1/0x930 [ 486.782718][T13302] netlink_sendmsg+0x8d0/0xbf0 [ 486.787532][T13302] ? netlink_getsockopt+0x590/0x590 [ 486.792769][T13302] ? apparmor_socket_sendmsg+0x8e/0x330 [ 486.798359][T13302] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.803695][T13302] ? security_socket_sendmsg+0x80/0xa0 [ 486.809178][T13302] ? netlink_getsockopt+0x590/0x590 [ 486.814410][T13302] ____sys_sendmsg+0x61b/0x980 [ 486.819220][T13302] ? __asan_memset+0x22/0x40 [ 486.823848][T13302] ? __sys_sendmsg_sock+0x30/0x30 [ 486.828902][T13302] ? __import_iovec+0x5f2/0x850 [ 486.833799][T13302] ? import_iovec+0x73/0xa0 [ 486.838342][T13302] ___sys_sendmsg+0x2a6/0x360 [ 486.843063][T13302] ? __sys_sendmsg+0x2b0/0x2b0 [ 486.847891][T13302] ? __lock_acquire+0x7d80/0x7d80 [ 486.852987][T13302] __se_sys_sendmsg+0x1d0/0x2c0 [ 486.857871][T13302] ? __x64_sys_sendmsg+0x80/0x80 [ 486.862855][T13302] ? lockdep_hardirqs_on+0x98/0x150 [ 486.868121][T13302] do_syscall_64+0x55/0xb0 [ 486.872573][T13302] ? clear_bhb_loop+0x40/0x90 [ 486.877300][T13302] ? clear_bhb_loop+0x40/0x90 [ 486.882019][T13302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.887940][T13302] RIP: 0033:0x7f148ad9e0d9 [ 486.892391][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.912036][T13302] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.920491][T13302] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 486.928506][T13302] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 486.936507][T13302] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 486.944515][T13302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.952518][T13302] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 486.960546][T13302] [ 487.056787][T13302] syz_tun: refused to change device tx_queue_len [ 487.064638][T13302] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 487.756011][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2349'. [ 488.241283][T13332] netlink: 'syz.3.2354': attribute type 2 has an invalid length. [ 488.264682][T13332] netlink: 'syz.3.2354': attribute type 4 has an invalid length. [ 488.303071][T13332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2354'. [ 488.806336][T13341] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2359'. [ 488.906622][T13341] hsr_slave_0: left promiscuous mode [ 489.009877][T13339] netlink: 119264 bytes leftover after parsing attributes in process `syz.2.2357'. [ 489.115950][T13354] sit0: left promiscuous mode [ 489.185118][ T5788] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 489.775197][T13381] pim6reg1: entered promiscuous mode [ 489.780571][T13381] pim6reg1: entered allmulticast mode [ 490.224193][T13388] sit0: left promiscuous mode [ 490.471336][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.480887][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.489132][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.499087][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.512025][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 490.523225][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.651844][T13390] netlink: 119264 bytes leftover after parsing attributes in process `syz.3.2371'. [ 490.889091][T13391] chnl_net:caif_netlink_parms(): no params data found [ 491.027918][T13400] netlink: 'syz.0.2373': attribute type 13 has an invalid length. [ 491.072656][T13400] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2373'. [ 491.205912][T13400] erspan0: refused to change device tx_queue_len [ 491.364567][T13405] netlink: 279 bytes leftover after parsing attributes in process `syz.3.2374'. [ 491.449574][ T7267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.562668][ T7267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.603649][T13391] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.611015][T13391] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.618512][T13391] bridge_slave_0: entered allmulticast mode [ 491.627729][T13391] bridge_slave_0: entered promiscuous mode [ 491.665009][ T7267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.682365][T13391] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.703185][T13391] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.710621][T13391] bridge_slave_1: entered allmulticast mode [ 491.729445][T13391] bridge_slave_1: entered promiscuous mode [ 491.790752][ T7267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.840532][T13391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.877918][T13391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.937368][T13391] team0: Port device team_slave_0 added [ 491.962032][T13391] team0: Port device team_slave_1 added [ 