last executing test programs: 8.33118806s ago: executing program 3 (id=14397): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff76b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x3000}, {0x85, 0x0, 0x0, 0x6f}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.285579521s ago: executing program 0 (id=14399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r4, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000006c0)=r3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f40)=@bpf_ext={0x1c, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18370000020000f15200000000000000b248b4e826e7e3d9747accadca93950c5fd0537d8e2546036d94edffc01c64d4208784298fc5ab3246290ef703d32a538adb7e6be520eb8c24a2256d3f225b69190654cac7d78de7c03c05458acfc20eeae59bf0298f3eb64dab43c3a252c21af5f4df81d001c5d1c8c909368e5f2a776a5ba159af497ca6c7c864175971651bdbbfde6b293d20a90a02d1ea"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000e80)=""/4096, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001e80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001ec0)={0x3, 0x8, 0x101, 0xc}, 0x10, 0x2f257, r2, 0x3, 0x0, &(0x7f0000001f00)=[{0x0, 0x1, 0x2}, {0x5, 0x4, 0x9, 0xb}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0x63d8fa34}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x208, 0x1, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001780)='\",', 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r5, 0x0, 0x87, 0xea, &(0x7f0000002000)="b44bd3d5db6703bdf539672f9ff99483328dc5678e80c2ddd379b7c43c1e00e3067d1bac84005d0d3e398a47913000f6b5b82ec7cf252f3c06891c998a75e5e603aaa1122a9b89b145163571f4e54aed8379d455eb8ac80eb7bce28bf863166dafd6a7d6b370233cec893fb58b7cb1e1ccb45e1b6fa7b38d409c0e5a3fe2da26cd55acac4a6763", &(0x7f00000020c0)=""/234, 0x1000, 0x0, 0x88, 0x25, &(0x7f00000021c0)="14c1f310cea5f949b6f86fab9d145e9f133f6ab3be4f702a043df73fb71d497ed6b56564aa4003e0fb6779b62103c5729f7f56d2fe7953a36f4d1f8afb1fb9f49ee5a246453425e502a5c90bf81bf944c2314e05a8991bc20ef70d0206e4ce2b6880d53ee5a62b490bce1fd0384583e38f88a1c190ad4c137a9814495bd5122456781b5951522c7b", &(0x7f0000002280)="47de5ac33129fd51d2fea8eba68554b91ba9715d1cd8129d1c2c9312e67b16ec96e5a3cc3f", 0x4, 0x0, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r3, r0}) 7.914386561s ago: executing program 3 (id=14402): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 7.770692704s ago: executing program 4 (id=14404): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5411, 0x0) 7.383604594s ago: executing program 0 (id=14405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d000000000000000000000000000000000000000300000000020000000300000000000000000000000100000d0000"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) (async) perf_event_open$cgroup(0x0, r1, 0xd, r3, 0x8) (async) close(0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b", &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000075000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00000000e1ffffffb60500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r5, &(0x7f0000000b80)='syz0\x00', 0x1ff) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) (async) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 7.243078997s ago: executing program 1 (id=14406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000006ba6d00000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000090000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, @perf_bp={0x0, 0x1}, 0x100722, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000510000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xda, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$kcm(r6, &(0x7f0000000c80)={&(0x7f0000000500)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="57b2ed2093e4ab592de012ae363ec15ee13792f8d57a2677f0eedbb27a4b2cd2edcc9c706d6a9682778c963fa8f1b677f1", 0x31}, {&(0x7f00000005c0)="67acac5d4e0c", 0x6}, {&(0x7f0000000780)="3d3858095cb4f8a3a93e5c277af81c3f1691733956e566b4381fd81221cee4d2c2817602", 0x24}, {&(0x7f00000007c0)="3767ddd5824b6b", 0x7}], 0x4, &(0x7f0000000b00)=[{0xa8, 0x29, 0x9, "6cf1521e4619a340128c5a0151be59ea1dd5a736180f6f223ca59caf115e343bcf33568869fca94ca42a3a0a4a311e28d4265e4eafb8f4beea13426e6080c4f901db660af6693d75769c5a9f42d299bc9d54d770c16d0a8871d6842dcf5a7177106f4c1a9d6c17a3b23fe278bddaf1a89ace12b6a5278243f06eaced3624c6bdf76f55d68d34652a7c5040216d29e7a979e1"}, {0xd8, 0x107, 0x9, "bc5f778beab577cf4a42f7a1de229c122e24e9624438fe6c830ec48fd0db35d87920347da2d326d66db6351f6c5018b1befc4d8108e679fdbf7181cdc0d4ad6826ce6be95d70e3a9b40193b6b941d05760caa8a9c8e0baab5b9109c85f2682929cc3bc3e005858a3d05c1e863c4fba70abf898133395ac75086111b7b208795c0c895a21162a94f755da422273221812054a0f9131fccabdd4dd90e03d7edc4d7bbdcc78531b2ab5f60254f9a02f3439937c3d636c1a43094876ab1e6fae410a6e40"}], 0x180}, 0x20000851) 7.036610983s ago: executing program 4 (id=14408): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r0], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r1, &(0x7f0000001300)={&(0x7f0000000a80)=@hci={0x1f, 0x315, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d70000000010072f1eafbcf72be12b11087f5c582d26116642c4", 0x1e}], 0x1}, 0x4004051) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000900)={[{0x2b, 'net_cls'}]}, 0x9) 6.831422898s ago: executing program 4 (id=14410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x403, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 6.672045032s ago: executing program 0 (id=14412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00123c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0xfffffffffffffe7c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) 6.669840762s ago: executing program 3 (id=14413): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd) socket$kcm(0xa, 0x3, 0x73) r1 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x7, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x200000, 0x0, 0x0, 0x41000, 0x2a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003080)=[{0x0}, {0x0}, {&(0x7f0000003040)="0caa75be7a6286da712feedffce3579cf8dbad797325eeecc45f517a74d46013c03f46f0488cf145b02aaa3ff9c8ca3c475e9b97b204801a09915a1319", 0x3d}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6.663453472s ago: executing program 1 (id=14414): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6a}, 0x100) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000120) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000002) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911b0000000000045000000640000009500740000000000cfa5254822bf4469b5f3ee11c684840621b3e740e6d4699a54775603cb9085234799edca2bc147a312485e5573992d9613bfb795c58412e7a9b7f929a0f1a8d017a1326dca2ea1321550e5e2655bebde1764db651efdf20906bc31"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x34}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 6.605686004s ago: executing program 4 (id=14415): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x4008, r0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) 6.255875242s ago: executing program 1 (id=14416): r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x100010, 0x0, 0x8, 0x6, 0x4000002}, 0x0, 0xffffffffffffffff, r0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1c}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) setsockopt$sock_attach_bpf(r4, 0x29, 0x4a, &(0x7f0000000080)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x2, 0x73) close(r7) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) 5.96238979s ago: executing program 1 (id=14417): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f93224fc60", 0x14}], 0x1}, 0x0) 5.844615673s ago: executing program 2 (id=14418): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5411, 0x0) 5.54828276s ago: executing program 2 (id=14419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.421719454s ago: executing program 2 (id=14420): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208000f0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 3.322891936s ago: executing program 0 (id=14421): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x6, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0xc7d, 