last executing test programs: 3.906806345s ago: executing program 0 (id=1025): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1}, 0x40000143) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x8000}, 0x8) socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) 3.327601179s ago: executing program 0 (id=1027): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/mnt\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000020000005b0300000c00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/37], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) 2.683264993s ago: executing program 0 (id=1030): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e24, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001040)=""/16, 0x10}, {&(0x7f0000001140)=""/19, 0x13}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/193, 0xc1}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002500)=""/59, 0x3b}, {&(0x7f0000002540)=""/35, 0x23}, {&(0x7f0000002580)=""/99, 0x63}, {&(0x7f0000002600)=""/243, 0xf3}, {&(0x7f0000002700)=""/97, 0x61}], 0xa}, 0x2000) 2.624415514s ago: executing program 2 (id=1032): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x1000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) write$cgroup_int(r1, &(0x7f00000003c0)=0x103, 0x12) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) 2.304038105s ago: executing program 3 (id=1033): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000019740000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x0, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e4c33d810000"], 0x50) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffe, 0x0, @perf_config_ext, 0x11a009, 0x5a, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0xd5}, 0x0, 0x800000, r3, 0xa) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x1429, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x4) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r5, 0x4) 2.044053387s ago: executing program 1 (id=1034): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.975537958s ago: executing program 2 (id=1035): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1}, 0x40000143) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) 1.948118418s ago: executing program 3 (id=1036): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000000)={'macsec0\x00', @random="0200ff7fffff"}) 1.832500838s ago: executing program 1 (id=1037): perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) 1.763998559s ago: executing program 3 (id=1038): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0xf7e5) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) close(0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x20}, 0x200040c4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x182f941e}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 1.708015329s ago: executing program 2 (id=1039): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0xffffff9d, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES8=r4], 0x9a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xd, &(0x7f0000000200)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000300)='GPL\x00', 0x2, 0xd4, &(0x7f00000005c0)=""/212, 0x41000, 0x24, '\x00', 0x0, @sk_reuseport=0x27, r6, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0xfffffffc, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980)=[{0x2, 0x1, 0xb, 0x2}, {0x4, 0x1}, {0x0, 0x1, 0xb, 0x9}, {0x0, 0x3, 0x5, 0x4}, {0x2, 0x2, 0xc, 0x5}, {0x0, 0x4, 0x8, 0x3}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}, 0x7e8166965e22236a) 1.67104746s ago: executing program 0 (id=1040): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) (fail_nth: 4) 1.536439191s ago: executing program 1 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xa, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x2, 0x5, 0xb, 0x10, 0xb}, @jmp={0x5, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffc, 0x4}, @generic={0x8, 0x0, 0x5, 0x4, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @ldst={0x2, 0x2, 0x2, 0x0, 0x5, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000e80)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000003a00)=""/4096, 0x100, 0x2, '\x00', 0x0, @fallback=0x17, r1, 0x8, &(0x7f0000000f80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0xc, 0x4, 0x99}, 0x10, 0x0, r0, 0x8, &(0x7f0000001300)=[r1, r1, r0], &(0x7f0000001340)=[{0x5, 0x5, 0x8, 0x7}, {0x3, 0x4, 0x3, 0x6}, {0x1, 0x1, 0x2, 0x7}, {0x2, 0x5, 0x6, 0xb}, {0x2, 0x1, 0xa, 0xa}, {0x2, 0x5, 0x10, 0xb}, {0x0, 0x3, 0x3, 0x9}, {0x1, 0x1, 0x5, 0x7}], 0x10, 0xb}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r4) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000440)=@ieee802154, 0x80, &(0x7f0000000d40)=[{&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000700)=""/5, 0x5}], 0x9}, 0x100e1) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r5], 0x12) ioctl$TUNATTACHFILTER(r2, 0x894c, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xd0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r7], 0x20) 1.195804223s ago: executing program 0 (id=1042): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x2c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) 988.331444ms ago: executing program 1 (id=1043): r0 = perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000c80), 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000cc0)='tasks\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x5e, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0xf7, 0x0, 0x3, 0x4, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x6f}, @jmp={0x5, 0x1, 0x8, 0x9, 0xa, 0x1, 0x1}]}, &(0x7f0000000e00)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x4, 0x3, 0x3}, 0x10, 0x2b05, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000f00)=[{0x3, 0x2, 0x9, 0x4}], 0x10, 0x6}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r6, &(0x7f00000001c0)="1950", 0x0}, 0x20) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x20, 0x20000080}, 0x4000804) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r12 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000a00)="8ce930f01113748632d06e762f02358d0262176b32d9d033c39894f3bad33108ce3a96372b9d71dde5c07298e37492ce21a535ac4e4c9058fa3ff29330707c3d0c8e961dd772aca1ec4eaf1a50be79f02d8bac9ee822c4a9f57f62527f57e639c97170455839030cb7de76c37eb7c1490a69852dfb0b961a8fc5023698301ab2896119a9813a482a2188aff6e66ada56036bf711dccfadd17a6aabbf87", 0x9d}, {&(0x7f0000000ac0)="c713c8ff779b3f4d63ccb28c5b2cf19a6ead014d2240521284eb471eb955170db843e4e049144eff4746e3f89416bc942f02059ec8dbb071bdb7e31ab8e5df20650b56e906fd647f7188d69d2959b35343b7cb3e1e04066c95ffd9f162fd7b0839ff43e06e1f", 0x66}], 0x2, &(0x7f0000001000)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r0, r3, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x110}, 0x4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r14 = openat$cgroup_devices(r13, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000000240)={'b', ' *:* ', 'rwm\x00'}, 0xa) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x1, 0x9, 0x6, 0xa1, 0x359}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7, 0xb6, &(0x7f0000000600)=""/182, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x0, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0x4, 0x3}, {0x1, 0x2, 0xf}, {0x5, 0x4, 0x7, 0xb}, {0x2, 0x5, 0xc, 0x4}], 0x10, 0x654}, 0x94) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x0, 0x5, 0xf496, 0x10000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r15, r16}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)="e4fa79c68681b11b8deda0c1813e171a69748b9bf2d3ebc4cfb8a0f9525596b26fcd509a4f", 0x25}, {&(0x7f0000000180)="03d319f3acb24d3ebaccf3a8276b21aad10d1dce542cfc5cf56f929d3818128f973c3a635d619d5d5f8097a0191cacf4accd26280300fb23dfc049dcce7660cc", 0x40}, {&(0x7f00000001c0)}, {&(0x7f0000000280)="a76d69cbd8a12e390f9877ed6860273eda84c04326d745a7dab8c8a616991709ff12c705d0ca7870eb708fb45eaee8a453b5a749a3dc93dd1eb37a13ad2b6fc8a65f53fe3958fe3731ca3626c8bbd1b86a24d1994f773ab8a00404110c404455d7fb29a213e3de9c11786f481297713d76095e7ac0d4978d4b96b1a752479949b078d0d9da8d548b2a15ccd915905d837a2a8301201e0773e02ed55949e6913d467217864430f3e4d5b2cb4d573b1257e199a8912064320fb58aede26272b10ece86291f441442b33c831ff4578b602efe8bc0a19c283cdf53077c65033ad17d", 0xe0}, {&(0x7f0000000380)="ddeb3bf70930eee10743e9346e357d5bee6b5629d78fceb678d2e88961129bd2b5621aa6f3b3893a52e789a8cf2228afcaa8005e2bfe58cb8a3b3980a87bcee26e9a47454deacd3907f1e9abb63ec39f6458d34812b839", 0x57}], 0x5, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x48, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x4, [{@remote, 0xff}]}, @lsrr={0x83, 0x1f, 0x1d, [@private=0xa010101, @rand_addr=0x64010100, @empty, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010102, @remote]}, @ssrr={0x89, 0x17, 0x6, [@initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @multicast1, @loopback, @private=0xa010100]}, @timestamp={0x44, 0x20, 0xe0, 0x0, 0x9, [0x4, 0x401, 0x400, 0x60, 0x6, 0x6, 0x65]}]}}}], 0x118}, 0x0) 899.962575ms ago: executing program 2 (id=1044): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000019740000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x0, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e4c33d810000"], 0x50) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffe, 0x0, @perf_config_ext, 0x11a009, 0x5a, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0xd5}, 0x0, 0x800000, r3, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x1004, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x1429, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x4) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r5, 0x4) 892.765735ms ago: executing program 0 (id=1045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x1000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) write$cgroup_int(r1, &(0x7f00000003c0)=0x103, 0x12) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) 829.931815ms ago: executing program 3 (id=1046): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000380)="c1b0", 0x0, 0x0, 0x0, 0x1, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="36b2b0fb1f1a0ffb19f72117acaf5217729a2a8473f50ed03908d4d1e0d336be29a037b23b27d8010bd076ae14fb2a5691633d60551470322dfdbe", 0x3b}, {&(0x7f0000000300)="69934416a84f9c05cb5920459be17fbd57efd5e3e9a65398594e79b6421229241b2eeef51c6a4e8c1e6b4f88fcdeea0231", 0x31}], 0x2, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="36b2b0fb1f1a0ffb19f72117acaf5217729a2a8473f50ed03908d4d1e0d336be29a037b23b27d8010bd076ae14fb2a5691633d60551470322dfdbe", 0x3b}, {&(0x7f0000000300)="69934416a84f9c05cb5920459be17fbd57efd5e3e9a65398594e79b6421229241b2eeef51c6a4e8c1e6b4f88fcdeea0231", 0x31}], 0x2, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xe, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback, r3}, 0x94) 515.908917ms ago: executing program 3 (id=1047): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0xf7e5) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x20}, 0x200040c4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x182f941e}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 512.997917ms ago: executing program 2 (id=1048): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1}, 0x40000143) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) 261.508009ms ago: executing program 2 (id=1049): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = getpid() r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r5, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (fail_nth: 4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 112.576459ms ago: executing program 3 (id=1050): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 16.21502ms ago: executing program 1 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) 0s ago: executing program 1 (id=1052): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 437.298291][ T6991] RSP: 002b:00007fec76019f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 437.306847][ T6991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec7518d810 [ 437.314857][ T6991] RDX: 0000000000000000 RSI: 00007fec76019fa0 RDI: 00000000ffffff9c [ 437.322872][ T6991] RBP: 00007fec76019fa0 R08: 0000000000000000 R09: 0000000000000000 [ 437.330887][ T6991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 437.338899][ T6991] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 437.346933][ T6991] [ 437.451011][ T6992] delete_channel: no stack [ 437.615942][ T6997] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 437.624723][ T6997] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 437.673026][ T6997] team0: Port device wlan1 added [ 438.191004][ T7015] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 438.204391][ T7015] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 438.226825][ T7015] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 438.242451][ T7015] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 438.293207][ T7018] FAULT_INJECTION: forcing a failure. [ 438.293207][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 438.355478][ T7018] CPU: 0 PID: 7018 Comm: syz.0.382 Not tainted syzkaller #0 [ 438.363093][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.373272][ T7018] Call Trace: [ 438.376631][ T7018] [ 438.379656][ T7018] dump_stack_lvl+0x16c/0x230 [ 438.384471][ T7018] ? show_regs_print_info+0x20/0x20 [ 438.389759][ T7018] ? load_image+0x3b0/0x3b0 [ 438.394366][ T7018] ? __might_sleep+0xe0/0xe0 [ 438.399041][ T7018] ? __lock_acquire+0x7c80/0x7c80 [ 438.404167][ T7018] should_fail_ex+0x39d/0x4d0 [ 438.408967][ T7018] should_failslab+0x9/0x20 [ 438.413544][ T7018] slab_pre_alloc_hook+0x59/0x310 [ 438.418665][ T7018] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.424476][ T7018] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.430284][ T7018] __kmem_cache_alloc_node+0x53/0x260 [ 438.435770][ T7018] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.441576][ T7018] __kmalloc+0xa4/0x240 [ 438.445842][ T7018] tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.451540][ T7018] tomoyo_path_number_perm+0x1ea/0x590 [ 438.457077][ T7018] ? tomoyo_path_number_perm+0x1ba/0x590 [ 438.462807][ T7018] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 438.468372][ T7018] ? ksys_write+0x1c1/0x250 [ 438.473138][ T7018] ? __fget_files+0x28/0x4d0 [ 438.477884][ T7018] security_file_ioctl+0x70/0xa0 [ 438.482922][ T7018] __se_sys_ioctl+0x48/0x170 [ 438.487605][ T7018] do_syscall_64+0x55/0xb0 [ 438.492097][ T7018] ? clear_bhb_loop+0x40/0x90 [ 438.496851][ T7018] ? clear_bhb_loop+0x40/0x90 [ 438.501612][ T7018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.507581][ T7018] RIP: 0033:0x7f54e378efc9 [ 438.512075][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.531873][ T7018] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.540378][ T7018] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 438.548421][ T7018] RDX: 0000000000000004 RSI: 0000000040042408 RDI: 0000000000000003 [ 438.556550][ T7018] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 438.564593][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.572669][ T7018] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 438.580806][ T7018] [ 438.616010][ T7018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.482213][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.490256][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.094126][ T7029] netlink: 'syz.1.386': attribute type 10 has an invalid length. [ 441.116671][ T7029] bond0: (slave bond_slave_0): Releasing backup interface [ 445.824476][ T7090] FAULT_INJECTION: forcing a failure. [ 445.824476][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.871246][ T7090] CPU: 0 PID: 7090 Comm: syz.3.406 Not tainted syzkaller #0 [ 445.878640][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.888752][ T7090] Call Trace: [ 445.892075][ T7090] [ 445.895050][ T7090] dump_stack_lvl+0x16c/0x230 [ 445.899800][ T7090] ? show_regs_print_info+0x20/0x20 [ 445.905056][ T7090] ? load_image+0x3b0/0x3b0 [ 445.909606][ T7090] ? __might_fault+0xaa/0x120 [ 445.914370][ T7090] ? __lock_acquire+0x7c80/0x7c80 [ 445.919615][ T7090] should_fail_ex+0x39d/0x4d0 [ 445.924360][ T7090] _copy_to_user+0x2f/0xa0 [ 445.928833][ T7090] bpf_test_finish+0x19a/0x620 [ 445.933639][ T7090] ? bpf_test_timer_leave+0x110/0x150 [ 445.939047][ T7090] ? convert_skb_to___skb+0x420/0x420 [ 445.944457][ T7090] ? read_tsc+0x9/0x20 [ 445.948578][ T7090] bpf_prog_test_run_flow_dissector+0x4a1/0x600 [ 445.954875][ T7090] ? xdp_convert_buff_to_md+0x200/0x200 [ 445.960466][ T7090] ? __fget_files+0x28/0x4d0 [ 445.965116][ T7090] ? xdp_convert_buff_to_md+0x200/0x200 [ 445.970696][ T7090] bpf_prog_test_run+0x321/0x390 [ 445.975680][ T7090] __sys_bpf+0x440/0x800 [ 445.979984][ T7090] ? bpf_link_show_fdinfo+0x350/0x350 [ 445.985420][ T7090] ? lock_chain_count+0x20/0x20 [ 445.990346][ T7090] __x64_sys_bpf+0x7c/0x90 [ 445.994820][ T7090] do_syscall_64+0x55/0xb0 [ 445.999287][ T7090] ? clear_bhb_loop+0x40/0x90 [ 446.004009][ T7090] ? clear_bhb_loop+0x40/0x90 [ 446.008728][ T7090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.014665][ T7090] RIP: 0033:0x7f922478efc9 [ 446.019129][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.038898][ T7090] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.047457][ T7090] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 446.055556][ T7090] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 446.063655][ T7090] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 446.071668][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.079678][ T7090] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 446.087705][ T7090] [ 446.362525][ T7099] FAULT_INJECTION: forcing a failure. [ 446.362525][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 446.377708][ T7099] CPU: 1 PID: 7099 Comm: syz.3.409 Not tainted syzkaller #0 [ 446.385163][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.395267][ T7099] Call Trace: [ 446.398582][ T7099] [ 446.401542][ T7099] dump_stack_lvl+0x16c/0x230 [ 446.406248][ T7099] ? show_regs_print_info+0x20/0x20 [ 446.411470][ T7099] ? load_image+0x3b0/0x3b0 [ 446.415992][ T7099] ? verify_lock_unused+0x140/0x140 [ 446.421236][ T7099] should_fail_ex+0x39d/0x4d0 [ 446.425968][ T7099] should_failslab+0x9/0x20 [ 446.430495][ T7099] slab_pre_alloc_hook+0x59/0x310 [ 446.435565][ T7099] kmem_cache_alloc+0x5a/0x2e0 [ 446.440368][ T7099] ? skb_clone+0x1eb/0x370 [ 446.444836][ T7099] skb_clone+0x1eb/0x370 [ 446.449112][ T7099] __netlink_deliver_tap+0x41c/0x830 [ 446.454457][ T7099] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.459773][ T7099] netlink_deliver_tap+0x19c/0x1b0 [ 446.464911][ T7099] netlink_unicast+0x72c/0x8d0 [ 446.469746][ T7099] netlink_sendmsg+0x8c1/0xbe0 [ 446.474542][ T7099] ? netlink_getsockopt+0x580/0x580 [ 446.479767][ T7099] ? aa_sock_msg_perm+0x94/0x150 [ 446.484731][ T7099] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.490083][ T7099] ? security_socket_sendmsg+0x80/0xa0 [ 446.495571][ T7099] ? netlink_getsockopt+0x580/0x580 [ 446.500792][ T7099] ____sys_sendmsg+0x5bf/0x950 [ 446.505589][ T7099] ? __asan_memset+0x22/0x40 [ 446.510203][ T7099] ? __sys_sendmsg_sock+0x30/0x30 [ 446.515272][ T7099] ? __import_iovec+0x5f2/0x860 [ 446.520156][ T7099] ? import_iovec+0x73/0xa0 [ 446.524688][ T7099] ___sys_sendmsg+0x220/0x290 [ 446.529423][ T7099] ? __sys_sendmsg+0x270/0x270 [ 446.534215][ T7099] ? irqentry_enter+0x3b/0x50 [ 446.538957][ T7099] __se_sys_sendmsg+0x1a5/0x270 [ 446.543838][ T7099] ? __x64_sys_sendmsg+0x80/0x80 [ 446.548817][ T7099] ? syscall_enter_from_user_mode+0x2e/0x80 [ 446.554735][ T7099] do_syscall_64+0x55/0xb0 [ 446.559191][ T7099] ? clear_bhb_loop+0x40/0x90 [ 446.563899][ T7099] ? clear_bhb_loop+0x40/0x90 [ 446.568690][ T7099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.574702][ T7099] RIP: 0033:0x7f922478efc9 [ 446.579142][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.598786][ T7099] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.607316][ T7099] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 446.615317][ T7099] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000008 [ 446.623316][ T7099] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 446.631308][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.639342][ T7099] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 446.647353][ T7099] [ 446.660201][ T7099] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'. [ 449.947071][ T7113] netlink: 3 bytes leftover after parsing attributes in process `syz.0.413'. [ 450.116646][ T7130] FAULT_INJECTION: forcing a failure. [ 450.116646][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 450.155085][ T7130] CPU: 1 PID: 7130 Comm: syz.0.417 Not tainted syzkaller #0 [ 450.162469][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.172579][ T7130] Call Trace: [ 450.175909][ T7130] [ 450.178894][ T7130] dump_stack_lvl+0x16c/0x230 [ 450.183643][ T7130] ? show_regs_print_info+0x20/0x20 [ 450.189008][ T7130] ? load_image+0x3b0/0x3b0 [ 450.193572][ T7130] ? __might_sleep+0xe0/0xe0 [ 450.198228][ T7130] ? __lock_acquire+0x7c80/0x7c80 [ 450.203309][ T7130] should_fail_ex+0x39d/0x4d0 [ 450.208044][ T7130] should_failslab+0x9/0x20 [ 450.212605][ T7130] slab_pre_alloc_hook+0x59/0x310 [ 450.217703][ T7130] ? lock_chain_count+0x20/0x20 [ 450.222627][ T7130] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 450.228081][ T7130] __kmem_cache_alloc_node+0x53/0x260 [ 450.233514][ T7130] ? __local_bh_enable_ip+0x12e/0x1c0 [ 450.238945][ T7130] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 450.244379][ T7130] kmalloc_trace+0x2a/0xe0 [ 450.248853][ T7130] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 450.254117][ T7130] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 450.259579][ T7130] mptcp_sendmsg+0x14a3/0x16b0 [ 450.264409][ T7130] ? __lock_acquire+0x1260/0x7c80 [ 450.269481][ T7130] ? verify_lock_unused+0x140/0x140 [ 450.274734][ T7130] ? aa_sk_perm+0x7fc/0x930 [ 450.279290][ T7130] ? aa_af_perm+0x2b0/0x2b0 [ 450.283866][ T7130] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 450.290340][ T7130] ? mptcp_shutdown+0x80/0x80 [ 450.295085][ T7130] ? sock_rps_record_flow+0x19/0x400 [ 450.300461][ T7130] ? inet_send_prepare+0x260/0x260 [ 450.305634][ T7130] ? inet_sendmsg+0xe9/0x2f0 [ 450.310289][ T7130] ? inet_send_prepare+0x260/0x260 [ 450.315464][ T7130] ____sys_sendmsg+0x5bf/0x950 [ 450.320302][ T7130] ? __asan_memset+0x22/0x40 [ 450.324957][ T7130] ? __sys_sendmsg_sock+0x30/0x30 [ 450.330045][ T7130] ? __import_iovec+0x3fa/0x860 [ 450.334962][ T7130] ? import_iovec+0x73/0xa0 [ 450.339531][ T7130] ___sys_sendmsg+0x220/0x290 [ 450.344285][ T7130] ? __sys_sendmsg+0x270/0x270 [ 450.349143][ T7130] ? __lock_acquire+0x7c80/0x7c80 [ 450.354259][ T7130] __se_sys_sendmsg+0x1a5/0x270 [ 450.359186][ T7130] ? __x64_sys_sendmsg+0x80/0x80 [ 450.364217][ T7130] ? lockdep_hardirqs_on+0x98/0x150 [ 450.369479][ T7130] do_syscall_64+0x55/0xb0 [ 450.373946][ T7130] ? clear_bhb_loop+0x40/0x90 [ 450.378674][ T7130] ? clear_bhb_loop+0x40/0x90 [ 450.383397][ T7130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.389353][ T7130] RIP: 0033:0x7f54e378efc9 [ 450.393827][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.413481][ T7130] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.421959][ T7130] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 450.430074][ T7130] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003 [ 450.438104][ T7130] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 450.446116][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.454132][ T7130] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 450.462176][ T7130] [ 450.980774][ T7149] netlink: 68 bytes leftover after parsing attributes in process `syz.3.425'. [ 451.184309][ T7155] netlink: 188 bytes leftover after parsing attributes in process `syz.3.427'. [ 454.803689][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.436'. [ 455.143188][ T7197] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 456.040471][ T7211] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 456.077913][ T7211] bond0: (slave bond_slave_0): Releasing backup interface [ 456.244994][ T7214] netlink: 'syz.1.445': attribute type 21 has an invalid length. [ 456.273288][ T7214] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 456.315731][ T7214] netlink: 7844 bytes leftover after parsing attributes in process `syz.1.445'. [ 457.579137][ T7238] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 459.365465][ T7259] delete_channel: no stack [ 466.934788][ T7330] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 466.946310][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 466.963077][ T7330] dummy0: entered promiscuous mode [ 466.975475][ T7330] dummy0: entered allmulticast mode [ 466.992585][ T7330] bridge0: port 3(dummy0) entered blocking state [ 467.002970][ T7330] bridge0: port 3(dummy0) entered disabled state [ 467.061380][ T7330] bridge0: port 3(dummy0) entered blocking state [ 467.068537][ T7330] bridge0: port 3(dummy0) entered forwarding state [ 468.155044][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 468.161304][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 468.228769][ T7340] Bluetooth: hci0: command 0x0406 tx timeout [ 468.228854][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 470.945506][ T7373] Ÿë: port 1(ip6gretap0) entered blocking state [ 470.962743][ T7373] Ÿë: port 1(ip6gretap0) entered disabled state [ 470.972635][ T7373] ip6gretap0: entered allmulticast mode [ 470.984290][ T7373] ip6gretap0: entered promiscuous mode [ 472.414054][ T7392] bridge0: port 3(dummy0) entered disabled state [ 472.421060][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.429226][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.485499][ T7392] bridge0: entered allmulticast mode [ 472.657059][ T7392] bridge0: port 3(dummy0) entered blocking state [ 472.663883][ T7392] bridge0: port 3(dummy0) entered forwarding state [ 472.671322][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.678771][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.686638][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.694041][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.743066][ T7392] bridge0: entered promiscuous mode [ 475.151114][ T7403] bridge0: port 3(dummy0) entered disabled state [ 475.157816][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.165600][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.183225][ T7403] bridge0: entered allmulticast mode [ 475.315725][ T7403] bridge0: port 3(dummy0) entered blocking state [ 475.322303][ T7403] bridge0: port 3(dummy0) entered forwarding state [ 475.329279][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.336593][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.344047][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.351362][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.402601][ T7403] bridge0: entered promiscuous mode [ 475.446056][ T7409] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.508'. [ 475.582718][ T7411] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.508'. [ 475.831817][ T7416] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 475.840091][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.847628][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.856139][ T7416] bridge0: left promiscuous mode [ 475.891814][ T7416] bridge0: left allmulticast mode [ 475.928881][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.936268][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.943923][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.951305][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.006021][ T7416] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 476.935223][ T7436] Ÿë: port 1(ip6gretap0) entered blocking state [ 476.941995][ T7436] Ÿë: port 1(ip6gretap0) entered disabled state [ 477.004105][ T7436] ip6gretap0: entered allmulticast mode [ 477.136112][ T7436] ip6gretap0: entered promiscuous mode [ 479.742072][ T7452] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.523'. [ 480.125992][ T7454] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.523'. [ 481.170478][ T7475] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 481.179127][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.530'. [ 481.247943][ T7475] batman_adv: batadv0: Adding interface: virt_wifi0 [ 481.254744][ T7475] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.295998][ T7475] batman_adv: batadv0: Interface activated: virt_wifi0 [ 481.323737][ T7478] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.530'. [ 481.492001][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.530'. [ 481.907735][ T7491] FAULT_INJECTION: forcing a failure. [ 481.907735][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 481.974928][ T7491] CPU: 0 PID: 7491 Comm: syz.0.534 Not tainted syzkaller #0 [ 481.982338][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.992479][ T7491] Call Trace: [ 481.995829][ T7491] [ 481.998826][ T7491] dump_stack_lvl+0x16c/0x230 [ 482.003601][ T7491] ? show_regs_print_info+0x20/0x20 [ 482.008883][ T7491] ? load_image+0x3b0/0x3b0 [ 482.013482][ T7491] ? __might_sleep+0xe0/0xe0 [ 482.018156][ T7491] ? __lock_acquire+0x7c80/0x7c80 [ 482.023283][ T7491] should_fail_ex+0x39d/0x4d0 [ 482.028079][ T7491] should_failslab+0x9/0x20 [ 482.032669][ T7491] slab_pre_alloc_hook+0x59/0x310 [ 482.037785][ T7491] ? __lock_acquire+0x7c80/0x7c80 [ 482.042912][ T7491] kmem_cache_alloc_node+0x60/0x330 [ 482.048198][ T7491] ? __alloc_skb+0x108/0x2c0 [ 482.052906][ T7491] __alloc_skb+0x108/0x2c0 [ 482.057437][ T7491] netlink_sendmsg+0x65b/0xbe0 [ 482.062327][ T7491] ? netlink_getsockopt+0x580/0x580 [ 482.067636][ T7491] ? aa_sock_msg_perm+0x94/0x150 [ 482.072665][ T7491] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 482.078027][ T7491] ? security_socket_sendmsg+0x80/0xa0 [ 482.083564][ T7491] ? netlink_getsockopt+0x580/0x580 [ 482.088847][ T7491] ____sys_sendmsg+0x5bf/0x950 [ 482.093732][ T7491] ? __asan_memset+0x22/0x40 [ 482.098426][ T7491] ? __sys_sendmsg_sock+0x30/0x30 [ 482.103535][ T7491] ? __import_iovec+0x5f2/0x860 [ 482.108525][ T7491] ? import_iovec+0x73/0xa0 [ 482.113132][ T7491] ___sys_sendmsg+0x220/0x290 [ 482.117916][ T7491] ? __sys_sendmsg+0x270/0x270 [ 482.122858][ T7491] ? __lock_acquire+0x7c80/0x7c80 [ 482.128071][ T7491] __se_sys_sendmsg+0x1a5/0x270 [ 482.133080][ T7491] ? __x64_sys_sendmsg+0x80/0x80 [ 482.138176][ T7491] ? lockdep_hardirqs_on+0x98/0x150 [ 482.143478][ T7491] do_syscall_64+0x55/0xb0 [ 482.147977][ T7491] ? clear_bhb_loop+0x40/0x90 [ 482.152740][ T7491] ? clear_bhb_loop+0x40/0x90 [ 482.157507][ T7491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.163472][ T7491] RIP: 0033:0x7f54e378efc9 [ 482.167963][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.187670][ T7491] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.196174][ T7491] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 482.204230][ T7491] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 482.212280][ T7491] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 482.220329][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.228389][ T7491] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 482.236510][ T7491] [ 484.919173][ T7541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.552'. [ 484.986290][ T7542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.552'. [ 485.038071][ T7542] openvswitch: netlink: Flow key attribute not present in set flow. [ 485.045690][ T7541] openvswitch: netlink: Flow key attribute not present in set flow. [ 487.368466][ T7561] FAULT_INJECTION: forcing a failure. [ 487.368466][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.455793][ T7561] CPU: 0 PID: 7561 Comm: syz.3.558 Not tainted syzkaller #0 [ 487.463268][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.473361][ T7561] Call Trace: [ 487.476670][ T7561] [ 487.479621][ T7561] dump_stack_lvl+0x16c/0x230 [ 487.484331][ T7561] ? show_regs_print_info+0x20/0x20 [ 487.489563][ T7561] ? load_image+0x3b0/0x3b0 [ 487.494095][ T7561] ? __might_fault+0xaa/0x120 [ 487.498804][ T7561] ? __lock_acquire+0x7c80/0x7c80 [ 487.503857][ T7561] should_fail_ex+0x39d/0x4d0 [ 487.508656][ T7561] _copy_from_user+0x2f/0xe0 [ 487.513270][ T7561] btf_new_fd+0x348/0x980 [ 487.517630][ T7561] ? bpf_btf_show_fdinfo+0x80/0x80 [ 487.522765][ T7561] ? capable+0x88/0xe0 [ 487.526894][ T7561] __sys_bpf+0x60e/0x800 [ 487.531185][ T7561] ? bpf_link_show_fdinfo+0x350/0x350 [ 487.536599][ T7561] ? lock_chain_count+0x20/0x20 [ 487.541480][ T7561] __x64_sys_bpf+0x7c/0x90 [ 487.545923][ T7561] do_syscall_64+0x55/0xb0 [ 487.550372][ T7561] ? clear_bhb_loop+0x40/0x90 [ 487.555122][ T7561] ? clear_bhb_loop+0x40/0x90 [ 487.559830][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.565749][ T7561] RIP: 0033:0x7f922478efc9 [ 487.570185][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.589815][ T7561] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.598252][ T7561] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 487.606242][ T7561] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 487.614230][ T7561] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 487.622224][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.630212][ T7561] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 487.638216][ T7561] [ 489.164589][ T7583] bond0: entered promiscuous mode [ 489.171218][ T7583] bond_slave_0: entered promiscuous mode [ 489.263265][ T7583] bond_slave_1: entered promiscuous mode [ 489.279222][ T7583] bridge0: entered promiscuous mode [ 489.541369][ T7599] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 489.565984][ T7599] netlink: 55 bytes leftover after parsing attributes in process `syz.0.572'. [ 489.589521][ T7599] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 489.677458][ T7599] batman_adv: batadv0: Removing interface: virt_wifi0 [ 490.338838][ T7622] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 490.365144][ T7622] netlink: 55 bytes leftover after parsing attributes in process `syz.0.580'. [ 490.703601][ T7631] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 490.775238][ T7631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.583'. [ 490.855365][ T7631] batman_adv: batadv0: Adding interface: virt_wifi0 [ 490.862089][ T7631] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.922068][ T7634] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.583'. [ 490.963063][ T7631] batman_adv: batadv0: Interface activated: virt_wifi0 [ 491.552806][ T7639] netlink: 'syz.3.585': attribute type 3 has an invalid length. [ 491.593656][ T7642] FAULT_INJECTION: forcing a failure. [ 491.593656][ T7642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.612423][ T7639] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.585'. [ 491.633578][ T7642] CPU: 1 PID: 7642 Comm: syz.1.586 Not tainted syzkaller #0 [ 491.640964][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.651181][ T7642] Call Trace: [ 491.654520][ T7642] [ 491.657500][ T7642] dump_stack_lvl+0x16c/0x230 [ 491.662243][ T7642] ? show_regs_print_info+0x20/0x20 [ 491.667503][ T7642] ? load_image+0x3b0/0x3b0 [ 491.672085][ T7642] ? __might_fault+0xaa/0x120 [ 491.676827][ T7642] ? __lock_acquire+0x7c80/0x7c80 [ 491.681921][ T7642] should_fail_ex+0x39d/0x4d0 [ 491.686678][ T7642] _copy_from_user+0x2f/0xe0 [ 491.691338][ T7642] ___sys_sendmsg+0x159/0x290 [ 491.696097][ T7642] ? __sys_sendmsg+0x270/0x270 [ 491.700979][ T7642] ? __lock_acquire+0x7c80/0x7c80 [ 491.706148][ T7642] __se_sys_sendmsg+0x1a5/0x270 [ 491.711076][ T7642] ? __x64_sys_sendmsg+0x80/0x80 [ 491.716115][ T7642] ? lockdep_hardirqs_on+0x98/0x150 [ 491.721400][ T7642] do_syscall_64+0x55/0xb0 [ 491.725887][ T7642] ? clear_bhb_loop+0x40/0x90 [ 491.730614][ T7642] ? clear_bhb_loop+0x40/0x90 [ 491.735354][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.741298][ T7642] RIP: 0033:0x7f23bc98efc9 [ 491.745773][ T7642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.765446][ T7642] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.773925][ T7642] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 491.781964][ T7642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 491.789984][ T7642] RBP: 00007f23bd876090 R08: 0000000000000000 R09: 0000000000000000 [ 491.798007][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.806048][ T7642] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 491.814110][ T7642] [ 493.580112][ T7659] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 493.599131][ T7659] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.592'. [ 494.057801][ T7672] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.597'. [ 494.380244][ T7676] sock: sock_timestamping_bind_phc: sock not bind to device [ 497.156327][ T7699] netlink: 140 bytes leftover after parsing attributes in process `syz.1.607'. [ 497.602791][ T7712] netlink: 'syz.2.611': attribute type 9 has an invalid length. [ 497.614714][ T7712] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.611'. [ 498.042034][ T7712] netlink: 'syz.2.611': attribute type 9 has an invalid length. [ 498.053090][ T7712] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.611'. [ 498.707600][ T7711] delete_channel: no stack [ 498.964592][ T7738] FAULT_INJECTION: forcing a failure. [ 498.964592][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 498.982638][ T7738] CPU: 0 PID: 7738 Comm: syz.0.620 Not tainted syzkaller #0 [ 498.990047][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.000151][ T7738] Call Trace: [ 499.003479][ T7738] [ 499.006460][ T7738] dump_stack_lvl+0x16c/0x230 [ 499.011212][ T7738] ? show_regs_print_info+0x20/0x20 [ 499.016490][ T7738] ? load_image+0x3b0/0x3b0 [ 499.021079][ T7738] ? __might_sleep+0xe0/0xe0 [ 499.025731][ T7738] ? __lock_acquire+0x7c80/0x7c80 [ 499.030829][ T7738] should_fail_ex+0x39d/0x4d0 [ 499.035578][ T7738] should_failslab+0x9/0x20 [ 499.040138][ T7738] slab_pre_alloc_hook+0x59/0x310 [ 499.045292][ T7738] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.051092][ T7738] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.056881][ T7738] __kmem_cache_alloc_node+0x53/0x260 [ 499.062315][ T7738] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.068103][ T7738] __kmalloc+0xa4/0x240 [ 499.072334][ T7738] tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.077967][ T7738] tomoyo_path_number_perm+0x1ea/0x590 [ 499.083500][ T7738] ? tomoyo_path_number_perm+0x1ba/0x590 [ 499.089200][ T7738] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 499.094724][ T7738] ? ksys_write+0x1c1/0x250 [ 499.099339][ T7738] ? __fget_files+0x28/0x4d0 [ 499.104001][ T7738] security_file_ioctl+0x70/0xa0 [ 499.109025][ T7738] __se_sys_ioctl+0x48/0x170 [ 499.113660][ T7738] do_syscall_64+0x55/0xb0 [ 499.118109][ T7738] ? clear_bhb_loop+0x40/0x90 [ 499.122817][ T7738] ? clear_bhb_loop+0x40/0x90 [ 499.127525][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.133452][ T7738] RIP: 0033:0x7f54e378efc9 [ 499.137896][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.157627][ T7738] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.166073][ T7738] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 499.174059][ T7738] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 499.182046][ T7738] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 499.190030][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.198020][ T7738] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 499.206028][ T7738] [ 499.255104][ T7738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.912096][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.921553][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.398888][ T7769] FAULT_INJECTION: forcing a failure. [ 502.398888][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 502.416713][ T7769] CPU: 1 PID: 7769 Comm: syz.3.627 Not tainted syzkaller #0 [ 502.424094][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.434205][ T7769] Call Trace: [ 502.437530][ T7769] [ 502.440493][ T7769] dump_stack_lvl+0x16c/0x230 [ 502.445199][ T7769] ? sctp_sendmsg+0x155c/0x27e0 [ 502.450084][ T7769] ? ___sys_sendmsg+0x220/0x290 [ 502.454969][ T7769] ? show_regs_print_info+0x20/0x20 [ 502.460193][ T7769] ? load_image+0x3b0/0x3b0 [ 502.464727][ T7769] should_fail_ex+0x39d/0x4d0 [ 502.469442][ T7769] should_failslab+0x9/0x20 [ 502.473978][ T7769] slab_pre_alloc_hook+0x59/0x310 [ 502.479034][ T7769] ? sctp_add_bind_addr+0x8c/0x360 [ 502.484170][ T7769] __kmem_cache_alloc_node+0x53/0x260 [ 502.489569][ T7769] ? sctp_add_bind_addr+0x8c/0x360 [ 502.494704][ T7769] kmalloc_trace+0x2a/0xe0 [ 502.499274][ T7769] sctp_add_bind_addr+0x8c/0x360 [ 502.504292][ T7769] sctp_copy_local_addr_list+0x30c/0x4e0 [ 502.509974][ T7769] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 502.515723][ T7769] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 502.521824][ T7769] ? sctp_v4_is_any+0x35/0x60 [ 502.526533][ T7769] ? sctp_copy_one_addr+0x8c/0x350 [ 502.531677][ T7769] sctp_bind_addr_copy+0xb3/0x3c0 [ 502.536734][ T7769] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 502.543089][ T7769] sctp_connect_new_asoc+0x2da/0x690 [ 502.548407][ T7769] ? __sctp_connect+0xd20/0xd20 [ 502.553278][ T7769] ? __local_bh_enable_ip+0x12e/0x1c0 [ 502.558665][ T7769] ? _local_bh_enable+0xa0/0xa0 [ 502.563528][ T7769] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 502.569437][ T7769] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 502.575291][ T7769] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 502.580867][ T7769] ? security_sctp_bind_connect+0x89/0xb0 [ 502.586641][ T7769] sctp_sendmsg+0x155c/0x27e0 [ 502.591355][ T7769] ? sctp_getsockopt+0xb60/0xb60 [ 502.596325][ T7769] ? aa_sk_perm+0x7fc/0x930 [ 502.600853][ T7769] ? aa_af_perm+0x2b0/0x2b0 [ 502.605379][ T7769] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 502.611826][ T7769] ? sock_rps_record_flow+0x19/0x400 [ 502.617135][ T7769] ? inet_send_prepare+0x260/0x260 [ 502.622302][ T7769] ? inet_sendmsg+0x7c/0x2f0 [ 502.626914][ T7769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.632309][ T7769] ? security_socket_sendmsg+0x80/0xa0 [ 502.637785][ T7769] ? inet_send_prepare+0x260/0x260 [ 502.642916][ T7769] ____sys_sendmsg+0x5bf/0x950 [ 502.647715][ T7769] ? __asan_memset+0x22/0x40 [ 502.652327][ T7769] ? __sys_sendmsg_sock+0x30/0x30 [ 502.657380][ T7769] ? __import_iovec+0x5f2/0x860 [ 502.662263][ T7769] ? import_iovec+0x73/0xa0 [ 502.666791][ T7769] ___sys_sendmsg+0x220/0x290 [ 502.671493][ T7769] ? __sys_sendmsg+0x270/0x270 [ 502.676298][ T7769] ? __lock_acquire+0x7c80/0x7c80 [ 502.681447][ T7769] __se_sys_sendmsg+0x1a5/0x270 [ 502.686441][ T7769] ? __x64_sys_sendmsg+0x80/0x80 [ 502.691417][ T7769] ? lockdep_hardirqs_on+0x98/0x150 [ 502.696632][ T7769] do_syscall_64+0x55/0xb0 [ 502.701075][ T7769] ? clear_bhb_loop+0x40/0x90 [ 502.705769][ T7769] ? clear_bhb_loop+0x40/0x90 [ 502.710466][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.716380][ T7769] RIP: 0033:0x7f922478efc9 [ 502.720813][ T7769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.740452][ T7769] RSP: 002b:00007f9225691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.748910][ T7769] RAX: ffffffffffffffda RBX: 00007f92249e6180 RCX: 00007f922478efc9 [ 502.756923][ T7769] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 502.764934][ T7769] RBP: 00007f9225691090 R08: 0000000000000000 R09: 0000000000000000 [ 502.772927][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.780915][ T7769] R13: 00007f92249e6218 R14: 00007f92249e6180 R15: 00007fff9c50ec98 [ 502.788966][ T7769] [ 503.376916][ T7784] netlink: 160 bytes leftover after parsing attributes in process `syz.2.633'. [ 507.654159][ T7815] FAULT_INJECTION: forcing a failure. [ 507.654159][ T7815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.705013][ T7815] CPU: 0 PID: 7815 Comm: syz.0.641 Not tainted syzkaller #0 [ 507.712406][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.722513][ T7815] Call Trace: [ 507.725845][ T7815] [ 507.728817][ T7815] dump_stack_lvl+0x16c/0x230 [ 507.733553][ T7815] ? show_regs_print_info+0x20/0x20 [ 507.738802][ T7815] ? load_image+0x3b0/0x3b0 [ 507.743353][ T7815] ? __lock_acquire+0x7c80/0x7c80 [ 507.748429][ T7815] ? snprintf+0xdb/0x120 [ 507.752714][ T7815] should_fail_ex+0x39d/0x4d0 [ 507.757443][ T7815] _copy_to_user+0x2f/0xa0 [ 507.761901][ T7815] simple_read_from_buffer+0xe7/0x150 [ 507.767328][ T7815] proc_fail_nth_read+0x1e3/0x250 [ 507.772411][ T7815] ? proc_fault_inject_write+0x340/0x340 [ 507.778096][ T7815] ? fsnotify_perm+0x271/0x5e0 [ 507.782913][ T7815] ? proc_fault_inject_write+0x340/0x340 [ 507.788590][ T7815] vfs_read+0x27e/0x920 [ 507.792800][ T7815] ? kernel_read+0x1e0/0x1e0 [ 507.797435][ T7815] ? __fget_files+0x28/0x4d0 [ 507.802075][ T7815] ? __fget_files+0x44a/0x4d0 [ 507.806830][ T7815] ? __fdget_pos+0x2a3/0x330 [ 507.811463][ T7815] ? ksys_read+0x75/0x250 [ 507.815862][ T7815] ksys_read+0x147/0x250 [ 507.820151][ T7815] ? vfs_write+0x940/0x940 [ 507.824614][ T7815] ? lockdep_hardirqs_on+0x98/0x150 [ 507.829857][ T7815] do_syscall_64+0x55/0xb0 [ 507.834324][ T7815] ? clear_bhb_loop+0x40/0x90 [ 507.839060][ T7815] ? clear_bhb_loop+0x40/0x90 [ 507.843778][ T7815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.849722][ T7815] RIP: 0033:0x7f54e378d9dc [ 507.854175][ T7815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 507.873831][ T7815] RSP: 002b:00007f54e45b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.882293][ T7815] RAX: ffffffffffffffda RBX: 00007f54e39e6090 RCX: 00007f54e378d9dc [ 507.890306][ T7815] RDX: 000000000000000f RSI: 00007f54e45b90a0 RDI: 0000000000000006 [ 507.898325][ T7815] RBP: 00007f54e45b9090 R08: 0000000000000000 R09: 0000000000000000 [ 507.906372][ T7815] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.914376][ T7815] R13: 00007f54e39e6128 R14: 00007f54e39e6090 R15: 00007ffc5b42ed78 [ 507.922386][ T7815] [ 513.077116][ T7872] netlink: 'syz.0.657': attribute type 33 has an invalid length. [ 513.486441][ T7885] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 513.504901][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'. [ 513.542540][ T7885] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.663'. [ 513.697328][ T7890] FAULT_INJECTION: forcing a failure. [ 513.697328][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.765711][ T7890] CPU: 0 PID: 7890 Comm: syz.2.665 Not tainted syzkaller #0 [ 513.773197][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.783320][ T7890] Call Trace: [ 513.786647][ T7890] [ 513.789626][ T7890] dump_stack_lvl+0x16c/0x230 [ 513.794379][ T7890] ? show_regs_print_info+0x20/0x20 [ 513.799643][ T7890] ? load_image+0x3b0/0x3b0 [ 513.804211][ T7890] ? __might_fault+0xaa/0x120 [ 513.808939][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 513.814012][ T7890] should_fail_ex+0x39d/0x4d0 [ 513.818749][ T7890] _copy_from_user+0x2f/0xe0 [ 513.823389][ T7890] ___sys_sendmsg+0x159/0x290 [ 513.828144][ T7890] ? __sys_sendmsg+0x270/0x270 [ 513.833001][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 513.838118][ T7890] __se_sys_sendmsg+0x1a5/0x270 [ 513.843037][ T7890] ? __x64_sys_sendmsg+0x80/0x80 [ 513.848056][ T7890] ? lockdep_hardirqs_on+0x98/0x150 [ 513.853311][ T7890] do_syscall_64+0x55/0xb0 [ 513.857789][ T7890] ? clear_bhb_loop+0x40/0x90 [ 513.862509][ T7890] ? clear_bhb_loop+0x40/0x90 [ 513.867232][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.873179][ T7890] RIP: 0033:0x7fec7518efc9 [ 513.877651][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.897311][ T7890] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.905781][ T7890] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 513.913794][ T7890] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 513.921806][ T7890] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 513.929816][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.937828][ T7890] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 513.945864][ T7890] [ 514.157126][ T7898] netlink: 'syz.3.666': attribute type 9 has an invalid length. [ 514.180169][ T7898] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.666'. [ 516.920622][ T7919] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 516.929735][ T7919] netlink: 55 bytes leftover after parsing attributes in process `syz.2.673'. [ 516.960444][ T7919] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 517.019297][ T7919] batman_adv: batadv0: Removing interface: virt_wifi0 [ 517.713962][ T7933] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 517.744554][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.677'. [ 517.892221][ T7933] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.677'. [ 518.913532][ T7940] FAULT_INJECTION: forcing a failure. [ 518.913532][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.985049][ T7940] CPU: 0 PID: 7940 Comm: syz.2.680 Not tainted syzkaller #0 [ 518.992461][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.002603][ T7940] Call Trace: [ 519.005958][ T7940] [ 519.008954][ T7940] dump_stack_lvl+0x16c/0x230 [ 519.013729][ T7940] ? show_regs_print_info+0x20/0x20 [ 519.019026][ T7940] ? load_image+0x3b0/0x3b0 [ 519.023643][ T7940] ? __lock_acquire+0x7c80/0x7c80 [ 519.028767][ T7940] ? snprintf+0xdb/0x120 [ 519.033107][ T7940] should_fail_ex+0x39d/0x4d0 [ 519.037896][ T7940] _copy_to_user+0x2f/0xa0 [ 519.042417][ T7940] simple_read_from_buffer+0xe7/0x150 [ 519.048004][ T7940] proc_fail_nth_read+0x1e3/0x250 [ 519.053129][ T7940] ? proc_fault_inject_write+0x340/0x340 [ 519.058955][ T7940] ? fsnotify_perm+0x271/0x5e0 [ 519.063998][ T7940] ? proc_fault_inject_write+0x340/0x340 [ 519.069730][ T7940] vfs_read+0x27e/0x920 [ 519.074286][ T7940] ? kernel_read+0x1e0/0x1e0 [ 519.079008][ T7940] ? __fget_files+0x28/0x4d0 [ 519.083688][ T7940] ? __fget_files+0x44a/0x4d0 [ 519.088584][ T7940] ? __fdget_pos+0x2a3/0x330 [ 519.093349][ T7940] ? ksys_read+0x75/0x250 [ 519.097787][ T7940] ksys_read+0x147/0x250 [ 519.102141][ T7940] ? vfs_write+0x940/0x940 [ 519.106679][ T7940] ? lockdep_hardirqs_on+0x98/0x150 [ 519.112096][ T7940] do_syscall_64+0x55/0xb0 [ 519.116772][ T7940] ? clear_bhb_loop+0x40/0x90 [ 519.121620][ T7940] ? clear_bhb_loop+0x40/0x90 [ 519.126479][ T7940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.132475][ T7940] RIP: 0033:0x7fec7518d9dc [ 519.136978][ T7940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 519.156759][ T7940] RSP: 002b:00007fec7601a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.165267][ T7940] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518d9dc [ 519.173326][ T7940] RDX: 000000000000000f RSI: 00007fec7601a0a0 RDI: 0000000000000004 [ 519.181371][ T7940] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 519.189420][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.197476][ T7940] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 519.206045][ T7940] [ 520.106177][ T5841] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 520.957328][ T7968] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 520.994232][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 521.014188][ T7971] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.687'. [ 521.019593][ T7968] batman_adv: batadv0: Adding interface: virt_wifi0 [ 521.069614][ T7968] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.114085][ T7968] batman_adv: batadv0: Interface activated: virt_wifi0 [ 521.166227][ T7973] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 521.182529][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.689'. [ 521.208641][ T7973] batman_adv: batadv0: Adding interface: virt_wifi0 [ 521.228820][ T7973] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.233849][ T7974] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.689'. [ 521.302313][ T7973] batman_adv: batadv0: Interface activated: virt_wifi0 [ 521.612642][ T7980] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.693'. [ 522.276424][ T8000] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 522.284286][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 