last executing test programs: 11m31.117159039s ago: executing program 3 (id=34): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000711015"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000000000006111000000950000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/155, 0x9b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="ad8a1000f0ff05ff85100000030000006c32080001000000df84180010000000183f00000400000000b9f9dc49ca6cb7f500000000000000200330003ed7f4a2a917e5a3b7f8db90b7852e0000feffffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 11m29.522795787s ago: executing program 3 (id=46): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x38}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 11m28.49197066s ago: executing program 3 (id=57): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2020, 0x3, 0x0, 0x6, 0xf73a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x1040a8, 0xffffffffffffffff, 0x7ff, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0040002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 11m27.541076167s ago: executing program 3 (id=62): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 11m26.992398882s ago: executing program 3 (id=66): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd74) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfc5f}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6b, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[], &(0x7f0000000700)=""/107, 0x2b, 0x6b, 0x1}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x8, 0x3, 0x6, 0x1, r5, 0x9, '\x00', r6, r7, 0x4, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) openat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x1c, &(0x7f0000000c80)=@raw=[@ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0xe9, 0x1, 0x2, 0x1, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xca03}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 11m25.531499949s ago: executing program 3 (id=74): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x92301, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x141, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc6}, r2, 0x4, 0xffffffffffffffff, 0x7d52ccb4e02ee533) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x81, 0x2, 0x0, 0x5, 0x0, 0x1d, 0x1002, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb4dd, 0x0, @perf_bp={&(0x7f0000000300), 0x6}, 0x1004, 0x2, 0x1ff, 0x2, 0x295, 0x67a, 0x800, 0x0, 0xfffffffc, 0x0, 0x400}, r2, 0xf, 0xffffffffffffffff, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000550ffe3300040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034009410000", 0x1c}], 0x1}, 0x0) syz_clone(0x52800, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x31) 11m10.37873001s ago: executing program 32 (id=74): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x92301, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x141, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc6}, r2, 0x4, 0xffffffffffffffff, 0x7d52ccb4e02ee533) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x81, 0x2, 0x0, 0x5, 0x0, 0x1d, 0x1002, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb4dd, 0x0, @perf_bp={&(0x7f0000000300), 0x6}, 0x1004, 0x2, 0x1ff, 0x2, 0x295, 0x67a, 0x800, 0x0, 0xfffffffc, 0x0, 0x400}, r2, 0xf, 0xffffffffffffffff, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000550ffe3300040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034009410000", 0x1c}], 0x1}, 0x0) syz_clone(0x52800, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x31) 21.188249504s ago: executing program 1 (id=6080): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004880) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 20.720400761s ago: executing program 1 (id=6082): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004037e000a7401", 0x1b}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8344, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 19.49623189s ago: executing program 1 (id=6086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffff28}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080)) (fail_nth: 4) 15.703090615s ago: executing program 1 (id=6091): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x7b, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000580)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x4, 0x0, 0x7, 0x8, 0x4, 0x10, 0x1}], &(0x7f00000005c0)='GPL\x00', 0x684, 0xaa, &(0x7f0000000700)=""/170, 0x41100, 0x0, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xf, 0x7fffffff, 0x7}, 0x10, r4, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x0, 0x10, 0x401}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0xc0f0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b625b5a806f8c6394f90724", 0x12}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) 14.612441353s ago: executing program 1 (id=6096): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x4, 0x6, 0x7c0, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0xe7, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0x9, 0x7}, 0x100410, 0xb3d, 0x6, 0x0, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c0019e3857f0001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345ca215542f41ddf82f618438a34f90186cee8441e23", 0x48}, {0x0}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 13.453248406s ago: executing program 1 (id=6100): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xd9, 0xc, 0x0, 0xffffffffffffffff, 0x80008, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000001b703000000000000850000009b00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000009e00000000000000df0a1000fcffffff185600000f00000000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002600070002000600040024eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953000000", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.408055463s ago: executing program 0 (id=6121): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) socketpair(0x28, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x65, 0xe, 0x0, 0x0, 0x0, 0x2000, 0xbf281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x8000000000009, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000dd0a00000000000073013e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r2 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) 7.592020809s ago: executing program 0 (id=6125): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xd9, 0xc, 0x0, 0xffffffffffffffff, 0x80008, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000001b703000000000000850000009b00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000009e00000000000000df0a1000fcffffff185600000f00000000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002600070002000600040024eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953000000", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.932034273s ago: executing program 0 (id=6132): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe50, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd6589d1603a3b92caf5835bdc3b9f4245eaac8cc0f16391ad4d62c5d1d46e11f762c56f5f7951a70cf0cc8a7308931316a9557e7e43f6fba62686d63f383a2359570943959525ddb0b8de158d7106cb28907404b55a0c9250e6e9c9245d83d9136a94bdc949dad7b86c797bdf2a0aaead851ab12c89dfbfb4ac6588081f61175d86ef4346c55543554bf2ed231ba5ffade30282") r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000018000000000000010000085000000230000009500f2ffffff0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c0c1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.200770731s ago: executing program 4 (id=6134): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe50, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd6589d1603a3b92caf5835bdc3b9f4245eaac8cc0f16391ad4d62c5d1d46e11f762c56f5f7951a70cf0cc8a7308931316a9557e7e43f6fba62686d63f383a2359570943959525ddb0b8de158d7106cb28907404b55a0c9250e6e9c9245d83d9136a94bdc949dad7b86c797bdf2a0aaead851ab12c89dfbfb4ac6588081f61175d86ef4346c55543554bf2ed231ba5ffade30282") perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000018000000000000010000085000000230000009500f2ffffff0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4.905632215s ago: executing program 5 (id=6136): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (fail_nth: 4) 4.541859964s ago: executing program 4 (id=6138): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff0051f60a84c9f4d4938037e786a6ff000000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004037e000a7401", 0x1b}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8344, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 3.992006069s ago: executing program 5 (id=6140): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES16=r0, @ANYRESOCT=r3], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x13, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8b}, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x13, &(0x7f0000000380)=""/19, 0x81e00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x4, &(0x7f00000005c0)=[r2, r2, 0xffffffffffffffff, r5, r3, r6], &(0x7f0000000600)=[{0x5, 0x1, 0x4, 0x1}, {0x4, 0x3, 0x8, 0x8}, {0x5, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x27, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_type(r8, &(0x7f0000000180), 0x9) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 3.542794805s ago: executing program 0 (id=6142): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000}, 0x40000000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6000000054c80cdb917f5687aab998b8", 0x10}, {&(0x7f0000000080)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e6", 0x50}], 0x2}, 0x2400c000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x40, 0x2, 0x9, 0x0, 0x490}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c0357ee}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0xd7, &(0x7f0000000740)=""/215, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000840)=[{0x2, 0x1, 0x1, 0x6}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x2, 0x6, 0xf}, {0x0, 0x4, 0x5, 0x5}, {0x4, 0x2, 0x6, 0xb}, {0x3, 0x2, 0xd, 0x1}, {0x0, 0x1, 0xa}, {0x5, 0x1, 0x6, 0xc}, {0x2, 0x4, 0x9, 0xa}]}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000900)={r7, 0x0, 0x1a, 0x0, &(0x7f0000000640)="4c9f528e8959c215521b097a04fe365cf918b879704f2206e2eb", 0x0, 0x1, 0x0, 0x1000, 0x0, &(0x7f00000017c0)="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", 0x0, 0x2, 0x0, 0x3ff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.465437791s ago: executing program 2 (id=6143): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f8480b0000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40040) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x110180, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x3aec}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x800) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 3.328250612s ago: executing program 4 (id=6144): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010160) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x110e22fff7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(r4) recvmsg$unix(r1, 0x0, 0x2) socket$kcm(0x2, 0x1000000000000005, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (fail_nth: 4) 3.282904616s ago: executing program 2 (id=6145): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r0, 0x9) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x22, 0x2, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x8004b706, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYBLOB="0000000000000000b704"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x39, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3.10536967s ago: executing program 5 (id=6146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xd9, 0xc, 0x0, 0xffffffffffffffff, 0x80008, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES8], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'tunl0\x00', @remote}) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000900)=@o_path={&(0x7f0000000780)='./file0\x00', r1, 0x4000, r3}, 0x18) close(r5) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xe, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r9, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000001b703000000000000850000009b00000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000009e00000000000000df0a1000fcffffff185600000f0000000000009500"/56], &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, r8, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r8, 0xffffffffffffffff], &(0x7f0000000740)=[{0x5, 0x3, 0x3, 0x7}], 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002600070002000600040024eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953000000", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.11176264s ago: executing program 2 (id=6147): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe50, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd6589d1603a3b92caf5835bdc3b9f4245eaac8cc0f16391ad4d62c5d1d46e11f762c56f5f7951a70cf0cc8a7308931316a9557e7e43f6fba62686d63f383a2359570943959525ddb0b8de158d7106cb28907404b55a0c9250e6e9c9245d83d9136a94bdc949dad7b86c797bdf2a0aaead851ab12c89dfbfb4ac6588081f61175d86ef4346c55543554bf2ed231ba5ffade30282") perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000018000000000000010000085000000230000009500f2ffffff0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.104464681s ago: executing program 0 (id=6148): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000680)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getpid() r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xfffc, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r6, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x5, 0x9, 0x7, 0x6, 0x10}, @alu={0x7, 0x0, 0xb, 0xb, 0x4, 0x18, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x10, 0x41, &(0x7f00000002c0)=""/65, 0x41100, 0x8, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r2, r2, r5, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x4, 0x10, 0x7}]}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="140000004f007f99de0dc892e8935b64ae384bac", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2, 0xffbf}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890c, &(0x7f0000000100)) 2.090248411s ago: executing program 4 (id=6149): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)}], 0x2}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r3, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b", 0x4}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000380)=@xdp={0x2c, 0x1, r5, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="ba4ebddb65d8e08c9db8cfd7630048b8ac46c6f485446af240609c2f09e20cbbcefdd327df9e95c7f01f5b0e978da0d5cb4690143b8ef35f81918b0bf167e1904128647766699cee8c2f4245bd77a63d94271cde0872d1", 0x57}], 0x1, &(0x7f00000006c0)=[{0x28, 0x114, 0x1, "5eae5981a15195d74c0565efb90eed1d82fa"}, {0xd0, 0x3a, 0x6, "ff335240afcca7dec2b97c457b5f85af70783bb36a1d4fe7eb2af666227479d551d2d6f72244e98d8024b6a1e1dcbc9f010297501b5488f1d1336650eeea3830da824b402daa795f4965662aec57f4c19cb889419950b30ebb422537272874c68f116cb11467c81cfe2f869d02eba27382ae9a95f4eb1f7b6376e20864aef76224526114f8b18db8218d3be31be8548531245320278437ac1883d16675ff6f2191ef74554a3af1f5e52472ca5953ba375ab6ce24b6150197fe5497d780"}, {0xd8, 0x114, 0x9, "2b5f3c137cb30bc428c4171441082cf1c04cc670e06391f65c94eb17a151f8968404ddad20c44de709503f1fe3106b7b28e9305df9dcbfc7d5deac054bddb0cb80fdfe13cead8eeedc2ce7e53d9eb30b9e6412098ae8f6ad2a74cdda5d24f4249d169a1d49850df5f1709f2d4c0acb68115cfbeef0848e6d6b348153c3b523e143ca1c8f1eb9ccd3361fa4d9d6aa00696f9107307d404c8b64be0296ef7c544eac29ba372858a6dbfd0c91e14e573153fed23b24ae5ef97fdf1ff32ecf780ebc1ec62df9"}], 0x1d0}, 0x4040003) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a118000c000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67b6f94007134cf6ee08000a0e408e8f5ef52a985162756aa5e8d7ce06bba8017cbec4c2ee5a7cef4090000001fb791643a5ee45aeb4edbb57a", 0x81}], 0x1, 0x0, 0x0, 0x7400}, 0x24000084) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2b76, 0x0, 0x20, 0x6, 0x0, 0x13, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.021394437s ago: executing program 5 (id=6150): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004880) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1.593043932s ago: executing program 5 (id=6151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) (fail_nth: 1) 1.556308125s ago: executing program 2 (id=6152): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0x10, 0x0, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe50, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9ce007887571f0b38dcc32eec5254e7b4042d0bb29bd6589d1603a3b92caf5835bdc3b9f4245eaac8cc0f16391ad4d62c5d1d46e11f762c56f5f7951a70cf0cc8a7308931316a9557e7e43f6fba62686d63f383a2359570943959525ddb0b8de158d7106cb28907404b55a0c9250e6e9c9245d83d9136a94bdc949dad7b86c797bdf2a0aaead851ab12c89dfbfb4ac6588081f61175d86ef4346c55543554bf2ed231ba5ffade30282") r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000018000000000000010000085000000230000009500f2ffffff0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c0c1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 640.078749ms ago: executing program 4 (id=6153): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xd9, 0xc, 0x0, 0xffffffffffffffff, 0x80008, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000001b703000000000000850000009b00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000009e00000000000000df0a1000fcffffff185600000f00000000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002600070002000600040024eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953000000", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 580.629573ms ago: executing program 0 (id=6154): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff0051f60a84c9f4d4938037e786a6ff000000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004037e000a7401", 0x1b}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8344, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 565.990245ms ago: executing program 2 (id=6155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 327.850684ms ago: executing program 2 (id=6156): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000002f00000004000000", @ANYRES64=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, r3}, 0x30) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}}, &(0x7f00000001c0)=""/257, 0x32, 0x101, 0x6}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x10, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r8, 0x9, r4}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x6, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000400)=""/85, 0x27, 0x55, 0x0, 0xf, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r9, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7ff, &(0x7f0000000b00)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xf, 0x17, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @exit, @alu={0x7, 0x0, 0x4, 0x7, 0xa, 0xfffffffffffffff4, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x80, '\x00', r15, @fallback=0x4, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x4, 0x7, 0x3, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000d40)=[0x1, r13, r11, r12], &(0x7f0000000f80)=[{0x2, 0x5, 0x1, 0x6}, {0x4, 0x5, 0xe, 0xa}, {0x4, 0x2, 0x3, 0xb}, {0x4, 0x3, 0x8, 0xb}, {0x2, 0x3, 0x7, 0x9}, {0x4, 0x4, 0x4, 0xb}, {0x4, 0x2, 0xc, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x31, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, @generic={0xe, 0x4, 0x9, 0x100, 0x4}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xeb, &(0x7f00000002c0)=""/235, 0x41000, 0x0, '\x00', r8, 0x0, r10, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r11, r12, r14], &(0x7f0000000600)=[{0x5, 0x1, 0x1, 0x3}, {0x0, 0x3, 0xc, 0x5}], 0x10, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5474) syz_clone(0x40001400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 104.066642ms ago: executing program 5 (id=6157): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000}, 0x40000000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6000000054c80cdb917f5687aab998b8", 0x10}, {&(0x7f0000000080)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e6", 0x50}], 0x2}, 0x2400c000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@generic={0x40, 0x2, 0x9, 0x0, 0x490}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c0357ee}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0xd7, &(0x7f0000000740)=""/215, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000840)=[{0x2, 0x1, 0x1, 0x6}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x2, 0x6, 0xf}, {0x0, 0x4, 0x5, 0x5}, {0x4, 0x2, 0x6, 0xb}, {0x3, 0x2, 0xd, 0x1}, {0x0, 0x1, 0xa}, {0x5, 0x1, 0x6, 0xc}, {0x2, 0x4, 0x9, 0xa}]}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000900)={r7, 0x0, 0x1a, 0x0, &(0x7f0000000640)="4c9f528e8959c215521b097a04fe365cf918b879704f2206e2eb", 0x0, 0x1, 0x0, 0x1000, 0x0, &(0x7f00000017c0)="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", 0x0, 0x2, 0x0, 0x3ff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 4 (id=6158): r0 = syz_clone(0x880, &(0x7f0000000140)="1fd2be2f73848d78419f658cccafb2b96ff41d44af23942c3c0ae84c8e3236b68b06233c6a43616a9f9ca2a3766b1914690d10b5a415e655235c9fde46c6d4af406e5c81c76cd990c565e5ce4c0e6663d77e5d36c9a34f372cf2b2dec336ca4b37d9ba737da19356ea17fd55f97c0d18b04c7012034cf1f79d069668cedbda3e059443f6dad5580f642616c06774b3e147e1e7a6d42c226d9a777a5c84dab155b182adf94be09e3723303c141a3e4b5b17ce6d806fad648ec1d08bff944c4bb7229d8105f2aa231b4e8997e9", 0xcc, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="676d7ffc79e57f93b414dbfcb36db6435258169b687a6722c1d3484bee93ffaff759e008e49cb7fefa8588d03f71ef31db49d1b234e8cf191eb13f4c8ff5e87e6b0c56fb97f422e4456286676123d9d72bf4d5569ab20ed1465ed6169eca502144863b0d7d89581ce18204fe50f116ffb3e404844d9b8826951ecdfc7c36092cb6c20725a01f981941c043943c65c2034c9a4f5141b8ff9690da18645c769c0cb77d5c26fce42dbb51389740b5d261fde5d92873c7c2fef2697a4a") syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/pid_for_children\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x10004, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) kernel console output (not intermixed with test programs): 038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 530.854581][T19210] [ 531.320888][T19215] delete_channel: no stack [ 531.840727][ T144] wlan1: Trigger new scan to find an IBSS to join [ 532.269019][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5000'. [ 532.353847][T19253] FAULT_INJECTION: forcing a failure. [ 532.353847][T19253] name failslab, interval 1, probability 0, space 0, times 0 [ 532.407967][T19253] CPU: 1 PID: 19253 Comm: syz.1.5001 Not tainted syzkaller #0 [ 532.415489][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.425571][T19253] Call Trace: [ 532.428857][T19253] [ 532.431790][T19253] dump_stack_lvl+0x168/0x230 [ 532.436484][T19253] ? show_regs_print_info+0x20/0x20 [ 532.441686][T19253] ? load_image+0x3b0/0x3b0 [ 