0xa, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xdc00) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100)) 1.245933739s ago: executing program 1 (id=14422): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259", 0x70}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x40, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) 1.168279361s ago: executing program 0 (id=14423): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff2000000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc4d6a5713bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/470], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x48}, 0x24040085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d7b50f566ee5b06a5f770bc2598705d7070e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.166744701s ago: executing program 2 (id=14424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8, 0x10000000}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.166228701s ago: executing program 3 (id=14425): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x403, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.164631401s ago: executing program 4 (id=14426): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e004e740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083901000000000000a1180015000600142603600e120900210003000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cab98bdace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd8}], 0x1}, 0x0) (rerun: 32) 987.910505ms ago: executing program 2 (id=14427): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x80, 0x63, 0xb, 0x0, 0xfffffffffffffffc, 0x32908, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffeb, 0x4, @perf_config_ext={0x7fff, 0x7fffffffffffffff}, 0x0, 0x6, 0x7, 0x2, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="0181020008810000183300000300000000000000000000003c2ffd2d0100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001851000000f3599278fd000000000000"], &(0x7f0000000500)='GPL\x00', 0xa, 0xfd, &(0x7f00000006c0)=""/253, 0x41000, 0x1, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x80000001, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r1], 0x0, 0x10, 0x2}, 0x94) close(r2) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000540), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000008001100850000002800000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b6a7bd1845f8efbaa4f58b054cffcd8d09f7b302371037856042a68c72510433565cf1757b28f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1625eb43203f8fb6}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x1000, &(0x7f0000000080)="63fc", 0x2, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_devices(r5, &(0x7f0000000740)=ANY=[], 0xffdd) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000000000100000000000000000000aace6d1dce810cbf9d2cbbddeedf098e86c66f616979e9abfad33d05f8f7ac939010c869462b983c68f008c71bb926fd55d2fe0b8871c5cd760c32e5c4e1c0975a9ed633e9e8368294c7e0979b8bde2c8adce7d41c439bc5b6e7e47c96166f03da2e3cb56468553350fe9a69e28bbc5466072998c69e93751466ea84b67eacedfd816ff5ac134ab492b653cac44258"], &(0x7f0000001280)=""/187, 0x2a, 0xbb, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f0000000100)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x9, 0x0, 0x0, 0x29, &(0x7f0000000200), 0x10}, 0x80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000940)=@ieee802154, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/155, 0x9b}], 0x1}, 0xe03d1744a7cb51b) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c0000000", 0x1b}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 987.223695ms ago: executing program 1 (id=14428): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xd36}, 0x8010, 0x67, 0x0, 0x7, 0x10000, 0xfffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4821a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0\x00', 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 966.687586ms ago: executing program 0 (id=14429): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5411, 0x0) 964.861006ms ago: executing program 3 (id=14430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 562.175646ms ago: executing program 3 (id=14431): r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x100010, 0x0, 0x8, 0x6, 0x4000002}, 0x0, 0xffffffffffffffff, r0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1c}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) setsockopt$sock_attach_bpf(r4, 0x29, 0x4a, &(0x7f0000000080)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x2, 0x73) close(r7) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) 2.73349ms ago: executing program 4 (id=14432): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10000, 0xac5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000007000000fa09000089000000c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000900000063117c00000000009500a10500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000380), 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000002b00), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="85000000930000009500000000000000e990ba1b822fb33a4036282b36246aff306f2917c7a00ea770866aefd37d87c748c0de122710e6b491b33b11bd524285764b420bfbf678dc8ca3427b283dbfb9b95873ca0c416563215736b5071b3cb718898498ae9a3e38c6a92dd465e5f7e2c9e001fedd370ab34199a2f8bedc37937d0f5a2bb0c3cef3967873f83d8d35fc63cf3407dd31963301eb7879c2a59c78cccf617251b5817520ca79f790e0d5b42bd9b4462685576e812327"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000234a1178dcf70cea9b0f06de3474e4a9d30bf57693e01a8655faa1294623d8cc0d904dcf6a84b0196a7e4389be41be70fea26856c2d13171496cbf8d2070a701c9af6b5b50d9455e40f6011f84bbef05e9e0f3d004f27aa127a220a94262a174c16fdcab8798007fc81fde77c40316dfb695fc40f8acd4b984ca7aa6ec894b60d2504450f8a0bd82ded85f0ce68121ae7e4d0beb5139894f41a7305425e07d031252c0bdb1"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r1}, &(0x7f0000001c40), &(0x7f0000001c80)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 2 (id=14433): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000140)=@qipcrtr, 0xc3, &(0x7f0000000500)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f00000006c0)=""/269, 0xfa}, {&(0x7f0000000400)=""/223, 0xea}], 0x3}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) kernel console output (not intermixed with test programs): 53] syz_tun: tun_net_xmit 42 [ 1833.225916][ C1] syz_tun: tun_net_xmit 42 [ 1834.265829][ C1] syz_tun: tun_net_xmit 42 [ 1835.307897][ C1] syz_tun: tun_net_xmit 42 [ 1835.352799][T10672] syz_tun: tun_net_xmit 42 [ 1835.879823][T10702] netlink: 'syz.3.13226': attribute type 4 has an invalid length. [ 1835.900111][T10702] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13226'. [ 1836.355432][ C1] syz_tun: tun_net_xmit 42 [ 1836.425555][ C0] syz_tun: tun_net_xmit 42 [ 1837.175621][T10757] netlink: 'syz.4.13244': attribute type 8 has an invalid length. [ 1837.395461][ C1] syz_tun: tun_net_xmit 42 [ 1837.465473][ C0] syz_tun: tun_net_xmit 42 [ 1837.544079][T10763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13247'. [ 1838.177075][T10800] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13259'. [ 1838.505964][ C0] syz_tun: tun_net_xmit 42 [ 1839.522456][T10835] FAULT_INJECTION: forcing a failure. [ 1839.522456][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.545597][ C0] syz_tun: tun_net_xmit 42 [ 1839.581792][T10835] CPU: 0 PID: 10835 Comm: syz.3.13275 Not tainted syzkaller #0 [ 1839.589507][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1839.599590][T10835] Call Trace: [ 1839.602981][T10835] [ 1839.605932][T10835] dump_stack_lvl+0x188/0x24e [ 1839.610650][T10835] ? show_regs_print_info+0x12/0x12 [ 1839.615875][T10835] ? load_image+0x410/0x410 [ 1839.620429][T10835] ? __lock_acquire+0x7ea0/0x7ea0 [ 1839.625484][T10835] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1839.631241][T10835] should_fail_ex+0x390/0x4c0 [ 1839.635971][T10835] _copy_from_user+0x2c/0x170 [ 1839.640689][T10835] ___sys_sendmsg+0x1c3/0x360 [ 