522.340757][ T8000] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.699'. [ 522.612446][ T5841] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 523.619283][ T8029] wg2: entered promiscuous mode [ 523.683244][ T8029] wg2: entered allmulticast mode [ 523.758724][ T8031] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 523.846383][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.710'. [ 524.033998][ T8035] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.710'. [ 524.168843][ T8037] FAULT_INJECTION: forcing a failure. [ 524.168843][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.182402][ T8037] CPU: 0 PID: 8037 Comm: syz.0.712 Not tainted syzkaller #0 [ 524.189749][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.199856][ T8037] Call Trace: [ 524.203198][ T8037] [ 524.206170][ T8037] dump_stack_lvl+0x16c/0x230 [ 524.210909][ T8037] ? show_regs_print_info+0x20/0x20 [ 524.216165][ T8037] ? load_image+0x3b0/0x3b0 [ 524.220757][ T8037] ? __might_fault+0xaa/0x120 [ 524.225478][ T8037] ? __lock_acquire+0x7c80/0x7c80 [ 524.230557][ T8037] should_fail_ex+0x39d/0x4d0 [ 524.235299][ T8037] _copy_from_user+0x2f/0xe0 [ 524.239954][ T8037] ___sys_sendmsg+0x159/0x290 [ 524.244697][ T8037] ? __sys_sendmsg+0x270/0x270 [ 524.249567][ T8037] ? __lock_acquire+0x7c80/0x7c80 [ 524.254692][ T8037] __se_sys_sendmsg+0x1a5/0x270 [ 524.259614][ T8037] ? perf_trace_preemptirq_template+0x281/0x340 [ 524.265919][ T8037] ? __x64_sys_sendmsg+0x80/0x80 [ 524.270939][ T8037] ? lockdep_hardirqs_on+0x98/0x150 [ 524.276202][ T8037] do_syscall_64+0x55/0xb0 [ 524.280771][ T8037] ? clear_bhb_loop+0x40/0x90 [ 524.285514][ T8037] ? clear_bhb_loop+0x40/0x90 [ 524.290267][ T8037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.296213][ T8037] RIP: 0033:0x7f54e378efc9 [ 524.300680][ T8037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.320335][ T8037] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.328993][ T8037] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 524.337013][ T8037] RDX: 00000000000009fc RSI: 0000200000001180 RDI: 0000000000000003 [ 524.345044][ T8037] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 524.353057][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.361071][ T8037] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 524.369131][ T8037] [ 524.747546][ T5841] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 525.200561][ T8058] FAULT_INJECTION: forcing a failure. [ 525.200561][ T8058] name failslab, interval 1, probability 0, space 0, times 0 [ 525.247438][ T8058] CPU: 1 PID: 8058 Comm: syz.2.720 Not tainted syzkaller #0 [ 525.254824][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.264942][ T8058] Call Trace: [ 525.268269][ T8058] [ 525.271241][ T8058] dump_stack_lvl+0x16c/0x230 [ 525.275989][ T8058] ? show_regs_print_info+0x20/0x20 [ 525.281247][ T8058] ? load_image+0x3b0/0x3b0 [ 525.285821][ T8058] ? __might_sleep+0xe0/0xe0 [ 525.290483][ T8058] ? __lock_acquire+0x7c80/0x7c80 [ 525.295577][ T8058] ? stack_trace_save+0x9c/0xe0 [ 525.300496][ T8058] ? stack_trace_snprint+0xf0/0xf0 [ 525.305677][ T8058] should_fail_ex+0x39d/0x4d0 [ 525.310434][ T8058] should_failslab+0x9/0x20 [ 525.315094][ T8058] slab_pre_alloc_hook+0x59/0x310 [ 525.320199][ T8058] ? kasan_set_track+0x5f/0x70 [ 525.325022][ T8058] ? kasan_set_track+0x4e/0x70 [ 525.329848][ T8058] ? __kasan_kmalloc+0x8f/0xa0 [ 525.334771][ T8058] kmem_cache_alloc_node+0x60/0x330 [ 525.340043][ T8058] ? netlink_sendmsg+0x8c1/0xbe0 [ 525.345044][ T8058] ? __alloc_skb+0x108/0x2c0 [ 525.349720][ T8058] __alloc_skb+0x108/0x2c0 [ 525.354216][ T8058] netlink_dump+0x1cf/0xde0 [ 525.358798][ T8058] ? netlink_lookup+0x200/0x200 [ 525.363711][ T8058] ? __kasan_kmalloc+0x8f/0xa0 [ 525.368506][ T8058] ? __inet_diag_dump_start+0x884/0x9e0 [ 525.374078][ T8058] ? netlink_lookup+0x30/0x200 [ 525.378882][ T8058] __netlink_dump_start+0x5f1/0x810 [ 525.384117][ T8058] inet_diag_rcv_msg_compat+0x1eb/0x3c0 [ 525.389704][ T8058] ? __inet_diag_dump+0x380/0x380 [ 525.394771][ T8058] ? sock_diag_rcv_msg+0xd1/0x600 [ 525.400432][ T8058] ? inet_diag_rcv_msg_compat+0x3c0/0x3c0 [ 525.406207][ T8058] ? inet_diag_dump_start_compat+0x20/0x20 [ 525.412078][ T8058] ? inet_diag_dump+0x50/0x50 [ 525.416809][ T8058] ? __inet_diag_dump+0x380/0x380 [ 525.421871][ T8058] sock_diag_rcv_msg+0x3d8/0x600 [ 525.426848][ T8058] netlink_rcv_skb+0x216/0x480 [ 525.431642][ T8058] ? sock_diag_bind+0xb0/0xb0 [ 525.436433][ T8058] ? netlink_ack+0x1110/0x1110 [ 525.441504][ T8058] ? __lock_acquire+0x7c80/0x7c80 [ 525.446562][ T8058] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.451801][ T8058] sock_diag_rcv+0x2a/0x40 [ 525.456247][ T8058] netlink_unicast+0x751/0x8d0 [ 525.461059][ T8058] netlink_sendmsg+0x8c1/0xbe0 [ 525.465858][ T8058] ? netlink_getsockopt+0x580/0x580 [ 525.471096][ T8058] ? aa_sock_msg_perm+0x94/0x150 [ 525.476083][ T8058] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 525.481410][ T8058] ? security_socket_sendmsg+0x80/0xa0 [ 525.486938][ T8058] ? netlink_getsockopt+0x580/0x580 [ 525.492179][ T8058] ____sys_sendmsg+0x5bf/0x950 [ 525.496991][ T8058] ? __asan_memset+0x22/0x40 [ 525.501616][ T8058] ? __sys_sendmsg_sock+0x30/0x30 [ 525.506677][ T8058] ? __import_iovec+0x5f2/0x860 [ 525.511611][ T8058] ? import_iovec+0x73/0xa0 [ 525.516248][ T8058] ___sys_sendmsg+0x220/0x290 [ 525.521001][ T8058] ? __sys_sendmsg+0x270/0x270 [ 525.525814][ T8058] ? __lock_acquire+0x7c80/0x7c80 [ 525.530895][ T8058] __se_sys_sendmsg+0x1a5/0x270 [ 525.535782][ T8058] ? __x64_sys_sendmsg+0x80/0x80 [ 525.540791][ T8058] ? lockdep_hardirqs_on+0x98/0x150 [ 525.546036][ T8058] do_syscall_64+0x55/0xb0 [ 525.550515][ T8058] ? clear_bhb_loop+0x40/0x90 [ 525.555266][ T8058] ? clear_bhb_loop+0x40/0x90 [ 525.559971][ T8058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.565887][ T8058] RIP: 0033:0x7fec7518efc9 [ 525.570325][ T8058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.589982][ T8058] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.598462][ T8058] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 525.606485][ T8058] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 525.614492][ T8058] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 525.622487][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.630513][ T8058] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 525.638526][ T8058] [ 526.082469][ T8069] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.724'. [ 528.330343][ T8081] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.735'. [ 528.468049][ T8089] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 528.541771][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 528.652539][ T8089] team0: entered promiscuous mode [ 528.668417][ T8089] team_slave_0: entered promiscuous mode [ 528.680001][ T8089] team_slave_1: entered promiscuous mode [ 528.688121][ T8097] FAULT_INJECTION: forcing a failure. [ 528.688121][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.704589][ T8089] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 528.713063][ T8097] CPU: 1 PID: 8097 Comm: syz.1.732 Not tainted syzkaller #0 [ 528.720457][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.730597][ T8097] Call Trace: [ 528.733943][ T8097] [ 528.736939][ T8097] dump_stack_lvl+0x16c/0x230 [ 528.739636][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 528.741669][ T8097] ? show_regs_print_info+0x20/0x20 [ 528.755797][ T8097] ? load_image+0x3b0/0x3b0 [ 528.760375][ T8097] ? __lock_acquire+0x7c80/0x7c80 [ 528.765475][ T8097] ? __virt_addr_valid+0x18c/0x540 [ 528.770655][ T8097] should_fail_ex+0x39d/0x4d0 [ 528.775417][ T8097] _copy_from_user+0x2f/0xe0 [ 528.780096][ T8097] bpf_test_init+0xf9/0x150 [ 528.784669][ T8097] bpf_prog_test_run_xdp+0x382/0xfa0 [ 528.790031][ T8097] ? dev_put+0x80/0x80 [ 528.794194][ T8097] ? dev_put+0x80/0x80 [ 528.798323][ T8097] bpf_prog_test_run+0x321/0x390 [ 528.803334][ T8097] __sys_bpf+0x440/0x800 [ 528.807650][ T8097] ? bpf_link_show_fdinfo+0x350/0x350 [ 528.813106][ T8097] ? lock_chain_count+0x20/0x20 [ 528.818026][ T8097] __x64_sys_bpf+0x7c/0x90 [ 528.822516][ T8097] do_syscall_64+0x55/0xb0 [ 528.826994][ T8097] ? clear_bhb_loop+0x40/0x90 [ 528.831738][ T8097] ? clear_bhb_loop+0x40/0x90 [ 528.836492][ T8097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.842445][ T8097] RIP: 0033:0x7f23bc98efc9 [ 528.846911][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.866661][ T8097] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.875125][ T8097] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 528.883144][ T8097] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 528.891160][ T8097] RBP: 00007f23bd876090 R08: 0000000000000000 R09: 0000000000000000 [ 528.899291][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.907325][ T8097] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 528.915362][ T8097] [ 528.969463][ T8089] team0: entered allmulticast mode [ 529.001341][ T8089] team_slave_0: entered allmulticast mode [ 529.015843][ T8089] team_slave_1: entered allmulticast mode [ 529.023594][ T8089] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 529.074488][ T8089] bridge0: port 4(team0) entered blocking state [ 529.095883][ T8089] bridge0: port 4(team0) entered disabled state [ 529.169592][ T8089] bridge0: port 4(team0) entered blocking state [ 529.176203][ T8089] bridge0: port 4(team0) entered forwarding state [ 529.189946][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 529.205396][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 529.218132][ T8101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 529.303964][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'. [ 529.728444][ T8117] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.741'. [ 531.738612][ T8136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.748'. [ 532.044505][ T8148] FAULT_INJECTION: forcing a failure. [ 532.044505][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 532.117239][ T8148] CPU: 0 PID: 8148 Comm: syz.2.750 Not tainted syzkaller #0 [ 532.124627][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.134779][ T8148] Call Trace: [ 532.138104][ T8148] [ 532.141100][ T8148] dump_stack_lvl+0x16c/0x230 [ 532.145854][ T8148] ? sctp_sendmsg+0x155c/0x27e0 [ 532.150786][ T8148] ? ___sys_sendmsg+0x220/0x290 [ 532.155709][ T8148] ? show_regs_print_info+0x20/0x20 [ 532.160982][ T8148] ? load_image+0x3b0/0x3b0 [ 532.165555][ T8148] should_fail_ex+0x39d/0x4d0 [ 532.170304][ T8148] should_failslab+0x9/0x20 [ 532.174880][ T8148] slab_pre_alloc_hook+0x59/0x310 [ 532.179983][ T8148] ? sctp_add_bind_addr+0x8c/0x360 [ 532.185166][ T8148] __kmem_cache_alloc_node+0x53/0x260 [ 532.190606][ T8148] ? sctp_add_bind_addr+0x8c/0x360 [ 532.195780][ T8148] kmalloc_trace+0x2a/0xe0 [ 532.200267][ T8148] sctp_add_bind_addr+0x8c/0x360 [ 532.205355][ T8148] sctp_copy_local_addr_list+0x30c/0x4e0 [ 532.211053][ T8148] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 532.216834][ T8148] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 532.222980][ T8148] ? sctp_v4_is_any+0x35/0x60 [ 532.227693][ T8148] ? sctp_copy_one_addr+0x8c/0x350 [ 532.232839][ T8148] sctp_bind_addr_copy+0xb3/0x3c0 [ 532.237903][ T8148] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 532.244264][ T8148] sctp_connect_new_asoc+0x2da/0x690 [ 532.249595][ T8148] ? __sctp_connect+0xd20/0xd20 [ 532.254472][ T8148] ? __local_bh_enable_ip+0x12e/0x1c0 [ 532.259868][ T8148] ? _local_bh_enable+0xa0/0xa0 [ 532.264743][ T8148] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 532.270608][ T8148] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 532.276445][ T8148] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 532.282021][ T8148] ? security_sctp_bind_connect+0x89/0xb0 [ 532.287773][ T8148] sctp_sendmsg+0x155c/0x27e0 [ 532.292534][ T8148] ? sctp_getsockopt+0xb60/0xb60 [ 532.297505][ T8148] ? aa_sk_perm+0x7fc/0x930 [ 532.302045][ T8148] ? aa_af_perm+0x2b0/0x2b0 [ 532.306578][ T8148] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 532.313035][ T8148] ? sock_rps_record_flow+0x19/0x400 [ 532.318351][ T8148] ? inet_send_prepare+0x260/0x260 [ 532.323522][ T8148] ? inet_sendmsg+0x7c/0x2f0 [ 532.328192][ T8148] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 532.333516][ T8148] ? security_socket_sendmsg+0x80/0xa0 [ 532.339008][ T8148] ? inet_send_prepare+0x260/0x260 [ 532.344159][ T8148] ____sys_sendmsg+0x5bf/0x950 [ 532.348967][ T8148] ? __asan_memset+0x22/0x40 [ 532.353579][ T8148] ? __sys_sendmsg_sock+0x30/0x30 [ 532.358634][ T8148] ? __import_iovec+0x5f2/0x860 [ 532.363618][ T8148] ? import_iovec+0x73/0xa0 [ 532.368154][ T8148] ___sys_sendmsg+0x220/0x290 [ 532.372862][ T8148] ? __sys_sendmsg+0x270/0x270 [ 532.377689][ T8148] ? __lock_acquire+0x7c80/0x7c80 [ 532.382781][ T8148] __se_sys_sendmsg+0x1a5/0x270 [ 532.387663][ T8148] ? perf_trace_preemptirq_template+0x281/0x340 [ 532.393942][ T8148] ? __x64_sys_sendmsg+0x80/0x80 [ 532.398929][ T8148] ? lockdep_hardirqs_on+0x98/0x150 [ 532.404151][ T8148] do_syscall_64+0x55/0xb0 [ 532.408599][ T8148] ? clear_bhb_loop+0x40/0x90 [ 532.413305][ T8148] ? clear_bhb_loop+0x40/0x90 [ 532.418012][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.423950][ T8148] RIP: 0033:0x7fec7518efc9 [ 532.428395][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.448025][ T8148] RSP: 002b:00007fec75fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.456464][ T8148] RAX: ffffffffffffffda RBX: 00007fec753e6180 RCX: 00007fec7518efc9 [ 532.464548][ T8148] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 532.472542][ T8148] RBP: 00007fec75fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 532.480541][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.488542][ T8148] R13: 00007fec753e6218 R14: 00007fec753e6180 R15: 00007ffff2e1f428 [ 532.496646][ T8148] [ 532.601359][ T8151] tap0: tun_chr_ioctl cmd 1074025677 [ 532.607642][ T8151] tap0: linktype set to 1 [ 533.671638][ T8166] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.758'. [ 534.575053][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.762'. [ 534.971044][ T8196] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.770'. [ 535.156933][ T8204] FAULT_INJECTION: forcing a failure. [ 535.156933][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.193394][ T8204] CPU: 1 PID: 8204 Comm: syz.1.772 Not tainted syzkaller #0 [ 535.200861][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.210973][ T8204] Call Trace: [ 535.214296][ T8204] [ 535.217272][ T8204] dump_stack_lvl+0x16c/0x230 [ 535.222191][ T8204] ? show_regs_print_info+0x20/0x20 [ 535.227443][ T8204] ? load_image+0x3b0/0x3b0 [ 535.232000][ T8204] ? __might_fault+0xaa/0x120 [ 535.236726][ T8204] ? __lock_acquire+0x7c80/0x7c80 [ 535.241814][ T8204] should_fail_ex+0x39d/0x4d0 [ 535.246554][ T8204] _copy_from_user+0x2f/0xe0 [ 535.251200][ T8204] sctp_setsockopt+0x19e/0x11e0 [ 535.256112][ T8204] ? sock_common_recvmsg+0x1b0/0x1b0 [ 535.261461][ T8204] do_sock_setsockopt+0x175/0x1a0 [ 535.266549][ T8204] ? __fdget+0x180/0x210 [ 535.270858][ T8204] __x64_sys_setsockopt+0x184/0x200 [ 535.276142][ T8204] do_syscall_64+0x55/0xb0 [ 535.280634][ T8204] ? clear_bhb_loop+0x40/0x90 [ 535.285386][ T8204] ? clear_bhb_loop+0x40/0x90 [ 535.290140][ T8204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.296115][ T8204] RIP: 0033:0x7f23bc98efc9 [ 535.300616][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.320294][ T8204] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.328780][ T8204] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 535.336828][ T8204] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000004 [ 535.344869][ T8204] RBP: 00007f23bd876090 R08: 0000000000000008 R09: 0000000000000000 [ 535.352903][ T8204] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.360950][ T8204] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 535.368999][ T8204] [ 536.196704][ T8225] tap0: tun_chr_ioctl cmd 1074025677 [ 536.219038][ T8225] tap0: linktype set to 270 [ 537.292033][ T8244] FAULT_INJECTION: forcing a failure. [ 537.292033][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 537.306817][ T8244] CPU: 0 PID: 8244 Comm: syz.2.787 Not tainted syzkaller #0 [ 537.314200][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.324329][ T8244] Call Trace: [ 537.328123][ T8244] [ 537.331093][ T8244] dump_stack_lvl+0x16c/0x230 [ 537.335846][ T8244] ? show_regs_print_info+0x20/0x20 [ 537.341150][ T8244] ? load_image+0x3b0/0x3b0 [ 537.345718][ T8244] ? __might_sleep+0xe0/0xe0 [ 537.350380][ T8244] ? __lock_acquire+0x7c80/0x7c80 [ 537.355477][ T8244] should_fail_ex+0x39d/0x4d0 [ 537.360225][ T8244] should_failslab+0x9/0x20 [ 537.364791][ T8244] slab_pre_alloc_hook+0x59/0x310 [ 537.369904][ T8244] kmem_cache_alloc_lru+0x4d/0x2e0 [ 537.375083][ T8244] ? __d_alloc+0x31/0x730 [ 537.379489][ T8244] __d_alloc+0x31/0x730 [ 537.383716][ T8244] ? __lock_acquire+0x7c80/0x7c80 [ 537.388803][ T8244] ? do_raw_spin_lock+0x121/0x2c0 [ 537.393901][ T8244] d_alloc_pseudo+0x1d/0x70 [ 537.398478][ T8244] alloc_file_pseudo+0xcc/0x200 [ 537.403401][ T8244] ? alloc_empty_backing_file+0xe0/0xe0 [ 537.409022][ T8244] ? alloc_fd+0x58f/0x630 [ 537.413446][ T8244] anon_inode_getfd+0xca/0x1c0 [ 537.418360][ T8244] btf_new_fd+0x7ea/0x980 [ 537.422772][ T8244] ? bpf_btf_show_fdinfo+0x80/0x80 [ 537.427954][ T8244] ? capable+0x88/0xe0 [ 537.432105][ T8244] __sys_bpf+0x60e/0x800 [ 537.436421][ T8244] ? bpf_link_show_fdinfo+0x350/0x350 [ 537.441867][ T8244] ? lock_chain_count+0x20/0x20 [ 537.446770][ T8244] __x64_sys_bpf+0x7c/0x90 [ 537.451235][ T8244] do_syscall_64+0x55/0xb0 [ 537.455712][ T8244] ? clear_bhb_loop+0x40/0x90 [ 537.460459][ T8244] ? clear_bhb_loop+0x40/0x90 [ 537.465300][ T8244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.471249][ T8244] RIP: 0033:0x7fec7518efc9 [ 537.475707][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.495370][ T8244] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.503841][ T8244] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 537.511852][ T8244] RDX: 0000000000000028 RSI: 00002000000015c0 RDI: 0000000000000012 [ 537.519866][ T8244] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 537.527874][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.535885][ T8244] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 537.543904][ T8244] [ 538.054751][ T8262] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.800'. [ 539.509353][ T8278] tap0: tun_chr_ioctl cmd 1074025677 [ 539.526711][ T8278] tap0: linktype set to 270 [ 544.833082][ T8347] tap0: tun_chr_ioctl cmd 1074025677 [ 544.842355][ T8347] tap0: linktype set to 270 [ 545.149535][ T8351] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 545.175469][ T8351] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 545.195477][ T8351] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 545.204201][ T8351] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 545.226210][ T8351] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 545.234258][ T8351] FAULT_INJECTION: forcing a failure. [ 545.234258][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 545.254938][ T8351] CPU: 0 PID: 8351 Comm: syz.3.818 Not tainted syzkaller #0 [ 545.262403][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.272535][ T8351] Call Trace: [ 545.275867][ T8351] [ 545.278843][ T8351] dump_stack_lvl+0x16c/0x230 [ 545.283587][ T8351] ? show_regs_print_info+0x20/0x20 [ 545.288865][ T8351] ? load_image+0x3b0/0x3b0 [ 545.293414][ T8351] should_fail_ex+0x39d/0x4d0 [ 545.298130][ T8351] should_failslab+0x9/0x20 [ 545.302658][ T8351] slab_pre_alloc_hook+0x59/0x310 [ 545.307723][ T8351] kmem_cache_alloc+0x5a/0x2e0 [ 545.312584][ T8351] ? skb_clone+0x1eb/0x370 [ 545.317069][ T8351] skb_clone+0x1eb/0x370 [ 545.321349][ T8351] __netlink_deliver_tap+0x41c/0x830 [ 545.326674][ T8351] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.331899][ T8351] netlink_deliver_tap+0x19c/0x1b0 [ 545.337053][ T8351] netlink_dump+0x8df/0xde0 [ 545.341857][ T8351] ? netlink_lookup+0x200/0x200 [ 545.346960][ T8351] ? slab_free_freelist_hook+0x130/0x1b0 [ 545.352632][ T8351] ? netlink_recvmsg+0x5cf/0xdf0 [ 545.357711][ T8351] ? kmem_cache_free+0xf8/0x280 [ 545.362949][ T8351] netlink_recvmsg+0x677/0xdf0 [ 545.367788][ T8351] ? netlink_sendmsg+0xbe0/0xbe0 [ 545.372758][ T8351] ? aa_sk_perm+0x7fc/0x930 [ 545.377326][ T8351] ? aa_af_perm+0x2b0/0x2b0 [ 545.381896][ T8351] ? __lock_acquire+0x1260/0x7c80 [ 545.386982][ T8351] ? verify_lock_unused+0x140/0x140 [ 545.392210][ T8351] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 545.397529][ T8351] ? security_socket_recvmsg+0x89/0xb0 [ 545.403005][ T8351] ? netlink_sendmsg+0xbe0/0xbe0 [ 545.407975][ T8351] ____sys_recvmsg+0x29e/0x5b0 [ 545.412790][ T8351] ? __sys_recvmsg_sock+0x50/0x50 [ 545.417885][ T8351] ? import_iovec+0x73/0xa0 [ 545.422422][ T8351] ___sys_recvmsg+0x1b6/0x510 [ 545.427158][ T8351] ? __sys_recvmsg+0x270/0x270 [ 545.431966][ T8351] ? ksys_write+0x1c1/0x250 [ 545.436512][ T8351] ? __fget_files+0x44a/0x4d0 [ 545.441325][ T8351] __x64_sys_recvmsg+0x1f2/0x2c0 [ 545.446322][ T8351] ? ___sys_recvmsg+0x510/0x510 [ 545.451218][ T8351] ? lockdep_hardirqs_on+0x98/0x150 [ 545.456445][ T8351] do_syscall_64+0x55/0xb0 [ 545.460917][ T8351] ? clear_bhb_loop+0x40/0x90 [ 545.465621][ T8351] ? clear_bhb_loop+0x40/0x90 [ 545.470323][ T8351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.476245][ T8351] RIP: 0033:0x7f922478efc9 [ 545.480690][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.500334][ T8351] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 545.508791][ T8351] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 545.516789][ T8351] RDX: 0000000000010000 RSI: 0000200000000900 RDI: 0000000000000003 [ 545.524799][ T8351] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 545.532814][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.540806][ T8351] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 545.548815][ T8351] [ 550.135929][ T8403] FAULT_INJECTION: forcing a failure. [ 550.135929][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 550.159415][ T8403] CPU: 1 PID: 8403 Comm: syz.1.835 Not tainted syzkaller #0 [ 550.166807][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.176990][ T8403] Call Trace: [ 550.180312][ T8403] [ 550.183287][ T8403] dump_stack_lvl+0x16c/0x230 [ 550.188021][ T8403] ? show_regs_print_info+0x20/0x20 [ 550.193272][ T8403] ? load_image+0x3b0/0x3b0 [ 550.197827][ T8403] ? __might_sleep+0xe0/0xe0 [ 550.202466][ T8403] ? __lock_acquire+0x7c80/0x7c80 [ 550.207540][ T8403] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 550.213570][ T8403] ? is_dynamic_key+0x260/0x260 [ 550.218461][ T8403] should_fail_ex+0x39d/0x4d0 [ 550.223262][ T8403] should_failslab+0x9/0x20 [ 550.227795][ T8403] slab_pre_alloc_hook+0x59/0x310 [ 550.232864][ T8403] kmem_cache_alloc_node+0x60/0x330 [ 550.238095][ T8403] ? __alloc_skb+0x108/0x2c0 [ 550.242729][ T8403] __alloc_skb+0x108/0x2c0 [ 550.247181][ T8403] __ip_append_data+0x2a23/0x3bd0 [ 550.252247][ T8403] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 550.257847][ T8403] ? raw_send_hdrinc+0x1240/0x1240 [ 550.263005][ T8403] ? ip_setup_cork+0x860/0x860 [ 550.267805][ T8403] ? ip_setup_cork+0x530/0x860 [ 550.272617][ T8403] ip_append_data+0x10d/0x180 [ 550.277342][ T8403] ? raw_send_hdrinc+0x1240/0x1240 [ 550.282485][ T8403] raw_sendmsg+0x1420/0x1950 [ 550.287121][ T8403] ? compat_raw_ioctl+0x70/0x70 [ 550.292014][ T8403] ? aa_sk_perm+0x7fc/0x930 [ 550.296549][ T8403] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 550.303094][ T8403] ? sock_rps_record_flow+0x19/0x400 [ 550.308405][ T8403] ? inet_send_prepare+0x260/0x260 [ 550.313544][ T8403] ? inet_sendmsg+0x7c/0x2f0 [ 550.318150][ T8403] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 550.323458][ T8403] ? security_socket_sendmsg+0x80/0xa0 [ 550.328950][ T8403] ? inet_send_prepare+0x260/0x260 [ 550.334091][ T8403] ____sys_sendmsg+0x5bf/0x950 [ 550.338897][ T8403] ? __asan_memset+0x22/0x40 [ 550.343529][ T8403] ? __sys_sendmsg_sock+0x30/0x30 [ 550.348644][ T8403] ? __import_iovec+0x3fa/0x860 [ 550.353536][ T8403] ? import_iovec+0x73/0xa0 [ 550.358161][ T8403] ___sys_sendmsg+0x220/0x290 [ 550.362884][ T8403] ? __sys_sendmsg+0x270/0x270 [ 550.367734][ T8403] ? __lock_acquire+0x7c80/0x7c80 [ 550.372845][ T8403] __se_sys_sendmsg+0x1a5/0x270 [ 550.377794][ T8403] ? __x64_sys_sendmsg+0x80/0x80 [ 550.382792][ T8403] ? lockdep_hardirqs_on+0x98/0x150 [ 550.388020][ T8403] do_syscall_64+0x55/0xb0 [ 550.392467][ T8403] ? clear_bhb_loop+0x40/0x90 [ 550.397163][ T8403] ? clear_bhb_loop+0x40/0x90 [ 550.401866][ T8403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.407786][ T8403] RIP: 0033:0x7f23bc98efc9 [ 550.412225][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.431863][ T8403] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.440318][ T8403] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 550.448313][ T8403] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 550.456326][ T8403] RBP: 00007f23bd876090 R08: 0000000000000000 R09: 0000000000000000 [ 550.464327][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.472415][ T8403] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 550.480453][ T8403] [ 550.837583][ T8406] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.836'. [ 550.974262][ T8413] bridge0: port 3(dummy0) entered disabled state [ 550.974692][ T8415] FAULT_INJECTION: forcing a failure. [ 550.974692][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.980981][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.001556][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.037267][ T8415] CPU: 1 PID: 8415 Comm: syz.2.837 Not tainted syzkaller #0 [ 551.039502][ T8416] FAULT_INJECTION: forcing a failure. [ 551.039502][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 551.044667][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.044685][ T8415] Call Trace: [ 551.044693][ T8415] [ 551.044702][ T8415] dump_stack_lvl+0x16c/0x230 [ 551.044738][ T8415] ? show_regs_print_info+0x20/0x20 [ 551.044764][ T8415] ? load_image+0x3b0/0x3b0 [ 551.044789][ T8415] ? __might_fault+0xaa/0x120 [ 551.044809][ T8415] ? __lock_acquire+0x7c80/0x7c80 [ 551.044839][ T8415] should_fail_ex+0x39d/0x4d0 [ 551.044871][ T8415] _copy_from_iter+0x1d3/0x1290 [ 551.044908][ T8415] ? __might_fault+0xaa/0x120 [ 551.044930][ T8415] ? _copy_from_iter+0x248/0x1290 [ 551.044957][ T8415] ? __virt_addr_valid+0x18c/0x540 [ 551.044985][ T8415] ? __lock_acquire+0x7c80/0x7c80 [ 551.045008][ T8415] ? copyout_mc+0x70/0x70 [ 551.045038][ T8415] ? copyout_mc+0x70/0x70 [ 551.045064][ T8415] ? __virt_addr_valid+0x18c/0x540 [ 551.045094][ T8415] ? page_copy_sane+0x16a/0x270 [ 551.045124][ T8415] copy_page_from_iter+0x7b/0x100 [ 551.045157][ T8415] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 551.045196][ T8415] unix_stream_sendmsg+0x549/0xba0 [ 551.045241][ T8415] ? unix_show_fdinfo+0x270/0x270 [ 551.058912][ T8413] bridge0: left promiscuous mode [ 551.068001][ T8415] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 551.068052][ T8415] ? aa_sock_msg_perm+0x94/0x150 [ 551.184570][ T8415] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 551.189894][ T8415] ? security_socket_sendmsg+0x80/0xa0 [ 551.195395][ T8415] ? unix_show_fdinfo+0x270/0x270 [ 551.200461][ T8415] ____sys_sendmsg+0x5bf/0x950 [ 551.205266][ T8415] ? __asan_memset+0x22/0x40 [ 551.209900][ T8415] ? __sys_sendmsg_sock+0x30/0x30 [ 551.214949][ T8415] ? __import_iovec+0x5f2/0x860 [ 551.219840][ T8415] ? import_iovec+0x73/0xa0 [ 551.224486][ T8415] ___sys_sendmsg+0x220/0x290 [ 551.229197][ T8415] ? __sys_sendmsg+0x270/0x270 [ 551.234005][ T8415] ? __lock_acquire+0x7c80/0x7c80 [ 551.239076][ T8415] __se_sys_sendmsg+0x1a5/0x270 [ 551.243960][ T8415] ? perf_trace_preemptirq_template+0x281/0x340 [ 551.250231][ T8415] ? __x64_sys_sendmsg+0x80/0x80 [ 551.255475][ T8415] ? lockdep_hardirqs_on+0x98/0x150 [ 551.260698][ T8415] do_syscall_64+0x55/0xb0 [ 551.265160][ T8415] ? clear_bhb_loop+0x40/0x90 [ 551.269871][ T8415] ? clear_bhb_loop+0x40/0x90 [ 551.274622][ T8415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.280541][ T8415] RIP: 0033:0x7fec7518efc9 [ 551.284978][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.304885][ T8415] RSP: 002b:00007fec75ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.313442][ T8415] RAX: ffffffffffffffda RBX: 00007fec753e6090 RCX: 00007fec7518efc9 [ 551.321532][ T8415] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 551.329545][ T8415] RBP: 00007fec75ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 551.337593][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.345586][ T8415] R13: 00007fec753e6128 R14: 00007fec753e6090 R15: 00007ffff2e1f428 [ 551.353598][ T8415] [ 551.425834][ T8416] CPU: 1 PID: 8416 Comm: syz.1.839 Not tainted syzkaller #0 [ 551.433236][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.443352][ T8416] Call Trace: [ 551.446683][ T8416] [ 551.449660][ T8416] dump_stack_lvl+0x16c/0x230 [ 551.454415][ T8416] ? show_regs_print_info+0x20/0x20 [ 551.459691][ T8416] ? load_image+0x3b0/0x3b0 [ 551.464271][ T8416] ? __might_sleep+0xe0/0xe0 [ 551.468933][ T8416] ? __lock_acquire+0x7c80/0x7c80 [ 551.474023][ T8416] should_fail_ex+0x39d/0x4d0 [ 551.478778][ T8416] should_failslab+0x9/0x20 [ 551.483351][ T8416] slab_pre_alloc_hook+0x59/0x310 [ 551.488444][ T8416] ? tomoyo_encode+0x28b/0x540 [ 551.493245][ T8416] ? tomoyo_encode+0x28b/0x540 [ 551.498033][ T8416] __kmem_cache_alloc_node+0x53/0x260 [ 551.503440][ T8416] ? tomoyo_encode+0x28b/0x540 [ 551.508229][ T8416] __kmalloc+0xa4/0x240 [ 551.512412][ T8416] tomoyo_encode+0x28b/0x540 [ 551.517037][ T8416] tomoyo_realpath_from_path+0x592/0x5d0 [ 551.522986][ T8416] tomoyo_path_number_perm+0x1ea/0x590 [ 551.528491][ T8416] ? tomoyo_path_number_perm+0x1ba/0x590 [ 551.534160][ T8416] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 551.539827][ T8416] ? trace_call_bpf+0xc3/0x690 [ 551.544658][ T8416] ? trace_call_bpf+0xc3/0x690 [ 551.549470][ T8416] ? trace_call_bpf+0x5ba/0x690 [ 551.554386][ T8416] ? __fget_files+0x28/0x4d0 [ 551.559011][ T8416] security_file_ioctl+0x70/0xa0 [ 551.563977][ T8416] __se_sys_ioctl+0x48/0x170 [ 551.568596][ T8416] do_syscall_64+0x55/0xb0 [ 551.573038][ T8416] ? clear_bhb_loop+0x40/0x90 [ 551.577735][ T8416] ? clear_bhb_loop+0x40/0x90 [ 551.582462][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.588373][ T8416] RIP: 0033:0x7f23bc98efc9 [ 551.592817][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.612464][ T8416] RSP: 002b:00007f23bd855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.620898][ T8416] RAX: ffffffffffffffda RBX: 00007f23bcbe6090 RCX: 00007f23bc98efc9 [ 551.628891][ T8416] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000006 [ 551.636880][ T8416] RBP: 00007f23bd855090 R08: 0000000000000000 R09: 0000000000000000 [ 551.644869][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.652862][ T8416] R13: 00007f23bcbe6128 R14: 00007f23bcbe6090 R15: 00007fff279b7a48 [ 551.660870][ T8416] [ 551.721159][ T8416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.728403][ T8422] bridge0: port 4(team0) entered disabled state [ 551.735078][ T8422] bridge0: port 3(dummy0) entered disabled state [ 551.741800][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.749342][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.759926][ T8422] bridge0: left promiscuous mode [ 551.792332][ T8416] bridge0: port 3(dummy0) entered blocking state [ 551.798997][ T8416] bridge0: port 3(dummy0) entered forwarding state [ 551.805960][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.813160][ T8416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.820748][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.828075][ T8416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.836872][ T8416] bridge0: entered promiscuous mode [ 551.847436][ T8424] bridge0: port 4(team0) entered blocking state [ 551.853972][ T8424] bridge0: port 4(team0) entered forwarding state [ 551.861148][ T8424] bridge0: port 3(dummy0) entered blocking state [ 551.867785][ T8424] bridge0: port 3(dummy0) entered forwarding state [ 551.874722][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.882098][ T8424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.889769][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.897159][ T8424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.909066][ T8424] bridge0: entered promiscuous mode [ 551.918535][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.926033][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.933895][ T8426] bridge0: entered allmulticast mode [ 551.953379][ T8423] bridge0: port 3(team0) entered disabled state [ 551.976223][ T8423] bridge_slave_1: left allmulticast mode [ 551.995111][ T8423] bridge_slave_1: left promiscuous mode [ 552.001170][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.044709][ T8423] bridge_slave_0: left allmulticast mode [ 552.075269][ T8423] bridge_slave_0: left promiscuous mode [ 552.108663][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.386271][ T8423] bond0: (slave bridge0): Releasing backup interface [ 553.063940][ T8447] netlink: 'syz.0.847': attribute type 17 has an invalid length. [ 553.119339][ T8447] netlink: 'syz.0.847': attribute type 41 has an invalid length. [ 556.430244][ T8476] netlink: 'syz.1.856': attribute type 4 has an invalid length. [ 556.482048][ T8476] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.856'. [ 557.136187][ T8483] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.857'. [ 557.671311][ T8492] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 557.697805][ T8495] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 557.720589][ T8492] FAULT_INJECTION: forcing a failure. [ 557.720589][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 557.733971][ T8492] CPU: 1 PID: 8492 Comm: syz.2.860 Not tainted syzkaller #0 [ 557.741329][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.751451][ T8492] Call Trace: [ 557.754807][ T8492] [ 557.757790][ T8492] dump_stack_lvl+0x16c/0x230 [ 557.762624][ T8492] ? show_regs_print_info+0x20/0x20 [ 557.768391][ T8492] ? load_image+0x3b0/0x3b0 [ 557.773085][ T8492] ? rt6_nlmsg_size+0xca/0x480 [ 557.777919][ T8492] ? __lock_acquire+0x7c80/0x7c80 [ 557.783056][ T8492] should_fail_ex+0x39d/0x4d0 [ 557.788055][ T8492] should_failslab+0x9/0x20 [ 557.792600][ T8492] slab_pre_alloc_hook+0x59/0x310 [ 557.797658][ T8492] ? rt6_nlmsg_size+0x3fe/0x480 [ 557.802553][ T8492] kmem_cache_alloc_node+0x60/0x330 [ 557.807810][ T8492] ? __alloc_skb+0x108/0x2c0 [ 557.812438][ T8492] __alloc_skb+0x108/0x2c0 [ 557.816909][ T8492] inet6_rt_notify+0xb4/0x240 [ 