532.446206][T19253] should_fail+0x38c/0x4c0 [ 532.450635][T19253] should_failslab+0x5/0x20 [ 532.455139][T19253] slab_pre_alloc_hook+0x51/0xc0 [ 532.460085][T19253] kmem_cache_alloc_node+0x47/0x2d0 [ 532.465284][T19253] ? __alloc_skb+0xf4/0x750 [ 532.469796][T19253] __alloc_skb+0xf4/0x750 [ 532.474129][T19253] netlink_sendmsg+0x645/0xbc0 [ 532.478939][T19253] ? netlink_getsockopt+0x560/0x560 [ 532.484155][T19253] ? aa_sock_msg_perm+0x94/0x150 [ 532.489099][T19253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 532.494389][T19253] ? security_socket_sendmsg+0x7c/0xa0 [ 532.499853][T19253] ? netlink_getsockopt+0x560/0x560 [ 532.505064][T19253] ____sys_sendmsg+0x5a2/0x8c0 [ 532.509846][T19253] ? memset+0x1e/0x40 [ 532.513834][T19253] ? __sys_sendmsg_sock+0x30/0x30 [ 532.518879][T19253] ? import_iovec+0x6f/0xa0 [ 532.523398][T19253] ___sys_sendmsg+0x1f0/0x260 [ 532.528095][T19253] ? __sys_sendmsg+0x250/0x250 [ 532.532918][T19253] __se_sys_sendmsg+0x190/0x250 [ 532.537783][T19253] ? __x64_sys_sendmsg+0x80/0x80 [ 532.542726][T19253] ? lockdep_hardirqs_on+0x94/0x140 [ 532.547957][T19253] do_syscall_64+0x4c/0xa0 [ 532.552396][T19253] ? clear_bhb_loop+0x30/0x80 [ 532.557102][T19253] ? clear_bhb_loop+0x30/0x80 [ 532.561785][T19253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.567692][T19253] RIP: 0033:0x7fca8c650be9 [ 532.572122][T19253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.591735][T19253] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.600164][T19253] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 532.608143][T19253] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 532.616116][T19253] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 532.624093][T19253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.632180][T19253] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 532.640219][T19253] [ 532.681570][T19250] delete_channel: no stack [ 533.070705][ T4459] wlan1: Creating new IBSS network, BSSID 6a:2f:1a:0d:14:a4 [ 533.112063][T19261] delete_channel: no stack [ 533.360637][T19267] netlink: 'syz.0.5006': attribute type 11 has an invalid length. [ 533.561442][T19273] netlink: 'syz.4.5005': attribute type 21 has an invalid length. [ 533.600569][T19273] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5005'. [ 534.671407][T19300] FAULT_INJECTION: forcing a failure. [ 534.671407][T19300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.725793][T19296] device wlan0 left promiscuous mode [ 534.762983][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'. [ 534.880656][T19300] CPU: 0 PID: 19300 Comm: syz.5.5013 Not tainted syzkaller #0 [ 534.888194][T19300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.898276][T19300] Call Trace: [ 534.901579][T19300] [ 534.904634][T19300] dump_stack_lvl+0x168/0x230 [ 534.909343][T19300] ? show_regs_print_info+0x20/0x20 [ 534.914564][T19300] ? load_image+0x3b0/0x3b0 [ 534.919092][T19300] ? __lock_acquire+0x7c60/0x7c60 [ 534.924150][T19300] ? unix_ioctl+0x250/0x650 [ 534.928688][T19300] should_fail+0x38c/0x4c0 [ 534.933146][T19300] _copy_from_user+0x2e/0x170 [ 534.937870][T19300] sock_do_ioctl+0x178/0x2f0 [ 534.942493][T19300] ? sock_show_fdinfo+0xb0/0xb0 [ 534.947401][T19300] sock_ioctl+0x4ed/0x6e0 [ 534.951763][T19300] ? sock_poll+0x3f0/0x3f0 [ 534.956213][T19300] ? bpf_lsm_file_ioctl+0x5/0x10 [ 534.961164][T19300] ? security_file_ioctl+0x7c/0xa0 [ 534.966296][T19300] ? sock_poll+0x3f0/0x3f0 [ 534.970739][T19300] __se_sys_ioctl+0xfa/0x170 [ 534.975363][T19300] do_syscall_64+0x4c/0xa0 [ 534.979803][T19300] ? clear_bhb_loop+0x30/0x80 [ 534.984498][T19300] ? clear_bhb_loop+0x30/0x80 [ 534.989210][T19300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.995125][T19300] RIP: 0033:0x7f8e36fa6be9 [ 534.999588][T19300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.019222][T19300] RSP: 002b:00007f8e351ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.027671][T19300] RAX: ffffffffffffffda RBX: 00007f8e371ce090 RCX: 00007f8e36fa6be9 [ 535.035680][T19300] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000006 [ 535.043736][T19300] RBP: 00007f8e351ed090 R08: 0000000000000000 R09: 0000000000000000 [ 535.051735][T19300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.059733][T19300] R13: 00007f8e371ce128 R14: 00007f8e371ce090 R15: 00007ffd38133fb8 [ 535.067754][T19300] [ 535.674386][T19317] netlink: 'syz.0.5019': attribute type 21 has an invalid length. [ 535.710906][T19317] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5019'. [ 536.074059][T19328] netlink: 'syz.5.5021': attribute type 11 has an invalid length. [ 538.516681][T19362] FAULT_INJECTION: forcing a failure. [ 538.516681][T19362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.640260][T19362] CPU: 1 PID: 19362 Comm: syz.4.5032 Not tainted syzkaller #0 [ 538.647808][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.657894][T19362] Call Trace: [ 538.661199][T19362] [ 538.664152][T19362] dump_stack_lvl+0x168/0x230 [ 538.668870][T19362] ? show_regs_print_info+0x20/0x20 [ 538.674101][T19362] ? load_image+0x3b0/0x3b0 [ 538.678749][T19362] ? __lock_acquire+0x7c60/0x7c60 [ 538.683799][T19362] ? unix_ioctl+0x3d2/0x650 [ 538.688335][T19362] should_fail+0x38c/0x4c0 [ 538.692816][T19362] _copy_from_user+0x2e/0x170 [ 538.697621][T19362] sock_do_ioctl+0x178/0x2f0 [ 538.702235][T19362] ? sock_show_fdinfo+0xb0/0xb0 [ 538.703531][T19371] netlink: 'syz.0.5037': attribute type 11 has an invalid length. [ 538.707109][T19362] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 538.720913][T19362] sock_ioctl+0x4ed/0x6e0 [ 538.725275][T19362] ? sock_poll+0x3f0/0x3f0 [ 538.729735][T19362] ? bpf_lsm_file_ioctl+0x5/0x10 [ 538.734689][T19362] ? security_file_ioctl+0x7c/0xa0 [ 538.739828][T19362] ? sock_poll+0x3f0/0x3f0 [ 538.744275][T19362] __se_sys_ioctl+0xfa/0x170 [ 538.748883][T19362] do_syscall_64+0x4c/0xa0 [ 538.753307][T19362] ? clear_bhb_loop+0x30/0x80 [ 538.757990][T19362] ? clear_bhb_loop+0x30/0x80 [ 538.762686][T19362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.768591][T19362] RIP: 0033:0x7f4696721be9 [ 538.773018][T19362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.792632][T19362] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.801056][T19362] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 538.809026][T19362] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 538.817002][T19362] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 538.824978][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.832970][T19362] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 538.840962][T19362] [ 538.921701][T19373] netlink: 'syz.2.5035': attribute type 11 has an invalid length. [ 539.077083][T19376] device wlan0 left promiscuous mode [ 539.182779][T19380] device wlan0 entered promiscuous mode [ 539.837266][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 540.232604][T19398] netlink: 'syz.5.5043': attribute type 10 has an invalid length. [ 540.537944][T19398] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.766900][T19415] netlink: 'syz.2.5049': attribute type 11 has an invalid length. [ 541.209158][T19395] netlink: 'syz.5.5043': attribute type 10 has an invalid length. [ 541.290880][T19395] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.503647][T19411] netlink: 'syz.1.5047': attribute type 21 has an invalid length. [ 541.560862][T19411] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5047'. [ 541.641396][T19412] device wlan0 entered promiscuous mode [ 541.965527][T19423] netlink: 'syz.1.5051': attribute type 11 has an invalid length. [ 542.850993][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5060'. [ 542.985516][T19441] device wlan0 left promiscuous mode [ 543.058485][T19447] device wlan0 entered promiscuous mode [ 543.431769][T19455] netlink: 'syz.0.5064': attribute type 11 has an invalid length. [ 543.498683][T19456] device wlan0 left promiscuous mode [ 543.579619][T19459] device wlan0 entered promiscuous mode [ 544.990679][T19493] netlink: 'syz.2.5073': attribute type 4 has an invalid length. [ 544.998460][T19493] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5073'. [ 545.581158][T19507] netlink: 'syz.0.5076': attribute type 11 has an invalid length. [ 546.211910][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5077'. [ 546.754826][T19534] syz.0.5082 (19534) used obsolete PPPIOCDETACH ioctl [ 546.823533][T19532] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5082'. [ 547.684050][T19543] FAULT_INJECTION: forcing a failure. [ 547.684050][T19543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.890420][T19543] CPU: 0 PID: 19543 Comm: syz.2.5085 Not tainted syzkaller #0 [ 547.897948][T19543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.908031][T19543] Call Trace: [ 547.911339][T19543] [ 547.914290][T19543] dump_stack_lvl+0x168/0x230 [ 547.919003][T19543] ? show_regs_print_info+0x20/0x20 [ 547.924227][T19543] ? load_image+0x3b0/0x3b0 [ 547.928757][T19543] ? __lock_acquire+0x7c60/0x7c60 [ 547.933842][T19543] should_fail+0x38c/0x4c0 [ 547.938305][T19543] _copy_from_user+0x2e/0x170 [ 547.943028][T19543] iovec_from_user+0x142/0x370 [ 547.947822][T19543] __import_iovec+0x70/0x490 [ 547.952451][T19543] import_iovec+0x6f/0xa0 [ 547.956827][T19543] ___sys_sendmsg+0x1b9/0x260 [ 547.961545][T19543] ? __sys_sendmsg+0x250/0x250 [ 547.966351][T19543] ? vfs_write+0x84d/0xd00 [ 547.970810][T19543] ? __fdget+0x18b/0x210 [ 547.975077][T19543] __se_sys_sendmsg+0x190/0x250 [ 547.979957][T19543] ? __x64_sys_sendmsg+0x80/0x80 [ 547.984916][T19543] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 547.990937][T19543] ? lockdep_hardirqs_on+0x94/0x140 [ 547.996174][T19543] do_syscall_64+0x4c/0xa0 [ 548.000612][T19543] ? clear_bhb_loop+0x30/0x80 [ 548.005311][T19543] ? clear_bhb_loop+0x30/0x80 [ 548.010006][T19543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.015918][T19543] RIP: 0033:0x7fa836b88be9 [ 548.020355][T19543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.039985][T19543] RSP: 002b:00007fa834dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.048426][T19543] RAX: ffffffffffffffda RBX: 00007fa836db0090 RCX: 00007fa836b88be9 [ 548.056423][T19543] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 548.064417][T19543] RBP: 00007fa834dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 548.072412][T19543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.080399][T19543] R13: 00007fa836db0128 R14: 00007fa836db0090 R15: 00007ffcb22c0e98 [ 548.088416][T19543] [ 548.317872][T19553] device wlan0 left promiscuous mode [ 548.461918][T19542] device wlan0 entered promiscuous mode [ 548.992180][T19567] netlink: 'syz.2.5092': attribute type 11 has an invalid length. [ 549.285661][T19564] FAULT_INJECTION: forcing a failure. [ 549.285661][T19564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.580361][T19564] CPU: 0 PID: 19564 Comm: syz.1.5089 Not tainted syzkaller #0 [ 549.587889][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.597966][T19564] Call Trace: [ 549.601262][T19564] [ 549.604210][T19564] dump_stack_lvl+0x168/0x230 [ 549.608914][T19564] ? show_regs_print_info+0x20/0x20 [ 549.614135][T19564] ? load_image+0x3b0/0x3b0 [ 549.618675][T19564] ? __lock_acquire+0x7c60/0x7c60 [ 549.623730][T19564] should_fail+0x38c/0x4c0 [ 549.628178][T19564] _copy_to_user+0x2e/0x130 [ 549.632705][T19564] simple_read_from_buffer+0xe3/0x150 [ 549.638106][T19564] proc_fail_nth_read+0x19a/0x210 [ 549.643166][T19564] ? proc_fault_inject_write+0x2f0/0x2f0 [ 549.648835][T19564] ? fsnotify_perm+0x254/0x560 [ 549.653640][T19564] ? proc_fault_inject_write+0x2f0/0x2f0 [ 549.659297][T19564] vfs_read+0x2f6/0xcf0 [ 549.663482][T19564] ? kernel_read+0x1e0/0x1e0 [ 549.668101][T19564] ? __fget_files+0x40f/0x480 [ 549.672804][T19564] ? mutex_lock_nested+0x17/0x20 [ 549.677761][T19564] ? __fdget_pos+0x2bf/0x370 [ 549.682370][T19564] ? ksys_read+0x71/0x250 [ 549.686724][T19564] ksys_read+0x14d/0x250 [ 549.690987][T19564] ? vfs_write+0xd00/0xd00 [ 549.695446][T19564] ? lockdep_hardirqs_on+0x94/0x140 [ 549.700678][T19564] do_syscall_64+0x4c/0xa0 [ 549.705110][T19564] ? clear_bhb_loop+0x30/0x80 [ 549.709805][T19564] ? clear_bhb_loop+0x30/0x80 [ 549.714505][T19564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.720454][T19564] RIP: 0033:0x7fca8c64f5fc [ 549.724937][T19564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 549.744564][T19564] RSP: 002b:00007fca8a897030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.753001][T19564] RAX: ffffffffffffffda RBX: 00007fca8c878090 RCX: 00007fca8c64f5fc [ 549.760987][T19564] RDX: 000000000000000f RSI: 00007fca8a8970a0 RDI: 0000000000000005 [ 549.768961][T19564] RBP: 00007fca8a897090 R08: 0000000000000000 R09: 0000000000000000 [ 549.776941][T19564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.784916][T19564] R13: 00007fca8c878128 R14: 00007fca8c878090 R15: 00007ffe62ffbb18 [ 549.792912][T19564] [ 549.814933][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 549.847276][T19581] FAULT_INJECTION: forcing a failure. [ 549.847276][T19581] name failslab, interval 1, probability 0, space 0, times 0 [ 549.961808][T19581] CPU: 0 PID: 19581 Comm: syz.4.5096 Not tainted syzkaller #0 [ 549.969331][T19581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.979417][T19581] Call Trace: [ 549.982715][T19581] [ 549.985663][T19581] dump_stack_lvl+0x168/0x230 [ 549.990367][T19581] ? show_regs_print_info+0x20/0x20 [ 549.995597][T19581] ? load_image+0x3b0/0x3b0 [ 550.000127][T19581] ? __might_sleep+0xf0/0xf0 [ 550.004745][T19581] ? __lock_acquire+0x7c60/0x7c60 [ 550.009803][T19581] ? mark_lock+0x94/0x320 [ 550.014165][T19581] should_fail+0x38c/0x4c0 [ 550.018618][T19581] should_failslab+0x5/0x20 [ 550.023139][T19581] slab_pre_alloc_hook+0x51/0xc0 [ 550.028099][T19581] __kmalloc+0x6b/0x330 [ 550.032271][T19581] ? tomoyo_realpath_from_path+0x118/0x610 [ 550.038113][T19581] tomoyo_realpath_from_path+0x118/0x610 [ 550.043785][T19581] tomoyo_path_number_perm+0x1d5/0x5d0 [ 550.049265][T19581] ? verify_lock_unused+0x140/0x140 [ 550.054499][T19581] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 550.059982][T19581] ? ksys_write+0x1c7/0x250 [ 550.064571][T19581] security_file_ioctl+0x6c/0xa0 [ 550.069539][T19581] __se_sys_ioctl+0x48/0x170 [ 550.074165][T19581] do_syscall_64+0x4c/0xa0 [ 550.078608][T19581] ? clear_bhb_loop+0x30/0x80 [ 550.083305][T19581] ? clear_bhb_loop+0x30/0x80 [ 550.088008][T19581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.093938][T19581] RIP: 0033:0x7f4696721be9 [ 550.098378][T19581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.118009][T19581] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.126453][T19581] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 550.134480][T19581] RDX: 0000200000000900 RSI: 00000000000089b1 RDI: 0000000000000003 [ 550.142480][T19581] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 550.150468][T19581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.158452][T19581] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 550.166464][T19581] [ 551.076263][T19581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.745045][T19597] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5099'. [ 551.882956][T19600] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5100'. [ 552.576562][T19617] netlink: 'syz.2.5105': attribute type 10 has an invalid length. [ 552.735404][T19617] device veth0_vlan left promiscuous mode [ 552.766414][T19617] device veth0_vlan entered promiscuous mode [ 552.826258][T19617] team0: Device veth0_vlan failed to register rx_handler [ 553.740891][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5111'. [ 553.999590][T19647] netlink: 'syz.1.5114': attribute type 11 has an invalid length. [ 554.977860][T19667] netlink: 'syz.5.5120': attribute type 10 has an invalid length. [ 555.001409][T19665] netlink: 'syz.0.5119': attribute type 11 has an invalid length. [ 555.651525][T19683] netlink: 'syz.4.5127': attribute type 11 has an invalid length. [ 555.821272][T19684] FAULT_INJECTION: forcing a failure. [ 555.821272][T19684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.965095][T19684] CPU: 1 PID: 19684 Comm: syz.5.5125 Not tainted syzkaller #0 [ 555.972625][T19684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.982703][T19684] Call Trace: [ 555.985996][T19684] [ 555.988962][T19684] dump_stack_lvl+0x168/0x230 [ 555.993676][T19684] ? show_regs_print_info+0x20/0x20 [ 555.998904][T19684] ? load_image+0x3b0/0x3b0 [ 556.003439][T19684] ? __lock_acquire+0x7c60/0x7c60 [ 556.008499][T19684] should_fail+0x38c/0x4c0 [ 556.012969][T19684] _copy_from_user+0x2e/0x170 [ 556.017680][T19684] iovec_from_user+0x142/0x370 [ 556.022480][T19684] __import_iovec+0x70/0x490 [ 556.027106][T19684] import_iovec+0x6f/0xa0 [ 556.031455][T19684] ___sys_sendmsg+0x1b9/0x260 [ 556.036182][T19684] ? __sys_sendmsg+0x250/0x250 [ 556.041028][T19684] ? vfs_write+0x84d/0xd00 [ 556.045490][T19684] ? __fdget+0x18b/0x210 [ 556.049760][T19684] __se_sys_sendmsg+0x190/0x250 [ 556.054642][T19684] ? __x64_sys_sendmsg+0x80/0x80 [ 556.059601][T19684] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.065622][T19684] ? lockdep_hardirqs_on+0x94/0x140 [ 556.070879][T19684] do_syscall_64+0x4c/0xa0 [ 556.075316][T19684] ? clear_bhb_loop+0x30/0x80 [ 556.080009][T19684] ? clear_bhb_loop+0x30/0x80 [ 556.084716][T19684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.090628][T19684] RIP: 0033:0x7f8e36fa6be9 [ 556.095069][T19684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.114703][T19684] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.123151][T19684] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 556.131151][T19684] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000007 [ 556.139145][T19684] RBP: 00007f8e3520e090 R08: 0000000000000000 R09: 0000000000000000 [ 556.147407][T19684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.155405][T19684] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 556.163425][T19684] [ 556.200128][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5131'. [ 556.396012][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5129'. [ 556.731872][T19703] netlink: 'syz.4.5133': attribute type 11 has an invalid length. [ 557.533460][T19712] netlink: 'syz.1.5136': attribute type 10 has an invalid length. [ 557.846669][T19712] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 558.260493][T19727] netlink: 'syz.5.5140': attribute type 11 has an invalid length. [ 558.287638][T19728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.594819][T19728] team0: Port device team_slave_0 removed [ 558.636608][T19728] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 560.860437][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5148'. [ 561.045016][T19775] netlink: 'syz.2.5149': attribute type 12 has an invalid length. [ 561.145473][T19775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5149'. [ 561.902380][T19793] netlink: 'syz.1.5155': attribute type 11 has an invalid length. [ 562.198697][T19788] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5151'. [ 562.600587][T19801] netlink: 'syz.2.5158': attribute type 10 has an invalid length. [ 562.766617][T19801] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 562.875067][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.881457][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.217834][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5168'. [ 564.586164][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 565.533377][T19848] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.5174'. [ 567.326394][T19887] FAULT_INJECTION: forcing a failure. [ 567.326394][T19887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.395931][T19887] CPU: 0 PID: 19887 Comm: syz.2.5184 Not tainted syzkaller #0 [ 567.403451][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.413532][T19887] Call Trace: [ 567.416831][T19887] [ 567.419803][T19887] dump_stack_lvl+0x168/0x230 [ 567.424513][T19887] ? show_regs_print_info+0x20/0x20 [ 567.429736][T19887] ? load_image+0x3b0/0x3b0 [ 567.434267][T19887] ? __lock_acquire+0x7c60/0x7c60 [ 567.439330][T19887] should_fail+0x38c/0x4c0 [ 567.443773][T19887] _copy_from_user+0x2e/0x170 [ 567.448472][T19887] iovec_from_user+0x142/0x370 [ 567.453262][T19887] __import_iovec+0x70/0x490 [ 567.457892][T19887] import_iovec+0x6f/0xa0 [ 567.462245][T19887] ___sys_sendmsg+0x1b9/0x260 [ 567.466953][T19887] ? __sys_sendmsg+0x250/0x250 [ 567.471751][T19887] ? vfs_write+0x84d/0xd00 [ 567.476212][T19887] ? __fdget+0x18b/0x210 [ 567.480478][T19887] __se_sys_sendmsg+0x190/0x250 [ 567.485353][T19887] ? __x64_sys_sendmsg+0x80/0x80 [ 567.490317][T19887] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 567.496338][T19887] ? lockdep_hardirqs_on+0x94/0x140 [ 567.501563][T19887] do_syscall_64+0x4c/0xa0 [ 567.505994][T19887] ? clear_bhb_loop+0x30/0x80 [ 567.510691][T19887] ? clear_bhb_loop+0x30/0x80 [ 567.515389][T19887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 567.521294][T19887] RIP: 0033:0x7fa836b88be9 [ 567.525733][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.545358][T19887] RSP: 002b:00007fa834dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.553792][T19887] RAX: ffffffffffffffda RBX: 00007fa836db0090 RCX: 00007fa836b88be9 [ 567.561789][T19887] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 567.569779][T19887] RBP: 00007fa834dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 567.577843][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.585844][T19887] R13: 00007fa836db0128 R14: 00007fa836db0090 R15: 00007ffcb22c0e98 [ 567.593861][T19887] [ 568.372382][T19903] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5187'. [ 570.052845][T19928] FAULT_INJECTION: forcing a failure. [ 570.052845][T19928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.180411][T19928] CPU: 1 PID: 19928 Comm: syz.2.5195 Not tainted syzkaller #0 [ 570.187944][T19928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.198030][T19928] Call Trace: [ 570.201327][T19928] [ 570.204273][T19928] dump_stack_lvl+0x168/0x230 [ 570.208988][T19928] ? show_regs_print_info+0x20/0x20 [ 570.214215][T19928] ? load_image+0x3b0/0x3b0 [ 570.218755][T19928] ? __lock_acquire+0x7c60/0x7c60 [ 570.223808][T19928] should_fail+0x38c/0x4c0 [ 570.228262][T19928] _copy_to_user+0x2e/0x130 [ 570.232790][T19928] simple_read_from_buffer+0xe3/0x150 [ 570.238197][T19928] proc_fail_nth_read+0x19a/0x210 [ 570.243258][T19928] ? proc_fault_inject_write+0x2f0/0x2f0 [ 570.248924][T19928] ? fsnotify_perm+0x254/0x560 [ 570.253717][T19928] ? proc_fault_inject_write+0x2f0/0x2f0 [ 570.259373][T19928] vfs_read+0x2f6/0xcf0 [ 570.263556][T19928] ? kernel_read+0x1e0/0x1e0 [ 570.268184][T19928] ? __fget_files+0x40f/0x480 [ 570.272890][T19928] ? mutex_lock_nested+0x17/0x20 [ 570.277863][T19928] ? __fdget_pos+0x2bf/0x370 [ 570.282472][T19928] ? ksys_read+0x71/0x250 [ 570.286835][T19928] ksys_read+0x14d/0x250 [ 570.291107][T19928] ? vfs_write+0xd00/0xd00 [ 