1839.645408][T10835] ? __sys_sendmsg+0x2a0/0x2a0 [ 1839.650236][T10835] ? __lock_acquire+0x7ea0/0x7ea0 [ 1839.655345][T10835] __se_sys_sendmsg+0x1c3/0x2b0 [ 1839.660232][T10835] ? __x64_sys_sendmsg+0x80/0x80 [ 1839.665241][T10835] ? lockdep_hardirqs_on+0x94/0x140 [ 1839.670490][T10835] do_syscall_64+0x4c/0xa0 [ 1839.674975][T10835] ? clear_bhb_loop+0x60/0xb0 [ 1839.679692][T10835] ? clear_bhb_loop+0x60/0xb0 [ 1839.684415][T10835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1839.690355][T10835] RIP: 0033:0x7f52ea19e199 [ 1839.694807][T10835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.714456][T10835] RSP: 002b:00007f52eafab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.722933][T10835] RAX: ffffffffffffffda RBX: 00007f52ea425fa0 RCX: 00007f52ea19e199 [ 1839.730946][T10835] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1839.738959][T10835] RBP: 00007f52eafab090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.746974][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.755084][T10835] R13: 00007f52ea426038 R14: 00007f52ea425fa0 R15: 00007ffd238d6f98 [ 1839.763141][T10835] [ 1840.585582][ C0] syz_tun: tun_net_xmit 42 [ 1842.433760][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13284'. [ 1842.787477][T10868] device syzkaller0 entered promiscuous mode [ 1842.828301][T10869] netlink: 'syz.2.13288': attribute type 2 has an invalid length. [ 1842.887545][T10873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13289'. [ 1842.902542][T10869] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13288'. [ 1842.925052][T10866] netlink: 'syz.4.13286': attribute type 10 has an invalid length. [ 1842.949366][T10866] bridge0: port 3(bond0) entered blocking state [ 1842.956156][T10866] bridge0: port 3(bond0) entered forwarding state [ 1842.963508][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.970947][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.978873][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.986497][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.056427][T10866] bridge0: port 3(bond0) entered disabled state [ 1843.063292][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.070913][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.391307][T10890] syz_tun: tun_net_xmit 42 [ 1844.435483][ C1] syz_tun: tun_net_xmit 42 [ 1844.711588][T10910] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.13300'. [ 1845.475511][ C1] syz_tun: tun_net_xmit 42 [ 1846.515611][ C1] syz_tun: tun_net_xmit 42 [ 1846.555664][T10901] netlink: 763 bytes leftover after parsing attributes in process `syz.4.13297'. [ 1847.073321][T10948] netlink: 'syz.1.13313': attribute type 21 has an invalid length. [ 1847.099308][T10948] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13313'. [ 1847.120486][T10944] netlink: 'syz.0.13311': attribute type 2 has an invalid length. [ 1847.129606][T10944] netlink: 'syz.0.13311': attribute type 9 has an invalid length. [ 1847.187470][T10944] netlink: 'syz.0.13311': attribute type 10 has an invalid length. [ 1847.228947][T10944] netlink: 'syz.0.13311': attribute type 11 has an invalid length. [ 1847.265590][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13311'. [ 1847.411459][T10957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13316'. [ 1847.545496][ C0] syz_tun: tun_net_xmit 42 [ 1847.592400][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13316'. [ 1848.137359][T10962] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1848.182914][T10965] syz_tun: tun_net_xmit 42 [ 1848.233776][T10962] device syzkaller0 entered promiscuous mode [ 1848.585504][ C0] syz_tun: tun_net_xmit 42 [ 1849.227794][ C0] syz_tun: tun_net_xmit 42 [ 1850.187325][ T4285] Bluetooth: hci6: command 0x0406 tx timeout [ 1850.270410][ C0] syz_tun: tun_net_xmit 42 [ 1850.322454][T11016] cgroup: fork rejected by pids controller in /syz1 [ 1851.078525][T10988] netlink: 'syz.2.13325': attribute type 46 has an invalid length. [ 1851.091475][T10988] netlink: 55 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1851.107123][T10995] netlink: 'syz.3.13327': attribute type 10 has an invalid length. [ 1851.117115][T11000] IPv6: …: Disabled Multicast RS [ 1851.305651][ C0] syz_tun: tun_net_xmit 42 [ 1851.450958][ T8044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.594422][ T8044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.784186][ T8044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.950339][ T8044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.094773][T11141] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13346'. [ 1852.345447][ C0] syz_tun: tun_net_xmit 42 [ 1852.664785][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1852.674480][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1852.688947][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1852.698290][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1852.708628][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1852.716929][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1852.868899][T11159] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13350'. [ 1853.235909][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.242351][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.385503][ C0] syz_tun: tun_net_xmit 42 [ 1853.596340][T11163] chnl_net:caif_netlink_parms(): no params data found [ 1853.934755][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.945227][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.962512][T11163] device bridge_slave_0 entered promiscuous mode [ 1853.996972][T11197] netlink: 192 bytes leftover after parsing attributes in process `syz.4.13355'. [ 1854.118390][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.135577][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.143893][T11163] device bridge_slave_1 entered promiscuous mode [ 1854.229989][T11208] netlink: 'syz.4.13358': attribute type 21 has an invalid length. [ 1854.257072][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.284272][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.371975][T11163] team0: Port device team_slave_0 added [ 1854.396717][T11163] team0: Port device team_slave_1 added [ 1854.498882][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1854.511764][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.639093][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1854.745518][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 1854.813616][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1854.823719][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.917770][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.352553][T11163] device hsr_slave_0 entered promiscuous mode [ 1855.397360][T11163] device hsr_slave_1 entered promiscuous mode [ 1855.421176][T11163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1855.443391][T11163] Cannot create hsr debugfs directory [ 1856.606654][T11269] netlink: 'syz.4.13372': attribute type 10 has an invalid length. [ 1856.825587][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 1857.102849][T11283] netlink: 'syz.4.13376': attribute type 10 has an invalid length. [ 1857.340425][T11296] FAULT_INJECTION: forcing a failure. [ 1857.340425][T11296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.355308][T11283] team0: Port device geneve1 added [ 1857.374795][T11296] CPU: 0 PID: 11296 Comm: syz.2.13379 Not tainted syzkaller #0 [ 1857.382403][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1857.392601][T11296] Call Trace: [ 1857.395904][T11296] [ 1857.398857][T11296] dump_stack_lvl+0x188/0x24e [ 1857.403587][T11296] ? show_regs_print_info+0x12/0x12 [ 1857.408824][T11296] ? load_image+0x410/0x410 [ 1857.413370][T11296] ? __lock_acquire+0x7ea0/0x7ea0 [ 1857.418432][T11296] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1857.424210][T11296] should_fail_ex+0x390/0x4c0 [ 1857.428933][T11296] _copy_from_user+0x2c/0x170 [ 1857.433645][T11296] ___sys_sendmsg+0x1c3/0x360 [ 1857.438365][T11296] ? __sys_sendmsg+0x2a0/0x2a0 [ 1857.443300][T11296] ? trace_call_bpf+0xbf/0x6b0 [ 1857.448157][T11296] __se_sys_sendmsg+0x1c3/0x2b0 [ 1857.453049][T11296] ? perf_trace_preemptirq_template+0x268/0x320 [ 1857.459320][T11296] ? __x64_sys_sendmsg+0x80/0x80 [ 1857.464315][T11296] ? lockdep_hardirqs_on+0x94/0x140 [ 1857.469552][T11296] do_syscall_64+0x4c/0xa0 [ 1857.474004][T11296] ? clear_bhb_loop+0x60/0xb0 [ 1857.478740][T11296] ? clear_bhb_loop+0x60/0xb0 [ 1857.483450][T11296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1857.487852][T11163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1857.489359][T11296] RIP: 0033:0x7fecdef9e199 [ 1857.500466][T11296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1857.520107][T11296] RSP: 002b:00007fecdfdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1857.528554][T11296] RAX: ffffffffffffffda RBX: 00007fecdf225fa0 RCX: 00007fecdef9e199 [ 1857.536554][T11296] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1857.544994][T11296] RBP: 00007fecdfdd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1857.553001][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1857.561001][T11296] R13: 00007fecdf226038 R14: 00007fecdf225fa0 R15: 00007fffb033ff58 [ 1857.569030][T11296] [ 1857.653516][T11163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1857.883102][T11163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1857.928126][T11163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1858.443630][ T8044] device hsr_slave_0 left promiscuous mode [ 1858.496245][ T8044] device hsr_slave_1 left promiscuous mode [ 1858.521911][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1858.545489][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.597607][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1858.610394][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1858.646742][ T8044] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1858.653901][ T8044] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1858.679061][ T8044] device bridge_slave_1 left promiscuous mode [ 1858.705740][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.763296][ T8044] device bridge_slave_0 left promiscuous mode [ 1858.775794][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.866373][ T8044] device veth1_macvtap left promiscuous mode [ 1858.872489][ T8044] device veth0_macvtap left promiscuous mode [ 1858.897553][ T8044] device veth1_vlan left promiscuous mode [ 1858.905676][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 1860.127882][ T8044] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1860.985929][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 1861.338554][T11399] FAULT_INJECTION: forcing a failure. [ 1861.338554][T11399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.352039][T11399] CPU: 1 PID: 11399 Comm: syz.2.13412 Not tainted syzkaller #0 [ 1861.359637][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1861.369731][T11399] Call Trace: [ 1861.373040][T11399] [ 1861.376000][T11399] dump_stack_lvl+0x188/0x24e [ 1861.380721][T11399] ? show_regs_print_info+0x12/0x12 [ 1861.385962][T11399] ? load_image+0x410/0x410 [ 1861.390512][T11399] ? __lock_acquire+0x7ea0/0x7ea0 [ 1861.395586][T11399] should_fail_ex+0x390/0x4c0 [ 1861.400314][T11399] _copy_from_user+0x2c/0x170 [ 1861.405017][T11399] __copy_msghdr+0x384/0x560 [ 1861.409730][T11399] ___sys_sendmsg+0x210/0x360 [ 1861.414457][T11399] ? __sys_sendmsg+0x2a0/0x2a0 [ 1861.419291][T11399] ? __lock_acquire+0x7ea0/0x7ea0 [ 1861.424409][T11399] __se_sys_sendmsg+0x1c3/0x2b0 [ 1861.429286][T11399] ? ct_nmi_exit+0x145/0x1c0 [ 1861.433915][T11399] ? __x64_sys_sendmsg+0x80/0x80 [ 1861.438905][T11399] ? lockdep_hardirqs_on+0x94/0x140 [ 1861.444150][T11399] do_syscall_64+0x4c/0xa0 [ 1861.448600][T11399] ? clear_bhb_loop+0x60/0xb0 [ 1861.453317][T11399] ? clear_bhb_loop+0x60/0xb0 [ 1861.458031][T11399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.463956][T11399] RIP: 0033:0x7fecdef9e199 [ 1861.468400][T11399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.488047][T11399] RSP: 002b:00007fecdfdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1861.496513][T11399] RAX: ffffffffffffffda RBX: 00007fecdf225fa0 RCX: 00007fecdef9e199 [ 1861.504517][T11399] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1861.512522][T11399] RBP: 00007fecdfdd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.520522][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.528526][T11399] R13: 00007fecdf226038 R14: 00007fecdf225fa0 R15: 00007fffb033ff58 [ 1861.536543][T11399] [ 1862.119815][ T8044] team0 (unregistering): Port device team_slave_1 removed [ 1862.248455][ T8044] team0 (unregistering): Port device team_slave_0 removed [ 1862.368498][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.487657][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.144786][ T8044] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1863.331163][ T8044] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1863.342648][ T8044] bond0 (unregistering): Released all slaves [ 1863.564937][T11354] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1863.592838][T11354] device syzkaller0 entered promiscuous mode [ 1863.750784][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13415'. [ 1865.148217][T11418] netlink: 'syz.0.13418': attribute type 8 has an invalid length. [ 1866.523598][T11418] netlink: 'syz.0.13418': attribute type 41 has an invalid length. [ 1866.559487][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1866.641257][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1866.659659][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1866.688464][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1866.725017][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1866.757686][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1866.796496][T22252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.803648][T22252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1866.855821][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1866.881591][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1866.911836][T22252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1866.919070][T22252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1866.998596][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1867.014481][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1867.044206][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1867.064694][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1867.106602][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1867.144814][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1867.149058][T11441] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13425'. [ 1867.187409][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1867.212783][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1867.543472][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1867.563442][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1867.573472][T11442] netlink: 'syz.0.13425': attribute type 2 has an invalid length. [ 1867.649288][T11163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1867.656512][T11442] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13425'. [ 1867.717606][T11163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1867.756532][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1867.778349][T22252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1868.016874][T11449] netlink: 'syz.3.13426': attribute type 39 has an invalid length. [ 1868.248882][T11463] netlink: 'syz.0.13428': attribute type 10 has an invalid length. [ 1868.348619][T11463] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1868.406507][T11465] netlink: 'syz.4.13427': attribute type 10 has an invalid length. [ 1868.414472][T11465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13427'. [ 1868.458148][T11465] batman_adv: batadv0: Adding interface: vlan1 [ 1868.464362][T11465] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.500425][T11465] batman_adv: batadv0: Interface activated: vlan1 [ 