557.821626][ T8492] fib6_del+0x1066/0x14f0 [ 557.826025][ T8492] ? fib6_locate_1+0x6c0/0x6c0 [ 557.830831][ T8492] ? verify_lock_unused+0x140/0x140 [ 557.836087][ T8492] fib6_clean_node+0x29a/0x580 [ 557.840922][ T8492] ? node_free_rcu+0x30/0x30 [ 557.845593][ T8492] ? __local_bh_enable_ip+0x12e/0x1c0 [ 557.850998][ T8492] fib6_walk_continue+0x672/0x900 [ 557.856067][ T8492] fib6_walk+0x149/0x290 [ 557.860344][ T8492] __fib6_clean_all+0x235/0x380 [ 557.865311][ T8492] ? __fib6_clean_all+0x9c/0x380 [ 557.870282][ T8492] ? rt6_sync_down_dev+0x150/0x150 [ 557.875424][ T8492] ? fib6_clean_all+0x30/0x30 [ 557.880573][ T8492] ? node_free_rcu+0x30/0x30 [ 557.885188][ T8492] ? rt6_sync_down_dev+0x150/0x150 [ 557.890707][ T8492] rt6_disable_ip+0x125/0x7a0 [ 557.895429][ T8492] ? fib6_ifdown+0x4b0/0x4b0 [ 557.900062][ T8492] ? __lock_acquire+0x7c80/0x7c80 [ 557.905115][ T8492] ? rcu_is_watching+0x15/0xb0 [ 557.910009][ T8492] addrconf_ifdown+0x15e/0x1880 [ 557.914892][ T8492] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 557.920565][ T8492] ? tls_dev_event+0x71f/0xf00 [ 557.925364][ T8492] ? addrconf_cleanup+0x1e0/0x1e0 [ 557.930427][ T8492] addrconf_notify+0x6c6/0x1010 [ 557.935312][ T8492] notifier_call_chain+0x197/0x390 [ 557.940464][ T8492] __dev_notify_flags+0x18e/0x2e0 [ 557.945525][ T8492] ? __dev_change_flags+0x6a0/0x6a0 [ 557.950752][ T8492] ? __dev_change_flags+0x4bf/0x6a0 [ 557.955984][ T8492] ? dev_get_flags+0x1c0/0x1c0 [ 557.960869][ T8492] ? printk_sprint+0x460/0x460 [ 557.965658][ T8492] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 557.971665][ T8492] ? _raw_spin_unlock+0x40/0x40 [ 557.976540][ T8492] dev_change_flags+0xe8/0x1a0 [ 557.981340][ T8492] do_setlink+0xc74/0x3fb0 [ 557.985964][ T8492] ? arch_stack_walk+0x160/0x190 [ 557.990962][ T8492] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 557.997133][ T8492] ? stack_trace_save+0x9c/0xe0 [ 558.002016][ T8492] ? __nla_validate_parse+0x25d1/0x2fa0 [ 558.007620][ T8492] ? __nla_validate+0x50/0x50 [ 558.012355][ T8492] ? validate_linkmsg+0x719/0x910 [ 558.017443][ T8492] rtnl_newlink+0x175b/0x2020 [ 558.022174][ T8492] ? rtnl_newlink+0x4b1/0x2020 [ 558.027022][ T8492] ? rtnl_setlink+0x4b0/0x4b0 [ 558.031737][ T8492] ? trace_raw_output_contention_end+0xd0/0xd0 [ 558.037929][ T8492] ? rcu_is_watching+0x15/0xb0 [ 558.042724][ T8492] ? trace_contention_end+0x39/0xe0 [ 558.047961][ T8492] ? __mutex_lock+0x304/0xcc0 [ 558.052693][ T8492] ? rtnl_setlink+0x4b0/0x4b0 [ 558.057445][ T8492] rtnetlink_rcv_msg+0x7c7/0xf10 [ 558.062411][ T8492] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 558.067892][ T8492] ? lockdep_hardirqs_on+0x98/0x150 [ 558.073136][ T8492] ? rtnetlink_bind+0x80/0x80 [ 558.077935][ T8492] ? perf_trace_preemptirq_template+0xa4/0x340 [ 558.084125][ T8492] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 558.090218][ T8492] ? lock_chain_count+0x20/0x20 [ 558.095196][ T8492] ? __local_bh_enable_ip+0x12e/0x1c0 [ 558.100591][ T8492] ? lockdep_hardirqs_on+0x98/0x150 [ 558.105819][ T8492] ? __local_bh_enable_ip+0x12e/0x1c0 [ 558.111399][ T8492] ? _local_bh_enable+0xa0/0xa0 [ 558.116284][ T8492] ? __dev_queue_xmit+0x245/0x35a0 [ 558.121427][ T8492] ? __dev_queue_xmit+0x1449/0x35a0 [ 558.126666][ T8492] ? __dev_queue_xmit+0x245/0x35a0 [ 558.131812][ T8492] ? ref_tracker_free+0x634/0x7d0 [ 558.137210][ T8492] ? __copy_skb_header+0xa7/0x550 [ 558.142367][ T8492] netlink_rcv_skb+0x216/0x480 [ 558.147169][ T8492] ? rtnetlink_bind+0x80/0x80 [ 558.152011][ T8492] ? netlink_ack+0x1110/0x1110 [ 558.157600][ T8492] ? __lock_acquire+0x7c80/0x7c80 [ 558.162674][ T8492] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.167927][ T8492] netlink_unicast+0x751/0x8d0 [ 558.172739][ T8492] netlink_sendmsg+0x8c1/0xbe0 [ 558.177539][ T8492] ? netlink_getsockopt+0x580/0x580 [ 558.182797][ T8492] ? aa_sock_msg_perm+0x94/0x150 [ 558.187862][ T8492] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 558.193185][ T8492] ? security_socket_sendmsg+0x80/0xa0 [ 558.198707][ T8492] ? netlink_getsockopt+0x580/0x580 [ 558.204197][ T8492] ____sys_sendmsg+0x5bf/0x950 [ 558.209013][ T8492] ? __asan_memset+0x22/0x40 [ 558.213649][ T8492] ? __sys_sendmsg_sock+0x30/0x30 [ 558.218716][ T8492] ? __import_iovec+0x5f2/0x860 [ 558.223708][ T8492] ? import_iovec+0x73/0xa0 [ 558.228250][ T8492] ___sys_sendmsg+0x220/0x290 [ 558.232964][ T8492] ? __sys_sendmsg+0x270/0x270 [ 558.237885][ T8492] ? __lock_acquire+0x7c80/0x7c80 [ 558.242997][ T8492] __se_sys_sendmsg+0x1a5/0x270 [ 558.247922][ T8492] ? __x64_sys_sendmsg+0x80/0x80 [ 558.253020][ T8492] ? lockdep_hardirqs_on+0x98/0x150 [ 558.258282][ T8492] do_syscall_64+0x55/0xb0 [ 558.262762][ T8492] ? clear_bhb_loop+0x40/0x90 [ 558.268252][ T8492] ? clear_bhb_loop+0x40/0x90 [ 558.272956][ T8492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.278880][ T8492] RIP: 0033:0x7fec7518efc9 [ 558.283322][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.303410][ T8492] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.311861][ T8492] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 558.320052][ T8492] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 558.328319][ T8492] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 558.336406][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.344407][ T8492] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 558.352425][ T8492] [ 558.378393][ T8492] dummy0: entered promiscuous mode [ 558.384534][ T8492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.424654][ T8495] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 558.439254][ T8499] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 558.450194][ T8502] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 558.628202][ T8504] netlink: 'syz.2.864': attribute type 17 has an invalid length. [ 558.644538][ T8504] netlink: 'syz.2.864': attribute type 41 has an invalid length. [ 558.734359][ T8508] netlink: 'syz.3.866': attribute type 11 has an invalid length. [ 559.617263][ T8519] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.870'. [ 561.967325][ T8526] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 562.013284][ T8526] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 562.030579][ T8531] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 562.040479][ T8526] netlink: 'syz.2.873': attribute type 29 has an invalid length. [ 562.657209][ T8541] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.878'. [ 563.240692][ T8543] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.879'. [ 563.364274][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.373326][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.639053][ T8569] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.887'. [ 565.133339][ T8592] netlink: 703 bytes leftover after parsing attributes in process `syz.2.892'. [ 565.280235][ T8591] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.894'. [ 566.309449][ T8613] netlink: 'syz.1.900': attribute type 11 has an invalid length. [ 567.539985][ T8635] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.906'. [ 569.147338][ T8659] syz.3.914 (8659) used obsolete PPPIOCDETACH ioctl [ 570.646600][ T8664] FAULT_INJECTION: forcing a failure. [ 570.646600][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 570.690366][ T8664] CPU: 0 PID: 8664 Comm: syz.1.916 Not tainted syzkaller #0 [ 570.697770][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.707881][ T8664] Call Trace: [ 570.711230][ T8664] [ 570.714183][ T8664] dump_stack_lvl+0x16c/0x230 [ 570.718908][ T8664] ? show_regs_print_info+0x20/0x20 [ 570.724132][ T8664] ? load_image+0x3b0/0x3b0 [ 570.728661][ T8664] ? __might_sleep+0xe0/0xe0 [ 570.733275][ T8664] ? __lock_acquire+0x7c80/0x7c80 [ 570.738327][ T8664] should_fail_ex+0x39d/0x4d0 [ 570.743044][ T8664] should_failslab+0x9/0x20 [ 570.747598][ T8664] slab_pre_alloc_hook+0x59/0x310 [ 570.752655][ T8664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.758416][ T8664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.764174][ T8664] __kmem_cache_alloc_node+0x53/0x260 [ 570.769584][ T8664] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.775338][ T8664] __kmalloc+0xa4/0x240 [ 570.779611][ T8664] tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.785202][ T8664] tomoyo_path_number_perm+0x1ea/0x590 [ 570.790689][ T8664] ? tomoyo_path_number_perm+0x1ba/0x590 [ 570.796351][ T8664] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 570.801883][ T8664] ? ksys_write+0x1c1/0x250 [ 570.806457][ T8664] ? __fget_files+0x28/0x4d0 [ 570.811109][ T8664] security_file_ioctl+0x70/0xa0 [ 570.816159][ T8664] __se_sys_ioctl+0x48/0x170 [ 570.820775][ T8664] do_syscall_64+0x55/0xb0 [ 570.825217][ T8664] ? clear_bhb_loop+0x40/0x90 [ 570.829922][ T8664] ? clear_bhb_loop+0x40/0x90 [ 570.834628][ T8664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.840546][ T8664] RIP: 0033:0x7f23bc98efc9 [ 570.845069][ T8664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.864790][ T8664] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.873240][ T8664] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 570.881231][ T8664] RDX: 0000200000000000 RSI: 000000004004743c RDI: 0000000000000004 [ 570.889231][ T8664] RBP: 00007f23bd876090 R08: 0000000000000000 R09: 0000000000000000 [ 570.897316][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.905391][ T8664] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 570.913664][ T8664] [ 570.933984][ T8664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.106330][ T8672] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.920'. [ 571.574077][ T8683] bridge0: port 4(team0) entered blocking state [ 571.642515][ T8683] bridge0: port 4(team0) entered disabled state [ 571.689017][ T8683] team0: entered allmulticast mode [ 571.740645][ T8683] team_slave_0: entered allmulticast mode [ 571.756483][ T8683] team_slave_1: entered allmulticast mode [ 571.832974][ T8683] team0: entered promiscuous mode [ 571.839331][ T8683] team_slave_0: entered promiscuous mode [ 571.847582][ T8683] team_slave_1: entered promiscuous mode [ 571.890669][ T8683] bridge0: port 4(team0) entered blocking state [ 571.900948][ T8683] bridge0: port 4(team0) entered forwarding state [ 572.885757][ T8701] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 572.967493][ T8701] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 572.988932][ T8697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.005271][ T8700] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 573.035356][ T8701] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 574.330288][ T8714] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.933'. [ 575.094485][ T8721] netlink: 'syz.0.934': attribute type 21 has an invalid length. [ 575.124988][ T8721] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 575.152588][ T8726] netlink: 830 bytes leftover after parsing attributes in process `syz.2.936'. [ 575.202426][ T8726] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 575.217914][ T8726] netlink: 'syz.2.936': attribute type 3 has an invalid length. [ 575.236445][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.936'. [ 575.307614][ T8733] tap0: tun_chr_ioctl cmd 1074025677 [ 575.324739][ T8733] tap0: linktype set to 1 [ 575.440280][ T8734] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.938'. [ 575.632466][ T8740] netlink: 830 bytes leftover after parsing attributes in process `syz.0.940'. [ 575.661314][ T8740] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 575.674218][ T8740] netlink: 'syz.0.940': attribute type 3 has an invalid length. [ 575.695123][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.940'. [ 575.812229][ T8744] FAULT_INJECTION: forcing a failure. [ 575.812229][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 575.838258][ T8744] CPU: 0 PID: 8744 Comm: syz.3.941 Not tainted syzkaller #0 [ 575.845652][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.855756][ T8744] Call Trace: [ 575.859093][ T8744] [ 575.862046][ T8744] dump_stack_lvl+0x16c/0x230 [ 575.866847][ T8744] ? show_regs_print_info+0x20/0x20 [ 575.872073][ T8744] ? load_image+0x3b0/0x3b0 [ 575.876598][ T8744] ? lockdep_hardirqs_on+0x98/0x150 [ 575.881861][ T8744] should_fail_ex+0x39d/0x4d0 [ 575.886888][ T8744] should_failslab+0x9/0x20 [ 575.891469][ T8744] slab_pre_alloc_hook+0x59/0x310 [ 575.896541][ T8744] ? __get_vm_area_node+0x125/0x370 [ 575.901861][ T8744] __kmem_cache_alloc_node+0x53/0x260 [ 575.907276][ T8744] ? __get_vm_area_node+0x125/0x370 [ 575.913111][ T8744] kmalloc_node_trace+0x26/0xe0 [ 575.918273][ T8744] __get_vm_area_node+0x125/0x370 [ 575.923433][ T8744] __vmalloc_node_range+0x36e/0x1320 [ 575.928767][ T8744] ? netlink_sendmsg+0x5f3/0xbe0 [ 575.933741][ T8744] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.939840][ T8744] ? lock_chain_count+0x20/0x20 [ 575.944738][ T8744] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.951109][ T8744] ? free_vm_area+0x50/0x50 [ 575.955646][ T8744] ? netlink_insert+0x10b6/0x1370 [ 575.960707][ T8744] ? netlink_sendmsg+0x5f3/0xbe0 [ 575.965676][ T8744] vmalloc+0x79/0x90 [ 575.969737][ T8744] ? netlink_sendmsg+0x5f3/0xbe0 [ 575.974715][ T8744] netlink_sendmsg+0x5f3/0xbe0 [ 575.979539][ T8744] ? netlink_getsockopt+0x580/0x580 [ 575.984771][ T8744] ? aa_sock_msg_perm+0x94/0x150 [ 575.989838][ T8744] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 575.995160][ T8744] ? security_socket_sendmsg+0x80/0xa0 [ 576.000646][ T8744] ? netlink_getsockopt+0x580/0x580 [ 576.005874][ T8744] ____sys_sendmsg+0x5bf/0x950 [ 576.010678][ T8744] ? __asan_memset+0x22/0x40 [ 576.015307][ T8744] ? __sys_sendmsg_sock+0x30/0x30 [ 576.020381][ T8744] ? __import_iovec+0x5f2/0x860 [ 576.025278][ T8744] ? import_iovec+0x73/0xa0 [ 576.029820][ T8744] ___sys_sendmsg+0x220/0x290 [ 576.034541][ T8744] ? __sys_sendmsg+0x270/0x270 [ 576.039493][ T8744] __se_sys_sendmsg+0x1a5/0x270 [ 576.044520][ T8744] ? __x64_sys_sendmsg+0x80/0x80 [ 576.049541][ T8744] ? syscall_enter_from_user_mode+0x2e/0x80 [ 576.055488][ T8744] do_syscall_64+0x55/0xb0 [ 576.059947][ T8744] ? clear_bhb_loop+0x40/0x90 [ 576.064667][ T8744] ? clear_bhb_loop+0x40/0x90 [ 576.069497][ T8744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.075620][ T8744] RIP: 0033:0x7f922478efc9 [ 576.080063][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.099725][ T8744] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.108189][ T8744] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 576.116274][ T8744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 576.124269][ T8744] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 576.133000][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.141443][ T8744] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 576.149466][ T8744] [ 576.226745][ T8744] syz.3.941: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 576.263903][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.941'. [ 576.272516][ T8744] CPU: 1 PID: 8744 Comm: syz.3.941 Not tainted syzkaller #0 [ 576.281047][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.291338][ T8744] Call Trace: [ 576.294666][ T8744] [ 576.297664][ T8744] dump_stack_lvl+0x16c/0x230 [ 576.302458][ T8744] ? show_regs_print_info+0x20/0x20 [ 576.307828][ T8744] ? load_image+0x3b0/0x3b0 [ 576.313016][ T8744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 576.319507][ T8744] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 576.326165][ T8744] warn_alloc+0x210/0x300 [ 576.330664][ T8744] ? __get_vm_area_node+0x125/0x370 [ 576.335954][ T8744] ? zone_watermark_ok_safe+0x230/0x230 [ 576.341670][ T8744] ? rcu_is_watching+0x15/0xb0 [ 576.346531][ T8744] ? __get_vm_area_node+0x356/0x370 [ 576.351900][ T8744] __vmalloc_node_range+0x393/0x1320 [ 576.357267][ T8744] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 576.363433][ T8744] ? lock_chain_count+0x20/0x20 [ 576.368369][ T8744] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.374725][ T8744] ? free_vm_area+0x50/0x50 [ 576.379411][ T8744] ? netlink_insert+0x10b6/0x1370 [ 576.384516][ T8744] ? netlink_sendmsg+0x5f3/0xbe0 [ 576.389522][ T8744] vmalloc+0x79/0x90 [ 576.393477][ T8744] ? netlink_sendmsg+0x5f3/0xbe0 [ 576.398472][ T8744] netlink_sendmsg+0x5f3/0xbe0 [ 576.403324][ T8744] ? netlink_getsockopt+0x580/0x580 [ 576.408692][ T8744] ? aa_sock_msg_perm+0x94/0x150 [ 576.413704][ T8744] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.419075][ T8744] ? security_socket_sendmsg+0x80/0xa0 [ 576.424611][ T8744] ? netlink_getsockopt+0x580/0x580 [ 576.429874][ T8744] ____sys_sendmsg+0x5bf/0x950 [ 576.435056][ T8744] ? __asan_memset+0x22/0x40 [ 576.439713][ T8744] ? __sys_sendmsg_sock+0x30/0x30 [ 576.444807][ T8744] ? __import_iovec+0x5f2/0x860 [ 576.449831][ T8744] ? import_iovec+0x73/0xa0 [ 576.454403][ T8744] ___sys_sendmsg+0x220/0x290 [ 576.459239][ T8744] ? __sys_sendmsg+0x270/0x270 [ 576.464175][ T8744] __se_sys_sendmsg+0x1a5/0x270 [ 576.469112][ T8744] ? __x64_sys_sendmsg+0x80/0x80 [ 576.474137][ T8744] ? syscall_enter_from_user_mode+0x2e/0x80 [ 576.480126][ T8744] do_syscall_64+0x55/0xb0 [ 576.484640][ T8744] ? clear_bhb_loop+0x40/0x90 [ 576.489438][ T8744] ? clear_bhb_loop+0x40/0x90 [ 576.494184][ T8744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.500397][ T8744] RIP: 0033:0x7f922478efc9 [ 576.504869][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.524790][ T8744] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.533237][ T8744] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 576.541325][ T8744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 576.549344][ T8744] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 576.557545][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.565575][ T8744] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 576.574240][ T8744] [ 576.589901][ T8749] veth1_to_bond: entered allmulticast mode [ 576.636645][ T8744] Mem-Info: [ 576.640576][ T8744] active_anon:4479 inactive_anon:0 isolated_anon:0 [ 576.640576][ T8744] active_file:11841 inactive_file:39971 isolated_file:0 [ 576.640576][ T8744] unevictable:768 dirty:498 writeback:0 [ 576.640576][ T8744] slab_reclaimable:10002 slab_unreclaimable:91250 [ 576.640576][ T8744] mapped:24805 shmem:1361 pagetables:418 [ 576.640576][ T8744] sec_pagetables:0 bounce:0 [ 576.640576][ T8744] kernel_misc_reclaimable:0 [ 576.640576][ T8744] free:1358075 free_pcp:10821 free_cma:0 [ 576.737458][ T8744] Node 0 active_anon:17916kB inactive_anon:0kB active_file:47364kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99420kB dirty:1992kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:1672kB sec_pagetables:0kB all_unreclaimable? no [ 576.791446][ T8744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 576.822507][ T8744] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.863471][ T8744] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 576.873751][ T8744] Node 0 DMA32 free:1522348kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:17968kB inactive_anon:0kB active_file:47364kB inactive_file:158368kB unevictable:1536kB writepending:1992kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:22664kB local_pcp:2364kB free_cma:0kB [ 576.957718][ T8744] lowmem_reserve[]: 0 0 1 1 1 [ 576.968255][ T8744] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 576.996990][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 577.001949][ T8744] Node 1 Normal free:3894576kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21348kB local_pcp:12004kB free_cma:0kB [ 577.033199][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 577.039203][ T8744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.054577][ T8744] Node 0 DMA32: 1483*4kB (UME) 1002*8kB (UM) 685*16kB (UME) 803*32kB (UME) 472*64kB (UME) 34*128kB (UME) 22*256kB (UME) 8*512kB (UM) 4*1024kB (ME) 5*2048kB (UME) 345*4096kB (UM) = 1522348kB [ 577.082288][ T8744] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 577.115320][ T8744] Node 1 Normal: 232*4kB (UE) 60*8kB (UME) 49*16kB (UME) 87*32kB (UME) 13*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894576kB [ 577.162908][ T8744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.192967][ T8744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.220692][ T8744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.246918][ T8744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.272447][ T8744] 53173 total pagecache pages [ 577.299489][ T8744] 0 pages in swap cache [ 577.303746][ T8744] Free swap = 124996kB [ 577.321718][ T8744] Total swap = 124996kB [ 577.326172][ T8744] 2097051 pages RAM [ 577.330046][ T8744] 0 pages HighMem/MovableOnly [ 577.349224][ T8744] 416137 pages reserved [ 577.353477][ T8744] 0 pages cma reserved [ 577.558130][ T8768] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.947'. [ 578.324692][ T8775] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.949'. [ 578.497783][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.950'. [ 579.407428][ T8801] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.958'. [ 579.551564][ T8803] FAULT_INJECTION: forcing a failure. [ 579.551564][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 579.605460][ T8803] CPU: 1 PID: 8803 Comm: syz.1.959 Not tainted syzkaller #0 [ 579.613171][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.623346][ T8803] Call Trace: [ 579.626699][ T8803] [ 579.629703][ T8803] dump_stack_lvl+0x16c/0x230 [ 579.634515][ T8803] ? show_regs_print_info+0x20/0x20 [ 579.639917][ T8803] ? load_image+0x3b0/0x3b0 [ 579.644904][ T8803] ? __might_sleep+0xe0/0xe0 [ 579.649701][ T8803] ? __lock_acquire+0x7c80/0x7c80 [ 579.654857][ T8803] should_fail_ex+0x39d/0x4d0 [ 579.659734][ T8803] should_failslab+0x9/0x20 [ 579.664405][ T8803] slab_pre_alloc_hook+0x59/0x310 [ 579.670085][ T8803] ? verify_lock_unused+0x140/0x140 [ 579.675381][ T8803] ? __get_vm_area_node+0x125/0x370 [ 579.680706][ T8803] __kmem_cache_alloc_node+0x53/0x260 [ 579.686204][ T8803] ? __get_vm_area_node+0x125/0x370 [ 579.691552][ T8803] kmalloc_node_trace+0x26/0xe0 [ 579.696662][ T8803] __get_vm_area_node+0x125/0x370 [ 579.701805][ T8803] __vmalloc_node_range+0x36e/0x1320 [ 579.707646][ T8803] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 579.713324][ T8803] ? mark_lock+0x94/0x320 [ 579.717736][ T8803] ? __lock_acquire+0x1334/0x7c80 [ 579.722892][ T8803] ? free_vm_area+0x50/0x50 [ 579.727467][ T8803] ? end_current_label_crit_section+0x170/0x170 [ 579.733820][ T8803] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 579.739419][ T8803] __vmalloc+0x7a/0x90 [ 579.744076][ T8803] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 579.750128][ T8803] bpf_prog_alloc_no_stats+0x47/0x440 [ 579.755655][ T8803] ? bpf_prog_alloc+0x2b/0x1b0 [ 579.760487][ T8803] bpf_prog_alloc+0x3d/0x1b0 [ 579.765173][ T8803] bpf_prog_load+0x6b8/0x16d0 [ 579.769975][ T8803] ? map_freeze+0x420/0x420 [ 579.774996][ T8803] ? __might_fault+0xaa/0x120 [ 579.779745][ T8803] ? __lock_acquire+0x7c80/0x7c80 [ 579.784871][ T8803] ? __might_fault+0xaa/0x120 [ 579.789724][ T8803] ? __might_fault+0xc6/0x120 [ 579.795024][ T8803] ? __might_fault+0xaa/0x120 [ 579.799766][ T8803] ? bpf_lsm_bpf+0x9/0x10 [ 579.804145][ T8803] ? security_bpf+0x7e/0xa0 [ 579.808844][ T8803] __sys_bpf+0x55a/0x800 [ 579.813169][ T8803] ? bpf_link_show_fdinfo+0x350/0x350 [ 579.818733][ T8803] ? lock_chain_count+0x20/0x20 [ 579.824207][ T8803] __x64_sys_bpf+0x7c/0x90 [ 579.828685][ T8803] do_syscall_64+0x55/0xb0 [ 579.833173][ T8803] ? clear_bhb_loop+0x40/0x90 [ 579.837908][ T8803] ? clear_bhb_loop+0x40/0x90 [ 579.842650][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.848819][ T8803] RIP: 0033:0x7f23bc98efc9 [ 579.853396][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.873355][ T8803] RSP: 002b:00007f23bd876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.882530][ T8803] RAX: ffffffffffffffda RBX: 00007f23bcbe5fa0 RCX: 00007f23bc98efc9 [ 579.890743][ T8803] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 579.899459][ T8803] RBP: 00007f23bd876090 R08: 0000000000000000 R09: 0000000000000000 [ 579.907677][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.915702][ T8803] R13: 00007f23bcbe6038 R14: 00007f23bcbe5fa0 R15: 00007fff279b7a48 [ 579.924398][ T8803] [ 580.298754][ T8814] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.969'. [ 580.578266][ T8813] validate_nla: 2 callbacks suppressed [ 580.578306][ T8813] netlink: 'syz.3.961': attribute type 21 has an invalid length. [ 580.629130][ T8813] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 583.259017][ T8833] bridge0: port 1(team0) entered blocking state [ 583.270727][ T8833] bridge0: port 1(team0) entered disabled state [ 583.418829][ T6860] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 583.428795][ T6860] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 583.988231][ T8857] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.974'. [ 584.794350][ T8865] netlink: 'syz.1.975': attribute type 21 has an invalid length. [ 584.832155][ T8865] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 585.911110][ T8880] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 585.938395][ T8880] netlink: 5 bytes leftover after parsing attributes in process `syz.0.980'. [ 586.041513][ T8885] netlink: 'syz.1.981': attribute type 21 has an invalid length. [ 587.538615][ T8888] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.984'. [ 587.642416][ T8893] FAULT_INJECTION: forcing a failure. [ 587.642416][ T8893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.703574][ T8893] CPU: 1 PID: 8893 Comm: syz.3.985 Not tainted syzkaller #0 [ 587.711095][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 587.721245][ T8893] Call Trace: [ 587.724601][ T8893] [ 587.727611][ T8893] dump_stack_lvl+0x16c/0x230 [ 587.732391][ T8893] ? show_regs_print_info+0x20/0x20 [ 587.737704][ T8893] ? load_image+0x3b0/0x3b0 [ 587.742451][ T8893] ? __might_fault+0xaa/0x120 [ 587.747229][ T8893] ? __lock_acquire+0x7c80/0x7c80 [ 587.752374][ T8893] should_fail_ex+0x39d/0x4d0 [ 587.757436][ T8893] _copy_from_iter+0x1d3/0x1290 [ 587.762497][ T8893] ? __might_fault+0xaa/0x120 [ 587.767281][ T8893] ? _copy_from_iter+0x248/0x1290 [ 587.772434][ T8893] ? __virt_addr_valid+0x18c/0x540 [ 587.777786][ T8893] ? __lock_acquire+0x7c80/0x7c80 [ 587.782929][ T8893] ? copyout_mc+0x70/0x70 [ 587.787457][ T8893] ? copyout_mc+0x70/0x70 [ 587.791875][ T8893] ? __virt_addr_valid+0x18c/0x540 [ 587.797097][ T8893] ? page_copy_sane+0x16a/0x270 [ 587.802057][ T8893] copy_page_from_iter+0x7b/0x100 [ 587.807183][ T8893] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 587.813313][ T8893] tun_get_user+0x1583/0x3bf0 [ 587.818431][ T8893] ? aa_file_perm+0x120/0xec0 [ 587.823243][ T8893] ? aa_file_perm+0x3e8/0xec0 [ 587.828277][ T8893] ? rcu_read_unlock+0xa0/0xa0 [ 587.833388][ T8893] ? tun_get+0x1c/0x2e0 [ 587.837678][ T8893] ? __lock_acquire+0x7c80/0x7c80 [ 587.843022][ T8893] ? tun_get+0x1c/0x2e0 [ 587.847340][ T8893] tun_chr_write_iter+0x119/0x200 [ 587.852547][ T8893] vfs_write+0x43b/0x940 [ 587.856941][ T8893] ? file_end_write+0x250/0x250 [ 587.862046][ T8893] ? __fget_files+0x44a/0x4d0 [ 587.866872][ T8893] ? __fdget_pos+0x1d8/0x330 [ 587.871638][ T8893] ? ksys_write+0x75/0x250 [ 587.876277][ T8893] ksys_write+0x147/0x250 [ 587.880741][ T8893] ? __ia32_sys_read+0x90/0x90 [ 587.885729][ T8893] ? lockdep_hardirqs_on+0x98/0x150 [ 587.891041][ T8893] do_syscall_64+0x55/0xb0 [ 587.895556][ T8893] ? clear_bhb_loop+0x40/0x90 [ 587.900716][ T8893] ? clear_bhb_loop+0x40/0x90 [ 587.905625][ T8893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.911798][ T8893] RIP: 0033:0x7f922478efc9 [ 587.916472][ T8893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.936992][ T8893] RSP: 002b:00007f92256d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.947020][ T8893] RAX: ffffffffffffffda RBX: 00007f92249e5fa0 RCX: 00007f922478efc9 [ 587.955731][ T8893] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 587.964157][ T8893] RBP: 00007f92256d3090 R08: 0000000000000000 R09: 0000000000000000 [ 587.972492][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.980968][ T8893] R13: 00007f92249e6038 R14: 00007f92249e5fa0 R15: 00007fff9c50ec98 [ 587.989455][ T8893] [ 588.642058][ T8906] netlink: 'syz.1.990': attribute type 10 has an invalid length. [ 588.825973][ T8906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 591.157247][ T8969] netlink: 'syz.1.1007': attribute type 29 has an invalid length. [ 591.195315][ T8969] netlink: 'syz.1.1007': attribute type 29 has an invalid length. [ 591.212925][ T8969] netlink: 'syz.1.1007': attribute type 29 has an invalid length. [ 591.558194][ T8980] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1011'. [ 591.862728][ T8988] netlink: 'syz.2.1013': attribute type 3 has an invalid length. [ 591.928380][ T8988] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 591.938889][ T8988] netlink: 'syz.2.1013': attribute type 7 has an invalid length. [ 591.940562][ T8989] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1013'. [ 591.955051][ T8988] netlink: 'syz.2.1013': attribute type 8 has an invalid length. [ 591.985365][ T8988] netlink: 'syz.2.1013': attribute type 7 has an invalid length. [ 592.004708][ T8982] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1013'. [ 592.026244][ T8988] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.1013'. [ 593.510509][ T9010] FAULT_INJECTION: forcing a failure. [ 593.510509][ T9010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.558181][ T9010] CPU: 1 PID: 9010 Comm: syz.1.1021 Not tainted syzkaller #0 [ 593.566012][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.576559][ T9010] Call Trace: [ 593.579885][ T9010] [ 593.582865][ T9010] dump_stack_lvl+0x16c/0x230 [ 593.587616][ T9010] ? show_regs_print_info+0x20/0x20 [ 593.592956][ T9010] ? load_image+0x3b0/0x3b0 [ 593.597607][ T9010] ? __might_fault+0xaa/0x120 [ 593.602659][ T9010] ? __lock_acquire+0x7c80/0x7c80 [ 593.607943][ T9010] should_fail_ex+0x39d/0x4d0 [ 593.612691][ T9010] _copy_from_user+0x2f/0xe0 [ 593.617344][ T9010] ___sys_sendmsg+0x159/0x290 [ 593.622083][ T9010] ? __sys_sendmsg+0x270/0x270 [ 593.626898][ T9010] ? __lock_acquire+0x7c80/0x7c80 [ 593.631973][ T9010] __se_sys_sendmsg+0x1a5/0x270 [ 593.636883][ T9010] ? perf_trace_preemptirq_template+0x281/0x340 [ 593.643152][ T9010] ? __x64_sys_sendmsg+0x80/0x80 [ 593.648146][ T9010] ? lockdep_hardirqs_on+0x98/0x150 [ 593.653613][ T9010] do_syscall_64+0x55/0xb0 [ 593.658183][ T9010] ? clear_bhb_loop+0x40/0x90 [ 593.662895][ T9010] ? clear_bhb_loop+0x40/0x90 [ 593.667788][ T9010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.673710][ T9010] RIP: 0033:0x7f23bc98efc9 [ 593.678244][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.697874][ T9010] RSP: 002b:00007f23bd855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.706340][ T9010] RAX: ffffffffffffffda RBX: 00007f23bcbe6090 RCX: 00007f23bc98efc9 [ 593.714352][ T9010] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 000000000000000a [ 593.722360][ T9010] RBP: 00007f23bd855090 R08: 0000000000000000 R09: 0000000000000000 [ 593.730363][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.738365][ T9010] R13: 00007f23bcbe6128 R14: 00007f23bcbe6090 R15: 00007fff279b7a48 [ 593.746375][ T9010] [ 594.538682][ T9013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.693007][ T9022] netlink: 'syz.0.1027': attribute type 21 has an invalid length. [ 594.718563][ T9022] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1027'. [ 594.907245][ T9025] FAULT_INJECTION: forcing a failure. [ 594.907245][ T9025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.955125][ T9025] CPU: 0 PID: 9025 Comm: syz.2.1028 Not tainted syzkaller #0 [ 594.962630][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.972747][ T9025] Call Trace: [ 594.976094][ T9025] [ 594.979063][ T9025] dump_stack_lvl+0x16c/0x230 [ 594.983970][ T9025] ? show_regs_print_info+0x20/0x20 [ 594.989240][ T9025] ? load_image+0x3b0/0x3b0 [ 594.993915][ T9025] ? __lock_acquire+0x7c80/0x7c80 [ 594.999022][ T9025] should_fail_ex+0x39d/0x4d0 [ 595.003758][ T9025] prepare_alloc_pages+0x1e2/0x5f0 [ 595.008923][ T9025] __alloc_pages+0x127/0x460 [ 595.013594][ T9025] ? zone_statistics+0x170/0x170 [ 595.018595][ T9025] ? alloc_pages+0x4dc/0x740 [ 595.023233][ T9025] ? do_raw_spin_unlock+0x121/0x230 [ 595.028485][ T9025] __get_free_pages+0xc/0x30 [ 595.033137][ T9025] kasan_populate_vmalloc_pte+0x35/0x100 [ 595.038965][ T9025] __apply_to_page_range+0x878/0xdb0 [ 595.044354][ T9025] ? kasan_populate_vmalloc+0x70/0x70 [ 595.049778][ T9025] ? apply_to_page_range+0x50/0x50 [ 595.054928][ T9025] ? do_raw_spin_unlock+0x121/0x230 [ 595.060165][ T9025] alloc_vmap_area+0x1b4a/0x1c70 [ 595.065163][ T9025] ? vm_map_ram+0xcb0/0xcb0 [ 595.069790][ T9025] ? rcu_is_watching+0x15/0xb0 [ 595.074598][ T9025] __get_vm_area_node+0x162/0x370 [ 595.079687][ T9025] __vmalloc_node_range+0x36e/0x1320 [ 595.085009][ T9025] ? bloom_map_alloc+0x22a/0x470 [ 595.090024][ T9025] ? aa_get_newest_label+0xf8/0x5c0 [ 595.095350][ T9025] ? end_current_label_crit_section+0x170/0x170 [ 595.101620][ T9025] ? free_vm_area+0x50/0x50 [ 595.106163][ T9025] bpf_map_area_alloc+0xf1/0x110 [ 595.111144][ T9025] ? bloom_map_alloc+0x22a/0x470 [ 595.116120][ T9025] bloom_map_alloc+0x22a/0x470 [ 595.120932][ T9025] map_create+0x877/0x12f0 [ 595.125408][ T9025] ? bpf_lsm_bpf+0x9/0x10 [ 595.129798][ T9025] __sys_bpf+0x5f0/0x800 [ 595.134090][ T9025] ? bpf_link_show_fdinfo+0x350/0x350 [ 595.139505][ T9025] ? lock_chain_count+0x20/0x20 [ 595.144392][ T9025] __x64_sys_bpf+0x7c/0x90 [ 595.148834][ T9025] do_syscall_64+0x55/0xb0 [ 595.153282][ T9025] ? clear_bhb_loop+0x40/0x90 [ 595.157987][ T9025] ? clear_bhb_loop+0x40/0x90 [ 595.162698][ T9025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.168890][ T9025] RIP: 0033:0x7fec7518efc9 [ 595.173338][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.193165][ T9025] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.201621][ T9025] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 595.209622][ T9025] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 0000000000000000 [ 595.217631][ T9025] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 595.225629][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.233803][ T9025] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 595.241829][ T9025] [ 596.021967][ T9046] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1034'. [ 596.053995][ T9052] syz.3.1036 uses obsolete (PF_INET,SOCK_PACKET) [ 596.366861][ T9060] FAULT_INJECTION: forcing a failure. [ 596.366861][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 596.380485][ T9060] CPU: 1 PID: 9060 Comm: syz.0.1040 Not tainted syzkaller #0 [ 596.388636][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 