492.019812][T13391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.029287][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.067220][T13391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.114570][T13391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.130239][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.159355][T13391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.182501][ T5788] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 492.220953][T13426] netlink: 'syz.2.2379': attribute type 13 has an invalid length. [ 492.231648][T13426] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2379'. [ 492.243420][T13426] syz_tun: refused to change device tx_queue_len [ 492.249962][T13426] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 492.498809][T13391] hsr_slave_0: entered promiscuous mode [ 492.623967][ T5788] Bluetooth: hci4: command tx timeout [ 493.160217][T13437] netlink: 119264 bytes leftover after parsing attributes in process `syz.2.2381'. [ 493.313380][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.491216][T13391] hsr_slave_1: entered promiscuous mode [ 493.715297][T13457] netlink: 'syz.3.2385': attribute type 2 has an invalid length. [ 493.723290][T13457] netlink: 'syz.3.2385': attribute type 3 has an invalid length. [ 493.731064][T13457] netlink: 'syz.3.2385': attribute type 4 has an invalid length. [ 493.745719][T13457] netlink: 144160 bytes leftover after parsing attributes in process `syz.3.2385'. [ 493.789618][T13455] netlink: 'syz.0.2384': attribute type 13 has an invalid length. [ 493.813067][T13455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2384'. [ 493.829102][T13455] FAULT_INJECTION: forcing a failure. [ 493.829102][T13455] name failslab, interval 1, probability 0, space 0, times 0 [ 493.878229][T13455] CPU: 0 PID: 13455 Comm: syz.0.2384 Not tainted syzkaller #0 [ 493.885780][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.895882][T13455] Call Trace: [ 493.899206][T13455] [ 493.902177][T13455] dump_stack_lvl+0x18c/0x250 [ 493.906915][T13455] ? show_regs_print_info+0x20/0x20 [ 493.912164][T13455] ? load_image+0x420/0x420 [ 493.916729][T13455] ? __might_sleep+0xe0/0xe0 [ 493.921559][T13455] ? __lock_acquire+0x7d80/0x7d80 [ 493.926650][T13455] should_fail_ex+0x394/0x4c0 [ 493.931392][T13455] should_failslab+0x9/0x20 [ 493.935962][T13455] slab_pre_alloc_hook+0x59/0x300 [ 493.941056][T13455] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 493.947094][T13455] ? tun_device_event+0x166/0x1020 [ 493.952315][T13455] ? tun_device_event+0x166/0x1020 [ 493.957500][T13455] __kmem_cache_alloc_node+0x53/0x250 [ 493.962931][T13455] ? tun_device_event+0x166/0x1020 [ 493.968091][T13455] __kmalloc+0xa7/0x240 [ 493.972308][T13455] tun_device_event+0x166/0x1020 [ 493.977333][T13455] ? lockdep_rtnl_is_held+0x26/0x30 [ 493.982585][T13455] notifier_call_chain+0x18f/0x380 [ 493.987764][T13455] dev_change_tx_queue_len+0x13a/0x290 [ 493.993277][T13455] ? dev_set_mtu+0x1c0/0x1c0 [ 493.997930][T13455] ? dev_change_flags+0xde/0x1a0 [ 494.002914][T13455] do_setlink+0xe55/0x3f40 [ 494.007394][T13455] ? load_image+0x420/0x420 [ 494.011961][T13455] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 494.018168][T13455] ? stack_trace_save+0xaa/0x100 [ 494.023155][T13455] ? rcu_is_watching+0x15/0xb0 [ 494.027972][T13455] ? do_trace_netlink_extack+0x7e/0x1a0 [ 494.033578][T13455] ? __nla_validate+0x50/0x50 [ 494.038319][T13455] ? validate_linkmsg+0x719/0x910 [ 494.043390][T13455] rtnl_newlink+0x1848/0x2170 [ 494.048105][T13455] ? rtnl_newlink+0x4c1/0x2170 [ 494.052909][T13455] ? rtnl_setlink+0x4e0/0x4e0 [ 494.057621][T13455] ? __rwlock_init+0x150/0x150 [ 494.062422][T13455] ? do_raw_spin_unlock+0x121/0x230 [ 494.067654][T13455] ? __mutex_lock+0x923/0xc80 [ 494.072363][T13455] ? __mutex_lock+0x4d2/0xc80 [ 494.077091][T13455] ? rtnl_setlink+0x4e0/0x4e0 [ 494.081794][T13455] rtnetlink_rcv_msg+0x843/0xf90 [ 494.086763][T13455] ? rtnetlink_rcv_msg+0x220/0xf90 [ 494.091911][T13455] ? rtnetlink_bind+0x80/0x80 [ 494.096620][T13455] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 494.102993][T13455] ? lock_chain_count+0x20/0x20 [ 494.107904][T13455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 494.113314][T13455] ? lockdep_hardirqs_on+0x98/0x150 [ 494.118565][T13455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 494.123970][T13455] ? _local_bh_enable+0xa0/0xa0 [ 494.128854][T13455] ? __dev_queue_xmit+0x275/0x3630 [ 494.134007][T13455] ? __dev_queue_xmit+0x1bc2/0x3630 [ 494.139243][T13455] ? __dev_queue_xmit+0x275/0x3630 [ 494.144403][T13455] ? ref_tracker_free+0x686/0x830 [ 494.149456][T13455] netlink_rcv_skb+0x235/0x4c0 [ 494.154247][T13455] ? rtnetlink_bind+0x80/0x80 [ 494.158953][T13455] ? netlink_ack+0x1160/0x1160 [ 494.163753][T13455] ? __lock_acquire+0x7d80/0x7d80 [ 494.168809][T13455] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.174032][T13455] netlink_unicast+0x7b1/0x930 [ 494.178840][T13455] netlink_sendmsg+0x8d0/0xbf0 [ 494.183667][T13455] ? netlink_getsockopt+0x590/0x590 [ 494.188915][T13455] ? apparmor_socket_sendmsg+0x8e/0x330 [ 494.194488][T13455] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 494.199826][T13455] ? security_socket_sendmsg+0x80/0xa0 [ 494.205311][T13455] ? netlink_getsockopt+0x590/0x590 [ 494.210625][T13455] ____sys_sendmsg+0x61b/0x980 [ 494.215451][T13455] ? __asan_memset+0x22/0x40 [ 494.220074][T13455] ? __sys_sendmsg_sock+0x30/0x30 [ 494.225122][T13455] ? __import_iovec+0x5f2/0x850 [ 494.230014][T13455] ? import_iovec+0x73/0xa0 [ 494.234549][T13455] ___sys_sendmsg+0x2a6/0x360 [ 494.239251][T13455] ? get_pid_task+0x20/0x1e0 [ 494.243896][T13455] ? __sys_sendmsg+0x2b0/0x2b0 [ 494.248702][T13455] ? __lock_acquire+0x7d80/0x7d80 [ 494.253774][T13455] __se_sys_sendmsg+0x1d0/0x2c0 [ 494.258654][T13455] ? __x64_sys_sendmsg+0x80/0x80 [ 494.263632][T13455] ? lockdep_hardirqs_on+0x98/0x150 [ 494.268866][T13455] do_syscall_64+0x55/0xb0 [ 494.273307][T13455] ? clear_bhb_loop+0x40/0x90 [ 494.278013][T13455] ? clear_bhb_loop+0x40/0x90 [ 494.282713][T13455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.288636][T13455] RIP: 0033:0x7ff41fb9e0d9 [ 494.293080][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.312710][T13455] RSP: 002b:00007ff420982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.321149][T13455] RAX: ffffffffffffffda RBX: 00007ff41fe25fa0 RCX: 00007ff41fb9e0d9 [ 494.329146][T13455] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 494.337145][T13455] RBP: 00007ff420982090 R08: 0000000000000000 R09: 0000000000000000 [ 494.345136][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.353126][T13455] R13: 00007ff41fe26038 R14: 00007ff41fe25fa0 R15: 00007ffcb010dda8 [ 494.361133][T13455] [ 494.371587][T13455] syz_tun: refused to change device tx_queue_len [ 494.408388][T13455] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 494.653145][ T5788] Bluetooth: hci4: command tx timeout [ 494.829656][T13471] netlink: 'syz.3.2391': attribute type 13 has an invalid length. [ 494.843604][T13471] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2391'. [ 494.859784][T13471] syz_tun: refused to change device tx_queue_len [ 494.868915][T13471] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 495.188618][T13484] netlink: 'syz.3.2393': attribute type 10 has an invalid length. [ 495.336260][T13490] netlink: 'syz.3.2393': attribute type 2 has an invalid length. [ 495.375226][T13484] team0: Device nlmon0 is of different type [ 495.404230][T13490] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2393'. [ 495.525035][T13486] netlink: 119264 bytes leftover after parsing attributes in process `syz.2.2394'. [ 495.778438][T13498] netlink: 'syz.3.2395': attribute type 13 has an invalid length. [ 495.803369][T13498] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2395'. [ 495.824085][T13498] FAULT_INJECTION: forcing a failure. [ 495.824085][T13498] name failslab, interval 1, probability 0, space 0, times 0 [ 495.840136][T13498] CPU: 0 PID: 13498 Comm: syz.3.2395 Not tainted syzkaller #0 [ 495.847681][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.857786][T13498] Call Trace: [ 495.861111][T13498] [ 495.864093][T13498] dump_stack_lvl+0x18c/0x250 [ 495.868828][T13498] ? show_regs_print_info+0x20/0x20 [ 495.874076][T13498] ? load_image+0x420/0x420 [ 495.878642][T13498] ? __might_sleep+0xe0/0xe0 [ 495.883287][T13498] ? __lock_acquire+0x7d80/0x7d80 [ 495.888369][T13498] should_fail_ex+0x394/0x4c0 [ 495.893112][T13498] should_failslab+0x9/0x20 [ 495.897667][T13498] slab_pre_alloc_hook+0x59/0x300 [ 495.902799][T13498] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 495.908835][T13498] ? tun_device_event+0x166/0x1020 [ 495.914004][T13498] ? tun_device_event+0x166/0x1020 [ 495.919165][T13498] __kmem_cache_alloc_node+0x53/0x250 [ 495.924613][T13498] ? tun_device_event+0x166/0x1020 [ 495.929777][T13498] __kmalloc+0xa7/0x240 [ 495.933999][T13498] tun_device_event+0x166/0x1020 [ 495.939004][T13498] ? lockdep_rtnl_is_held+0x26/0x30 [ 495.944263][T13498] notifier_call_chain+0x18f/0x380 [ 495.949524][T13498] dev_change_tx_queue_len+0x13a/0x290 [ 495.955040][T13498] ? dev_set_mtu+0x1c0/0x1c0 [ 495.959682][T13498] ? dev_change_flags+0xde/0x1a0 [ 495.964678][T13498] do_setlink+0xe55/0x3f40 [ 495.969162][T13498] ? load_image+0x420/0x420 [ 495.973736][T13498] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 495.979947][T13498] ? stack_trace_save+0xaa/0x100 [ 495.984943][T13498] ? rcu_is_watching+0x15/0xb0 [ 495.989770][T13498] ? do_trace_netlink_extack+0x7e/0x1a0 [ 495.995407][T13498] ? __nla_validate+0x50/0x50 [ 496.000184][T13498] ? validate_linkmsg+0x719/0x910 [ 496.005391][T13498] rtnl_newlink+0x1848/0x2170 [ 496.010144][T13498] ? rtnl_newlink+0x4c1/0x2170 [ 496.015009][T13498] ? rtnl_setlink+0x4e0/0x4e0 [ 496.019745][T13498] ? __rwlock_init+0x150/0x150 [ 496.024659][T13498] ? do_raw_spin_unlock+0x121/0x230 [ 496.029924][T13498] ? __mutex_lock+0x923/0xc80 [ 496.034659][T13498] ? __mutex_lock+0x4d2/0xc80 [ 496.039419][T13498] ? rtnl_setlink+0x4e0/0x4e0 [ 496.044153][T13498] rtnetlink_rcv_msg+0x843/0xf90 [ 496.049145][T13498] ? rtnetlink_rcv_msg+0x220/0xf90 [ 496.054321][T13498] ? rtnetlink_bind+0x80/0x80 [ 496.059051][T13498] ? mark_lock+0x94/0x320 [ 496.063434][T13498] ? __lock_acquire+0x1262/0x7d80 [ 496.068519][T13498] ? mark_lock+0x94/0x320 [ 496.072908][T13498] ? mark_lock+0x94/0x320 [ 496.077295][T13498] ? __lock_acquire+0x1262/0x7d80 [ 496.082386][T13498] ? kmalloc_reserve+0x95/0x240 [ 496.087292][T13498] ? verify_lock_unused+0x140/0x140 [ 496.092545][T13498] ? verify_lock_unused+0x140/0x140 [ 496.097821][T13498] netlink_rcv_skb+0x235/0x4c0 [ 496.102638][T13498] ? rtnetlink_bind+0x80/0x80 [ 496.107397][T13498] ? netlink_ack+0x1160/0x1160 [ 496.112239][T13498] ? __lock_acquire+0x7d80/0x7d80 [ 496.117316][T13498] ? net_generic+0x1e/0x240 [ 496.121884][T13498] ? netlink_deliver_tap+0x2e/0x1b0 [ 496.127142][T13498] netlink_unicast+0x7b1/0x930 [ 496.131987][T13498] netlink_sendmsg+0x8d0/0xbf0 [ 496.136810][T13498] ? netlink_getsockopt+0x590/0x590 [ 496.142060][T13498] ? apparmor_socket_sendmsg+0x8e/0x330 [ 496.147697][T13498] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.153043][T13498] ? security_socket_sendmsg+0x80/0xa0 [ 496.158549][T13498] ? netlink_getsockopt+0x590/0x590 [ 496.163807][T13498] ____sys_sendmsg+0x61b/0x980 [ 496.168640][T13498] ? __asan_memset+0x22/0x40 [ 496.173306][T13498] ? __sys_sendmsg_sock+0x30/0x30 [ 496.178383][T13498] ? __import_iovec+0x5f2/0x850 [ 496.183311][T13498] ? import_iovec+0x73/0xa0 [ 496.187881][T13498] ___sys_sendmsg+0x2a6/0x360 [ 496.192620][T13498] ? get_pid_task+0x20/0x1e0 [ 496.197370][T13498] ? __sys_sendmsg+0x2b0/0x2b0 [ 496.202222][T13498] ? __lock_acquire+0x7d80/0x7d80 [ 496.207332][T13498] __se_sys_sendmsg+0x1d0/0x2c0 [ 496.212247][T13498] ? __x64_sys_sendmsg+0x80/0x80 [ 496.217290][T13498] ? lockdep_hardirqs_on+0x98/0x150 [ 496.222569][T13498] do_syscall_64+0x55/0xb0 [ 496.227042][T13498] ? clear_bhb_loop+0x40/0x90 [ 496.231771][T13498] ? clear_bhb_loop+0x40/0x90 [ 496.236506][T13498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.242455][T13498] RIP: 0033:0x7f93a899e0d9 [ 496.246924][T13498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.266585][T13498] RSP: 002b:00007f93a6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.275062][T13498] RAX: ffffffffffffffda RBX: 00007f93a8c25fa0 RCX: 00007f93a899e0d9 [ 496.283263][T13498] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 496.292085][T13498] RBP: 00007f93a6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.300662][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.308694][T13498] R13: 00007f93a8c26038 R14: 00007f93a8c25fa0 R15: 00007ffe488c98a8 [ 496.316744][T13498] [ 496.326881][T13498] syz_tun: refused to change device tx_queue_len [ 496.339957][T13498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 496.358534][T13504] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2397'. [ 496.372822][T13504] team0: Port device team_slave_0 removed [ 496.393600][T13504] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 496.733361][ T5788] Bluetooth: hci4: command tx timeout [ 496.801451][T13514] netlink: 'syz.3.2399': attribute type 10 has an invalid length. [ 496.935459][T13391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.984114][T13516] netlink: 'syz.2.2401': attribute type 13 has an invalid length. [ 496.992059][T13516] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2401'. [ 497.018715][T13516] syz_tun: refused to change device tx_queue_len [ 497.033475][T13516] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 497.183200][T13391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.284024][T13391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.063006][T13391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.463778][ T7267] veth0_vlan: left promiscuous mode [ 498.813131][ T5788] Bluetooth: hci4: command tx timeout [ 499.104079][T13562] netlink: 'syz.0.2407': attribute type 12 has an invalid length. [ 499.112237][T13562] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2407'. [ 499.524612][T13560] netlink: 'syz.2.2406': attribute type 13 has an invalid length. [ 499.532553][T13560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2406'. [ 