1868.578120][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1868.610750][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1868.648003][T11163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1868.684193][T11469] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1868.731718][T11474] syz_tun: tun_net_xmit 42 [ 1868.740934][T11469] device syzkaller0 entered promiscuous mode [ 1868.788200][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1868.806570][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1868.852972][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1868.889808][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1868.908728][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1868.920703][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1868.934967][T11163] device veth0_vlan entered promiscuous mode [ 1868.958699][T11476] netlink: 'syz.4.13432': attribute type 46 has an invalid length. [ 1868.973607][T11476] netlink: 55 bytes leftover after parsing attributes in process `syz.4.13432'. [ 1869.010026][T11163] device veth1_vlan entered promiscuous mode [ 1869.072163][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1869.094735][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1869.122367][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1869.131856][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1869.142912][T11163] device veth0_macvtap entered promiscuous mode [ 1869.172634][T11163] device veth1_macvtap entered promiscuous mode [ 1869.197635][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.208783][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.219280][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.233849][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.244005][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.254827][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.265049][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.276438][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.286436][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.297064][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.308729][T11163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.327561][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1869.341182][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1869.371083][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1869.384315][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1869.401139][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.416401][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.433524][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.444479][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.454817][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.467478][T11489] FAULT_INJECTION: forcing a failure. [ 1869.467478][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.480543][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.485479][T11489] CPU: 1 PID: 11489 Comm: syz.2.13438 Not tainted syzkaller #0 [ 1869.490922][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.497874][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1869.497888][T11489] Call Trace: [ 1869.497895][T11489] [ 1869.497903][T11489] dump_stack_lvl+0x188/0x24e [ 1869.497934][T11489] ? show_regs_print_info+0x12/0x12 [ 1869.497953][T11489] ? load_image+0x410/0x410 [ 1869.509232][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.518404][T11489] ? __might_sleep+0xd0/0xd0 [ 1869.518431][T11489] ? __lock_acquire+0x7ea0/0x7ea0 [ 1869.518458][T11489] should_fail_ex+0x390/0x4c0 [ 1869.523728][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.524669][T11489] should_failslab+0x5/0x20 [ 1869.529637][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.534495][T11489] slab_pre_alloc_hook+0x59/0x300 [ 1869.534524][T11489] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1869.540923][T11163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1869.548780][T11489] __kmem_cache_alloc_node+0x4f/0x270 [ 1869.548812][T11489] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1869.548834][T11489] __kmalloc+0xa3/0x240 [ 1869.548853][T11489] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1869.548882][T11489] ? tomoyo_domain+0xd2/0x120 [ 1869.548905][T11489] ? tomoyo_path_number_perm+0x205/0x650 [ 1869.548925][T11489] tomoyo_path_number_perm+0x22f/0x650 [ 1869.548948][T11489] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1869.548969][T11489] ? ksys_write+0x1ce/0x260 [ 1869.548992][T11489] ? common_file_perm+0x171/0x1c0 [ 1869.657717][T11489] ? __fget_files+0x28/0x460 [ 1869.662355][T11489] security_file_ioctl+0x6c/0xa0 [ 1869.667306][T11489] __se_sys_ioctl+0x48/0x170 [ 1869.671893][T11489] do_syscall_64+0x4c/0xa0 [ 1869.676316][T11489] ? clear_bhb_loop+0x60/0xb0 [ 1869.681014][T11489] ? clear_bhb_loop+0x60/0xb0 [ 1869.685718][T11489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.691656][T11489] RIP: 0033:0x7fecdef9e199 [ 1869.696068][T11489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.715685][T11489] RSP: 002b:00007fecdfdd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.724107][T11489] RAX: ffffffffffffffda RBX: 00007fecdf225fa0 RCX: 00007fecdef9e199 [ 1869.732122][T11489] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000005 [ 1869.740194][T11489] RBP: 00007fecdfdd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.748244][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.756226][T11489] R13: 00007fecdf226038 R14: 00007fecdf225fa0 R15: 00007fffb033ff58 [ 1869.764209][T11489] [ 1869.778890][T11489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1869.795572][ C1] syz_tun: tun_net_xmit 42 [ 1870.829134][ C1] syz_tun: tun_net_xmit 42 [ 1871.754377][T11163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.763642][T11163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.788933][T11163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.797801][T11163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.814673][T30069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1871.833978][T30069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1871.876000][ C1] syz_tun: tun_net_xmit 42 [ 1872.031891][ T8044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.050302][ T8044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.078510][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1872.106437][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.134864][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.143388][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1872.197476][T11502] netlink: 'syz.0.13441': attribute type 10 has an invalid length. [ 1872.248630][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13441'. [ 1872.264008][T11502] batman_adv: batadv0: Adding interface: vlan1 [ 1872.299764][T11502] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.356909][T11502] batman_adv: batadv0: Interface activated: vlan1 [ 1872.365814][T11513] netlink: 'syz.3.13447': attribute type 39 has an invalid length. [ 1872.486028][T11519] netlink: 'syz.4.13446': attribute type 10 has an invalid length. [ 1872.853802][T11533] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1872.906521][ C1] syz_tun: tun_net_xmit 42 [ 1872.952470][T11533] netlink: 'syz.3.13454': attribute type 10 has an invalid length. [ 1873.922887][T11570] netlink: 'syz.1.13464': attribute type 1 has an invalid length. [ 1873.931155][T11570] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.13464'. [ 1873.949949][ C1] syz_tun: tun_net_xmit 42 [ 1875.358100][T11565] netlink: 'syz.2.13461': attribute type 10 has an invalid length. [ 1875.366377][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13461'. [ 1875.921416][T11607] netlink: 'syz.0.13476': attribute type 46 has an invalid length. [ 1875.929788][T11607] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13476'. [ 1876.115707][T11614] netlink: 'syz.0.13479': attribute type 9 has an invalid length. [ 1876.151775][T11614] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1876.217223][T11616] netlink: 'syz.3.13480': attribute type 10 has an invalid