570.295546][T19928] ? lockdep_hardirqs_on+0x94/0x140 [ 570.300774][T19928] do_syscall_64+0x4c/0xa0 [ 570.305218][T19928] ? clear_bhb_loop+0x30/0x80 [ 570.309922][T19928] ? clear_bhb_loop+0x30/0x80 [ 570.314625][T19928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.320542][T19928] RIP: 0033:0x7fa836b875fc [ 570.324983][T19928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.344704][T19928] RSP: 002b:00007fa834df0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.353149][T19928] RAX: ffffffffffffffda RBX: 00007fa836daffa0 RCX: 00007fa836b875fc [ 570.361148][T19928] RDX: 000000000000000f RSI: 00007fa834df00a0 RDI: 0000000000000008 [ 570.369144][T19928] RBP: 00007fa834df0090 R08: 0000000000000000 R09: 0000000000000000 [ 570.377154][T19928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.385147][T19928] R13: 00007fa836db0038 R14: 00007fa836daffa0 R15: 00007ffcb22c0e98 [ 570.393165][T19928] [ 571.452761][T19955] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5203'. [ 571.786059][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5205'. [ 574.963263][T19996] netlink: 'syz.4.5214': attribute type 2 has an invalid length. [ 575.106267][T19996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5214'. [ 575.468579][T20014] FAULT_INJECTION: forcing a failure. [ 575.468579][T20014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.709204][T20014] CPU: 1 PID: 20014 Comm: syz.2.5218 Not tainted syzkaller #0 [ 575.716739][T20014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.726816][T20014] Call Trace: [ 575.730116][T20014] [ 575.733065][T20014] dump_stack_lvl+0x168/0x230 [ 575.737770][T20014] ? show_regs_print_info+0x20/0x20 [ 575.742988][T20014] ? load_image+0x3b0/0x3b0 [ 575.747538][T20014] ? __lock_acquire+0x7c60/0x7c60 [ 575.752588][T20014] ? unix_ioctl+0x250/0x650 [ 575.757118][T20014] should_fail+0x38c/0x4c0 [ 575.761568][T20014] _copy_from_user+0x2e/0x170 [ 575.766278][T20014] sock_do_ioctl+0x178/0x2f0 [ 575.770903][T20014] ? sock_show_fdinfo+0xb0/0xb0 [ 575.775879][T20014] sock_ioctl+0x4ed/0x6e0 [ 575.780231][T20014] ? sock_poll+0x3f0/0x3f0 [ 575.784683][T20014] ? bpf_lsm_file_ioctl+0x5/0x10 [ 575.789637][T20014] ? security_file_ioctl+0x7c/0xa0 [ 575.794766][T20014] ? sock_poll+0x3f0/0x3f0 [ 575.799201][T20014] __se_sys_ioctl+0xfa/0x170 [ 575.803815][T20014] do_syscall_64+0x4c/0xa0 [ 575.808246][T20014] ? clear_bhb_loop+0x30/0x80 [ 575.812940][T20014] ? clear_bhb_loop+0x30/0x80 [ 575.817643][T20014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 575.823557][T20014] RIP: 0033:0x7fa836b88be9 [ 575.827997][T20014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.847617][T20014] RSP: 002b:00007fa834df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.856057][T20014] RAX: ffffffffffffffda RBX: 00007fa836daffa0 RCX: 00007fa836b88be9 [ 575.864047][T20014] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000d [ 575.872042][T20014] RBP: 00007fa834df0090 R08: 0000000000000000 R09: 0000000000000000 [ 575.880028][T20014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.888005][T20014] R13: 00007fa836db0038 R14: 00007fa836daffa0 R15: 00007ffcb22c0e98 [ 575.896031][T20014] [ 576.806152][T20028] syz.1.5220[20028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.150244][T20062] FAULT_INJECTION: forcing a failure. [ 580.150244][T20062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.627805][T20062] CPU: 0 PID: 20062 Comm: syz.1.5231 Not tainted syzkaller #0 [ 580.635325][T20062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.645404][T20062] Call Trace: [ 580.648707][T20062] [ 580.651660][T20062] dump_stack_lvl+0x168/0x230 [ 580.656369][T20062] ? show_regs_print_info+0x20/0x20 [ 580.661603][T20062] ? load_image+0x3b0/0x3b0 [ 580.666142][T20062] ? __lock_acquire+0x7c60/0x7c60 [ 580.671196][T20062] should_fail+0x38c/0x4c0 [ 580.675644][T20062] _copy_from_user+0x2e/0x170 [ 580.680346][T20062] bpf_test_init+0x136/0x1b0 [ 580.684970][T20062] bpf_prog_test_run_skb+0x181/0x1180 [ 580.690364][T20062] ? __fget_files+0x40f/0x480 [ 580.695078][T20062] ? cpu_online+0x60/0x60 [ 580.699429][T20062] bpf_prog_test_run+0x31e/0x390 [ 580.704391][T20062] __sys_bpf+0x535/0x670 [ 580.708683][T20062] ? bpf_link_show_fdinfo+0x340/0x340 [ 580.714095][T20062] ? vtime_user_exit+0x2dc/0x400 [ 580.719066][T20062] __x64_sys_bpf+0x78/0x90 [ 580.723502][T20062] do_syscall_64+0x4c/0xa0 [ 580.727943][T20062] ? clear_bhb_loop+0x30/0x80 [ 580.732640][T20062] ? clear_bhb_loop+0x30/0x80 [ 580.737343][T20062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.743263][T20062] RIP: 0033:0x7fca8c650be9 [ 580.747707][T20062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.767329][T20062] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.775759][T20062] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 580.783744][T20062] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 580.791717][T20062] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 580.799690][T20062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.807661][T20062] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 580.815651][T20062] [ 581.171010][T20091] netlink: 'syz.4.5240': attribute type 6 has an invalid length. [ 582.296601][T20111] FAULT_INJECTION: forcing a failure. [ 582.296601][T20111] name failslab, interval 1, probability 0, space 0, times 0 [ 582.309918][T20111] CPU: 0 PID: 20111 Comm: syz.2.5248 Not tainted syzkaller #0 [ 582.317423][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.327511][T20111] Call Trace: [ 582.330818][T20111] [ 582.333766][T20111] dump_stack_lvl+0x168/0x230 [ 582.338473][T20111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 582.344647][T20111] ? show_regs_print_info+0x20/0x20 [ 582.349872][T20111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 582.356090][T20111] should_fail+0x38c/0x4c0 [ 582.360595][T20111] should_failslab+0x5/0x20 [ 582.365133][T20111] slab_pre_alloc_hook+0x51/0xc0 [ 582.370108][T20111] ? sctp_get_port_local+0x6cc/0x14c0 [ 582.375530][T20111] kmem_cache_alloc+0x3d/0x290 [ 582.380339][T20111] sctp_get_port_local+0x6cc/0x14c0 [ 582.385569][T20111] ? __lock_acquire+0x7c60/0x7c60 [ 582.390728][T20111] ? sctp_do_bind+0x990/0x990 [ 582.395451][T20111] ? sctp_bind_addr_match+0x249/0x260 [ 582.400862][T20111] sctp_do_bind+0x553/0x990 [ 582.405387][T20111] sctp_connect_new_asoc+0x252/0x690 [ 582.410691][T20111] ? __sctp_connect+0xd20/0xd20 [ 582.415558][T20111] ? mark_lock+0x94/0x320 [ 582.419906][T20111] ? sctp_endpoint_lookup_assoc+0xab/0x230 [ 582.425824][T20111] __sctp_connect+0x59e/0xd20 [ 582.430526][T20111] ? sctp_send_asconf+0x170/0x170 [ 582.435643][T20111] ? lockdep_hardirqs_on+0x94/0x140 [ 582.440856][T20111] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 582.446408][T20111] ? security_sctp_bind_connect+0x85/0xb0 [ 582.452135][T20111] sctp_setsockopt_connectx+0x101/0x1a0 [ 582.457696][T20111] sctp_setsockopt+0x8eb/0xf80 [ 582.462471][T20111] ? sock_common_recvmsg+0x1b0/0x1b0 [ 582.467773][T20111] __sys_setsockopt+0x2bf/0x3d0 [ 582.472637][T20111] __x64_sys_setsockopt+0xb1/0xc0 [ 582.477669][T20111] do_syscall_64+0x4c/0xa0 [ 582.482093][T20111] ? clear_bhb_loop+0x30/0x80 [ 582.486792][T20111] ? clear_bhb_loop+0x30/0x80 [ 582.491473][T20111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 582.497367][T20111] RIP: 0033:0x7fa836b88be9 [ 582.501801][T20111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.521437][T20111] RSP: 002b:00007fa834df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 582.529854][T20111] RAX: ffffffffffffffda RBX: 00007fa836daffa0 RCX: 00007fa836b88be9 [ 582.537830][T20111] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 582.545924][T20111] RBP: 00007fa834df0090 R08: 0000000000000010 R09: 0000000000000000 [ 582.553939][T20111] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.561931][T20111] R13: 00007fa836db0038 R14: 00007fa836daffa0 R15: 00007ffcb22c0e98 [ 582.569924][T20111] [ 584.975447][T20165] FAULT_INJECTION: forcing a failure. [ 584.975447][T20165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.061544][T20165] CPU: 0 PID: 20165 Comm: syz.0.5261 Not tainted syzkaller #0 [ 585.069075][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.079156][T20165] Call Trace: [ 585.082489][T20165] [ 585.085431][T20165] dump_stack_lvl+0x168/0x230 [ 585.090137][T20165] ? show_regs_print_info+0x20/0x20 [ 585.095359][T20165] ? load_image+0x3b0/0x3b0 [ 585.099895][T20165] ? __lock_acquire+0x7c60/0x7c60 [ 585.104943][T20165] ? lock_chain_count+0x20/0x20 [ 585.109812][T20165] should_fail+0x38c/0x4c0 [ 585.114250][T20165] _copy_from_user+0x2e/0x170 [ 585.118956][T20165] inet_ioctl+0x187/0x400 [ 585.123310][T20165] ? inet_shutdown+0x370/0x370 [ 585.128106][T20165] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 585.133588][T20165] sock_do_ioctl+0xd3/0x2f0 [ 585.138117][T20165] ? sock_show_fdinfo+0xb0/0xb0 [ 585.143002][T20165] sock_ioctl+0x4ed/0x6e0 [ 585.147353][T20165] ? sock_poll+0x3f0/0x3f0 [ 585.151798][T20165] ? bpf_lsm_file_ioctl+0x5/0x10 [ 585.156751][T20165] ? security_file_ioctl+0x7c/0xa0 [ 585.161879][T20165] ? sock_poll+0x3f0/0x3f0 [ 585.166331][T20165] __se_sys_ioctl+0xfa/0x170 [ 585.170963][T20165] do_syscall_64+0x4c/0xa0 [ 585.175397][T20165] ? clear_bhb_loop+0x30/0x80 [ 585.180087][T20165] ? clear_bhb_loop+0x30/0x80 [ 585.184786][T20165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.190695][T20165] RIP: 0033:0x7f0828b78be9 [ 585.195124][T20165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.214748][T20165] RSP: 002b:00007f0826dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.223181][T20165] RAX: ffffffffffffffda RBX: 00007f0828da0090 RCX: 00007f0828b78be9 [ 585.231168][T20165] RDX: 0000200000000100 RSI: 000000000000890c RDI: 0000000000000004 [ 585.239169][T20165] RBP: 00007f0826dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 585.247151][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.255136][T20165] R13: 00007f0828da0128 R14: 00007f0828da0090 R15: 00007ffefba75358 [ 585.263142][T20165] [ 587.815199][T20225] sock: sock_set_timeout: `syz.2.5280' (pid 20225) tries to set negative timeout [ 589.179850][T20265] FAULT_INJECTION: forcing a failure. [ 589.179850][T20265] name failslab, interval 1, probability 0, space 0, times 0 [ 589.358989][T20265] CPU: 0 PID: 20265 Comm: syz.5.5291 Not tainted syzkaller #0 [ 589.366516][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.376733][T20265] Call Trace: [ 589.380037][T20265] [ 589.382988][T20265] dump_stack_lvl+0x168/0x230 [ 589.387696][T20265] ? show_regs_print_info+0x20/0x20 [ 589.392921][T20265] ? load_image+0x3b0/0x3b0 [ 589.397460][T20265] ? __might_sleep+0xf0/0xf0 [ 589.402074][T20265] ? __lock_acquire+0x7c60/0x7c60 [ 589.407126][T20265] ? netlink_insert+0xe7c/0x11d0 [ 589.412094][T20265] should_fail+0x38c/0x4c0 [ 589.416541][T20265] should_failslab+0x5/0x20 [ 589.421064][T20265] slab_pre_alloc_hook+0x51/0xc0 [ 589.426040][T20265] kmem_cache_alloc_node+0x47/0x2d0 [ 589.431263][T20265] ? __alloc_skb+0xf4/0x750 [ 589.435798][T20265] __alloc_skb+0xf4/0x750 [ 589.440153][T20265] netlink_sendmsg+0x645/0xbc0 [ 589.444966][T20265] ? netlink_getsockopt+0x560/0x560 [ 589.450202][T20265] ? aa_sock_msg_perm+0x94/0x150 [ 589.455170][T20265] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 589.460492][T20265] ? security_socket_sendmsg+0x7c/0xa0 [ 589.465972][T20265] ? netlink_getsockopt+0x560/0x560 [ 589.471211][T20265] ____sys_sendmsg+0x5a2/0x8c0 [ 589.476011][T20265] ? memset+0x1e/0x40 [ 589.480019][T20265] ? __sys_sendmsg_sock+0x30/0x30 [ 589.485085][T20265] ? import_iovec+0x6f/0xa0 [ 589.489624][T20265] ___sys_sendmsg+0x1f0/0x260 [ 589.494362][T20265] ? __sys_sendmsg+0x250/0x250 [ 589.499168][T20265] ? vfs_write+0x84d/0xd00 [ 589.503634][T20265] ? __fdget+0x18b/0x210 [ 589.507922][T20265] __se_sys_sendmsg+0x190/0x250 [ 589.512802][T20265] ? __x64_sys_sendmsg+0x80/0x80 [ 589.517757][T20265] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 589.523782][T20265] ? lockdep_hardirqs_on+0x94/0x140 [ 589.529019][T20265] do_syscall_64+0x4c/0xa0 [ 589.533455][T20265] ? clear_bhb_loop+0x30/0x80 [ 589.538319][T20265] ? clear_bhb_loop+0x30/0x80 [ 589.543041][T20265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.548972][T20265] RIP: 0033:0x7f8e36fa6be9 [ 589.553416][T20265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.573077][T20265] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.581525][T20265] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 589.589529][T20265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 589.597527][T20265] RBP: 00007f8e3520e090 R08: 0000000000000000 R09: 0000000000000000 [ 589.605528][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.613528][T20265] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 589.621540][T20265] [ 591.380807][T20298] FAULT_INJECTION: forcing a failure. [ 591.380807][T20298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.477253][T20298] CPU: 0 PID: 20298 Comm: syz.2.5304 Not tainted syzkaller #0 [ 591.484900][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.495074][T20298] Call Trace: [ 591.498386][T20298] [ 591.501331][T20298] dump_stack_lvl+0x168/0x230 [ 591.506039][T20298] ? show_regs_print_info+0x20/0x20 [ 591.511265][T20298] ? load_image+0x3b0/0x3b0 [ 591.515808][T20298] ? __lock_acquire+0x7c60/0x7c60 [ 591.520862][T20298] ? do_vfs_ioctl+0x11d/0x1de0 [ 591.525664][T20298] should_fail+0x38c/0x4c0 [ 591.530106][T20298] _copy_from_user+0x2e/0x170 [ 591.534815][T20298] inet_ioctl+0x187/0x400 [ 591.539173][T20298] ? inet_shutdown+0x370/0x370 [ 591.543970][T20298] ? rcu_is_watching+0x11/0xa0 [ 591.548787][T20298] sock_do_ioctl+0xd3/0x2f0 [ 591.553321][T20298] ? sock_show_fdinfo+0xb0/0xb0 [ 591.558213][T20298] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 591.564225][T20298] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 591.570239][T20298] ? lock_chain_count+0x20/0x20 [ 591.575124][T20298] sock_ioctl+0x4ed/0x6e0 [ 591.579479][T20298] ? sock_poll+0x3f0/0x3f0 [ 591.583926][T20298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 591.590110][T20298] ? sock_poll+0x3f0/0x3f0 [ 591.594558][T20298] ? sock_poll+0x3f0/0x3f0 [ 591.599011][T20298] __se_sys_ioctl+0xfa/0x170 [ 591.603639][T20298] do_syscall_64+0x4c/0xa0 [ 591.608072][T20298] ? clear_bhb_loop+0x30/0x80 [ 591.612770][T20298] ? clear_bhb_loop+0x30/0x80 [ 591.617557][T20298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.623471][T20298] RIP: 0033:0x7fa836b88be9 [ 591.627908][T20298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.647540][T20298] RSP: 002b:00007fa834df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.655987][T20298] RAX: ffffffffffffffda RBX: 00007fa836daffa0 RCX: 00007fa836b88be9 [ 591.663990][T20298] RDX: 0000200000000100 RSI: 000000000000890c RDI: 0000000000000004 [ 591.671990][T20298] RBP: 00007fa834df0090 R08: 0000000000000000 R09: 0000000000000000 [ 591.679988][T20298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.687980][T20298] R13: 00007fa836db0038 R14: 00007fa836daffa0 R15: 00007ffcb22c0e98 [ 591.696029][T20298] [ 591.768900][T20309] FAULT_INJECTION: forcing a failure. [ 591.768900][T20309] name failslab, interval 1, probability 0, space 0, times 0 [ 591.918313][T20309] CPU: 1 PID: 20309 Comm: syz.1.5306 Not tainted syzkaller #0 [ 591.925838][T20309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.935926][T20309] Call Trace: [ 591.939221][T20309] [ 591.942167][T20309] dump_stack_lvl+0x168/0x230 [ 591.946872][T20309] ? show_regs_print_info+0x20/0x20 [ 591.952098][T20309] ? load_image+0x3b0/0x3b0 [ 591.956636][T20309] ? __might_sleep+0xf0/0xf0 [ 591.961253][T20309] ? __lock_acquire+0x7c60/0x7c60 [ 591.966301][T20309] ? lockdep_unlock+0x134/0x2d0 [ 591.971170][T20309] ? lockdep_lock+0x1e0/0x1e0 [ 591.975880][T20309] should_fail+0x38c/0x4c0 [ 591.980333][T20309] should_failslab+0x5/0x20 [ 591.984855][T20309] slab_pre_alloc_hook+0x51/0xc0 [ 591.989818][T20309] __kmalloc_node+0x6e/0x3b0 [ 591.994428][T20309] ? bpf_map_area_alloc+0x47/0xe0 [ 591.999480][T20309] bpf_map_area_alloc+0x47/0xe0 [ 592.004351][T20309] htab_map_alloc+0x3c3/0x15a0 [ 592.009138][T20309] ? __might_fault+0xb7/0x110 [ 592.013852][T20309] ? htab_map_alloc_check+0x3e0/0x4d0 [ 592.019257][T20309] map_create+0x485/0x2170 [ 592.023700][T20309] __sys_bpf+0x2a4/0x670 [ 592.027971][T20309] ? bpf_link_show_fdinfo+0x340/0x340 [ 592.033375][T20309] ? vtime_user_exit+0x2dc/0x400 [ 592.038338][T20309] __x64_sys_bpf+0x78/0x90 [ 592.042773][T20309] do_syscall_64+0x4c/0xa0 [ 592.047220][T20309] ? clear_bhb_loop+0x30/0x80 [ 592.051914][T20309] ? clear_bhb_loop+0x30/0x80 [ 592.056609][T20309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.062526][T20309] RIP: 0033:0x7fca8c650be9 [ 592.066961][T20309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.086844][T20309] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.095296][T20309] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 592.103285][T20309] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 592.111271][T20309] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 592.119260][T20309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.127248][T20309] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 592.135267][T20309] [ 593.007302][T20331] FAULT_INJECTION: forcing a failure. [ 593.007302][T20331] name failslab, interval 1, probability 0, space 0, times 0 [ 593.067467][T20334] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5313'. [ 593.120591][T20331] CPU: 0 PID: 20331 Comm: syz.2.5314 Not tainted syzkaller #0 [ 593.128151][T20331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.138235][T20331] Call Trace: [ 593.141543][T20331] [ 593.144508][T20331] dump_stack_lvl+0x168/0x230 [ 593.149224][T20331] ? show_regs_print_info+0x20/0x20 [ 593.154456][T20331] ? load_image+0x3b0/0x3b0 [ 593.158992][T20331] ? __might_sleep+0xf0/0xf0 [ 593.163613][T20331] ? __lock_acquire+0x7c60/0x7c60 [ 593.168676][T20331] should_fail+0x38c/0x4c0 [ 593.173127][T20331] should_failslab+0x5/0x20 [ 593.177656][T20331] slab_pre_alloc_hook+0x51/0xc0 [ 593.182620][T20331] __kmalloc_node_track_caller+0x68/0x3a0 [ 593.188366][T20331] ? netlink_dump+0x1d3/0xcd0 [ 593.193068][T20331] ? kmem_cache_alloc_node+0x162/0x2d0 [ 593.198548][T20331] ? __alloc_skb+0xf4/0x750 [ 593.203089][T20331] ? netlink_dump+0x1d3/0xcd0 [ 593.207803][T20331] __alloc_skb+0x22c/0x750 [ 593.212252][T20331] netlink_dump+0x1d3/0xcd0 [ 593.216787][T20331] ? lockdep_hardirqs_on+0x94/0x140 [ 593.222037][T20331] ? slab_free_freelist_hook+0xea/0x170 [ 593.227615][T20331] ? netlink_lookup+0x1d0/0x1d0 [ 593.232516][T20331] netlink_recvmsg+0x653/0xdb0 [ 593.237329][T20331] ? netlink_sendmsg+0xbc0/0xbc0 [ 593.242294][T20331] ? aa_sk_perm+0x7b4/0x8f0 [ 593.246836][T20331] ? __lock_acquire+0x12d9/0x7c60 [ 593.251906][T20331] ? aa_af_perm+0x2b0/0x2b0 [ 593.256450][T20331] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 593.261775][T20331] ? security_socket_recvmsg+0x85/0xb0 [ 593.267353][T20331] ? netlink_sendmsg+0xbc0/0xbc0 [ 593.272669][T20331] ____sys_recvmsg+0x291/0x580 [ 593.277477][T20331] ? __sys_recvmsg_sock+0x40/0x40 [ 593.282544][T20331] ? import_iovec+0x6f/0xa0 [ 593.287088][T20331] ___sys_recvmsg+0x1af/0x4f0 [ 593.291797][T20331] ? __sys_recvmsg+0x250/0x250 [ 593.296601][T20331] ? __lock_acquire+0x7c60/0x7c60 [ 593.301689][T20331] ? __fdget+0x18b/0x210 [ 593.305972][T20331] __x64_sys_recvmsg+0x1dd/0x2a0 [ 593.310936][T20331] ? ___sys_recvmsg+0x4f0/0x4f0 [ 593.315813][T20331] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 593.321842][T20331] ? lockdep_hardirqs_on+0x94/0x140 [ 593.327069][T20331] do_syscall_64+0x4c/0xa0 [ 593.331532][T20331] ? clear_bhb_loop+0x30/0x80 [ 593.336239][T20331] ? clear_bhb_loop+0x30/0x80 [ 593.340949][T20331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.346866][T20331] RIP: 0033:0x7fa836b88be9 [ 593.351307][T20331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.371103][T20331] RSP: 002b:00007fa834df0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 593.379549][T20331] RAX: ffffffffffffffda RBX: 00007fa836daffa0 RCX: 00007fa836b88be9 [ 593.387568][T20331] RDX: 000000000000a000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 593.395573][T20331] RBP: 00007fa834df0090 R08: 0000000000000000 R09: 0000000000000000 [ 593.403573][T20331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.411581][T20331] R13: 00007fa836db0038 R14: 00007fa836daffa0 R15: 00007ffcb22c0e98 [ 593.419609][T20331] [ 593.647100][T20339] FAULT_INJECTION: forcing a failure. [ 593.647100][T20339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.726370][T20339] CPU: 1 PID: 20339 Comm: syz.4.5316 Not tainted syzkaller #0 [ 593.733905][T20339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.743995][T20339] Call Trace: [ 593.747302][T20339] [ 593.750257][T20339] dump_stack_lvl+0x168/0x230 [ 593.754968][T20339] ? show_regs_print_info+0x20/0x20 [ 593.760207][T20339] ? load_image+0x3b0/0x3b0 [ 593.764752][T20339] ? __lock_acquire+0x7c60/0x7c60 [ 593.769830][T20339] should_fail+0x38c/0x4c0 [ 593.774284][T20339] _copy_from_user+0x2e/0x170 [ 593.778993][T20339] iovec_from_user+0x142/0x370 [ 593.783791][T20339] __import_iovec+0x70/0x490 [ 593.788410][T20339] import_iovec+0x6f/0xa0 [ 593.792763][T20339] ___sys_recvmsg+0x420/0x4f0 [ 593.797466][T20339] ? __sys_recvmsg+0x250/0x250 [ 593.802249][T20339] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 593.808529][T20339] ? __fdget+0x18b/0x210 [ 593.812798][T20339] __x64_sys_recvmsg+0x1dd/0x2a0 [ 593.817788][T20339] ? ___sys_recvmsg+0x4f0/0x4f0 [ 593.822673][T20339] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 593.828679][T20339] ? lockdep_hardirqs_on+0x94/0x140 [ 593.833892][T20339] do_syscall_64+0x4c/0xa0 [ 593.838314][T20339] ? clear_bhb_loop+0x30/0x80 [ 593.843000][T20339] ? clear_bhb_loop+0x30/0x80 [ 593.847684][T20339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.853582][T20339] RIP: 0033:0x7f4696721be9 [ 593.858007][T20339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.877621][T20339] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 593.886047][T20339] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 593.894027][T20339] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 593.902005][T20339] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 593.909977][T20339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.917948][T20339] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 593.925943][T20339] [ 594.188923][T20352] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.5318'. [ 594.216312][T20354] FAULT_INJECTION: forcing a failure. [ 594.216312][T20354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.363508][T20354] CPU: 1 PID: 20354 Comm: syz.0.5319 Not tainted syzkaller #0 [ 594.371031][T20354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.381111][T20354] Call Trace: [ 594.384413][T20354] [ 594.387369][T20354] dump_stack_lvl+0x168/0x230 [ 594.392088][T20354] ? show_regs_print_info+0x20/0x20 [ 594.397324][T20354] ? load_image+0x3b0/0x3b0 [ 594.401868][T20354] ? __lock_acquire+0x7c60/0x7c60 [ 594.406935][T20354] should_fail+0x38c/0x4c0 [ 594.411387][T20354] _copy_to_user+0x2e/0x130 [ 594.415924][T20354] simple_read_from_buffer+0xe3/0x150 [ 594.421330][T20354] proc_fail_nth_read+0x19a/0x210 [ 594.426389][T20354] ? proc_fault_inject_write+0x2f0/0x2f0 [ 594.432053][T20354] ? fsnotify_perm+0x254/0x560 [ 594.436843][T20354] ? proc_fault_inject_write+0x2f0/0x2f0 [ 594.442499][T20354] vfs_read+0x2f6/0xcf0 [ 594.446688][T20354] ? kernel_read+0x1e0/0x1e0 [ 594.451334][T20354] ? __fget_files+0x40f/0x480 [ 594.456050][T20354] ? mutex_lock_nested+0x17/0x20 [ 594.461032][T20354] ? __fdget_pos+0x2bf/0x370 [ 594.465649][T20354] ? ksys_read+0x71/0x250 [ 594.470010][T20354] ksys_read+0x14d/0x250 [ 594.474284][T20354] ? vfs_write+0xd00/0xd00 [ 594.478737][T20354] ? lockdep_hardirqs_on+0x94/0x140 [ 594.483966][T20354] do_syscall_64+0x4c/0xa0 [ 594.488399][T20354] ? clear_bhb_loop+0x30/0x80 [ 594.493100][T20354] ? clear_bhb_loop+0x30/0x80 [ 594.497808][T20354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 594.503739][T20354] RIP: 0033:0x7f0828b775fc [ 594.508183][T20354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.527816][T20354] RSP: 002b:00007f0826dbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.536264][T20354] RAX: ffffffffffffffda RBX: 00007f0828da0090 RCX: 00007f0828b775fc [ 594.544276][T20354] RDX: 000000000000000f RSI: 00007f0826dbf0a0 RDI: 0000000000000006 [ 594.552274][T20354] RBP: 00007f0826dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 594.560269][T20354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.568266][T20354] R13: 00007f0828da0128 R14: 00007f0828da0090 R15: 00007ffefba75358 [ 594.576427][T20354] [ 594.854586][T20361] netlink: 'syz.2.5322': attribute type 11 has an invalid length. [ 595.397553][T20366] netlink: 'syz.1.5323': attribute type 10 has an invalid length. [ 595.605762][T20370] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.5325'. [ 595.763424][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5327'. [ 597.417987][T20407] netlink: 'syz.2.5336': attribute type 11 has an invalid length. [ 597.588944][T20415] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5338'. [ 597.700274][T20418] netlink: 'syz.0.5339': attribute type 10 has an invalid length. [ 597.958488][T20418] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 598.305778][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5342'. [ 599.892279][T20459] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5351'. [ 599.906846][T20458] netlink: 'syz.0.5352': attribute type 11 has an invalid length. [ 600.924149][T20479] netlink: 'syz.2.5355': attribute type 10 has an invalid length. [ 601.385494][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5358'. [ 602.142527][T20502] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5364'. [ 602.205075][T20506] netlink: 'syz.2.5366': attribute type 11 has an invalid length. [ 604.111132][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5373'. [ 604.200935][T20534] netlink: 'syz.2.5374': attribute type 10 has an invalid length. [ 604.853318][T20553] netlink: 'syz.4.5380': attribute type 11 has an invalid length. [ 605.814611][T20565] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5381'. [ 605.922116][T20566] netlink: 'syz.5.5381': attribute type 3 has an invalid length. [ 606.038395][T20566] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5381'. [ 606.091974][T20585] netlink: 'syz.0.5389': attribute type 10 has an invalid length. [ 606.677594][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'. [ 607.036722][T20601] netlink: 'syz.5.5393': attribute type 11 has an invalid length. [ 607.322027][T20608] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5395'. [ 609.090865][T20637] netlink: 'syz.0.5404': attribute type 16 has an invalid length. [ 609.180426][T20637] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5404'. [ 609.362570][T20635] netlink: 'syz.1.5403': attribute type 10 has an invalid length. [ 610.052350][T20658] netlink: 'syz.4.5409': attribute type 11 has an invalid length. [ 610.159473][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5408'. [ 610.448696][T20665] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.5411'. [ 610.699971][T20670] can: request_module (can-proto-5) failed. [ 611.168961][T20686] netlink: 'syz.4.5418': attribute type 10 has an invalid length. [ 611.338514][T20690] FAULT_INJECTION: forcing a failure. [ 611.338514][T20690] name failslab, interval 1, probability 0, space 0, times 0 [ 611.441169][T20690] CPU: 1 PID: 20690 Comm: syz.0.5419 Not tainted syzkaller #0 [ 611.448799][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.459319][T20690] Call Trace: [ 611.462615][T20690] [ 611.465557][T20690] dump_stack_lvl+0x168/0x230 [ 611.470269][T20690] ? show_regs_print_info+0x20/0x20 [ 611.475488][T20690] ? load_image+0x3b0/0x3b0 [ 611.480010][T20690] ? __might_sleep+0xf0/0xf0 [ 611.484612][T20690] ? __lock_acquire+0x7c60/0x7c60 [ 611.489650][T20690] ? netlink_insert+0xe7c/0x11d0 [ 611.494790][T20690] should_fail+0x38c/0x4c0 [ 611.499316][T20690] should_failslab+0x5/0x20 [ 611.503829][T20690] slab_pre_alloc_hook+0x51/0xc0 [ 611.508775][T20690] kmem_cache_alloc_node+0x47/0x2d0 [ 611.513982][T20690] ? __alloc_skb+0xf4/0x750 [ 611.518531][T20690] __alloc_skb+0xf4/0x750 [ 611.522879][T20690] netlink_sendmsg+0x645/0xbc0 [ 611.527665][T20690] ? netlink_getsockopt+0x560/0x560 [ 611.532880][T20690] ? aa_sock_msg_perm+0x94/0x150 [ 611.537848][T20690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 611.543142][T20690] ? security_socket_sendmsg+0x7c/0xa0 [ 611.548616][T20690] ? netlink_getsockopt+0x560/0x560 [ 611.553829][T20690] ____sys_sendmsg+0x5a2/0x8c0 [ 611.558612][T20690] ? memset+0x1e/0x40 [ 611.562600][T20690] ? __sys_sendmsg_sock+0x30/0x30 [ 611.567643][T20690] ? import_iovec+0x6f/0xa0 [ 611.572257][T20690] ___sys_sendmsg+0x1f0/0x260 [ 611.576980][T20690] ? __sys_sendmsg+0x250/0x250 [ 611.581776][T20690] ? rcu_is_watching+0x11/0xa0 [ 611.586564][T20690] ? __se_sys_sendmsg+0x81/0x250 [ 611.592915][T20690] __se_sys_sendmsg+0x190/0x250 [ 611.597925][T20690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 611.604132][T20690] ? __x64_sys_sendmsg+0x80/0x80 [ 611.609125][T20690] ? syscall_enter_from_user_mode+0x2a/0x70 [ 611.615041][T20690] do_syscall_64+0x4c/0xa0 [ 611.619482][T20690] ? clear_bhb_loop+0x30/0x80 [ 611.624186][T20690] ? clear_bhb_loop+0x30/0x80 [ 611.628896][T20690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 611.634809][T20690] RIP: 0033:0x7f0828b78be9 [ 611.639243][T20690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.658859][T20690] RSP: 002b:00007f0826de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.667288][T20690] RAX: ffffffffffffffda RBX: 00007f0828d9ffa0 RCX: 00007f0828b78be9 [ 611.675268][T20690] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 611.683246][T20690] RBP: 00007f0826de0090 R08: 0000000000000000 R09: 0000000000000000 [ 611.691335][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.699320][T20690] R13: 00007f0828da0038 R14: 00007f0828d9ffa0 R15: 00007ffefba75358 [ 611.707410][T20690] [ 615.551427][T20715] netlink: 'syz.0.5424': attribute type 11 has an invalid length. [ 615.708182][T20723] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5426'. [ 616.025483][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5427'. [ 616.672128][T20744] netlink: 'syz.5.5431': attribute type 10 has an invalid length. [ 618.115690][T20767] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5439'. [ 618.692068][T20779] netlink: 'syz.1.5442': attribute type 11 has an invalid length. [ 618.797574][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 619.020445][T20785] netlink: 'syz.5.5445': attribute type 10 has an invalid length. [ 619.839808][T20803] netlink: 'syz.0.5449': attribute type 1 has an invalid length. [ 619.920402][T20803] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5449'. [ 620.355636][T20811] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.5453'. [ 621.277376][T20825] netlink: 'syz.2.5457': attribute type 11 has an invalid length. [ 621.280920][T20831] netlink: 'syz.5.5459': attribute type 10 has an invalid length. [ 621.614013][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5461'. [ 622.112314][T20852] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5466'. [ 622.183937][T20855] FAULT_INJECTION: forcing a failure. [ 622.183937][T20855] name failslab, interval 1, probability 0, space 0, times 0 [ 622.268249][T20855] CPU: 0 PID: 20855 Comm: syz.1.5465 Not tainted syzkaller #0 [ 622.275954][T20855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.286174][T20855] Call Trace: [ 622.289486][T20855] [ 622.292452][T20855] dump_stack_lvl+0x168/0x230 [ 622.297172][T20855] ? show_regs_print_info+0x20/0x20 [ 622.302409][T20855] ? load_image+0x3b0/0x3b0 [ 622.306972][T20855] ? __might_sleep+0xf0/0xf0 [ 622.311594][T20855] ? __lock_acquire+0x7c60/0x7c60 [ 622.316650][T20855] ? lockdep_unlock+0x134/0x2d0 [ 622.321535][T20855] ? lockdep_lock+0x1e0/0x1e0 [ 622.326242][T20855] should_fail+0x38c/0x4c0 [ 622.330702][T20855] should_failslab+0x5/0x20 [ 622.335235][T20855] slab_pre_alloc_hook+0x51/0xc0 [ 622.340324][T20855] __kmalloc_node+0x6e/0x3b0 [ 622.344946][T20855] ? bpf_map_area_alloc+0x47/0xe0 [ 622.350027][T20855] bpf_map_area_alloc+0x47/0xe0 [ 622.355185][T20855] htab_map_alloc+0x3c3/0x15a0 [ 622.359994][T20855] ? __might_fault+0xb7/0x110 [ 622.364712][T20855] ? htab_map_alloc_check+0x3e0/0x4d0 [ 622.370131][T20855] map_create+0x485/0x2170 [ 622.374591][T20855] __sys_bpf+0x2a4/0x670 [ 622.378913][T20855] ? bpf_link_show_fdinfo+0x340/0x340 [ 622.384332][T20855] ? vtime_user_exit+0x2dc/0x400 [ 622.389310][T20855] __x64_sys_bpf+0x78/0x90 [ 622.393761][T20855] do_syscall_64+0x4c/0xa0 [ 622.398214][T20855] ? clear_bhb_loop+0x30/0x80 [ 622.402924][T20855] ? clear_bhb_loop+0x30/0x80 [ 622.407629][T20855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 622.413569][T20855] RIP: 0033:0x7fca8c650be9 [ 622.418018][T20855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.437648][T20855] RSP: 002b:00007fca8a897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.446099][T20855] RAX: ffffffffffffffda RBX: 00007fca8c878090 RCX: 00007fca8c650be9 [ 622.454108][T20855] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 622.462113][T20855] RBP: 00007fca8a897090 R08: 0000000000000000 R09: 0000000000000000 [ 622.470115][T20855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.478117][T20855] R13: 00007fca8c878128 R14: 00007fca8c878090 R15: 00007ffe62ffbb18 [ 622.486143][T20855] [ 622.932056][T20865] FAULT_INJECTION: forcing a failure. [ 622.932056][T20865] name failslab, interval 1, probability 0, space 0, times 0 [ 623.024828][T20865] CPU: 1 PID: 20865 Comm: syz.4.5467 Not tainted syzkaller #0 [ 623.032350][T20865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.042435][T20865] Call Trace: [ 623.045737][T20865] [ 623.048703][T20865] dump_stack_lvl+0x168/0x230 [ 623.053413][T20865] ? show_regs_print_info+0x20/0x20 [ 623.058635][T20865] ? load_image+0x3b0/0x3b0 [ 623.063173][T20865] ? __might_sleep+0xf0/0xf0 [ 623.067785][T20865] ? __lock_acquire+0x7c60/0x7c60 [ 623.072847][T20865] should_fail+0x38c/0x4c0 [ 623.077300][T20865] should_failslab+0x5/0x20 [ 623.081830][T20865] slab_pre_alloc_hook+0x51/0xc0 [ 623.086799][T20865] kmem_cache_alloc_node+0x47/0x2d0 [ 623.092018][T20865] ? __alloc_skb+0xf4/0x750 [ 623.096558][T20865] __alloc_skb+0xf4/0x750 [ 623.100929][T20865] alloc_skb_with_frags+0xa7/0x730 [ 623.106077][T20865] sock_alloc_send_pskb+0x853/0x980 [ 623.111318][T20865] ? sock_kzfree_s+0x50/0x50 [ 623.115923][T20865] ? do_raw_spin_lock+0x11d/0x280 [ 623.121005][T20865] ? __rwlock_init+0x140/0x140 [ 623.125798][T20865] ? do_raw_spin_unlock+0x11d/0x230 [ 623.131028][T20865] unix_dgram_sendmsg+0x5ef/0x1890 [ 623.136172][T20865] ? aa_sk_perm+0x7b4/0x8f0 [ 623.140718][T20865] ? unix_dgram_poll+0x660/0x660 [ 623.145696][T20865] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 623.152267][T20865] ? aa_sock_msg_perm+0x94/0x150 [ 623.157239][T20865] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 623.162548][T20865] ? security_socket_sendmsg+0x7c/0xa0 [ 623.168035][T20865] ? unix_dgram_poll+0x660/0x660 [ 623.173008][T20865] ____sys_sendmsg+0x5a2/0x8c0 [ 623.177803][T20865] ? memset+0x1e/0x40 [ 623.181810][T20865] ? __sys_sendmsg_sock+0x30/0x30 [ 623.186872][T20865] ? import_iovec+0x6f/0xa0 [ 623.191404][T20865] ___sys_sendmsg+0x1f0/0x260 [ 623.196116][T20865] ? __sys_sendmsg+0x250/0x250 [ 623.200914][T20865] ? vfs_write+0x84d/0xd00 [ 623.205376][T20865] ? __fdget+0x18b/0x210 [ 623.209652][T20865] __se_sys_sendmsg+0x190/0x250 [ 623.214530][T20865] ? __x64_sys_sendmsg+0x80/0x80 [ 623.219489][T20865] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 623.225512][T20865] ? lockdep_hardirqs_on+0x94/0x140 [ 623.230736][T20865] do_syscall_64+0x4c/0xa0 [ 623.235185][T20865] ? clear_bhb_loop+0x30/0x80 [ 623.239890][T20865] ? clear_bhb_loop+0x30/0x80 [ 623.244593][T20865] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.250515][T20865] RIP: 0033:0x7f4696721be9 [ 623.254981][T20865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.274607][T20865] RSP: 002b:00007f4694968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.283052][T20865] RAX: ffffffffffffffda RBX: 00007f4696949090 RCX: 00007f4696721be9 [ 623.291053][T20865] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 623.299051][T20865] RBP: 00007f4694968090 R08: 0000000000000000 R09: 0000000000000000 [ 623.307045][T20865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.315038][T20865] R13: 00007f4696949128 R14: 00007f4696949090 R15: 00007fffaa651a28 [ 623.323056][T20865] [ 623.686232][T20877] netlink: 'syz.5.5472': attribute type 10 has an invalid length. [ 624.365087][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371540][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.588656][T20889] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5477'. [ 624.932053][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5478'. [ 625.495580][T20909] FAULT_INJECTION: forcing a failure. [ 625.495580][T20909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.573375][T20909] CPU: 1 PID: 20909 Comm: syz.4.5482 Not tainted syzkaller #0 [ 625.580904][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.591082][T20909] Call Trace: [ 625.594390][T20909] [ 625.597341][T20909] dump_stack_lvl+0x168/0x230 [ 625.602047][T20909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 625.608240][T20909] ? show_regs_print_info+0x20/0x20 [ 625.613471][T20909] ? load_image+0x3b0/0x3b0 [ 625.618020][T20909] should_fail+0x38c/0x4c0 [ 625.622472][T20909] _copy_from_user+0x2e/0x170 [ 625.627176][T20909] iovec_from_user+0x142/0x370 [ 625.631969][T20909] __import_iovec+0x70/0x490 [ 625.636594][T20909] ? _copy_from_user+0x107/0x170 [ 625.641568][T20909] import_iovec+0x6f/0xa0 [ 625.645929][T20909] ___sys_recvmsg+0x420/0x4f0 [ 625.650647][T20909] ? __sys_recvmsg+0x250/0x250 [ 625.655444][T20909] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 625.661741][T20909] ? __fdget+0x18b/0x210 [ 625.666018][T20909] __x64_sys_recvmsg+0x1dd/0x2a0 [ 625.670987][T20909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 625.677165][T20909] ? ___sys_recvmsg+0x4f0/0x4f0 [ 625.682054][T20909] ? syscall_enter_from_user_mode+0x2a/0x70 [ 625.687987][T20909] do_syscall_64+0x4c/0xa0 [ 625.692435][T20909] ? clear_bhb_loop+0x30/0x80 [ 625.697138][T20909] ? clear_bhb_loop+0x30/0x80 [ 625.701894][T20909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 625.707812][T20909] RIP: 0033:0x7f4696721be9 [ 625.712260][T20909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.731896][T20909] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 625.740344][T20909] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 625.748344][T20909] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 625.756338][T20909] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 625.764352][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.772362][T20909] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 625.780381][T20909] [ 626.785508][T20932] netlink: 'syz.4.5488': attribute type 10 has an invalid length. [ 627.321480][T20941] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5490'. [ 627.789110][T20951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5494'. [ 629.301997][T20979] netlink: 'syz.1.5502': attribute type 10 has an invalid length. [ 629.522347][T20983] netlink: 'syz.0.5503': attribute type 13 has an invalid length. [ 630.491181][T21004] FAULT_INJECTION: forcing a failure. [ 630.491181][T21004] name failslab, interval 1, probability 0, space 0, times 0 [ 630.526515][T21004] CPU: 1 PID: 21004 Comm: syz.4.5509 Not tainted syzkaller #0 [ 630.534044][T21004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.544161][T21004] Call Trace: [ 630.547462][T21004] [ 630.550404][T21004] dump_stack_lvl+0x168/0x230 [ 630.555108][T21004] ? show_regs_print_info+0x20/0x20 [ 630.560324][T21004] ? load_image+0x3b0/0x3b0 [ 630.564841][T21004] ? __might_sleep+0xf0/0xf0 [ 630.569529][T21004] ? __lock_acquire+0x7c60/0x7c60 [ 630.574570][T21004] ? lockdep_unlock+0x134/0x2d0 [ 630.579434][T21004] ? lockdep_lock+0x1e0/0x1e0 [ 630.584132][T21004] should_fail+0x38c/0x4c0 [ 630.588574][T21004] should_failslab+0x5/0x20 [ 630.593146][T21004] slab_pre_alloc_hook+0x51/0xc0 [ 630.598094][T21004] __kmalloc_node+0x6e/0x3b0 [ 630.602692][T21004] ? bpf_map_area_alloc+0x47/0xe0 [ 630.607733][T21004] bpf_map_area_alloc+0x47/0xe0 [ 630.612589][T21004] htab_map_alloc+0x3c3/0x15a0 [ 630.617369][T21004] ? __might_fault+0xb7/0x110 [ 630.622062][T21004] ? htab_map_alloc_check+0x3e0/0x4d0 [ 630.627449][T21004] map_create+0x485/0x2170 [ 630.631915][T21004] __sys_bpf+0x2a4/0x670 [ 630.636171][T21004] ? bpf_link_show_fdinfo+0x340/0x340 [ 630.641600][T21004] ? vtime_user_exit+0x2dc/0x400 [ 630.646587][T21004] __x64_sys_bpf+0x78/0x90 [ 630.651035][T21004] do_syscall_64+0x4c/0xa0 [ 630.655467][T21004] ? clear_bhb_loop+0x30/0x80 [ 630.660151][T21004] ? clear_bhb_loop+0x30/0x80 [ 630.664841][T21004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 630.670741][T21004] RIP: 0033:0x7f4696721be9 [ 630.675168][T21004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.694784][T21004] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.703213][T21004] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 630.711195][T21004] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 630.719173][T21004] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 630.727154][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.735255][T21004] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 630.743260][T21004] [ 632.476838][T21041] netlink: 'syz.1.5518': attribute type 10 has an invalid length. [ 635.481516][T21091] netlink: 'syz.2.5533': attribute type 10 has an invalid length. [ 636.419168][T21100] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5535'. [ 636.507444][T21111] FAULT_INJECTION: forcing a failure. [ 636.507444][T21111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.625869][T21111] CPU: 0 PID: 21111 Comm: syz.1.5539 Not tainted syzkaller #0 [ 636.633394][T21111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.643477][T21111] Call Trace: [ 636.646781][T21111] [ 636.649737][T21111] dump_stack_lvl+0x168/0x230 [ 636.654481][T21111] ? show_regs_print_info+0x20/0x20 [ 636.659706][T21111] ? load_image+0x3b0/0x3b0 [ 636.664238][T21111] ? __lock_acquire+0x7c60/0x7c60 [ 636.669291][T21111] ? unix_ioctl+0x250/0x650 [ 636.673819][T21111] should_fail+0x38c/0x4c0 [ 636.678274][T21111] _copy_from_user+0x2e/0x170 [ 636.682983][T21111] sock_do_ioctl+0x178/0x2f0 [ 636.687602][T21111] ? sock_show_fdinfo+0xb0/0xb0 [ 636.692492][T21111] sock_ioctl+0x4ed/0x6e0 [ 636.696852][T21111] ? sock_poll+0x3f0/0x3f0 [ 636.701308][T21111] ? bpf_lsm_file_ioctl+0x5/0x10 [ 636.706266][T21111] ? security_file_ioctl+0x7c/0xa0 [ 636.711401][T21111] ? sock_poll+0x3f0/0x3f0 [ 636.715842][T21111] __se_sys_ioctl+0xfa/0x170 [ 636.720472][T21111] do_syscall_64+0x4c/0xa0 [ 636.724911][T21111] ? clear_bhb_loop+0x30/0x80 [ 636.729607][T21111] ? clear_bhb_loop+0x30/0x80 [ 636.734302][T21111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 636.740212][T21111] RIP: 0033:0x7fca8c650be9 [ 636.744645][T21111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.764279][T21111] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.772732][T21111] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 636.780739][T21111] RDX: 0000200000000200 RSI: 0000000000008924 RDI: 0000000000000004 [ 636.788737][T21111] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 636.796742][T21111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.804741][T21111] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 636.812761][T21111] [ 638.215467][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5546'. [ 638.378352][T21140] netlink: 'syz.2.5548': attribute type 10 has an invalid length. [ 640.383317][T21175] netlink: 'syz.4.5558': attribute type 11 has an invalid length. [ 640.844465][T21181] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.5559'. [ 641.536020][T21183] device syzkaller0 entered promiscuous mode [ 641.754554][T21186] netlink: 'syz.2.5561': attribute type 10 has an invalid length. [ 641.984119][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5565'. [ 643.955459][T21236] netlink: 'syz.1.5575': attribute type 11 has an invalid length. [ 644.855964][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5579'. [ 645.030160][T21257] netlink: 'syz.4.5580': attribute type 10 has an invalid length. [ 645.489529][T21264] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5582'. [ 645.620020][T21264] netlink: zone id is out of range [ 645.672696][T21264] netlink: zone id is out of range [ 645.678090][T21264] netlink: zone id is out of range [ 645.780787][T21264] netlink: zone id is out of range [ 645.870309][T21264] netlink: zone id is out of range [ 645.876811][T21264] netlink: zone id is out of range [ 645.957418][T21264] netlink: zone id is out of range [ 645.990768][T21264] netlink: zone id is out of range [ 645.996991][T21264] netlink: zone id is out of range [ 646.059170][T21264] netlink: zone id is out of range [ 646.285013][T21286] netlink: 'syz.4.5587': attribute type 11 has an invalid length. [ 646.724204][T21297] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.5591'. [ 647.672464][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5595'. [ 647.772263][T21316] netlink: 'syz.2.5596': attribute type 10 has an invalid length. [ 649.006786][T21345] netlink: 'syz.0.5603': attribute type 11 has an invalid length. [ 649.509978][T21364] netlink: 'syz.4.5609': attribute type 10 has an invalid length. [ 649.579768][T21360] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.5608'. [ 