499.542713][T13560] FAULT_INJECTION: forcing a failure. [ 499.542713][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 499.555660][T13560] CPU: 0 PID: 13560 Comm: syz.2.2406 Not tainted syzkaller #0 [ 499.563171][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.573278][T13560] Call Trace: [ 499.576587][T13560] [ 499.579559][T13560] dump_stack_lvl+0x18c/0x250 [ 499.584275][T13560] ? show_regs_print_info+0x20/0x20 [ 499.589499][T13560] ? load_image+0x420/0x420 [ 499.594039][T13560] ? __might_sleep+0xe0/0xe0 [ 499.598657][T13560] ? __lock_acquire+0x7d80/0x7d80 [ 499.603709][T13560] should_fail_ex+0x394/0x4c0 [ 499.608421][T13560] should_failslab+0x9/0x20 [ 499.612978][T13560] slab_pre_alloc_hook+0x59/0x300 [ 499.618050][T13560] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 499.624057][T13560] ? tun_device_event+0x166/0x1020 [ 499.629197][T13560] ? tun_device_event+0x166/0x1020 [ 499.634335][T13560] __kmem_cache_alloc_node+0x53/0x250 [ 499.639743][T13560] ? tun_device_event+0x166/0x1020 [ 499.644878][T13560] __kmalloc+0xa7/0x240 [ 499.649065][T13560] tun_device_event+0x166/0x1020 [ 499.654040][T13560] ? lockdep_rtnl_is_held+0x26/0x30 [ 499.659266][T13560] notifier_call_chain+0x18f/0x380 [ 499.664413][T13560] dev_change_tx_queue_len+0x13a/0x290 [ 499.669895][T13560] ? dev_set_mtu+0x1c0/0x1c0 [ 499.674512][T13560] ? dev_change_flags+0xde/0x1a0 [ 499.679478][T13560] do_setlink+0xe55/0x3f40 [ 499.683933][T13560] ? load_image+0x420/0x420 [ 499.688475][T13560] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 499.694653][T13560] ? stack_trace_save+0xaa/0x100 [ 499.699620][T13560] ? rcu_is_watching+0x15/0xb0 [ 499.704412][T13560] ? do_trace_netlink_extack+0x7e/0x1a0 [ 499.710041][T13560] ? __nla_validate+0x50/0x50 [ 499.714774][T13560] ? validate_linkmsg+0x719/0x910 [ 499.719836][T13560] rtnl_newlink+0x1848/0x2170 [ 499.724549][T13560] ? rtnl_newlink+0x4c1/0x2170 [ 499.729368][T13560] ? rtnl_setlink+0x4e0/0x4e0 [ 499.734095][T13560] ? __rwlock_init+0x150/0x150 [ 499.738888][T13560] ? mutex_spin_on_owner+0x7d/0x330 [ 499.744112][T13560] ? do_raw_spin_unlock+0x121/0x230 [ 499.749344][T13560] ? __mutex_lock+0x923/0xc80 [ 499.754047][T13560] ? __mutex_lock+0x4d2/0xc80 [ 499.758787][T13560] ? rtnl_setlink+0x4e0/0x4e0 [ 499.763488][T13560] rtnetlink_rcv_msg+0x843/0xf90 [ 499.768468][T13560] ? rtnetlink_rcv_msg+0x220/0xf90 [ 499.773613][T13560] ? rtnetlink_bind+0x80/0x80 [ 499.778346][T13560] ? mark_lock+0x94/0x320 [ 499.782706][T13560] ? __lock_acquire+0x1262/0x7d80 [ 499.787768][T13560] ? mark_lock+0x94/0x320 [ 499.792129][T13560] ? mark_lock+0x94/0x320 [ 499.796491][T13560] ? __lock_acquire+0x1262/0x7d80 [ 499.801554][T13560] ? kmalloc_reserve+0x95/0x240 [ 499.806428][T13560] ? verify_lock_unused+0x140/0x140 [ 499.811654][T13560] ? verify_lock_unused+0x140/0x140 [ 499.816893][T13560] netlink_rcv_skb+0x235/0x4c0 [ 499.821681][T13560] ? rtnetlink_bind+0x80/0x80 [ 499.826389][T13560] ? netlink_ack+0x1160/0x1160 [ 499.831189][T13560] ? __lock_acquire+0x7d80/0x7d80 [ 499.836241][T13560] ? net_generic+0x1e/0x240 [ 499.840787][T13560] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.846017][T13560] netlink_unicast+0x7b1/0x930 [ 499.850819][T13560] netlink_sendmsg+0x8d0/0xbf0 [ 499.855611][T13560] ? netlink_getsockopt+0x590/0x590 [ 499.860838][T13560] ? apparmor_socket_sendmsg+0x8e/0x330 [ 499.866409][T13560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 499.871731][T13560] ? security_socket_sendmsg+0x80/0xa0 [ 499.877221][T13560] ? netlink_getsockopt+0x590/0x590 [ 499.882442][T13560] ____sys_sendmsg+0x61b/0x980 [ 499.887239][T13560] ? __asan_memset+0x22/0x40 [ 499.891860][T13560] ? __sys_sendmsg_sock+0x30/0x30 [ 499.896915][T13560] ? __import_iovec+0x5f2/0x850 [ 499.901810][T13560] ? import_iovec+0x73/0xa0 [ 499.906348][T13560] ___sys_sendmsg+0x2a6/0x360 [ 499.911052][T13560] ? get_pid_task+0x20/0x1e0 [ 499.915672][T13560] ? __sys_sendmsg+0x2b0/0x2b0 [ 499.920477][T13560] ? __lock_acquire+0x7d80/0x7d80 [ 499.925549][T13560] __se_sys_sendmsg+0x1d0/0x2c0 [ 499.930429][T13560] ? __x64_sys_sendmsg+0x80/0x80 [ 499.935405][T13560] ? lockdep_hardirqs_on+0x98/0x150 [ 499.940635][T13560] do_syscall_64+0x55/0xb0 [ 499.945076][T13560] ? clear_bhb_loop+0x40/0x90 [ 499.949775][T13560] ? clear_bhb_loop+0x40/0x90 [ 499.954481][T13560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.960423][T13560] RIP: 0033:0x7f148ad9e0d9 [ 499.964861][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.984489][T13560] RSP: 002b:00007f148bb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.992951][T13560] RAX: ffffffffffffffda RBX: 00007f148b025fa0 RCX: 00007f148ad9e0d9 [ 500.000985][T13560] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 