length. [ 1876.230025][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13480'. [ 1876.240798][T11616] batman_adv: batadv0: Adding interface: vlan1 [ 1876.248398][T11616] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.294009][T11616] batman_adv: batadv0: Interface activated: vlan1 [ 1877.059607][T11652] device syzkaller0 entered promiscuous mode [ 1879.611708][T11668] netlink: 'syz.4.13500': attribute type 10 has an invalid length. [ 1879.619760][T11668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13500'. [ 1879.629796][T11668] bridge0: port 4(veth0_vlan) entered blocking state [ 1879.636854][T11668] bridge0: port 4(veth0_vlan) entered disabled state [ 1879.644688][T11668] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1880.167650][T11699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1880.278702][T11699] device syzkaller0 entered promiscuous mode [ 1880.302853][T11711] netlink: 'syz.0.13515': attribute type 29 has an invalid length. [ 1880.307380][T11704] netlink: 'syz.2.13513': attribute type 12 has an invalid length. [ 1880.319873][T11704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1880.340297][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1880.350669][T11712] netlink: 'syz.2.13513': attribute type 1 has an invalid length. [ 1880.368246][T11712] netlink: 'syz.2.13513': attribute type 4 has an invalid length. [ 1880.382080][T11712] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1880.443502][T11711] netlink: 'syz.0.13515': attribute type 29 has an invalid length. [ 1882.657237][T11713] netlink: 'syz.0.13515': attribute type 29 has an invalid length. [ 1882.671425][T11721] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13517'. [ 1882.703690][T11729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13518'. [ 1882.747836][T11733] netlink: 'syz.4.13517': attribute type 4 has an invalid length. [ 1882.977568][T11749] FAULT_INJECTION: forcing a failure. [ 1882.977568][T11749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.007546][T11745] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13521'. [ 1883.009279][T11749] CPU: 1 PID: 11749 Comm: syz.0.13523 Not tainted syzkaller #0 [ 1883.024364][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1883.034531][T11749] Call Trace: [ 1883.037841][T11749] [ 1883.040788][T11749] dump_stack_lvl+0x188/0x24e [ 1883.045508][T11749] ? show_regs_print_info+0x12/0x12 [ 1883.050777][T11749] ? load_image+0x410/0x410 [ 1883.055328][T11749] ? __lock_acquire+0x7ea0/0x7ea0 [ 1883.060388][T11749] should_fail_ex+0x390/0x4c0 [ 1883.065125][T11749] _copy_from_user+0x2c/0x170 [ 1883.069851][T11749] iovec_from_user+0x143/0x360 [ 1883.074714][T11749] __import_iovec+0x6c/0x510 [ 1883.079354][T11749] import_iovec+0x6f/0xa0 [ 1883.083715][T11749] ___sys_sendmsg+0x252/0x360 [ 1883.088409][T11749] ? __sys_sendmsg+0x2a0/0x2a0 [ 1883.093202][T11749] ? __lock_acquire+0x7ea0/0x7ea0 [ 1883.098269][T11749] __se_sys_sendmsg+0x1c3/0x2b0 [ 1883.103123][T11749] ? __x64_sys_sendmsg+0x80/0x80 [ 1883.108082][T11749] ? lockdep_hardirqs_on+0x94/0x140 [ 1883.113295][T11749] do_syscall_64+0x4c/0xa0 [ 1883.117711][T11749] ? clear_bhb_loop+0x60/0xb0 [ 1883.122388][T11749] ? clear_bhb_loop+0x60/0xb0 [ 1883.127074][T11749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1883.132972][T11749] RIP: 0033:0x7f02faf9e199 [ 1883.137387][T11749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.157018][T11749] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.165437][T11749] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1883.173499][T11749] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1883.181470][T11749] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.189540][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.197532][T11749] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1883.205549][T11749] [ 1883.222401][T11752] : port 1(ip6gretap0) entered blocking state [ 1883.254541][T11752] : port 1(ip6gretap0) entered disabled state [ 1883.288105][T11752] device ip6gretap0 entered promiscuous mode [ 1883.311508][T11748] device ip6gretap0 left promiscuous mode [ 1883.319134][T11748] : port 1(ip6gretap0) entered disabled state [ 1883.520476][T11760] device syzkaller0 entered promiscuous mode [ 1883.544774][T11769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13529'. [ 1885.730251][T11781] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1885.743676][T11786] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1885.758915][T11786] device syzkaller0 entered promiscuous mode [ 1885.776001][T11791] netlink: 763 bytes leftover after parsing attributes in process `syz.2.13536'. [ 1886.680594][T11822] netlink: 'syz.2.13549': attribute type 2 has an invalid length. [ 1886.700396][T11822] netlink: 180912 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1888.804004][T11819] netlink: 'syz.1.13547': attribute type 21 has an invalid length. [ 1888.812347][T11819] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13547'. [ 1889.066197][ C1] syz_tun: tun_net_xmit 42 [ 1889.241150][T11865] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13562'. [ 1890.033809][T11892] netlink: 'syz.4.13567': attribute type 10 has an invalid length. [ 1890.105538][ C1] syz_tun: tun_net_xmit 42 [ 1890.142661][T11877] device syzkaller0 entered promiscuous mode [ 1890.194012][T11895] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1890.229403][T11895] device syzkaller0 entered promiscuous mode [ 1891.150461][ C1] syz_tun: tun_net_xmit 42 [ 1892.186904][ C1] syz_tun: tun_net_xmit 42 [ 1892.534002][T11896] : port 1(ip6gretap0) entered blocking state [ 1892.540425][T11896] : port 1(ip6gretap0) entered disabled state [ 1892.548000][T11896] device ip6gretap0 entered promiscuous mode [ 1892.555565][T11899] device ip6gretap0 left promiscuous mode [ 1892.561422][T11899] : port 1(ip6gretap0) entered disabled state [ 1892.574824][T11908] netlink: 'syz.2.13573': attribute type 10 has an invalid length. [ 1893.230682][ C1] syz_tun: tun_net_xmit 42 [ 1894.275603][ C1] syz_tun: tun_net_xmit 42 [ 1894.911134][T11944] netlink: 'syz.3.13583': attribute type 10 has an invalid length. [ 1895.370410][T11961] : port 1(ip6gretap0) entered blocking state [ 1895.386033][T11961] : port 1(ip6gretap0) entered disabled state [ 1895.411110][T11961] device ip6gretap0 entered promiscuous mode [ 1895.500911][T11968] device ip6gretap0 left promiscuous mode [ 1895.559093][T11968] : port 1(ip6gretap0) entered disabled state [ 1895.591061][T11963] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1895.610443][T11969] syz_tun: tun_net_xmit 42 [ 1895.678363][T11963] device syzkaller0 entered promiscuous mode [ 1896.093619][T11987] netlink: 'syz.2.13598': attribute type 10 has an invalid length. [ 1896.438952][T11997] FAULT_INJECTION: forcing a failure. [ 1896.438952][T11997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.483144][T11997] CPU: 0 PID: 11997 Comm: syz.2.13602 Not tainted syzkaller #0 [ 1896.490759][T11997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1896.500813][T11997] Call Trace: [ 1896.504088][T11997] [ 1896.507026][T11997] dump_stack_lvl+0x188/0x24e [ 1896.511746][T11997] ? show_regs_print_info+0x12/0x12 [ 1896.516971][T11997] ? load_image+0x410/0x410 [ 1896.521497][T11997] ? __lock_acquire+0x7ea0/0x7ea0 [ 1896.526518][T11997] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1896.532165][T11997] should_fail_ex+0x390/0x4c0 [ 1896.536885][T11997] _copy_from_user+0x2c/0x170 [ 1896.541625][T11997] ___sys_sendmsg+0x1c3/0x360 [ 1896.546369][T11997] ? __sys_sendmsg+0x2a0/0x2a0 [ 1896.551147][T11997] ? __lock_acquire+0x7ea0/0x7ea0 [ 1896.556186][T11997] __se_sys_sendmsg+0x1c3/0x2b0 [ 1896.561037][T11997] ? __x64_sys_sendmsg+0x80/0x80 [ 1896.565999][T11997] ? lockdep_hardirqs_on+0x94/0x140 [ 1896.571237][T11997] do_syscall_64+0x4c/0xa0 [ 1896.575662][T11997] ? clear_bhb_loop+0x60/0xb0 [ 1896.580357][T11997] ? clear_bhb_loop+0x60/0xb0 [ 1896.585062][T11997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.590991][T11997] RIP: 0033:0x7fecdef9e199 [ 