649.786197][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 650.807917][T21391] FAULT_INJECTION: forcing a failure. [ 650.807917][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 651.384845][T21391] CPU: 0 PID: 21391 Comm: syz.0.5616 Not tainted syzkaller #0 [ 651.392377][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.402566][T21391] Call Trace: [ 651.405881][T21391] [ 651.408843][T21391] dump_stack_lvl+0x168/0x230 [ 651.413554][T21391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.419751][T21391] ? show_regs_print_info+0x20/0x20 [ 651.424985][T21391] ? load_image+0x3b0/0x3b0 [ 651.429533][T21391] should_fail+0x38c/0x4c0 [ 651.433987][T21391] should_failslab+0x5/0x20 [ 651.438509][T21391] slab_pre_alloc_hook+0x51/0xc0 [ 651.443481][T21391] ? new_inode_pseudo+0x77/0x210 [ 651.448479][T21391] kmem_cache_alloc+0x3d/0x290 [ 651.453282][T21391] new_inode_pseudo+0x77/0x210 [ 651.458084][T21391] __ns_get_path+0x225/0x610 [ 651.462703][T21391] ns_ioctl+0x12b/0x4a0 [ 651.466886][T21391] ? rcu_lock_release+0x20/0x20 [ 651.471778][T21391] ? bpf_lsm_file_ioctl+0x5/0x10 [ 651.476739][T21391] ? security_file_ioctl+0x7c/0xa0 [ 651.481883][T21391] ? rcu_lock_release+0x20/0x20 [ 651.486849][T21391] __se_sys_ioctl+0xfa/0x170 [ 651.491467][T21391] do_syscall_64+0x4c/0xa0 [ 651.495907][T21391] ? clear_bhb_loop+0x30/0x80 [ 651.500611][T21391] ? clear_bhb_loop+0x30/0x80 [ 651.505326][T21391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 651.511254][T21391] RIP: 0033:0x7f0828b78be9 [ 651.515827][T21391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.535617][T21391] RSP: 002b:00007f0826dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.544243][T21391] RAX: ffffffffffffffda RBX: 00007f0828da0090 RCX: 00007f0828b78be9 [ 651.552250][T21391] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000007 [ 651.560249][T21391] RBP: 00007f0826dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 651.568241][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.576233][T21391] R13: 00007f0828da0128 R14: 00007f0828da0090 R15: 00007ffefba75358 [ 651.584254][T21391] [ 651.790635][T21405] netlink: 'syz.1.5622': attribute type 11 has an invalid length. [ 652.240215][T21412] netlink: 'syz.2.5623': attribute type 10 has an invalid length. [ 652.352946][T21417] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.5625'. [ 654.140916][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5629'. [ 654.673355][T21449] netlink: 'syz.5.5634': attribute type 11 has an invalid length. [ 655.611214][T21464] netlink: 'syz.2.5637': attribute type 10 has an invalid length. [ 656.065037][T21477] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5641'. [ 657.202978][T21503] netlink: 'syz.1.5648': attribute type 11 has an invalid length. [ 657.477934][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5649'. [ 658.226705][T21521] netlink: 'syz.1.5654': attribute type 10 has an invalid length. [ 658.781582][T21537] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.5658'. [ 660.148490][T21556] FAULT_INJECTION: forcing a failure. [ 660.148490][T21556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.227533][T21556] CPU: 0 PID: 21556 Comm: syz.1.5662 Not tainted syzkaller #0 [ 660.235068][T21556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.245154][T21556] Call Trace: [ 660.248458][T21556] [ 660.251419][T21556] dump_stack_lvl+0x168/0x230 [ 660.256130][T21556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.262326][T21556] ? show_regs_print_info+0x20/0x20 [ 660.267559][T21556] ? load_image+0x3b0/0x3b0 [ 660.272108][T21556] should_fail+0x38c/0x4c0 [ 660.276560][T21556] _copy_from_user+0x2e/0x170 [ 660.281268][T21556] sock_do_ioctl+0x178/0x2f0 [ 660.285983][T21556] ? sock_show_fdinfo+0xb0/0xb0 [ 660.290866][T21556] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 660.296890][T21556] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 660.302917][T21556] ? lock_chain_count+0x20/0x20 [ 660.307817][T21556] sock_ioctl+0x4ed/0x6e0 [ 660.312200][T21556] ? sock_poll+0x3f0/0x3f0 [ 660.316641][T21556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.322835][T21556] ? sock_poll+0x3f0/0x3f0 [ 660.327284][T21556] __se_sys_ioctl+0xfa/0x170 [ 660.331917][T21556] do_syscall_64+0x4c/0xa0 [ 660.336356][T21556] ? clear_bhb_loop+0x30/0x80 [ 660.341065][T21556] ? clear_bhb_loop+0x30/0x80 [ 660.345781][T21556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.351684][T21556] RIP: 0033:0x7fca8c650be9 [ 660.356121][T21556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.375854][T21556] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.384288][T21556] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 660.392268][T21556] RDX: 0000200000000200 RSI: 0000000000008924 RDI: 0000000000000004 [ 660.400250][T21556] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 660.408239][T21556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.416302][T21556] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 660.424318][T21556] [ 660.640843][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5663'. [ 660.956045][T21563] netlink: 'syz.1.5664': attribute type 11 has an invalid length. [ 661.231920][T21569] netlink: 'syz.2.5666': attribute type 10 has an invalid length. [ 661.916868][T21583] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5672'. [ 663.807599][T21614] netlink: 'syz.2.5680': attribute type 10 has an invalid length. [ 663.896398][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5678'. [ 664.471455][T21619] netlink: 'syz.2.5681': attribute type 11 has an invalid length. [ 666.188914][T21656] netlink: 'syz.5.5693': attribute type 10 has an invalid length. [ 666.416883][T21660] FAULT_INJECTION: forcing a failure. [ 666.416883][T21660] name failslab, interval 1, probability 0, space 0, times 0 [ 666.485853][T21660] CPU: 1 PID: 21660 Comm: syz.4.5694 Not tainted syzkaller #0 [ 666.493411][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.503503][T21660] Call Trace: [ 666.506803][T21660] [ 666.509749][T21660] dump_stack_lvl+0x168/0x230 [ 666.514562][T21660] ? show_regs_print_info+0x20/0x20 [ 666.519803][T21660] ? load_image+0x3b0/0x3b0 [ 666.524349][T21660] ? __might_sleep+0xf0/0xf0 [ 666.528973][T21660] ? __lock_acquire+0x7c60/0x7c60 [ 666.534044][T21660] should_fail+0x38c/0x4c0 [ 666.538502][T21660] should_failslab+0x5/0x20 [ 666.543031][T21660] slab_pre_alloc_hook+0x51/0xc0 [ 666.548012][T21660] __kmalloc+0x6b/0x330 [ 666.552219][T21660] ? tomoyo_encode+0x27e/0x540 [ 666.557018][T21660] tomoyo_encode+0x27e/0x540 [ 666.561644][T21660] tomoyo_realpath_from_path+0x5cd/0x610 [ 666.567418][T21660] tomoyo_path_number_perm+0x1d5/0x5d0 [ 666.572923][T21660] ? verify_lock_unused+0x140/0x140 [ 666.578153][T21660] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 666.583632][T21660] ? hrtimer_interrupt+0x71b/0x8d0 [ 666.588748][T21660] ? ktime_get+0x7b/0x270 [ 666.593149][T21660] security_file_ioctl+0x6c/0xa0 [ 666.598105][T21660] __se_sys_ioctl+0x48/0x170 [ 666.602706][T21660] do_syscall_64+0x4c/0xa0 [ 666.607124][T21660] ? clear_bhb_loop+0x30/0x80 [ 666.611807][T21660] ? clear_bhb_loop+0x30/0x80 [ 666.616507][T21660] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 666.622406][T21660] RIP: 0033:0x7f4696721be9 [ 666.626826][T21660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.646436][T21660] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.654859][T21660] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 666.662832][T21660] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000016 [ 666.670809][T21660] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 666.678786][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.686758][T21660] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 666.694754][T21660] [ 666.730656][T21660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.180687][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 667.769235][T21682] netlink: 'syz.4.5701': attribute type 11 has an invalid length. [ 669.508184][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 669.567798][T21719] netlink: 'syz.4.5711': attribute type 10 has an invalid length. [ 669.722079][T21724] netlink: 'syz.2.5713': attribute type 11 has an invalid length. [ 671.461163][T21765] netlink: 'syz.2.5726': attribute type 10 has an invalid length. [ 671.781941][T21773] netlink: 'syz.1.5728': attribute type 11 has an invalid length. [ 672.350718][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5731'. [ 673.653091][T21808] netlink: 'syz.4.5739': attribute type 10 has an invalid length. [ 673.894000][T21814] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5740'. [ 674.276790][T21822] netlink: 'syz.2.5743': attribute type 11 has an invalid length. [ 675.006926][T21837] netlink: 'syz.4.5749': attribute type 21 has an invalid length. [ 675.026077][T21837] netlink: 'syz.4.5749': attribute type 20 has an invalid length. [ 675.060297][T21840] netlink: 'syz.0.5748': attribute type 10 has an invalid length. [ 675.118847][T21834] netlink: 'syz.0.5748': attribute type 3 has an invalid length. [ 675.160509][T21840] netlink: 'syz.0.5748': attribute type 10 has an invalid length. [ 675.241566][T21834] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5748'. [ 675.281032][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5750'. [ 675.738637][T21852] netlink: 'syz.4.5754': attribute type 10 has an invalid length. [ 676.651888][T21873] validate_nla: 4 callbacks suppressed [ 676.651909][T21873] netlink: 'syz.4.5761': attribute type 11 has an invalid length. [ 677.628632][T21890] FAULT_INJECTION: forcing a failure. [ 677.628632][T21890] name failslab, interval 1, probability 0, space 0, times 0 [ 677.720306][T21890] CPU: 0 PID: 21890 Comm: syz.4.5767 Not tainted syzkaller #0 [ 677.727827][T21890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.737910][T21890] Call Trace: [ 677.741217][T21890] [ 677.744176][T21890] dump_stack_lvl+0x168/0x230 [ 677.748912][T21890] ? show_regs_print_info+0x20/0x20 [ 677.754148][T21890] ? load_image+0x3b0/0x3b0 [ 677.758683][T21890] ? __might_sleep+0xf0/0xf0 [ 677.763300][T21890] ? __lock_acquire+0x7c60/0x7c60 [ 677.768372][T21890] should_fail+0x38c/0x4c0 [ 677.773089][T21890] should_failslab+0x5/0x20 [ 677.777904][T21890] slab_pre_alloc_hook+0x51/0xc0 [ 677.783097][T21890] kmem_cache_alloc_node+0x47/0x2d0 [ 677.788331][T21890] ? alloc_vmap_area+0x18a/0x1b20 [ 677.793393][T21890] alloc_vmap_area+0x18a/0x1b20 [ 677.798396][T21890] ? vm_map_ram+0xba0/0xba0 [ 677.803035][T21890] __get_vm_area_node+0x14f/0x2d0 [ 677.808290][T21890] __vmalloc_node_range+0xef/0x8b0 [ 677.813437][T21890] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 677.819040][T21890] ? end_current_label_crit_section+0x170/0x170 [ 677.825323][T21890] ? __lock_acquire+0x7c60/0x7c60 [ 677.830387][T21890] ? __lock_acquire+0x13ad/0x7c60 [ 677.835466][T21890] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 677.841047][T21890] __vmalloc+0x76/0x80 [ 677.845151][T21890] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 677.850735][T21890] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 677.856193][T21890] bpf_prog_alloc+0x1a/0x1e0 [ 677.860825][T21890] bpf_prog_load+0x7b3/0x1550 [ 677.865552][T21890] ? map_freeze+0x350/0x350 [ 677.870184][T21890] ? __might_fault+0xb7/0x110 [ 677.874912][T21890] ? __might_fault+0xb3/0x110 [ 677.879630][T21890] ? bpf_lsm_bpf+0x5/0x10 [ 677.883999][T21890] ? security_bpf+0x7a/0xa0 [ 677.888537][T21890] __sys_bpf+0x4c2/0x670 [ 677.892812][T21890] ? bpf_link_show_fdinfo+0x340/0x340 [ 677.898402][T21890] ? vtime_user_exit+0x2dc/0x400 [ 677.903483][T21890] __x64_sys_bpf+0x78/0x90 [ 677.907936][T21890] do_syscall_64+0x4c/0xa0 [ 677.912384][T21890] ? clear_bhb_loop+0x30/0x80 [ 677.917098][T21890] ? clear_bhb_loop+0x30/0x80 [ 677.921807][T21890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 677.927737][T21890] RIP: 0033:0x7f4696721be9 [ 677.932317][T21890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.951956][T21890] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 677.960410][T21890] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 677.968419][T21890] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 677.976422][T21890] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 677.984430][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.992445][T21890] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 678.000486][T21890] [ 678.120201][T21895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5768'. [ 679.150189][T21908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5772'. [ 679.403649][T21915] netlink: 'syz.1.5774': attribute type 11 has an invalid length. [ 679.472669][T21890] syz.4.5767: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 679.571975][T21890] CPU: 0 PID: 21890 Comm: syz.4.5767 Not tainted syzkaller #0 [ 679.579504][T21890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.589707][T21890] Call Trace: [ 679.593021][T21890] [ 679.595974][T21890] dump_stack_lvl+0x168/0x230 [ 679.600684][T21890] ? rcu_lock_release+0x5/0x20 [ 679.605907][T21890] ? show_regs_print_info+0x20/0x20 [ 679.611133][T21890] ? load_image+0x3b0/0x3b0 [ 679.615679][T21890] warn_alloc+0x20e/0x2f0 [ 679.620047][T21890] ? slab_free_freelist_hook+0xea/0x170 [ 679.625638][T21890] ? zone_watermark_ok_safe+0x240/0x240 [ 679.631221][T21890] ? __get_vm_area_node+0x164/0x2d0 [ 679.636491][T21890] ? __get_vm_area_node+0x164/0x2d0 [ 679.641732][T21890] __vmalloc_node_range+0x2b1/0x8b0 [ 679.647046][T21890] ? end_current_label_crit_section+0x170/0x170 [ 679.653325][T21890] ? __lock_acquire+0x7c60/0x7c60 [ 679.658418][T21890] ? __lock_acquire+0x13ad/0x7c60 [ 679.663487][T21890] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 679.669065][T21890] __vmalloc+0x76/0x80 [ 679.673205][T21890] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 679.678781][T21890] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 679.684200][T21890] bpf_prog_alloc+0x1a/0x1e0 [ 679.688830][T21890] bpf_prog_load+0x7b3/0x1550 [ 679.693553][T21890] ? map_freeze+0x350/0x350 [ 679.698081][T21890] ? __might_fault+0xb7/0x110 [ 679.702800][T21890] ? __might_fault+0xb3/0x110 [ 679.707506][T21890] ? bpf_lsm_bpf+0x5/0x10 [ 679.711860][T21890] ? security_bpf+0x7a/0xa0 [ 679.716392][T21890] __sys_bpf+0x4c2/0x670 [ 679.720681][T21890] ? bpf_link_show_fdinfo+0x340/0x340 [ 679.726097][T21890] ? vtime_user_exit+0x2dc/0x400 [ 679.731195][T21890] __x64_sys_bpf+0x78/0x90 [ 679.735687][T21890] do_syscall_64+0x4c/0xa0 [ 679.740131][T21890] ? clear_bhb_loop+0x30/0x80 [ 679.744839][T21890] ? clear_bhb_loop+0x30/0x80 [ 679.749632][T21890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 679.755561][T21890] RIP: 0033:0x7f4696721be9 [ 679.760025][T21890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.779661][T21890] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.788118][T21890] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 679.796126][T21890] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 679.804126][T21890] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 679.812123][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.820124][T21890] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 679.828147][T21890] [ 680.055566][T21890] Mem-Info: [ 680.058739][T21890] active_anon:301 inactive_anon:114136 isolated_anon:0 [ 680.058739][T21890] active_file:26154 inactive_file:35948 isolated_file:0 [ 680.058739][T21890] unevictable:768 dirty:73 writeback:0 [ 680.058739][T21890] slab_reclaimable:21611 slab_unreclaimable:95784 [ 680.058739][T21890] mapped:44337 shmem:109680 pagetables:1030 bounce:0 [ 680.058739][T21890] kernel_misc_reclaimable:0 [ 680.058739][T21890] free:1258195 free_pcp:7872 free_cma:0 [ 680.180353][T21890] Node 0 active_anon:1172kB inactive_anon:456036kB active_file:104416kB inactive_file:143792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177348kB dirty:292kB writeback:0kB shmem:436844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:3920kB all_unreclaimable? no [ 680.310396][T21890] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 680.440381][T21890] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.520548][T21890] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 680.526371][T21890] Node 0 DMA32 free:1084208kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1172kB inactive_anon:470136kB active_file:104416kB inactive_file:143792kB unevictable:1536kB writepending:292kB present:3129332kB managed:2608996kB mlocked:0kB bounce:0kB free_pcp:26084kB local_pcp:5984kB free_cma:0kB [ 680.617591][T21890] lowmem_reserve[]: 0 0 0 0 0 [ 680.630704][T21890] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 680.720369][T21890] lowmem_reserve[]: 0 0 0 0 0 [ 680.725298][T21890] Node 1 Normal free:3913980kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10860kB local_pcp:7620kB free_cma:0kB [ 680.820467][T21890] lowmem_reserve[]: 0 0 0 0 0 [ 680.840498][T21890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 680.880395][T21890] Node 0 DMA32: 180*4kB (U) 5268*8kB (UME) 4165*16kB (UME) 1166*32kB (UM) 304*64kB (UME) 110*128kB (UME) 37*256kB (UME) 13*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 214*4096kB (M) = 1077120kB [ 680.946376][T21890] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 681.000415][T21890] Node 1 Normal: 57*4kB (UE) 19*8kB (UME) 22*16kB (UME) 115*32kB (UE) 45*64kB (UME) 17*128kB (UME) 6*256kB (UM) 3*512kB (U) 0*1024kB 3*2048kB (UME) 951*4096kB (M) = 3913980kB [ 681.050425][T21890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.090428][T21890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 681.121929][T21890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.160412][T21890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 681.200390][T21890] 178278 total pagecache pages [ 681.205316][T21890] 0 pages in swap cache [ 681.234692][T21890] Swap cache stats: add 0, delete 0, find 0/0 [ 681.247798][T21890] Free swap = 124996kB [ 681.270005][T21890] Total swap = 124996kB [ 681.280402][T21890] 2097051 pages RAM [ 681.284343][T21890] 0 pages HighMem/MovableOnly [ 681.310403][T21890] 410815 pages reserved [ 681.314688][T21890] 0 pages cma reserved [ 681.477010][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5783'. [ 684.736973][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5800'. [ 685.554223][T22026] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5805'. [ 685.710464][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5805'. [ 686.101193][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.107564][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.733571][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5816'. [ 688.349250][T22077] FAULT_INJECTION: forcing a failure. [ 688.349250][T22077] name failslab, interval 1, probability 0, space 0, times 0 [ 688.530347][T22077] CPU: 0 PID: 22077 Comm: syz.4.5820 Not tainted syzkaller #0 [ 688.537875][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 688.548065][T22077] Call Trace: [ 688.551383][T22077] [ 688.554338][T22077] dump_stack_lvl+0x168/0x230 [ 688.559173][T22077] ? show_regs_print_info+0x20/0x20 [ 688.564425][T22077] ? load_image+0x3b0/0x3b0 [ 688.568972][T22077] ? __might_sleep+0xf0/0xf0 [ 688.573607][T22077] ? __lock_acquire+0x7c60/0x7c60 [ 688.578714][T22077] should_fail+0x38c/0x4c0 [ 688.583179][T22077] should_failslab+0x5/0x20 [ 688.587962][T22077] slab_pre_alloc_hook+0x51/0xc0 [ 688.593730][T22077] kmem_cache_alloc_node_trace+0x4a/0x300 [ 688.599746][T22077] ? __get_vm_area_node+0x119/0x2d0 [ 688.605114][T22077] __get_vm_area_node+0x119/0x2d0 [ 688.610262][T22077] __vmalloc_node_range+0xef/0x8b0 [ 688.615394][T22077] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 688.620980][T22077] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 688.626998][T22077] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 688.632584][T22077] __vmalloc+0x76/0x80 [ 688.636809][T22077] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 688.642390][T22077] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 688.647806][T22077] bpf_prog_alloc+0x1a/0x1e0 [ 688.652449][T22077] __get_filter+0xfb/0x410 [ 688.656916][T22077] sk_attach_filter+0x20/0x140 [ 688.661721][T22077] tun_attach_filter+0x180/0x2a0 [ 688.666708][T22077] __tun_chr_ioctl+0x17ea/0x1e70 [ 688.671687][T22077] ? tun_flow_create+0x310/0x310 [ 688.676670][T22077] ? bpf_lsm_file_ioctl+0x5/0x10 [ 688.681631][T22077] ? security_file_ioctl+0x7c/0xa0 [ 688.686777][T22077] ? tun_chr_poll+0x620/0x620 [ 688.691494][T22077] __se_sys_ioctl+0xfa/0x170 [ 688.696115][T22077] do_syscall_64+0x4c/0xa0 [ 688.700558][T22077] ? clear_bhb_loop+0x30/0x80 [ 688.705262][T22077] ? clear_bhb_loop+0x30/0x80 [ 688.709963][T22077] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.715876][T22077] RIP: 0033:0x7f4696721be9 [ 688.720317][T22077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.739947][T22077] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.748402][T22077] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 688.756442][T22077] RDX: 0000200000000180 RSI: 00000000401054d5 RDI: 0000000000000003 [ 688.764454][T22077] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 688.772464][T22077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.780478][T22077] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 688.788519][T22077] [ 691.086169][T22082] netlink: 'syz.1.5821': attribute type 2 has an invalid length. [ 691.145962][T22082] netlink: 'syz.1.5821': attribute type 8 has an invalid length. [ 691.175926][T22082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5821'. [ 691.964121][T22106] chnl_net:caif_netlink_parms(): no params data found [ 692.661025][T22106] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.668221][T22106] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.703108][T22106] device bridge_slave_0 entered promiscuous mode [ 693.134986][T22106] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.160054][T22106] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.186667][T22106] device bridge_slave_1 entered promiscuous mode [ 693.533780][T22106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.756248][ T4223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.817246][T22106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.834659][ T4250] Bluetooth: hci5: command 0x0409 tx timeout [ 694.021776][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5836'. [ 694.167114][ T4223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.206428][T22106] team0: Port device team_slave_0 added [ 694.228267][T22106] team0: Port device team_slave_1 added [ 694.508031][ T4223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.641116][T22106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.648144][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.725800][T22106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.890048][ T4223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.958996][T22106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.987282][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.085986][T22106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.403583][T22106] device hsr_slave_0 entered promiscuous mode [ 695.525335][T22106] device hsr_slave_1 entered promiscuous mode [ 695.570793][T22106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.578417][T22106] Cannot create hsr debugfs directory [ 695.914839][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 697.505268][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5853'. [ 698.000362][ T4226] Bluetooth: hci5: command 0x040f tx timeout [ 698.238439][T22227] FAULT_INJECTION: forcing a failure. [ 698.238439][T22227] name failslab, interval 1, probability 0, space 0, times 0 [ 698.305173][T22106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 698.343580][T22106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 698.415435][T22106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 698.422545][T22227] CPU: 1 PID: 22227 Comm: syz.1.5857 Not tainted syzkaller #0 [ 698.430048][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.440136][T22227] Call Trace: [ 698.443484][T22227] [ 698.446452][T22227] dump_stack_lvl+0x168/0x230 [ 698.451174][T22227] ? show_regs_print_info+0x20/0x20 [ 698.456491][T22227] ? load_image+0x3b0/0x3b0 [ 698.461049][T22227] ? __might_sleep+0xf0/0xf0 [ 698.465812][T22227] ? __lock_acquire+0x7c60/0x7c60 [ 698.470887][T22227] should_fail+0x38c/0x4c0 [ 698.475349][T22227] should_failslab+0x5/0x20 [ 698.479888][T22227] slab_pre_alloc_hook+0x51/0xc0 [ 698.484865][T22227] __kmalloc+0x6b/0x330 [ 698.489063][T22227] ? sock_kmalloc+0x92/0xf0 [ 698.493612][T22227] sock_kmalloc+0x92/0xf0 [ 698.497975][T22227] ____sys_sendmsg+0x1ac/0x8c0 [ 698.502976][T22227] ? memset+0x1e/0x40 [ 698.507499][T22227] ? __sys_sendmsg_sock+0x30/0x30 [ 698.512577][T22227] ? import_iovec+0x6f/0xa0 [ 698.517123][T22227] ___sys_sendmsg+0x1f0/0x260 [ 698.521849][T22227] ? __sys_sendmsg+0x250/0x250 [ 698.526666][T22227] ? vfs_write+0x84d/0xd00 [ 698.531132][T22227] ? __fdget+0x18b/0x210 [ 698.535405][T22227] __se_sys_sendmsg+0x190/0x250 [ 698.540296][T22227] ? __x64_sys_sendmsg+0x80/0x80 [ 698.545267][T22227] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 698.551306][T22227] ? lockdep_hardirqs_on+0x94/0x140 [ 698.556546][T22227] do_syscall_64+0x4c/0xa0 [ 698.561003][T22227] ? clear_bhb_loop+0x30/0x80 [ 698.565708][T22227] ? clear_bhb_loop+0x30/0x80 [ 698.570408][T22227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 698.576313][T22227] RIP: 0033:0x7fca8c650be9 [ 698.580741][T22227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.600367][T22227] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.608803][T22227] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 698.616779][T22227] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 698.624755][T22227] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 698.633274][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.641255][T22227] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 698.649337][T22227] [ 698.745410][T22106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 698.884889][ T4223] bond0: (slave wlan1): Releasing backup interface [ 699.378295][T22106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.448626][T22106] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.520946][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.540740][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.648517][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.697726][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.760894][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.768020][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.814695][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.827415][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.863819][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.870995][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.895002][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.929367][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 700.010838][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 700.032242][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.063084][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.080399][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 700.127971][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.149324][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.313773][T22106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.350584][T22106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.389922][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.401960][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 700.433502][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.456557][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.491482][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.548194][ T4223] device hsr_slave_0 left promiscuous mode [ 700.567087][ T4223] device hsr_slave_1 left promiscuous mode [ 700.634395][T22291] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.5865'. [ 700.650703][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.658243][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.697281][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.750382][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.839544][T22291] net_ratelimit: 30 callbacks suppressed [ 700.839566][T22291] netlink: del zone limit has 8 unknown bytes [ 700.871595][ T4223] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 700.878827][ T4223] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 700.975594][ T4223] device bridge_slave_1 left promiscuous mode [ 701.013660][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.047266][ T4223] device bridge_slave_0 left promiscuous mode [ 701.055391][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.127377][ T4223] device veth0_macvtap left promiscuous mode [ 701.140729][ T4223] device veth1_vlan left promiscuous mode [ 701.793683][ T4223] team0 (unregistering): Port device geneve1 removed [ 702.193929][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 702.270788][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 702.311674][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.367650][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.564890][ T4223] team0 (unregistering): Port device dummy0 removed [ 702.631793][ T4223] team0 (unregistering): Port device bond0 removed [ 702.688868][ T4223] bond0 (unregistering): Released all slaves [ 702.849337][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 702.869419][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5867'. [ 703.232011][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 703.239579][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.309595][T22106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.388368][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 703.418679][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 703.491778][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 703.527857][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 703.571536][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 703.620772][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 703.662412][T22106] device veth0_vlan entered promiscuous mode [ 703.712881][T22106] device veth1_vlan entered promiscuous mode [ 703.822549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 703.863561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 703.904404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 703.980699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 704.013738][T22106] device veth0_macvtap entered promiscuous mode [ 704.052884][T22106] device veth1_macvtap entered promiscuous mode [ 704.131512][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.173651][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.227127][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.281815][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.315543][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.353201][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.408597][T22106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.450955][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 704.465153][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.520105][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.550371][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.604355][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.643326][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.690717][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.720384][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.751342][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.791766][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.813308][T22106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.854064][T22357] FAULT_INJECTION: forcing a failure. [ 704.854064][T22357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.978283][T22357] CPU: 0 PID: 22357 Comm: syz.1.5879 Not tainted syzkaller #0 [ 704.985816][T22357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.996000][T22357] Call Trace: [ 704.999316][T22357] [ 705.002285][T22357] dump_stack_lvl+0x168/0x230 [ 705.007018][T22357] ? show_regs_print_info+0x20/0x20 [ 705.012353][T22357] ? load_image+0x3b0/0x3b0 [ 705.017001][T22357] ? __lock_acquire+0x7c60/0x7c60 [ 705.022218][T22357] ? finish_lock_switch+0x12f/0x280 [ 705.027469][T22357] should_fail+0x38c/0x4c0 [ 705.031944][T22357] _copy_from_user+0x2e/0x170 [ 705.036692][T22357] ip_tunnel_siocdevprivate+0xa3/0x1c0 [ 705.042226][T22357] ? ip_tunnel_update+0xad0/0xad0 [ 705.047346][T22357] ipip6_tunnel_siocdevprivate+0x1cb/0x14f0 [ 705.053283][T22357] ? sit_tunnel_xmit+0x2250/0x2250 [ 705.058437][T22357] ? __lock_acquire+0x7c60/0x7c60 [ 705.063490][T22357] ? do_raw_spin_lock+0x11d/0x280 [ 705.068552][T22357] ? __rwlock_init+0x140/0x140 [ 705.073352][T22357] ? do_raw_spin_unlock+0x11d/0x230 [ 705.078591][T22357] ? __mutex_lock_common+0x14d8/0x2390 [ 705.084176][T22357] ? full_name_hash+0x8e/0xe0 [ 705.088907][T22357] dev_ifsioc+0xaf5/0xe70 [ 705.093274][T22357] ? dev_ioctl+0x5e8/0xe50 [ 705.097739][T22357] ? dev_ioctl+0xe50/0xe50 [ 705.102215][T22357] ? full_name_hash+0x8e/0xe0 [ 705.106953][T22357] dev_ioctl+0x5f9/0xe50 [ 705.111234][T22357] ? get_user_ifreq+0xc7/0x170 [ 705.116052][T22357] sock_ioctl+0x67b/0x6e0 [ 705.120462][T22357] ? sock_poll+0x3f0/0x3f0 [ 705.124983][T22357] ? bpf_lsm_file_ioctl+0x5/0x10 [ 705.129948][T22357] ? security_file_ioctl+0x7c/0xa0 [ 705.135212][T22357] ? sock_poll+0x3f0/0x3f0 [ 705.139668][T22357] __se_sys_ioctl+0xfa/0x170 [ 705.144301][T22357] do_syscall_64+0x4c/0xa0 [ 705.148749][T22357] ? clear_bhb_loop+0x30/0x80 [ 705.153460][T22357] ? clear_bhb_loop+0x30/0x80 [ 705.158216][T22357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.164140][T22357] RIP: 0033:0x7fca8c650be9 [ 705.168585][T22357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.188349][T22357] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.196827][T22357] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 705.204855][T22357] RDX: 0000200000000900 RSI: 00000000000089f2 RDI: 0000000000000005 [ 705.212997][T22357] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 705.221137][T22357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.229340][T22357] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 705.237423][T22357] [ 705.912570][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.931696][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.968281][T22106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.990937][T22106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.999781][T22106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.070368][T22106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.181905][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5883'. [ 706.404057][T22302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.426088][T22302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.460720][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 706.532507][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.554077][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.599784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 708.522551][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5897'. [ 708.743893][T22439] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5901'. [ 708.803181][T22439] tc_dump_action: action bad kind [ 710.553034][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5913'. [ 711.178572][T22499] FAULT_INJECTION: forcing a failure. [ 711.178572][T22499] name failslab, interval 1, probability 0, space 0, times 0 [ 711.266953][T22499] CPU: 0 PID: 22499 Comm: syz.0.5918 Not tainted syzkaller #0 [ 711.274492][T22499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.284579][T22499] Call Trace: [ 711.287887][T22499] [ 711.290841][T22499] dump_stack_lvl+0x168/0x230 [ 711.295559][T22499] ? show_regs_print_info+0x20/0x20 [ 711.300793][T22499] ? load_image+0x3b0/0x3b0 [ 711.305432][T22499] ? __might_sleep+0xf0/0xf0 [ 711.310147][T22499] ? __lock_acquire+0x7c60/0x7c60 [ 711.315215][T22499] should_fail+0x38c/0x4c0 [ 711.319682][T22499] should_failslab+0x5/0x20 [ 711.324213][T22499] slab_pre_alloc_hook+0x51/0xc0 [ 711.329198][T22499] __kmalloc_node+0x6e/0x3b0 [ 711.333833][T22499] ? kvmalloc_node+0x84/0x130 [ 711.338684][T22499] ? __might_fault+0xb3/0x110 [ 711.343404][T22499] kvmalloc_node+0x84/0x130 [ 711.348032][T22499] map_update_elem+0x53d/0x770 [ 711.353150][T22499] __sys_bpf+0x3fb/0x670 [ 711.357790][T22499] ? bpf_link_show_fdinfo+0x340/0x340 [ 711.363307][T22499] ? vtime_user_exit+0x2dc/0x400 [ 711.368300][T22499] __x64_sys_bpf+0x78/0x90 [ 711.372755][T22499] do_syscall_64+0x4c/0xa0 [ 711.377200][T22499] ? clear_bhb_loop+0x30/0x80 [ 711.381937][T22499] ? clear_bhb_loop+0x30/0x80 [ 711.386653][T22499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 711.392577][T22499] RIP: 0033:0x7f0828b78be9 [ 711.397026][T22499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.416661][T22499] RSP: 002b:00007f0826de0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.425113][T22499] RAX: ffffffffffffffda RBX: 00007f0828d9ffa0 RCX: 00007f0828b78be9 [ 711.433318][T22499] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000002 [ 711.441327][T22499] RBP: 00007f0826de0090 R08: 0000000000000000 R09: 0000000000000000 [ 711.449333][T22499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.457557][T22499] R13: 00007f0828da0038 R14: 00007f0828d9ffa0 R15: 00007ffefba75358 [ 711.465585][T22499] [ 712.860029][T22525] netlink: 'syz.0.5925': attribute type 10 has an invalid length. [ 712.934768][T22525] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5925'. [ 713.341168][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5930'. [ 714.021067][T22555] netlink: 'syz.2.5933': attribute type 4 has an invalid length. [ 714.091556][T22555] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.5933'. [ 714.661532][T22569] FAULT_INJECTION: forcing a failure. [ 714.661532][T22569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.720602][T22569] CPU: 0 PID: 22569 Comm: syz.0.5940 Not tainted syzkaller #0 [ 714.728126][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.738212][T22569] Call Trace: [ 714.741539][T22569] [ 714.744500][T22569] dump_stack_lvl+0x168/0x230 [ 714.749206][T22569] ? show_regs_print_info+0x20/0x20 [ 714.754425][T22569] ? load_image+0x3b0/0x3b0 [ 714.758948][T22569] ? __lock_acquire+0x7c60/0x7c60 [ 714.764000][T22569] should_fail+0x38c/0x4c0 [ 714.768436][T22569] _copy_to_user+0x2e/0x130 [ 714.772955][T22569] move_addr_to_user+0x146/0x1e0 [ 714.777920][T22569] ____sys_recvmsg+0x2f3/0x580 [ 714.782709][T22569] ? __sys_recvmsg_sock+0x40/0x40 [ 714.787752][T22569] ? import_iovec+0x6f/0xa0 [ 714.792266][T22569] ___sys_recvmsg+0x1af/0x4f0 [ 714.797049][T22569] ? __sys_recvmsg+0x250/0x250 [ 714.801825][T22569] ? __lock_acquire+0x7c60/0x7c60 [ 714.806875][T22569] ? __fdget+0x18b/0x210 [ 714.811124][T22569] __x64_sys_recvmsg+0x1dd/0x2a0 [ 714.816071][T22569] ? ___sys_recvmsg+0x4f0/0x4f0 [ 714.820928][T22569] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 714.826952][T22569] ? lockdep_hardirqs_on+0x94/0x140 [ 714.832175][T22569] do_syscall_64+0x4c/0xa0 [ 714.836614][T22569] ? clear_bhb_loop+0x30/0x80 [ 714.841300][T22569] ? clear_bhb_loop+0x30/0x80 [ 714.846082][T22569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 714.851988][T22569] RIP: 0033:0x7f0828b78be9 [ 714.856432][T22569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.876062][T22569] RSP: 002b:00007f0826de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 714.884501][T22569] RAX: ffffffffffffffda RBX: 00007f0828d9ffa0 RCX: 00007f0828b78be9 [ 714.892477][T22569] RDX: 0000000000010000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 714.900470][T22569] RBP: 00007f0826de0090 R08: 0000000000000000 R09: 0000000000000000 [ 714.908557][T22569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.916532][T22569] R13: 00007f0828da0038 R14: 00007f0828d9ffa0 R15: 00007ffefba75358 [ 714.924526][T22569] [ 716.923140][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5947'. [ 718.166324][T22631] netlink: 212832 bytes leftover after parsing attributes in process `syz.5.5956'. [ 718.399149][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.470532][T22616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5953'. [ 718.619155][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.826844][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.296330][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.507468][T22622] chnl_net:caif_netlink_parms(): no params data found [ 719.920581][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 720.414276][T22622] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.502658][T22692] FAULT_INJECTION: forcing a failure. [ 720.502658][T22692] name failslab, interval 1, probability 0, space 0, times 0 [ 720.518182][T22622] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.559603][T22622] device bridge_slave_0 entered promiscuous mode [ 720.570464][T22692] CPU: 0 PID: 22692 Comm: syz.5.5970 Not tainted syzkaller #0 [ 720.578205][T22692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.588290][T22692] Call Trace: [ 720.591600][T22692] [ 720.594556][T22692] dump_stack_lvl+0x168/0x230 [ 720.599270][T22692] ? show_regs_print_info+0x20/0x20 [ 720.604505][T22692] ? load_image+0x3b0/0x3b0 [ 720.609041][T22692] ? __might_sleep+0xf0/0xf0 [ 720.613659][T22692] ? __lock_acquire+0x7c60/0x7c60 [ 720.618717][T22692] should_fail+0x38c/0x4c0 [ 720.623176][T22692] should_failslab+0x5/0x20 [ 720.627700][T22692] slab_pre_alloc_hook+0x51/0xc0 [ 720.632683][T22692] ? __request_module+0x2f0/0x910 [ 720.637754][T22692] __kmalloc_track_caller+0x69/0x330 [ 720.643070][T22692] ? __request_module+0x2f0/0x910 [ 720.648131][T22692] kstrdup+0x32/0x70 [ 720.652060][T22692] __request_module+0x2f0/0x910 [ 720.656952][T22692] ? umd_cleanup+0x110/0x110 [ 720.661595][T22692] ? __lock_acquire+0x7c60/0x7c60 [ 720.666656][T22692] ? rcu_lock_release+0x5/0x20 [ 720.671463][T22692] inet6_create+0x423/0x1150 [ 720.676093][T22692] __sock_create+0x47b/0x900 [ 720.680808][T22692] __sys_socketpair+0x1bd/0x540 [ 720.685701][T22692] __x64_sys_socketpair+0x97/0xb0 [ 720.690770][T22692] do_syscall_64+0x4c/0xa0 [ 720.695213][T22692] ? clear_bhb_loop+0x30/0x80 [ 720.700082][T22692] ? clear_bhb_loop+0x30/0x80 [ 720.704788][T22692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 720.710708][T22692] RIP: 0033:0x7f8e36fa6be9 [ 720.715149][T22692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.734778][T22692] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 720.743332][T22692] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 720.751327][T22692] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 720.759326][T22692] RBP: 00007f8e3520e090 R08: 0000000000000000 R09: 0000000000000000 [ 720.767454][T22692] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 720.775454][T22692] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 720.783467][T22692] [ 720.990956][T22622] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.006775][T22622] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.035017][T22622] device bridge_slave_1 entered promiscuous mode [ 721.221475][T22622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.298030][T22622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.503362][T22622] team0: Port device team_slave_0 added [ 721.654457][T22622] team0: Port device team_slave_1 added [ 721.946249][T22622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.976939][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.003565][ T4517] Bluetooth: hci2: command 0x041b tx timeout [ 722.130402][T22622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.430489][T22622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.437642][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.568656][T22622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.621920][T22746] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5983'. [ 723.169144][T22760] FAULT_INJECTION: forcing a failure. [ 723.169144][T22760] name failslab, interval 1, probability 0, space 0, times 0 [ 723.431606][T22622] device hsr_slave_0 entered promiscuous mode [ 723.464991][T22622] device hsr_slave_1 entered promiscuous mode [ 723.520493][T22760] CPU: 0 PID: 22760 Comm: syz.4.5984 Not tainted syzkaller #0 [ 723.528329][T22760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.538429][T22760] Call Trace: [ 723.541747][T22760] [ 723.544717][T22760] dump_stack_lvl+0x168/0x230 [ 723.549452][T22760] ? show_regs_print_info+0x20/0x20 [ 723.554697][T22760] ? load_image+0x3b0/0x3b0 [ 723.559261][T22760] ? __might_sleep+0xf0/0xf0 [ 723.563905][T22760] ? __lock_acquire+0x7c60/0x7c60 [ 723.568996][T22760] should_fail+0x38c/0x4c0 [ 723.573469][T22760] should_failslab+0x5/0x20 [ 723.578010][T22760] slab_pre_alloc_hook+0x51/0xc0 [ 723.582993][T22760] __kmalloc_node_track_caller+0x68/0x3a0 [ 723.588750][T22760] ? alloc_skb_with_frags+0xa7/0x730 [ 723.594055][T22760] ? kmem_cache_alloc_node+0x162/0x2d0 [ 723.599536][T22760] ? __alloc_skb+0xf4/0x750 [ 723.604067][T22760] ? alloc_skb_with_frags+0xa7/0x730 [ 723.609374][T22760] __alloc_skb+0x22c/0x750 [ 723.613815][T22760] alloc_skb_with_frags+0xa7/0x730 [ 723.618952][T22760] ? trace_event_raw_event_lock+0x250/0x250 [ 723.624879][T22760] sock_alloc_send_pskb+0x853/0x980 [ 723.630128][T22760] ? sock_kzfree_s+0x50/0x50 [ 723.634762][T22760] packet_sendmsg+0x33e5/0x4fe0 [ 723.639669][T22760] ? __might_sleep+0xf0/0xf0 [ 723.644326][T22760] ? aa_sk_perm+0x7b4/0x8f0 [ 723.648870][T22760] ? packet_getsockopt+0x950/0x950 [ 723.654022][T22760] ? aa_sock_msg_perm+0x94/0x150 [ 723.658982][T22760] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 723.664307][T22760] ? security_socket_sendmsg+0x7c/0xa0 [ 723.669788][T22760] ? packet_getsockopt+0x950/0x950 [ 723.674913][T22760] ____sys_sendmsg+0x5a2/0x8c0 [ 723.679707][T22760] ? memset+0x1e/0x40 [ 723.683813][T22760] ? __sys_sendmsg_sock+0x30/0x30 [ 723.688869][T22760] ? import_iovec+0x6f/0xa0 [ 723.693392][T22760] ___sys_sendmsg+0x1f0/0x260 [ 723.698099][T22760] ? __sys_sendmsg+0x250/0x250 [ 723.702898][T22760] ? trace_event_raw_event_lock+0x250/0x250 [ 723.708802][T22760] ? vfs_write+0x84d/0xd00 [ 723.713264][T22760] ? __fdget+0x18b/0x210 [ 723.717525][T22760] __se_sys_sendmsg+0x190/0x250 [ 723.722399][T22760] ? __x64_sys_sendmsg+0x80/0x80 [ 723.727347][T22760] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 723.733359][T22760] ? lockdep_hardirqs_on+0x94/0x140 [ 723.738587][T22760] do_syscall_64+0x4c/0xa0 [ 723.743016][T22760] ? clear_bhb_loop+0x30/0x80 [ 723.747701][T22760] ? clear_bhb_loop+0x30/0x80 [ 723.752390][T22760] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.758294][T22760] RIP: 0033:0x7f4696721be9 [ 723.762727][T22760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.782341][T22760] RSP: 002b:00007f4694989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.790770][T22760] RAX: ffffffffffffffda RBX: 00007f4696948fa0 RCX: 00007f4696721be9 [ 723.798773][T22760] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000004 [ 723.806751][T22760] RBP: 00007f4694989090 R08: 0000000000000000 R09: 0000000000000000 [ 723.814730][T22760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.822710][T22760] R13: 00007f4696949038 R14: 00007f4696948fa0 R15: 00007fffaa651a28 [ 723.830896][T22760] [ 723.845544][T22622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.870808][T22622] Cannot create hsr debugfs directory [ 724.070444][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 725.063284][ T9] bond0: (slave wlan1): Releasing backup interface [ 725.989651][ T9] device hsr_slave_0 left promiscuous mode [ 726.151266][ T4241] Bluetooth: hci2: command 0x0419 tx timeout [ 726.258008][ T9] device hsr_slave_1 left promiscuous mode [ 726.310528][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.318122][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.458216][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.476878][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.521190][ T9] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 726.540415][ T9] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 726.577269][ T9] device bridge_slave_0 left promiscuous mode [ 726.600512][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.650687][ T9] device veth1_macvtap left promiscuous mode [ 726.673750][ T9] device veth0_macvtap left promiscuous mode [ 726.679904][ T9] device veth1_vlan left promiscuous mode [ 727.193676][ T9] team0 (unregistering): Port device geneve1 removed [ 727.557129][ T9] team0 (unregistering): Port device team_slave_1 removed [ 727.623285][ T9] team0 (unregistering): Port device team_slave_0 removed [ 727.730693][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.880768][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.930645][ T9] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 728.329501][ T9] team0 (unregistering): Port device bond0 removed [ 728.427533][ T9] bond0 (unregistering): Released all slaves [ 728.693483][T22792] FAULT_INJECTION: forcing a failure. [ 728.693483][T22792] name failslab, interval 1, probability 0, space 0, times 0 [ 728.781505][T22792] CPU: 0 PID: 22792 Comm: syz.2.5991 Not tainted syzkaller #0 [ 728.789028][T22792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.799116][T22792] Call Trace: [ 728.802421][T22792] [ 728.805476][T22792] dump_stack_lvl+0x168/0x230 [ 728.810196][T22792] ? show_regs_print_info+0x20/0x20 [ 728.815427][T22792] ? load_image+0x3b0/0x3b0 [ 728.819978][T22792] ? __lock_acquire+0x7c60/0x7c60 [ 728.825047][T22792] should_fail+0x38c/0x4c0 [ 728.829508][T22792] should_failslab+0x5/0x20 [ 728.834047][T22792] slab_pre_alloc_hook+0x51/0xc0 [ 728.839025][T22792] __kmalloc+0x6b/0x330 [ 728.843204][T22792] ? ioctl_standard_iw_point+0x4d1/0xca0 [ 728.848895][T22792] ioctl_standard_iw_point+0x4d1/0xca0 [ 728.854399][T22792] ? __cfg80211_wext_giwauth+0x10/0x10 [ 728.859898][T22792] ? iw_handler_get_iwstats+0x240/0x240 [ 728.865525][T22792] ? mutex_lock_io_nested+0x60/0x60 [ 728.870794][T22792] ? apparmor_capable+0x12c/0x190 [ 728.875844][T22792] ? full_name_hash+0x8e/0xe0 [ 728.880553][T22792] ? __cfg80211_wext_giwauth+0x10/0x10 [ 728.886056][T22792] ioctl_standard_call+0xb3/0x2b0 [ 728.891132][T22792] ? __cfg80211_wext_giwauth+0x10/0x10 [ 728.896719][T22792] wext_ioctl_dispatch+0x3da/0x470 [ 728.901885][T22792] ? wext_ioctl_dispatch+0x470/0x470 [ 728.907302][T22792] ? iw_handler_get_private+0x1e0/0x1e0 [ 728.913157][T22792] wext_handle_ioctl+0x104/0x1c0 [ 728.918125][T22792] ? call_commit_handler+0xf0/0xf0 [ 728.923284][T22792] sock_ioctl+0x145/0x6e0 [ 728.927659][T22792] ? sock_poll+0x3f0/0x3f0 [ 728.932113][T22792] ? bpf_lsm_file_ioctl+0x5/0x10 [ 728.937071][T22792] ? security_file_ioctl+0x7c/0xa0 [ 728.942215][T22792] ? sock_poll+0x3f0/0x3f0 [ 728.946664][T22792] __se_sys_ioctl+0xfa/0x170 [ 728.951296][T22792] do_syscall_64+0x4c/0xa0 [ 728.955765][T22792] ? clear_bhb_loop+0x30/0x80 [ 728.960471][T22792] ? clear_bhb_loop+0x30/0x80 [ 728.965191][T22792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.971123][T22792] RIP: 0033:0x7fb13d507be9 [ 728.975570][T22792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.995220][T22792] RSP: 002b:00007fb13b74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.003852][T22792] RAX: ffffffffffffffda RBX: 00007fb13d72f090 RCX: 00007fb13d507be9 [ 729.011862][T22792] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005 [ 729.019883][T22792] RBP: 00007fb13b74e090 R08: 0000000000000000 R09: 0000000000000000 [ 729.027886][T22792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.035991][T22792] R13: 00007fb13d72f128 R14: 00007fb13d72f090 R15: 00007fff83e2fd08 [ 729.044011][T22792] [ 730.018824][T22622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 730.179092][T22622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.363642][T22622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 730.403922][T22622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 730.868648][T22622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.947970][T22622] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.000806][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.008925][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.064018][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 731.081329][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 731.124171][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.131470][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.177095][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 731.202536][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 731.248208][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.255416][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.299930][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 731.324626][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 731.365147][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 731.435451][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 731.484171][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 731.512250][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 731.610563][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 731.665435][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 731.755200][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 731.772231][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.904906][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 731.931902][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 732.074037][T22622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 732.603782][T22908] device wlan0 entered promiscuous mode [ 732.754151][T22622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.780844][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 732.788457][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 733.312216][T22908] device syzkaller0 entered promiscuous mode [ 734.190593][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 734.221372][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 734.272411][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 734.301522][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 734.345798][T22622] device veth0_vlan entered promiscuous mode [ 734.436479][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 734.455127][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 734.494783][T22622] device veth1_vlan entered promiscuous mode [ 734.628218][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.667893][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 734.721830][T22622] device veth0_macvtap entered promiscuous mode [ 734.780832][T22622] device veth1_macvtap entered promiscuous mode [ 734.845608][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.900497][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.950393][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.001051][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.045637][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.092866][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.142382][T22622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.150996][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.162058][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.210123][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.249543][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.300900][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.354470][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.400475][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.431663][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.470301][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.494274][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.532967][T22622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.590536][T22622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.626307][T22622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.678744][T22622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.721072][T22622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.729849][T22622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.780360][T22622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.805870][T22964] netlink: 'syz.4.6024': attribute type 5 has an invalid length. [ 735.841245][T22964] netlink: 'syz.4.6024': attribute type 15 has an invalid length. [ 736.057370][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.082531][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.296087][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.321847][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.399802][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 736.517648][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.532164][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.574246][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 736.783082][T22997] FAULT_INJECTION: forcing a failure. [ 736.783082][T22997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.004474][T22997] CPU: 1 PID: 22997 Comm: syz.2.6029 Not tainted syzkaller #0 [ 737.012003][T22997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.022109][T22997] Call Trace: [ 737.025415][T22997] [ 737.028372][T22997] dump_stack_lvl+0x168/0x230 [ 737.033080][T22997] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.039276][T22997] ? show_regs_print_info+0x20/0x20 [ 737.044606][T22997] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 737.050815][T22997] should_fail+0x38c/0x4c0 [ 737.055268][T22997] _copy_from_user+0x2e/0x170 [ 737.059987][T22997] __copy_msghdr_from_user+0xaf/0x5e0 [ 737.065495][T22997] ? verify_lock_unused+0x140/0x140 [ 737.070786][T22997] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 737.076122][T22997] ___sys_sendmsg+0x156/0x260 [ 737.080846][T22997] ? __sys_sendmsg+0x250/0x250 [ 737.085650][T22997] ? ktime_get_real_ts64+0x420/0x420 [ 737.091006][T22997] ? __fdget+0x18b/0x210 [ 737.095293][T22997] __se_sys_sendmsg+0x190/0x250 [ 737.100181][T22997] ? __x64_sys_sendmsg+0x80/0x80 [ 737.105271][T22997] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 737.111471][T22997] ? lockdep_hardirqs_on+0x94/0x140 [ 737.116700][T22997] do_syscall_64+0x4c/0xa0 [ 737.121134][T22997] ? clear_bhb_loop+0x30/0x80 [ 737.125837][T22997] ? clear_bhb_loop+0x30/0x80 [ 737.130548][T22997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 737.136471][T22997] RIP: 0033:0x7fb13d507be9 [ 737.140915][T22997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.160642][T22997] RSP: 002b:00007fb13b76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.169097][T22997] RAX: ffffffffffffffda RBX: 00007fb13d72efa0 RCX: 00007fb13d507be9 [ 737.177098][T22997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 737.185104][T22997] RBP: 00007fb13b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 737.193197][T22997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.201201][T22997] R13: 00007fb13d72f038 R14: 00007fb13d72efa0 R15: 00007fff83e2fd08 [ 737.209226][T22997] [ 739.054786][T23032] chnl_net:caif_netlink_parms(): no params data found [ 739.422163][T23056] netlink: 'syz.0.6041': attribute type 9 has an invalid length. [ 739.449964][T23056] netlink: 175228 bytes leftover after parsing attributes in process `syz.0.6041'. [ 739.455934][T23048] device wlan0 entered promiscuous mode [ 740.114152][T23032] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.152255][T23032] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.192283][T23032] device bridge_slave_0 entered promiscuous mode [ 740.278235][T23032] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.288040][T23032] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.311702][T23032] device bridge_slave_1 entered promiscuous mode [ 740.480385][ T4250] Bluetooth: hci3: command 0x0409 tx timeout [ 740.525248][T23032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.573296][T23032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.841457][T23077] FAULT_INJECTION: forcing a failure. [ 740.841457][T23077] name failslab, interval 1, probability 0, space 0, times 0 [ 740.847996][T23032] team0: Port device team_slave_0 added [ 740.884289][T23032] team0: Port device team_slave_1 added [ 740.954822][T23077] CPU: 1 PID: 23077 Comm: syz.0.6046 Not tainted syzkaller #0 [ 740.962363][T23077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.972455][T23077] Call Trace: [ 740.975778][T23077] [ 740.978753][T23077] dump_stack_lvl+0x168/0x230 [ 740.983486][T23077] ? show_regs_print_info+0x20/0x20 [ 740.988731][T23077] ? load_image+0x3b0/0x3b0 [ 740.993291][T23077] ? __lock_acquire+0x7c60/0x7c60 [ 740.998368][T23077] ? rcu_lock_acquire+0x30/0x30 [ 741.003275][T23077] should_fail+0x38c/0x4c0 [ 741.007760][T23077] should_failslab+0x5/0x20 [ 741.012298][T23077] slab_pre_alloc_hook+0x51/0xc0 [ 741.017278][T23077] ? security_file_alloc+0x30/0x110 [ 741.022749][T23077] kmem_cache_alloc+0x3d/0x290 [ 741.027563][T23077] ? rcu_is_watching+0x11/0xa0 [ 741.032390][T23077] security_file_alloc+0x30/0x110 [ 741.037471][T23077] __alloc_file+0xc2/0x240 [ 741.041942][T23077] alloc_empty_file+0x90/0x180 [ 741.046755][T23077] path_openat+0xfc/0x2f30 [ 741.051296][T23077] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 741.057087][T23077] ? do_filp_open+0x3e0/0x3e0 [ 741.061832][T23077] ? trace_event_raw_event_lock+0x250/0x250 [ 741.067814][T23077] do_filp_open+0x1b3/0x3e0 [ 741.072380][T23077] ? vfs_tmpfile+0x300/0x300 [ 741.077077][T23077] ? _raw_spin_unlock+0x24/0x40 [ 741.081968][T23077] ? alloc_fd+0x598/0x630 [ 741.086369][T23077] do_sys_openat2+0x142/0x4a0 [ 741.091094][T23077] ? __lock_acquire+0x7c60/0x7c60 [ 741.096185][T23077] ? do_sys_open+0xe0/0xe0 [ 741.100652][T23077] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 741.106728][T23077] ? lock_chain_count+0x20/0x20 [ 741.111664][T23077] ? vtime_user_exit+0x2dc/0x400 [ 741.116838][T23077] __x64_sys_openat+0x135/0x160 [ 741.121758][T23077] do_syscall_64+0x4c/0xa0 [ 741.126245][T23077] ? clear_bhb_loop+0x30/0x80 [ 741.130960][T23077] ? clear_bhb_loop+0x30/0x80 [ 741.135868][T23077] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 741.141834][T23077] RIP: 0033:0x7f3840f15be9 [ 741.146308][T23077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.166351][T23077] RSP: 002b:00007f383f17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 741.174836][T23077] RAX: ffffffffffffffda RBX: 00007f384113cfa0 RCX: 00007f3840f15be9 [ 741.183295][T23077] RDX: 00000000000026e1 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 741.191303][T23077] RBP: 00007f383f17d090 R08: 0000000000000000 R09: 0000000000000000 [ 741.199308][T23077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.207312][T23077] R13: 00007f384113d038 R14: 00007f384113cfa0 R15: 00007fffe3e858b8 [ 741.215377][T23077] [ 741.587892][T23032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.605736][T23032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.710273][T23032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.783079][T23032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.808194][T23032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.895601][T23032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.483725][T23032] device hsr_slave_0 entered promiscuous mode [ 742.502064][T23032] device hsr_slave_1 entered promiscuous mode [ 742.522312][T23032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.529928][T23032] Cannot create hsr debugfs directory [ 742.550715][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 743.321759][T23121] FAULT_INJECTION: forcing a failure. [ 743.321759][T23121] name failslab, interval 1, probability 0, space 0, times 0 [ 743.550704][T23121] CPU: 0 PID: 23121 Comm: syz.5.6057 Not tainted syzkaller #0 [ 743.558236][T23121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.568321][T23121] Call Trace: [ 743.571633][T23121] [ 743.574604][T23121] dump_stack_lvl+0x168/0x230 [ 743.579412][T23121] ? lockdep_hardirqs_on+0x94/0x140 [ 743.584641][T23121] ? show_regs_print_info+0x20/0x20 [ 743.589871][T23121] ? load_image+0x3b0/0x3b0 [ 743.594424][T23121] ? __x64_sys_setsockopt+0xb1/0xc0 [ 743.599749][T23121] should_fail+0x38c/0x4c0 [ 743.604210][T23121] should_failslab+0x5/0x20 [ 743.608736][T23121] slab_pre_alloc_hook+0x51/0xc0 [ 743.613710][T23121] kmem_cache_alloc_trace+0x47/0x2a0 [ 743.619025][T23121] ? tipc_sub_subscribe+0x115/0x760 [ 743.624280][T23121] tipc_sub_subscribe+0x115/0x760 [ 743.629554][T23121] tipc_conn_rcv_sub+0x136/0x350 [ 743.634540][T23121] tipc_topsrv_kern_subscr+0x178/0x230 [ 743.640046][T23121] ? conn_put+0x310/0x310 [ 743.644430][T23121] tipc_group_create+0x360/0x4f0 [ 743.649434][T23121] tipc_sk_join+0x246/0x6b0 [ 743.653965][T23121] ? lockdep_hardirqs_on+0x94/0x140 [ 743.659316][T23121] ? __tipc_sendstream+0x1260/0x1260 [ 743.664640][T23121] ? lock_sock_nested+0x68/0x100 [ 743.669623][T23121] tipc_setsockopt+0x684/0x900 [ 743.674435][T23121] ? tipc_shutdown+0x4d0/0x4d0 [ 743.679628][T23121] ? aa_sock_opt_perm+0x74/0x100 [ 743.684695][T23121] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 743.690271][T23121] ? security_socket_setsockopt+0x7a/0xa0 [ 743.696017][T23121] ? tipc_shutdown+0x4d0/0x4d0 [ 743.700900][T23121] __sys_setsockopt+0x2bf/0x3d0 [ 743.705783][T23121] __x64_sys_setsockopt+0xb1/0xc0 [ 743.710834][T23121] do_syscall_64+0x4c/0xa0 [ 743.715273][T23121] ? clear_bhb_loop+0x30/0x80 [ 743.719967][T23121] ? clear_bhb_loop+0x30/0x80 [ 743.724786][T23121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.730760][T23121] RIP: 0033:0x7f8e36fa6be9 [ 743.735198][T23121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.754837][T23121] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.763282][T23121] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 743.771304][T23121] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 743.779295][T23121] RBP: 00007f8e3520e090 R08: 00000000000004bd R09: 0000000000000000 [ 743.787333][T23121] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 743.795322][T23121] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 743.803445][T23121] [ 743.871213][T23032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.631440][ T4517] Bluetooth: hci3: command 0x040f tx timeout [ 745.300593][T23121] tipc: Subscription rejected, no memory [ 745.428103][T23032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.983959][T23032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.449478][T23032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.710589][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 746.999958][T23032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 747.178836][T23032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.213566][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.220024][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.511322][T23032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.548769][T23032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 748.260660][T23032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.323819][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.355964][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.388442][T23032] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.445423][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.472536][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.520898][T22302] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.528136][T22302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.593046][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.631362][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.655457][T22302] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.662630][T22302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.714752][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.743447][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.780819][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.810538][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.842510][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.877987][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.907092][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.951401][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.988869][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 749.028502][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 