500.008984][T13560] RBP: 00007f148bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 500.016980][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.024980][T13560] R13: 00007f148b026038 R14: 00007f148b025fa0 R15: 00007ffc8d38ee98 [ 500.033000][T13560] [ 500.043967][T13560] syz_tun: refused to change device tx_queue_len [ 500.050370][T13560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 500.458398][T13391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.496911][T13391] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.535005][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.542202][ T7254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.557572][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.564821][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.035579][T13391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.048145][T13599] netlink: 'syz.0.2412': attribute type 13 has an invalid length. [ 501.073005][T13599] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2412'. [ 501.096229][T13599] syz_tun: refused to change device tx_queue_len [ 501.103210][T13599] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 501.229559][T13391] veth0_vlan: entered promiscuous mode [ 501.246141][T13391] veth1_vlan: entered promiscuous mode [ 501.301285][T13391] veth0_macvtap: entered promiscuous mode [ 501.324389][T13391] veth1_macvtap: entered promiscuous mode [ 501.372155][T13606] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2415'. [ 501.388626][T13391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.442549][T13391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.476695][T13391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.498303][T13391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.524339][T13391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.545723][T13391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.624409][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.630985][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.154746][ T7269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.162654][ T7269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.291357][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.334926][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.485703][T13611] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 502.525217][T13611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2418'. [ 502.672028][T13624] netlink: 'syz.1.2421': attribute type 39 has an invalid length. [ 504.180783][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.207622][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.216493][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.235602][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.250506][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 504.260319][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.607709][T13648] chnl_net:caif_netlink_parms(): no params data found [ 504.691503][ T7269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.794311][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.801573][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.838945][T13648] bridge_slave_0: entered allmulticast mode [ 504.854784][T13648] bridge_slave_0: entered promiscuous mode [ 504.947928][ T7269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.985778][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.003222][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.018718][T13648] bridge_slave_1: entered allmulticast mode [ 505.030362][ T5788] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 505.042056][T13648] bridge_slave_1: entered promiscuous mode [ 505.117797][ T7269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.192497][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.232533][T13678] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2437'. [ 505.278606][ T7269] team0: Port device netdevsim0 removed [ 505.289419][ T7269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.319366][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.392829][T13676] netlink: 'syz.3.2436': attribute type 25 has an invalid length. [ 505.403148][T13676] netlink: 'syz.3.2436': attribute type 10 has an invalid length. [ 505.420310][T13648] team0: Port device team_slave_0 added [ 505.447836][T13648] team0: Port device team_slave_1 added [ 505.496169][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.503778][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.529971][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.543911][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.550918][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.589886][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.731058][T13648] hsr_slave_0: entered promiscuous mode [ 505.746887][T13648] hsr_slave_1: entered promiscuous mode [ 505.767427][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.783189][T13648] Cannot create hsr debugfs directory [ 505.910131][T13690] veth1_macvtap: left promiscuous mode [ 505.950658][T13690] macsec0: entered allmulticast mode [ 506.334017][ T5788] Bluetooth: hci0: command tx timeout [ 508.427217][ T5788] Bluetooth: hci0: command tx timeout [ 509.651648][T13738] netlink: 119264 bytes leftover after parsing attributes in process `syz.0.2447'. [ 510.503083][ T5788] Bluetooth: hci0: command tx timeout [ 511.256027][T13745] netlink: 'syz.1.2451': attribute type 13 has an invalid length. [ 511.273563][T13745] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2451'. [ 512.391348][T13787] netlink: 'syz.3.2458': attribute type 6 has an invalid length. [ 512.432955][T13787] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2458'. [ 512.573375][ T5788] Bluetooth: hci0: command tx timeout [ 512.974723][T13648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.000229][T13791] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2460'. [ 513.038467][T13791] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 513.123629][T13648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.184872][T13648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.413022][T13648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.912925][ T5788] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 514.113791][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.301664][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.409546][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.416800][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.478898][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.486173][ T7254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.060906][ T7269] veth0_macvtap: left promiscuous mode [ 515.930742][ T7269] team0 (unregistering): Port device team_slave_1 removed [ 515.980183][ T7269] team0 (unregistering): Port device C removed [ 516.028748][ T7269] .` (unregistering): (slave c): Releasing backup interface [ 516.113118][ T7269] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 516.588395][ T7269] .` (unregistering): Released all slaves [ 516.669553][T13861] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2472'. [ 516.681786][T13861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.891829][ T5788] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 517.268485][T13890] netlink: 'syz.1.2482': attribute type 20 has an invalid length. [ 517.410434][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.827393][T13901] ------------[ cut here ]------------ [ 517.833049][T13901] WARNING: CPU: 0 PID: 13901 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 517.843343][T13901] Modules linked in: [ 517.847289][T13901] CPU: 0 PID: 13901 Comm: syz.3.2485 Not tainted syzkaller #0 [ 517.855077][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.866118][T13901] RIP: 0010:perf_pending_task+0x357/0x480 [ 517.872128][T13901] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 517.891944][T13901] RSP: 0018:ffffc90004b3f9c8 EFLAGS: 00010293 [ 517.898398][T13901] RAX: ffffffff81b1ac27 RBX: ffff888024ce65e8 RCX: ffff88802a890000 [ 517.906474][T13901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 517.914592][T13901] RBP: ffff888024ce63a8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 517.922801][T13901] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88802a890000 [ 517.930922][T13901] R13: ffff88802e278930 R14: 0000000000000000 R15: 1ffff1100499cc75 [ 517.939685][T13901] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 517.949040][T13901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.955833][T13901] CR2: 0000000000000000 CR3: 000000005af14000 CR4: 00000000003506f0 [ 517.963902][T13901] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 517.972203][T13901] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 517.980275][T13901] Call Trace: [ 517.983639][T13901] [ 517.986624][T13901] task_work_run+0x1d4/0x260 [ 517.991287][T13901] ? task_work_cancel+0x220/0x220 [ 517.996505][T13901] do_exit+0x986/0x2530 [ 518.000742][T13901] ? put_task_struct+0xc0/0xc0 [ 518.005660][T13901] ? preempt_schedule_common+0x82/0xc0 [ 518.011190][T13901] ? preempt_schedule+0xc0/0xd0 [ 518.016279][T13901] ? schedule_preempt_disabled+0x20/0x20 [ 518.021974][T13901] do_group_exit+0x22d/0x2f0 [ 518.026744][T13901] get_signal+0x12a6/0x1390 [ 518.031316][T13901] arch_do_signal_or_restart+0xc2/0x7b0 [ 518.037020][T13901] ? get_sigframe_size+0x20/0x20 [ 