596.398751][ T9060] Call Trace: [ 596.402075][ T9060] [ 596.405139][ T9060] dump_stack_lvl+0x16c/0x230 [ 596.409997][ T9060] ? show_regs_print_info+0x20/0x20 [ 596.415268][ T9060] ? load_image+0x3b0/0x3b0 [ 596.420369][ T9060] should_fail_ex+0x39d/0x4d0 [ 596.425130][ T9060] should_failslab+0x9/0x20 [ 596.429777][ T9060] slab_pre_alloc_hook+0x59/0x310 [ 596.434882][ T9060] kmem_cache_alloc+0x5a/0x2e0 [ 596.439709][ T9060] ? radix_tree_node_alloc+0x7e/0x3a0 [ 596.445146][ T9060] radix_tree_node_alloc+0x7e/0x3a0 [ 596.450411][ T9060] idr_get_free+0x2b3/0xa60 [ 596.455001][ T9060] idr_alloc_cyclic+0x1a2/0x530 [ 596.459976][ T9060] ? idr_alloc+0x2c0/0x2c0 [ 596.464459][ T9060] ? do_raw_spin_lock+0x121/0x2c0 [ 596.469546][ T9060] ? __radix_tree_preload+0x82/0x880 [ 596.474902][ T9060] ? bpf_link_prime+0x4c/0x1d0 [ 596.479725][ T9060] bpf_link_prime+0x6b/0x1d0 [ 596.484481][ T9060] bpf_xdp_link_attach+0x227/0x6d0 [ 596.489666][ T9060] ? dev_xdp_prog+0x100/0x100 [ 596.494382][ T9060] ? __lock_acquire+0x7c80/0x7c80 [ 596.499441][ T9060] ? __fget_files+0x44a/0x4d0 [ 596.504352][ T9060] ? attach_type_to_prog_type+0x330/0x3a0 [ 596.510653][ T9060] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 596.517432][ T9060] link_create+0x3ff/0x720 [ 596.521993][ T9060] __sys_bpf+0x479/0x800 [ 596.526883][ T9060] ? bpf_link_show_fdinfo+0x350/0x350 [ 596.532401][ T9060] ? lock_chain_count+0x20/0x20 [ 596.537300][ T9060] __x64_sys_bpf+0x7c/0x90 [ 596.541764][ T9060] do_syscall_64+0x55/0xb0 [ 596.546231][ T9060] ? clear_bhb_loop+0x40/0x90 [ 596.551061][ T9060] ? clear_bhb_loop+0x40/0x90 [ 596.555894][ T9060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.561852][ T9060] RIP: 0033:0x7f54e378efc9 [ 596.566338][ T9060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.586782][ T9060] RSP: 002b:00007f54e45da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.595866][ T9060] RAX: ffffffffffffffda RBX: 00007f54e39e5fa0 RCX: 00007f54e378efc9 [ 596.603907][ T9060] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 596.611935][ T9060] RBP: 00007f54e45da090 R08: 0000000000000000 R09: 0000000000000000 [ 596.619946][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.628307][ T9060] R13: 00007f54e39e6038 R14: 00007f54e39e5fa0 R15: 00007ffc5b42ed78 [ 596.636324][ T9060] [ 597.241802][ T9076] netlink: 'syz.3.1046': attribute type 153 has an invalid length. [ 597.266016][ T9076] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1046'. [ 597.296093][ T9077] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1046'. [ 597.890052][ T9089] FAULT_INJECTION: forcing a failure. [ 597.890052][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.890669][ T9089] [ 597.890676][ T9089] ====================================================== [ 597.890683][ T9089] WARNING: possible circular locking dependency detected [ 597.890695][ T9089] syzkaller #0 Not tainted [ 597.890704][ T9089] ------------------------------------------------------ [ 597.890709][ T9089] syz.2.1049/9089 is trying to acquire lock: [ 597.890719][ T9089] ffffffff8cd24160 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 597.890771][ T9089] [ 597.890771][ T9089] but task is already holding lock: [ 597.890776][ T9089] ffff888018250018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x69f/0x1020 [ 597.890813][ T9089] [ 597.890813][ T9089] which lock already depends on the new lock. [ 597.890813][ T9089] [ 597.890818][ T9089] [ 597.890818][ T9089] the existing dependency chain (in reverse order) is: [ 597.890823][ T9089] [ 597.890823][ T9089] -> #3 (&pool->lock){-.-.}-{2:2}: [ 597.890845][ T9089] _raw_spin_lock+0x2e/0x40 [ 597.890863][ T9089] __queue_work+0x69f/0x1020 [ 597.890884][ T9089] queue_work_on+0x121/0x1e0 [ 597.890899][ T9089] rpm_suspend+0x10bc/0x1a90 [ 597.890916][ T9089] __pm_runtime_idle+0x12f/0x1a0 [ 597.890932][ T9089] __device_attach+0x33f/0x400 [ 597.890951][ T9089] bus_probe_device+0x180/0x260 [ 597.890966][ T9089] device_add+0x85b/0xc20 [ 597.890989][ T9089] serial_base_port_add+0x2f2/0x420 [ 597.891007][ T9089] serial_core_register_port+0x36d/0x2320 [ 597.891034][ T9089] serial8250_register_8250_port+0x15ec/0x1f10 [ 597.891054][ T9089] serial_pnp_probe+0x549/0x730 [ 597.891073][ T9089] pnp_device_probe+0x305/0x4b0 [ 597.891093][ T9089] really_probe+0x25b/0xb40 [ 597.891112][ T9089] __driver_probe_device+0x18c/0x330 [ 597.891131][ T9089] driver_probe_device+0x4f/0x420 [ 597.891149][ T9089] __driver_attach+0x44e/0x6f0 [ 597.891167][ T9089] bus_for_each_dev+0x22d/0x2a0 [ 597.891182][ T9089] bus_add_driver+0x340/0x640 [ 597.891197][ T9089] driver_register+0x23a/0x310 [ 597.891215][ T9089] serial8250_init+0x9a/0x170 [ 597.891236][ T9089] do_one_initcall+0x1fd/0x750 [ 597.891258][ T9089] do_initcall_level+0x137/0x1f0 [ 597.891281][ T9089] do_initcalls+0x69/0xd0 [ 597.891301][ T9089] kernel_init_freeable+0x3d2/0x570 [ 597.891323][ T9089] kernel_init+0x1d/0x1c0 [ 597.891341][ T9089] ret_from_fork+0x48/0x80 [ 597.891360][ T9089] ret_from_fork_asm+0x11/0x20 [ 597.891382][ T9089] [ 597.891382][ T9089] -> #2 (&dev->power.lock){-...}-{2:2}: [ 597.891413][ T9089] _raw_spin_lock_irqsave+0xa8/0xf0 [ 597.891431][ T9089] __pm_runtime_resume+0x10f/0x170 [ 597.891448][ T9089] __uart_start+0x171/0x3e0 [ 597.891473][ T9089] uart_write+0x449/0x5d0 [ 597.891486][ T9089] n_tty_write+0xd27/0x11d0 [ 597.891509][ T9089] file_tty_write+0x54b/0x980 [ 597.891529][ T9089] vfs_write+0x43b/0x940 [ 597.891549][ T9089] ksys_write+0x147/0x250 [ 597.891570][ T9089] do_syscall_64+0x55/0xb0 [ 597.891591][ T9089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.891609][ T9089] [ 597.891609][ T9089] -> #1 (&port_lock_key){-...}-{2:2}: [ 597.891630][ T9089] _raw_spin_lock_irqsave+0xa8/0xf0 [ 597.891648][ T9089] serial8250_console_write+0x16d/0x17a0 [ 597.891671][ T9089] console_flush_all+0x6cd/0xd00 [ 597.891691][ T9089] console_unlock+0xae/0x340 [ 597.891710][ T9089] vprintk_emit+0x477/0x600 [ 597.891728][ T9089] _printk+0xd0/0x110 [ 597.891745][ T9089] register_console+0x91b/0xe60 [ 597.891765][ T9089] univ8250_console_init+0x45/0x50 [ 597.891783][ T9089] console_init+0x17b/0x5e0 [ 597.891804][ T9089] start_kernel+0x2c0/0x4e0 [ 597.891825][ T9089] x86_64_start_reservations+0x2a/0x30 [ 597.891844][ T9089] copy_bootdata+0x0/0xe0 [ 597.891861][ T9089] secondary_startup_64_no_verify+0x179/0x17b [ 597.891893][ T9089] [ 597.891893][ T9089] -> #0 (console_owner){-...}-{0:0}: [ 597.891916][ T9089] __lock_acquire+0x2ddb/0x7c80 [ 597.891935][ T9089] lock_acquire+0x197/0x410 [ 597.891953][ T9089] console_flush_all+0x693/0xd00 [ 597.891973][ T9089] console_unlock+0xae/0x340 [ 597.891991][ T9089] vprintk_emit+0x477/0x600 [ 597.892009][ T9089] _printk+0xd0/0x110 [ 597.892025][ T9089] should_fail_ex+0x37e/0x4d0 [ 597.892047][ T9089] strncpy_from_user+0x36/0x2e0 [ 597.892061][ T9089] strncpy_from_user_nofault+0x71/0x140 [ 597.892084][ T9089] bpf_probe_read_user_str+0x2a/0x70 [ 597.892110][ T9089] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 597.892126][ T9089] bpf_trace_run1+0x30a/0x3b0 [ 597.892143][ T9089] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 597.892160][ T9089] trace_workqueue_activate_work+0x142/0x1a0 [ 597.892181][ T9089] __queue_work+0xc0e/0x1020 [ 597.892196][ T9089] queue_work_on+0x121/0x1e0 [ 597.892211][ T9089] dev_set_rx_mode+0x21c/0x2d0 [ 597.892235][ T9089] __dev_change_flags+0x1c4/0x6a0 [ 597.892258][ T9089] dev_change_flags+0x88/0x1a0 [ 597.892280][ T9089] dev_ifsioc+0x6a7/0xe20 [ 597.892298][ T9089] dev_ioctl+0x7e2/0x1170 [ 597.892315][ T9089] sock_do_ioctl+0x226/0x2f0 [ 597.892331][ T9089] sock_ioctl+0x623/0x7a0 [ 597.892344][ T9089] __se_sys_ioctl+0xfd/0x170 [ 597.892364][ T9089] do_syscall_64+0x55/0xb0 [ 597.892385][ T9089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.892402][ T9089] [ 597.892402][ T9089] other info that might help us debug this: [ 597.892402][ T9089] [ 597.892407][ T9089] Chain exists of: [ 597.892407][ T9089] console_owner --> &dev->power.lock --> &pool->lock [ 597.892407][ T9089] [ 597.892433][ T9089] Possible unsafe locking scenario: [ 597.892433][ T9089] [ 597.892438][ T9089] CPU0 CPU1 [ 597.892442][ T9089] ---- ---- [ 597.892446][ T9089] lock(&pool->lock); [ 597.892456][ T9089] lock(&dev->power.lock); [ 597.892467][ T9089] lock(&pool->lock); [ 597.892478][ T9089] lock(console_owner); [ 597.892488][ T9089] [ 597.892488][ T9089] *** DEADLOCK *** [ 597.892488][ T9089] [ 597.892491][ T9089] 7 locks held by syz.2.1049/9089: [ 597.892502][ T9089] #0: ffffffff8dfbbc48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7d2/0x1170 [ 597.892545][ T9089] #1: ffff88805d1d0288 (_xmit_ETHER){+...}-{2:2}, at: dev_set_rx_mode+0x65/0x2d0 [ 597.892592][ T9089] #2: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: __queue_work+0x1af/0x1020 [ 597.892632][ T9089] #3: ffff888018250018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x69f/0x1020 [ 597.892672][ T9089] #4: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run1+0xd6/0x3b0 [ 597.892711][ T9089] #5: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 597.892753][ T9089] #6: ffffffff8cc0ba50 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 597.892797][ T9089] [ 597.892797][ T9089] stack backtrace: [ 597.892803][ T9089] CPU: 1 PID: 9089 Comm: syz.2.1049 Not tainted syzkaller #0 [ 597.892821][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.892832][ T9089] Call Trace: [ 597.892840][ T9089] [ 597.892847][ T9089] dump_stack_lvl+0x16c/0x230 [ 597.892873][ T9089] ? load_image+0x3b0/0x3b0 [ 597.892900][ T9089] ? show_regs_print_info+0x20/0x20 [ 597.892931][ T9089] ? print_circular_bug+0x12b/0x1a0 [ 597.892958][ T9089] check_noncircular+0x2bd/0x3c0 [ 597.892985][ T9089] ? print_deadlock_bug+0x5d0/0x5d0 [ 597.893006][ T9089] ? lockdep_lock+0xe0/0x220 [ 597.893036][ T9089] __lock_acquire+0x2ddb/0x7c80 [ 597.893077][ T9089] ? verify_lock_unused+0x140/0x140 [ 597.893116][ T9089] lock_acquire+0x197/0x410 [ 597.893136][ T9089] ? console_flush_all+0x10f/0xd00 [ 597.893164][ T9089] ? __lock_acquire+0x7c80/0x7c80 [ 597.893183][ T9089] ? do_raw_spin_lock+0x121/0x2c0 [ 597.893208][ T9089] ? read_lock_is_recursive+0x20/0x20 [ 597.893230][ T9089] ? __rwlock_init+0x150/0x150 [ 597.893255][ T9089] ? do_raw_spin_unlock+0x121/0x230 [ 597.893283][ T9089] console_flush_all+0x693/0xd00 [ 597.893306][ T9089] ? console_flush_all+0x10f/0xd00 [ 597.893330][ T9089] ? console_flush_all+0x10f/0xd00 [ 597.893362][ T9089] ? is_console_locked+0x20/0x20 [ 597.893385][ T9089] ? mark_lock+0x94/0x320 [ 597.893413][ T9089] console_unlock+0xae/0x340 [ 597.893438][ T9089] ? other_cpu_in_panic+0xf0/0xf0 [ 597.893462][ T9089] ? __lock_acquire+0x1260/0x7c80 [ 597.893488][ T9089] vprintk_emit+0x477/0x600 [ 597.893512][ T9089] ? printk_sprint+0x460/0x460 [ 597.893539][ T9089] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 597.893575][ T9089] _printk+0xd0/0x110 [ 597.893599][ T9089] ? load_image+0x3b0/0x3b0 [ 597.893628][ T9089] should_fail_ex+0x37e/0x4d0 [ 597.893658][ T9089] strncpy_from_user+0x36/0x2e0 [ 597.893680][ T9089] strncpy_from_user_nofault+0x71/0x140 [ 597.893710][ T9089] bpf_probe_read_user_str+0x2a/0x70 [ 597.893741][ T9089] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 597.893760][ T9089] bpf_trace_run1+0x30a/0x3b0 [ 597.893779][ T9089] ? bpf_trace_run1+0xd6/0x3b0 [ 597.893798][ T9089] ? bpf_put_raw_tracepoint+0x60/0x60 [ 597.893819][ T9089] ? __bpf_trace_workqueue_activate_work+0xa2/0x100 [ 597.893842][ T9089] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 597.893861][ T9089] ? __bpf_trace_workqueue_queue_work+0x1a0/0x1a0 [ 597.893885][ T9089] ? do_raw_spin_lock+0x121/0x2c0 [ 597.893912][ T9089] ? __rwlock_init+0x150/0x150 [ 597.893942][ T9089] trace_workqueue_activate_work+0x142/0x1a0 [ 597.893967][ T9089] __queue_work+0xc0e/0x1020 [ 597.893987][ T9089] ? __queue_work+0x1af/0x1020 [ 597.894007][ T9089] ? rcu_is_watching+0x15/0xb0 [ 597.894033][ T9089] ? ieee80211_stop+0x3d1/0x4a0 [ 597.894061][ T9089] queue_work_on+0x121/0x1e0 [ 597.894081][ T9089] ? wq_worker_last_func+0x40/0x40 [ 597.894101][ T9089] ? ieee80211_set_multicast_list+0x153/0x1f0 [ 597.894133][ T9089] ? ieee80211_set_multicast_list+0x153/0x1f0 [ 597.894163][ T9089] ? ieee80211_stop+0x4a0/0x4a0 [ 597.894190][ T9089] dev_set_rx_mode+0x21c/0x2d0 [ 597.894213][ T9089] ? __dev_change_flags+0x1ad/0x6a0 [ 597.894240][ T9089] __dev_change_flags+0x1c4/0x6a0 [ 597.894271][ T9089] ? dev_get_flags+0x1c0/0x1c0 [ 597.894304][ T9089] dev_change_flags+0x88/0x1a0 [ 597.894334][ T9089] dev_ifsioc+0x6a7/0xe20 [ 597.894357][ T9089] ? dev_ioctl+0x1170/0x1170 [ 597.894378][ T9089] ? dev_load+0x21/0x1f0 [ 597.894398][ T9089] ? dev_load+0x21/0x1f0 [ 597.894420][ T9089] dev_ioctl+0x7e2/0x1170 [ 597.894443][ T9089] sock_do_ioctl+0x226/0x2f0 [ 597.894464][ T9089] ? sock_show_fdinfo+0xb0/0xb0 [ 597.894493][ T9089] sock_ioctl+0x623/0x7a0 [ 597.894513][ T9089] ? sock_poll+0x3d0/0x3d0 [ 597.894563][ T9089] ? bpf_lsm_file_ioctl+0x9/0x10 [ 597.894580][ T9089] ? security_file_ioctl+0x80/0xa0 [ 597.894607][ T9089] ? sock_poll+0x3d0/0x3d0 [ 597.894624][ T9089] __se_sys_ioctl+0xfd/0x170 [ 597.894650][ T9089] do_syscall_64+0x55/0xb0 [ 597.894674][ T9089] ? clear_bhb_loop+0x40/0x90 [ 597.894693][ T9089] ? clear_bhb_loop+0x40/0x90 [ 597.894715][ T9089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.894734][ T9089] RIP: 0033:0x7fec7518efc9 [ 597.894751][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.894766][ T9089] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.894784][ T9089] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 597.894797][ T9089] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 597.894809][ T9089] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 597.894820][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.894830][ T9089] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 597.894854][ T9089] [ 599.123619][ T9089] CPU: 1 PID: 9089 Comm: syz.2.1049 Not tainted syzkaller #0 [ 599.131008][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.141082][ T9089] Call Trace: [ 599.144416][ T9089] [ 599.147367][ T9089] dump_stack_lvl+0x16c/0x230 [ 599.152068][ T9089] ? show_regs_print_info+0x20/0x20 [ 599.157278][ T9089] ? load_image+0x3b0/0x3b0 [ 599.161795][ T9089] should_fail_ex+0x39d/0x4d0 [ 599.166494][ T9089] strncpy_from_user+0x36/0x2e0 [ 599.171364][ T9089] strncpy_from_user_nofault+0x71/0x140 [ 599.177048][ T9089] bpf_probe_read_user_str+0x2a/0x70 [ 599.182385][ T9089] bpf_prog_b1bc9f7c1f89903c+0x40/0x42 [ 599.187979][ T9089] bpf_trace_run1+0x30a/0x3b0 [ 599.192882][ T9089] ? bpf_trace_run1+0xd6/0x3b0 [ 599.197745][ T9089] ? bpf_put_raw_tracepoint+0x60/0x60 [ 599.203163][ T9089] ? __bpf_trace_workqueue_activate_work+0xa2/0x100 [ 599.210287][ T9089] __bpf_trace_workqueue_activate_work+0xaf/0x100 [ 599.216738][ T9089] ? __bpf_trace_workqueue_queue_work+0x1a0/0x1a0 [ 599.223177][ T9089] ? do_raw_spin_lock+0x121/0x2c0 [ 599.228227][ T9089] ? __rwlock_init+0x150/0x150 [ 599.233003][ T9089] trace_workqueue_activate_work+0x142/0x1a0 [ 599.239007][ T9089] __queue_work+0xc0e/0x1020 [ 599.243607][ T9089] ? __queue_work+0x1af/0x1020 [ 599.248469][ T9089] ? rcu_is_watching+0x15/0xb0 [ 599.253260][ T9089] ? ieee80211_stop+0x3d1/0x4a0 [ 599.258142][ T9089] queue_work_on+0x121/0x1e0 [ 599.262846][ T9089] ? wq_worker_last_func+0x40/0x40 [ 599.268162][ T9089] ? ieee80211_set_multicast_list+0x153/0x1f0 [ 599.274665][ T9089] ? ieee80211_set_multicast_list+0x153/0x1f0 [ 599.281279][ T9089] ? ieee80211_stop+0x4a0/0x4a0 [ 599.286274][ T9089] dev_set_rx_mode+0x21c/0x2d0 [ 599.291183][ T9089] ? __dev_change_flags+0x1ad/0x6a0 [ 599.296526][ T9089] __dev_change_flags+0x1c4/0x6a0 [ 599.301584][ T9089] ? dev_get_flags+0x1c0/0x1c0 [ 599.306454][ T9089] dev_change_flags+0x88/0x1a0 [ 599.311282][ T9089] dev_ifsioc+0x6a7/0xe20 [ 599.316154][ T9089] ? dev_ioctl+0x1170/0x1170 [ 599.321410][ T9089] ? dev_load+0x21/0x1f0 [ 599.326664][ T9089] ? dev_load+0x21/0x1f0 [ 599.330944][ T9089] dev_ioctl+0x7e2/0x1170 [ 599.335298][ T9089] sock_do_ioctl+0x226/0x2f0 [ 599.340086][ T9089] ? sock_show_fdinfo+0xb0/0xb0 [ 599.345533][ T9089] sock_ioctl+0x623/0x7a0 [ 599.350901][ T9089] ? sock_poll+0x3d0/0x3d0 [ 599.355578][ T9089] ? bpf_lsm_file_ioctl+0x9/0x10 [ 599.361184][ T9089] ? security_file_ioctl+0x80/0xa0 [ 599.366770][ T9089] ? sock_poll+0x3d0/0x3d0 [ 599.371311][ T9089] __se_sys_ioctl+0xfd/0x170 [ 599.375932][ T9089] do_syscall_64+0x55/0xb0 [ 599.380480][ T9089] ? clear_bhb_loop+0x40/0x90 [ 599.385290][ T9089] ? clear_bhb_loop+0x40/0x90 [ 599.394392][ T9089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.400951][ T9089] RIP: 0033:0x7fec7518efc9 [ 599.405392][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.425323][ T9089] RSP: 002b:00007fec7601a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.433789][ T9089] RAX: ffffffffffffffda RBX: 00007fec753e5fa0 RCX: 00007fec7518efc9 [ 599.442393][ T9089] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 599.450588][ T9089] RBP: 00007fec7601a090 R08: 0000000000000000 R09: 0000000000000000 [ 599.458584][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.467692][ T9089] R13: 00007fec753e6038 R14: 00007fec753e5fa0 R15: 00007ffff2e1f428 [ 599.475869][ T9089] [ 599.567308][ T9089] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 599.626757][ T9100] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1050'.