749.078265][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 749.088751][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 749.129136][T23032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 749.623375][T23217] netlink: 'syz.2.6077': attribute type 1 has an invalid length. [ 749.712086][T23217] netlink: 'syz.2.6077': attribute type 4 has an invalid length. [ 749.830141][T23217] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6077'. [ 750.223865][T23032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.269433][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.300607][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.491476][ T9] device hsr_slave_0 left promiscuous mode [ 751.510607][ T9] device hsr_slave_1 left promiscuous mode [ 751.520857][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.528345][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.629408][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.650399][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.724211][ T9] device bridge_slave_0 left promiscuous mode [ 751.747155][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.824435][ T9] device veth0_macvtap left promiscuous mode [ 751.846343][ T9] device veth1_vlan left promiscuous mode [ 752.583027][ T9] team0 (unregistering): Port device geneve1 removed [ 753.234398][ T9] team0 (unregistering): Port device team_slave_1 removed [ 753.312601][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.360800][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.420906][ T9] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 753.699038][ T9] team0 (unregistering): Port device bond0 removed [ 753.772822][ T9] bond0 (unregistering): Released all slaves [ 753.877992][T23247] FAULT_INJECTION: forcing a failure. [ 753.877992][T23247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.967322][T23247] CPU: 0 PID: 23247 Comm: syz.1.6086 Not tainted syzkaller #0 [ 753.974944][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.985024][T23247] Call Trace: [ 753.988326][T23247] [ 753.991276][T23247] dump_stack_lvl+0x168/0x230 [ 753.995993][T23247] ? show_regs_print_info+0x20/0x20 [ 754.001219][T23247] ? load_image+0x3b0/0x3b0 [ 754.005751][T23247] ? __lock_acquire+0x7c60/0x7c60 [ 754.010807][T23247] ? __schedule+0x11c3/0x4390 [ 754.015516][T23247] should_fail+0x38c/0x4c0 [ 754.019967][T23247] _copy_from_user+0x2e/0x170 [ 754.024674][T23247] ipip6_tunnel_siocdevprivate+0x36b/0x14f0 [ 754.030609][T23247] ? sit_tunnel_xmit+0x2250/0x2250 [ 754.035756][T23247] ? __lock_acquire+0x7c60/0x7c60 [ 754.040811][T23247] ? do_raw_spin_lock+0x11d/0x280 [ 754.045866][T23247] ? __rwlock_init+0x140/0x140 [ 754.050662][T23247] ? do_raw_spin_unlock+0x11d/0x230 [ 754.055887][T23247] ? __mutex_lock_common+0x14d8/0x2390 [ 754.061369][T23247] ? full_name_hash+0x8e/0xe0 [ 754.066090][T23247] dev_ifsioc+0xaf5/0xe70 [ 754.070456][T23247] ? dev_ioctl+0x5e8/0xe50 [ 754.074906][T23247] ? dev_ioctl+0xe50/0xe50 [ 754.079361][T23247] ? full_name_hash+0x8e/0xe0 [ 754.084080][T23247] dev_ioctl+0x5f9/0xe50 [ 754.088362][T23247] ? get_user_ifreq+0xc7/0x170 [ 754.093157][T23247] sock_ioctl+0x67b/0x6e0 [ 754.097571][T23247] ? sock_poll+0x3f0/0x3f0 [ 754.102029][T23247] ? bpf_lsm_file_ioctl+0x5/0x10 [ 754.106992][T23247] ? security_file_ioctl+0x7c/0xa0 [ 754.112130][T23247] ? sock_poll+0x3f0/0x3f0 [ 754.116587][T23247] __se_sys_ioctl+0xfa/0x170 [ 754.122671][T23247] do_syscall_64+0x4c/0xa0 [ 754.127114][T23247] ? clear_bhb_loop+0x30/0x80 [ 754.131823][T23247] ? clear_bhb_loop+0x30/0x80 [ 754.136535][T23247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 754.142465][T23247] RIP: 0033:0x7fca8c650be9 [ 754.146905][T23247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.166561][T23247] RSP: 002b:00007fca8a8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.175010][T23247] RAX: ffffffffffffffda RBX: 00007fca8c877fa0 RCX: 00007fca8c650be9 [ 754.183013][T23247] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 754.191013][T23247] RBP: 00007fca8a8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 754.199013][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.207010][T23247] R13: 00007fca8c878038 R14: 00007fca8c877fa0 R15: 00007ffe62ffbb18 [ 754.215028][T23247] [ 754.647358][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 754.668943][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 754.749133][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 754.772481][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 754.800579][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 754.830931][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 754.862882][T23032] device veth0_vlan entered promiscuous mode [ 754.895814][T23032] device veth1_vlan entered promiscuous mode [ 754.972701][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.997812][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 755.032028][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 755.062785][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 755.111158][T23032] device veth0_macvtap entered promiscuous mode [ 755.146062][T23032] device veth1_macvtap entered promiscuous mode [ 755.244804][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.311950][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.377935][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.443928][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.496830][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.536022][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.576047][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.617666][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.674990][T23032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.714688][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.750312][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.770714][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.791602][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.810642][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.830314][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.850522][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.871495][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.912052][T23032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.976590][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 755.997648][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 756.022632][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 756.060550][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 756.074939][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.104414][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.149030][T23032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.191337][T23032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.200106][T23032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.251151][T23032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.499690][T23298] FAULT_INJECTION: forcing a failure. [ 756.499690][T23298] name failslab, interval 1, probability 0, space 0, times 0 [ 756.548031][T22302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.561493][T22302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.584878][T23298] CPU: 0 PID: 23298 Comm: syz.5.6099 Not tainted syzkaller #0 [ 756.592395][T23298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.602486][T23298] Call Trace: [ 756.605783][T23298] [ 756.608831][T23298] dump_stack_lvl+0x168/0x230 [ 756.613551][T23298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.619846][T23298] ? show_regs_print_info+0x20/0x20 [ 756.625079][T23298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.631367][T23298] should_fail+0x38c/0x4c0 [ 756.636255][T23298] should_failslab+0x5/0x20 [ 756.640786][T23298] slab_pre_alloc_hook+0x51/0xc0 [ 756.645756][T23298] __kmalloc+0x6b/0x330 [ 756.649937][T23298] ? sock_kmalloc+0x92/0xf0 [ 756.654567][T23298] sock_kmalloc+0x92/0xf0 [ 756.658929][T23298] ____sys_sendmsg+0x1ac/0x8c0 [ 756.663731][T23298] ? memset+0x1e/0x40 [ 756.667748][T23298] ? __sys_sendmsg_sock+0x30/0x30 [ 756.672809][T23298] ? import_iovec+0x6f/0xa0 [ 756.677350][T23298] ___sys_sendmsg+0x1f0/0x260 [ 756.682272][T23298] ? __sys_sendmsg+0x250/0x250 [ 756.687078][T23298] ? ktime_get_real_ts64+0x420/0x420 [ 756.692414][T23298] ? __fdget+0x18b/0x210 [ 756.696683][T23298] __se_sys_sendmsg+0x190/0x250 [ 756.701568][T23298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.707757][T23298] ? __x64_sys_sendmsg+0x80/0x80 [ 756.712742][T23298] ? syscall_enter_from_user_mode+0x2a/0x70 [ 756.718669][T23298] do_syscall_64+0x4c/0xa0 [ 756.723105][T23298] ? clear_bhb_loop+0x30/0x80 [ 756.727807][T23298] ? clear_bhb_loop+0x30/0x80 [ 756.732510][T23298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 756.738434][T23298] RIP: 0033:0x7f8e36fa6be9 [ 756.744367][T23298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.764002][T23298] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.772453][T23298] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 756.780452][T23298] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 756.788450][T23298] RBP: 00007f8e3520e090 R08: 0000000000000000 R09: 0000000000000000 [ 756.796449][T23298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.804433][T23298] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 756.812430][T23298] [ 756.893697][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 756.915671][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.960978][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.025339][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 757.280847][T23303] netlink: 'syz.4.6034': attribute type 10 has an invalid length. [ 757.345043][T23303] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6034'. [ 757.413464][T23303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 757.495636][T23309] netlink: 'syz.4.6034': attribute type 1 has an invalid length. [ 757.663144][T23309] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.6034'. Stopping sshd: stopped /usr/sbin/sshd (pid 3944) OK Stopping crond: stopped /usr/sbin/crond (pid 3927) OK [ 759.155728][T23327] chnl_net:caif_netlink_parms(): no params data found Stopping dhcpcd... [ 759.529606][T23327] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.570504][T23327] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.578935][T23327] device bridge_slave_0 entered promiscuous mode stopped /sbin/dhcpcd (pid 3852) [ 759.703093][T23327] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.767547][T23327] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.942232][T23327] device bridge_slave_1 entered promiscuous mode Stopping network: [ 760.390990][T23011] Bluetooth: hci1: command 0x0409 tx timeout [ 760.561918][T23327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.623694][T23327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.817600][T23327] team0: Port device team_slave_0 added [ 760.849565][T23327] team0: Port device team_slave_1 added [ 761.094138][T23327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.115249][T23327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.300275][T23327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.342452][T23327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.370295][T23327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.370331][T23327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active OK Stopping iptables: [ 761.916814][T23327] device hsr_slave_0 entered promiscuous mode [ 762.040611][T23327] device hsr_slave_1 entered promiscuous mode OK [ 762.126252][T23327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.140706][T23327] Cannot create hsr debugfs directory Stopping system message bus: [ 762.386324][T23396] device syzkaller0 entered promiscuous mode [ 762.470389][ T2856] Bluetooth: hci1: command 0x041b tx timeout [ 763.057388][T23424] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6123'. done [ 764.037030][T23327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.427341][T23327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.550410][ T2856] Bluetooth: hci1: command 0x040f tx timeout [ 764.826493][T23327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.162841][T23327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 killall: can't kill pid 22096: No such process killall: can't kill pid 22175: No such process Stopping klogd: [ 765.792331][T23490] FAULT_INJECTION: forcing a failure. [ 765.792331][T23490] name failslab, interval 1, probability 0, space 0, times 0 [ 765.805633][T23490] CPU: 1 PID: 23490 Comm: syz.5.6136 Not tainted syzkaller #0 [ 765.813383][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.823567][T23490] Call Trace: [ 765.826875][T23490] [ 765.829831][T23490] dump_stack_lvl+0x168/0x230 [ 765.834701][T23490] ? show_regs_print_info+0x20/0x20 [ 765.840080][T23490] ? load_image+0x3b0/0x3b0 [ 765.844643][T23490] should_fail+0x38c/0x4c0 [ 765.849109][T23490] should_failslab+0x5/0x20 [ 765.853648][T23490] slab_pre_alloc_hook+0x51/0xc0 [ 765.858632][T23490] ? radix_tree_node_alloc+0x7e/0x3a0 [ 765.864039][T23490] kmem_cache_alloc+0x3d/0x290 [ 765.868850][T23490] radix_tree_node_alloc+0x7e/0x3a0 [ 765.874084][T23490] idr_get_free+0x2af/0xa60 [ 765.878636][T23490] idr_alloc+0x17b/0x2b0 [ 765.883029][T23490] ? idr_alloc_u32+0x2c0/0x2c0 [ 765.887836][T23490] ? tipc_conn_alloc+0x2ed/0x4a0 [ 765.892815][T23490] tipc_conn_alloc+0x302/0x4a0 [ 765.897611][T23490] tipc_topsrv_kern_subscr+0xed/0x230 [ 765.903022][T23490] ? conn_put+0x310/0x310 [ 765.907486][T23490] tipc_group_create+0x360/0x4f0 [ 765.912547][T23490] tipc_sk_join+0x246/0x6b0 [ 765.917078][T23490] ? lockdep_hardirqs_on+0x94/0x140 [ 765.922304][T23490] ? __tipc_sendstream+0x1260/0x1260 [ 765.927702][T23490] ? lock_sock_nested+0x68/0x100 [ 765.932684][T23490] tipc_setsockopt+0x684/0x900 [ 765.937490][T23490] ? tipc_shutdown+0x4d0/0x4d0 [ 765.942292][T23490] ? aa_sock_opt_perm+0x74/0x100 [ 765.947259][T23490] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 765.952833][T23490] ? security_socket_setsockopt+0x7a/0xa0 [ 765.958582][T23490] ? tipc_shutdown+0x4d0/0x4d0 [ 765.963377][T23490] __sys_setsockopt+0x2bf/0x3d0 [ 765.968259][T23490] __x64_sys_setsockopt+0xb1/0xc0 [ 765.973401][T23490] do_syscall_64+0x4c/0xa0 [ 765.977841][T23490] ? clear_bhb_loop+0x30/0x80 [ 765.982540][T23490] ? clear_bhb_loop+0x30/0x80 [ 765.987356][T23490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 765.993279][T23490] RIP: 0033:0x7f8e36fa6be9 [ 765.997730][T23490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.017475][T23490] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 766.026273][T23490] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 766.034276][T23490] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 766.042387][T23490] RBP: 00007f8e3520e090 R08: 00000000000004bd R09: 0000000000000000 [ 766.050396][T23490] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 766.058417][T23490] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 766.066483][T23490] [ 766.084023][T23327] netdevsim netdevsim1 netdevsim0: renamed from eth0 OK [ 766.218223][T23327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 766.343085][T23327] netdevsim netdevsim1 netdevsim2: renamed from eth2 Stopping acpid: [ 766.630409][ T4241] Bluetooth: hci1: command 0x0419 tx timeout [ 766.710113][T23327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 767.258626][T23327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.303286][T23540] FAULT_INJECTION: forcing a failure. [ 767.303286][T23540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.381480][T23536] delete_channel: no stack [ 767.388930][T23540] CPU: 0 PID: 23540 Comm: syz.4.6144 Not tainted syzkaller #0 [ 767.396444][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.406630][T23540] Call Trace: [ 767.409934][T23540] [ 767.412884][T23540] dump_stack_lvl+0x168/0x230 [ 767.417582][T23540] ? show_regs_print_info+0x20/0x20 [ 767.422789][T23540] ? load_image+0x3b0/0x3b0 [ 767.427313][T23540] ? __lock_acquire+0x7c60/0x7c60 [ 767.432393][T23540] should_fail+0x38c/0x4c0 [ 767.436832][T23540] prepare_alloc_pages+0x1e4/0x5f0 [ 767.441988][T23540] __alloc_pages+0x10e/0x470 [ 767.446590][T23540] ? zone_statistics+0x170/0x170 [ 767.451544][T23540] ? do_raw_spin_unlock+0x11d/0x230 [ 767.456793][T23540] kmalloc_large_node+0x7d/0x190 [ 767.461770][T23540] __kmalloc_node+0x232/0x3b0 [ 767.466458][T23540] kvmalloc_node+0x84/0x130 [ 767.471065][T23540] alloc_netdev_mqs+0x84/0xc40 [ 767.475841][T23540] ? tun_not_capable+0x1f0/0x1f0 [ 767.480963][T23540] tun_set_iff+0x533/0xda0 [ 767.485388][T23540] __tun_chr_ioctl+0x722/0x1e70 [ 767.490269][T23540] ? tun_flow_create+0x310/0x310 [ 767.495246][T23540] ? bpf_lsm_file_ioctl+0x5/0x10 [ 767.500195][T23540] ? security_file_ioctl+0x7c/0xa0 [ 767.505339][T23540] ? tun_chr_poll+0x620/0x620 [ 767.510027][T23540] __se_sys_ioctl+0xfa/0x170 [ 767.514660][T23540] do_syscall_64+0x4c/0xa0 [ 767.519257][T23540] ? clear_bhb_loop+0x30/0x80 [ 767.523965][T23540] ? clear_bhb_loop+0x30/0x80 [ 767.528740][T23540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.534642][T23540] RIP: 0033:0x7f37af273be9 [ 767.539066][T23540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.558685][T23540] RSP: 002b:00007f37ad4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.567118][T23540] RAX: ffffffffffffffda RBX: 00007f37af49b090 RCX: 00007f37af273be9 [ 767.575108][T23540] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 000000000000000d [ 767.583098][T23540] RBP: 00007f37ad4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 767.591084][T23540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.599081][T23540] R13: 00007f37af49b128 R14: 00007f37af49b090 R15: 00007fff1a01a1e8 [ 767.607086][T23540] OK Stopping syslogd: [ 767.915225][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 767.926817][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready stopped /sbin/syslogd (pid 3542) OK [ 768.004232][T23327] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.093899][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.113618][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.144120][T22302] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.151404][T22302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.186703][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.293149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.319410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 768.350971][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.358132][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.421488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 768.481900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 768.546764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 768.573930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 768.660457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 768.707866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready umount: can't remount debugfs read-only [ 768.790553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 768.822856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 768.851323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 768.867375][T23558] ODEBUG: Out of memory. ODEBUG disabled [ 768.901454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 768.947364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 768.974197][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.033424][T23570] FAULT_INJECTION: forcing a failure. [ 769.033424][T23570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.197973][T23570] CPU: 0 PID: 23570 Comm: syz.5.6151 Not tainted syzkaller #0 [ 769.205503][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.215606][T23570] Call Trace: [ 769.218916][T23570] [ 769.221875][T23570] dump_stack_lvl+0x168/0x230 [ 769.226596][T23570] ? show_regs_print_info+0x20/0x20 [ 769.231832][T23570] ? load_image+0x3b0/0x3b0 [ 769.236375][T23570] ? __lock_acquire+0x7c60/0x7c60 [ 769.241559][T23570] ? vfs_write+0x84d/0xd00 [ 769.246101][T23570] should_fail+0x38c/0x4c0 [ 769.250555][T23570] _copy_from_user+0x2e/0x170 [ 769.255265][T23570] __sys_bpf+0x21b/0x670 [ 769.259546][T23570] ? bpf_link_show_fdinfo+0x340/0x340 [ 769.264976][T23570] ? vtime_user_exit+0x2dc/0x400 [ 769.269960][T23570] __x64_sys_bpf+0x78/0x90 [ 769.274415][T23570] do_syscall_64+0x4c/0xa0 [ 769.278869][T23570] ? clear_bhb_loop+0x30/0x80 [ 769.283578][T23570] ? clear_bhb_loop+0x30/0x80 [ 769.288292][T23570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 769.294229][T23570] RIP: 0033:0x7f8e36fa6be9 [ 769.298676][T23570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.318558][T23570] RSP: 002b:00007f8e3520e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.327013][T23570] RAX: ffffffffffffffda RBX: 00007f8e371cdfa0 RCX: 00007f8e36fa6be9 [ 769.335024][T23570] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 769.343028][T23570] RBP: 00007f8e3520e090 R08: 0000000000000000 R09: 0000000000000000 [ 769.351159][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.359249][T23570] R13: 00007f8e371ce038 R14: 00007f8e371cdfa0 R15: 00007ffd38133fb8 [ 769.367279][T23570] [ 769.495868][ T9] bond0: (slave wlan1): Releasing backup interface [ 770.170697][ T9] device hsr_slave_0 left promiscuous mode [ 770.450411][ T9] device hsr_slave_1 left promiscuous mode [ 770.488949][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.530355][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.551367][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.558843][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.610978][ T9] device bridge_slave_1 left promiscuous mode [ 770.617268][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.656450][ T9] device bridge_slave_0 left promiscuous mode [ 770.680514][ T9] bridge0: port 1(bridge_slave_0) entered disabled state umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.45 closed by remote host. Sent SIGTERM to all processes [ 770.875490][ T9] device veth1_macvtap left promiscuous mode [ 770.884275][ T9] device veth0_macvtap left promiscuous mode [ 770.910393][ T9] device veth1_vlan left promiscuous mode [ 771.255247][ T9] team0 (unregistering): Port device geneve1 removed [ 771.633122][ T9] team0 (unregistering): Port device team_slave_1 removed [ 771.671780][ T9] team0 (unregistering): Port device team_slave_0 removed [ 771.760722][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.813762][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface Sent SIGKILL to all processes Requesting system poweroff [ 771.969618][ T9] bond0 (unregistering): Released all slaves [ 772.915928][T23600] kvm: exiting hardware virtualization [ 772.964035][T23600] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 773.014482][T23600] ACPI: PM: Preparing to enter system sleep state S5 [ 773.062089][T23600] reboot: Power down serialport: VM disconnected.