518.042044][T13901] ? ksys_write+0x201/0x260 [ 518.046659][T13901] ? exit_to_user_mode_loop+0x3b/0x110 [ 518.052187][T13901] exit_to_user_mode_loop+0x70/0x110 [ 518.057593][T13901] exit_to_user_mode_prepare+0xee/0x180 [ 518.063306][T13901] syscall_exit_to_user_mode+0x1a/0x50 [ 518.068835][T13901] do_syscall_64+0x61/0xb0 [ 518.073541][T13901] ? clear_bhb_loop+0x40/0x90 [ 518.078377][T13901] ? clear_bhb_loop+0x40/0x90 [ 518.083206][T13901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.089174][T13901] RIP: 0033:0x7f93a899e0d9 [ 518.093801][T13901] Code: Unable to access opcode bytes at 0x7f93a899e0af. [ 518.101047][T13901] RSP: 002b:00007f93a6bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.109595][T13901] RAX: 0000000000000012 RBX: 00007f93a8c26090 RCX: 00007f93a899e0d9 [ 518.117664][T13901] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000e [ 518.125794][T13901] RBP: 00007f93a8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 518.130581][T13648] veth0_vlan: entered promiscuous mode [ 518.133886][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.147445][T13901] R13: 00007f93a8c26128 R14: 00007f93a8c26090 R15: 00007ffe488c98a8 [ 518.155529][T13901] [ 518.158594][T13901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.165911][T13901] CPU: 0 PID: 13901 Comm: syz.3.2485 Not tainted syzkaller #0 [ 518.173410][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.183510][T13901] Call Trace: [ 518.186829][T13901] [ 518.189808][T13901] dump_stack_lvl+0x18c/0x250 [ 518.194537][T13901] ? show_regs_print_info+0x20/0x20 [ 518.199787][T13901] ? load_image+0x420/0x420 [ 518.204364][T13901] panic+0x2ca/0x720 [ 518.208318][T13901] ? bpf_jit_dump+0xd0/0xd0 [ 518.212890][T13901] __warn+0x2e0/0x470 [ 518.216920][T13901] ? perf_pending_task+0x357/0x480 [ 518.222085][T13901] ? perf_pending_task+0x357/0x480 [ 518.227250][T13901] report_bug+0x2be/0x4f0 [ 518.231611][T13901] ? perf_pending_task+0x357/0x480 [ 518.236756][T13901] ? perf_pending_task+0x357/0x480 [ 518.241935][T13901] ? perf_pending_task+0x359/0x480 [ 518.247077][T13901] handle_bug+0xcf/0x120 [ 518.251349][T13901] exc_invalid_op+0x1a/0x50 [ 518.255875][T13901] asm_exc_invalid_op+0x1a/0x20 [ 518.260745][T13901] RIP: 0010:perf_pending_task+0x357/0x480 [ 518.266512][T13901] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 518.286147][T13901] RSP: 0018:ffffc90004b3f9c8 EFLAGS: 00010293 [ 518.292243][T13901] RAX: ffffffff81b1ac27 RBX: ffff888024ce65e8 RCX: ffff88802a890000 [ 518.300236][T13901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 518.308226][T13901] RBP: ffff888024ce63a8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 518.316231][T13901] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88802a890000 [ 518.324233][T13901] R13: ffff88802e278930 R14: 0000000000000000 R15: 1ffff1100499cc75 [ 518.332264][T13901] ? perf_pending_task+0x357/0x480 [ 518.337423][T13901] ? perf_pending_task+0x357/0x480 [ 518.342575][T13901] task_work_run+0x1d4/0x260 [ 518.347199][T13901] ? task_work_cancel+0x220/0x220 [ 518.352258][T13901] do_exit+0x986/0x2530 [ 518.356481][T13901] ? put_task_struct+0xc0/0xc0 [ 518.361277][T13901] ? preempt_schedule_common+0x82/0xc0 [ 518.366765][T13901] ? preempt_schedule+0xc0/0xd0 [ 518.371640][T13901] ? schedule_preempt_disabled+0x20/0x20 [ 518.377310][T13901] do_group_exit+0x22d/0x2f0 [ 518.381937][T13901] get_signal+0x12a6/0x1390 [ 518.386478][T13901] arch_do_signal_or_restart+0xc2/0x7b0 [ 518.392060][T13901] ? get_sigframe_size+0x20/0x20 [ 518.397062][T13901] ? ksys_write+0x201/0x260 [ 518.401597][T13901] ? exit_to_user_mode_loop+0x3b/0x110 [ 518.407090][T13901] exit_to_user_mode_loop+0x70/0x110 [ 518.412406][T13901] exit_to_user_mode_prepare+0xee/0x180 [ 518.417979][T13901] syscall_exit_to_user_mode+0x1a/0x50 [ 518.423469][T13901] do_syscall_64+0x61/0xb0 [ 518.427906][T13901] ? clear_bhb_loop+0x40/0x90 [ 518.432602][T13901] ? clear_bhb_loop+0x40/0x90 [ 518.437308][T13901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.443222][T13901] RIP: 0033:0x7f93a899e0d9 [ 518.447658][T13901] Code: Unable to access opcode bytes at 0x7f93a899e0af. [ 518.454690][T13901] RSP: 002b:00007f93a6bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.463125][T13901] RAX: 0000000000000012 RBX: 00007f93a8c26090 RCX: 00007f93a899e0d9 [ 518.471118][T13901] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000e [ 518.479104][T13901] RBP: 00007f93a8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 518.487099][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.495089][T13901] R13: 00007f93a8c26128 R14: 00007f93a8c26090 R15: 00007ffe488c98a8 [ 518.503106][T13901] [ 518.506734][T13901] Kernel Offset: disabled [ 518.511067][T13901] Rebooting in 86400 seconds..