1896.595436][T11997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.615101][T11997] RSP: 002b:00007fecdfdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.623527][T11997] RAX: ffffffffffffffda RBX: 00007fecdf225fa0 RCX: 00007fecdef9e199 [ 1896.631600][T11997] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1896.639574][T11997] RBP: 00007fecdfdd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1896.647550][T11997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.655526][T11997] R13: 00007fecdf226038 R14: 00007fecdf225fa0 R15: 00007fffb033ff58 [ 1896.663618][T11997] [ 1896.667803][ C0] syz_tun: tun_net_xmit 42 [ 1897.478133][T12028] netlink: 'syz.4.13614': attribute type 9 has an invalid length. [ 1897.487316][T12028] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.13614'. [ 1897.705589][ C0] syz_tun: tun_net_xmit 42 [ 1898.746067][ C0] syz_tun: tun_net_xmit 42 [ 1899.668743][T12062] netlink: 'syz.4.13628': attribute type 49 has an invalid length. [ 1899.785512][ C0] syz_tun: tun_net_xmit 42 [ 1900.108201][T12078] netlink: 'syz.1.13634': attribute type 3 has an invalid length. [ 1900.125551][T12078] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13634'. [ 1900.442602][T12084] FAULT_INJECTION: forcing a failure. [ 1900.442602][T12084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1900.465881][T12084] CPU: 1 PID: 12084 Comm: syz.1.13636 Not tainted syzkaller #0 [ 1900.473489][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1900.483572][T12084] Call Trace: [ 1900.486874][T12084] [ 1900.489827][T12084] dump_stack_lvl+0x188/0x24e [ 1900.494537][T12084] ? show_regs_print_info+0x12/0x12 [ 1900.499767][T12084] ? load_image+0x410/0x410 [ 1900.504298][T12084] ? __lock_acquire+0x7ea0/0x7ea0 [ 1900.509361][T12084] should_fail_ex+0x390/0x4c0 [ 1900.514072][T12084] _copy_from_user+0x2c/0x170 [ 1900.518774][T12084] iovec_from_user+0x143/0x360 [ 1900.523567][T12084] __import_iovec+0x6c/0x510 [ 1900.528187][T12084] import_iovec+0x6f/0xa0 [ 1900.532548][T12084] ___sys_sendmsg+0x252/0x360 [ 1900.537262][T12084] ? __sys_sendmsg+0x2a0/0x2a0 [ 1900.542065][T12084] ? __lock_acquire+0x7ea0/0x7ea0 [ 1900.547132][T12084] __se_sys_sendmsg+0x1c3/0x2b0 [ 1900.551999][T12084] ? __x64_sys_sendmsg+0x80/0x80 [ 1900.556965][T12084] ? lockdep_hardirqs_on+0x94/0x140 [ 1900.562191][T12084] do_syscall_64+0x4c/0xa0 [ 1900.566620][T12084] ? clear_bhb_loop+0x60/0xb0 [ 1900.571316][T12084] ? clear_bhb_loop+0x60/0xb0 [ 1900.576002][T12084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1900.581906][T12084] RIP: 0033:0x7fdd1cb9e199 [ 1900.586336][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.605970][T12084] RSP: 002b:00007fdd1daf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1900.614406][T12084] RAX: ffffffffffffffda RBX: 00007fdd1ce26090 RCX: 00007fdd1cb9e199 [ 1900.622386][T12084] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1900.630367][T12084] RBP: 00007fdd1daf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.638361][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.646372][T12084] R13: 00007fdd1ce26128 R14: 00007fdd1ce26090 R15: 00007fff52907b98 [ 1900.654407][T12084] [ 1900.825615][ C0] syz_tun: tun_net_xmit 42 [ 1900.973811][T12090] netlink: 'syz.4.13639': attribute type 10 has an invalid length. [ 1900.983346][T12090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13639'. [ 1901.023527][T12095] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1901.137786][T12095] device syzkaller0 entered promiscuous mode [ 1902.241446][T12133] netlink: 'syz.3.13651': attribute type 11 has an invalid length. [ 1902.255860][T12133] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13651'. [ 1903.006945][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1904.152550][T12122] netlink: 'syz.4.13646': attribute type 13 has an invalid length. [ 1904.165859][T12122] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13646'. [ 1904.180717][T12122] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1904.662856][T12156] netlink: 'syz.4.13659': attribute type 10 has an invalid length. [ 1904.705595][T12156] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13659'. [ 1904.744850][T12156] netlink: 'syz.4.13659': attribute type 10 has an invalid length. [ 1904.843841][T12156] team0: Port device wlan1 added [ 1904.958629][T12170] netlink: 'syz.3.13663': attribute type 2 has an invalid length. [ 1904.976949][T12170] netlink: 'syz.3.13663': attribute type 3 has an invalid length. [ 1905.033106][T12170] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13663'. [ 1905.164785][T12177] netlink: 'syz.4.13664': attribute type 1 has an invalid length. [ 1905.204188][T12177] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.13664'. [ 1905.322652][T12186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13666'. [ 1905.441726][T12185] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1905.565244][T12185] device syzkaller0 entered promiscuous mode [ 1905.579816][T12194] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13669'. [ 1905.653325][T12200] FAULT_INJECTION: forcing a failure. [ 1905.653325][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.704122][T12200] CPU: 1 PID: 12200 Comm: syz.4.13670 Not tainted syzkaller #0 [ 1905.711766][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1905.721861][T12200] Call Trace: [ 1905.725174][T12200] [ 1905.728136][T12200] dump_stack_lvl+0x188/0x24e [ 1905.732865][T12200] ? show_regs_print_info+0x12/0x12 [ 1905.738101][T12200] ? load_image+0x410/0x410 [ 1905.742644][T12200] ? __might_fault+0xa6/0x120 [ 1905.747465][T12200] should_fail_ex+0x390/0x4c0 [ 1905.752206][T12200] copyin+0x1b/0x120 [ 1905.756149][T12200] _copy_from_iter+0x447/0x1130 [ 1905.761064][T12200] ? copyout_mc+0x110/0x110 [ 1905.765630][T12200] ? dev_get_by_index+0x1e/0x2d0 [ 1905.770622][T12200] ? dev_get_by_index+0x1e/0x2d0 [ 1905.775621][T12200] packet_sendmsg+0x2fcd/0x4c30 [ 1905.780551][T12200] ? __might_sleep+0xd0/0xd0 [ 1905.785183][T12200] ? perf_trace_lock+0x301/0x390 [ 1905.790175][T12200] ? trace_event_raw_event_lock+0x230/0x230 [ 1905.796112][T12200] ? aa_sk_perm+0x81f/0x950 [ 1905.800669][T12200] ? aa_af_perm+0x340/0x340 [ 1905.805210][T12200] ? packet_getsockopt+0x980/0x980 [ 1905.810380][T12200] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1905.815971][T12200] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1905.821291][T12200] ? security_socket_sendmsg+0x7c/0xa0 [ 1905.826785][T12200] ? packet_getsockopt+0x980/0x980 [ 1905.831949][T12200] ____sys_sendmsg+0x5ed/0x9a0 [ 1905.836755][T12200] ? __sys_sendmsg_sock+0x30/0x30 [ 1905.841787][T12200] ? __import_iovec+0x306/0x510 [ 1905.846661][T12200] ? import_iovec+0x6f/0xa0 [ 1905.851181][T12200] ___sys_sendmsg+0x2a2/0x360 [ 1905.855875][T12200] ? __sys_sendmsg+0x2a0/0x2a0 [ 1905.860675][T12200] ? __lock_acquire+0x7ea0/0x7ea0 [ 1905.865746][T12200] __se_sys_sendmsg+0x1c3/0x2b0 [ 1905.870607][T12200] ? __x64_sys_sendmsg+0x80/0x80 [ 1905.875574][T12200] ? lockdep_hardirqs_on+0x94/0x140 [ 1905.880786][T12200] do_syscall_64+0x4c/0xa0 [ 1905.885207][T12200] ? clear_bhb_loop+0x60/0xb0 [ 1905.889890][T12200] ? clear_bhb_loop+0x60/0xb0 [ 1905.894595][T12200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.900515][T12200] RIP: 0033:0x7fd5a079e199 [ 1905.904970][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.924697][T12200] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.933131][T12200] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1905.941110][T12200] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1905.949087][T12200] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.957069][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1905.965041][T12200] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1905.973040][T12200] [ 1908.473687][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13676'. [ 1908.485509][T12215] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13676'. [ 1908.494877][T12218] netlink: 'syz.3.13677': attribute type 27 has an invalid length. [ 1908.540913][T12218] bond0: (slave bond_slave_0): Releasing backup interface [ 1908.549317][T12218] device bond_slave_0 left promiscuous mode [ 1908.584668][T12217] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1908.598284][T12227] netlink: 763 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1908.657826][T12240] netlink: 'syz.0.13682': attribute type 39 has an invalid length. [ 1908.776147][T12248] nr0: port 1(hsr0) entered blocking state [ 1908.825954][T12248] nr0: port 1(hsr0) entered disabled state [ 1908.875314][T12248] device hsr0 entered promiscuous mode [ 1908.964494][T12260] FAULT_INJECTION: forcing a failure. [ 1908.964494][T12260] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.006301][T12260] CPU: 0 PID: 12260 Comm: syz.4.13689 Not tainted syzkaller #0 [ 1909.013906][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1909.023984][T12260] Call Trace: [ 1909.027286][T12260] [ 1909.030241][T12260] dump_stack_lvl+0x188/0x24e [ 1909.034966][T12260] ? show_regs_print_info+0x12/0x12 [ 1909.040182][T12260] ? load_image+0x410/0x410 [ 1909.044713][T12260] ? __might_sleep+0xd0/0xd0 [ 1909.049332][T12260] ? __lock_acquire+0x7ea0/0x7ea0 [ 1909.054385][T12260] should_fail_ex+0x390/0x4c0 [ 1909.059093][T12260] should_failslab+0x5/0x20 [ 1909.063615][T12260] slab_pre_alloc_hook+0x59/0x300 [ 1909.068657][T12260] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1909.074385][T12260] __kmem_cache_alloc_node+0x4f/0x270 [ 1909.079875][T12260] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1909.085599][T12260] __kmalloc+0xa3/0x240 [ 1909.089753][T12260] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1909.095301][T12260] ? tomoyo_domain+0xd2/0x120 [ 1909.099990][T12260] ? tomoyo_path_number_perm+0x205/0x650 [ 1909.105618][T12260] tomoyo_path_number_perm+0x22f/0x650 [ 1909.111076][T12260] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1909.116531][T12260] ? ksys_write+0x1ce/0x260 [ 1909.121035][T12260] ? common_file_perm+0x171/0x1c0 [ 1909.126078][T12260] ? __fget_files+0x28/0x460 [ 1909.130673][T12260] security_file_ioctl+0x6c/0xa0 [ 1909.135612][T12260] __se_sys_ioctl+0x48/0x170 [ 1909.140204][T12260] do_syscall_64+0x4c/0xa0 [ 1909.144622][T12260] ? clear_bhb_loop+0x60/0xb0 [ 1909.149296][T12260] ? clear_bhb_loop+0x60/0xb0 [ 1909.153968][T12260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.159854][T12260] RIP: 0033:0x7fd5a079e199 [ 1909.164269][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.183871][T12260] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.192287][T12260] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1909.200255][T12260] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 1909.208250][T12260] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.216225][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.224200][T12260] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1909.232178][T12260] [ 1909.293941][T12260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1909.519278][T12273] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1909.676568][T12273] device syzkaller0 entered promiscuous mode [ 1909.720528][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13696'. [ 1909.746544][T12282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13696'. [ 1910.075465][T12290] netlink: 'syz.3.13698': attribute type 6 has an invalid length. [ 1910.145151][T12290] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.13698'. [ 1912.493473][T12298] netlink: 'syz.1.13702': attribute type 21 has an invalid length. [ 1912.501858][T12298] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13702'. [ 1912.782605][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13709'. [ 1912.805673][T12326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13709'. [ 1912.917337][T12333] netlink: 'syz.1.13711': attribute type 10 has an invalid length. [ 1912.959571][T12333] device macvlan0 entered promiscuous mode [ 1913.099816][T12333] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1913.292849][T12336] netlink: 'syz.4.13712': attribute type 10 has an invalid length. [ 1913.306402][T12338] netlink: 'syz.3.13714': attribute type 46 has an invalid length. [ 1913.332416][T12338] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13714'. [ 1914.091954][T12361] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13719'. [ 1914.229232][T12363] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1914.295285][T12363] device syzkaller0 entered promiscuous mode [ 1914.311374][T12371] netlink: 'syz.0.13725': attribute type 10 has an invalid length. [ 1914.672883][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.679307][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.531780][T12422] netlink: 'syz.0.13734': attribute type 10 has an invalid length. [ 1917.555605][T12422] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13734'. [ 1917.571823][T12422] netlink: 'syz.0.13734': attribute type 10 has an invalid length. [ 1917.721121][T12422] team0: Port device wlan1 added [ 1917.747701][T12425] netlink: 'syz.1.13735': attribute type 10 has an invalid length. [ 1917.958248][T12425] team0: Port device geneve1 added [ 1917.971765][T12442] FAULT_INJECTION: forcing a failure. [ 1917.971765][T12442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.016327][T12442] CPU: 1 PID: 12442 Comm: syz.3.13741 Not tainted syzkaller #0 [ 1918.023926][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1918.033997][T12442] Call Trace: [ 1918.037290][T12442] [ 1918.040231][T12442] dump_stack_lvl+0x188/0x24e [ 1918.044942][T12442] ? show_regs_print_info+0x12/0x12 [ 1918.050162][T12442] ? load_image+0x410/0x410 [ 1918.054693][T12442] ? __lock_acquire+0x7ea0/0x7ea0 [ 1918.059753][T12442] should_fail_ex+0x390/0x4c0 [ 1918.064464][T12442] _copy_from_user+0x2c/0x170 [ 1918.069164][T12442] __copy_msghdr+0x384/0x560 [ 1918.073779][T12442] ___sys_sendmsg+0x210/0x360 [ 1918.078480][T12442] ? __sys_sendmsg+0x2a0/0x2a0 [ 1918.083281][T12442] ? __lock_acquire+0x7ea0/0x7ea0 [ 1918.088349][T12442] __se_sys_sendmsg+0x1c3/0x2b0 [ 1918.093229][T12442] ? __x64_sys_sendmsg+0x80/0x80 [ 1918.098198][T12442] ? lockdep_hardirqs_on+0x94/0x140 [ 1918.103407][T12442] do_syscall_64+0x4c/0xa0 [ 1918.107822][T12442] ? clear_bhb_loop+0x60/0xb0 [ 1918.112499][T12442] ? clear_bhb_loop+0x60/0xb0 [ 1918.117174][T12442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1918.123058][T12442] RIP: 0033:0x7f52ea19e199 [ 1918.127468][T12442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.147083][T12442] RSP: 002b:00007f52eafab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1918.155505][T12442] RAX: ffffffffffffffda RBX: 00007f52ea425fa0 RCX: 00007f52ea19e199 [ 1918.163485][T12442] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1918.171461][T12442] RBP: 00007f52eafab090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.179443][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.187412][T12442] R13: 00007f52ea426038 R14: 00007f52ea425fa0 R15: 00007ffd238d6f98 [ 1918.195475][T12442] [ 1918.420076][T12445] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1918.445075][T12455] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13745'. [ 1918.499136][T12445] device syzkaller0 entered promiscuous mode [ 1919.208563][T12472] netlink: 'syz.4.13750': attribute type 29 has an invalid length. [ 1920.173852][T12487] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.13756'. [ 1920.216463][T12487] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1922.969251][T12472] netlink: 'syz.4.13750': attribute type 29 has an invalid length. [ 1922.978139][T12473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13750'. [ 1922.997850][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13756'. [ 1923.239553][T12495] netlink: 'syz.3.13762': attribute type 9 has an invalid length. [ 1923.278698][T12495] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.13762'. [ 1923.551356][T12509] syz_tun: tun_net_xmit 1510 [ 1923.594730][T12509] syz_tun: tun_net_xmit 1510 [ 1923.623018][T12509] syz_tun: tun_net_xmit 1510 [ 1923.635742][T12509] syz_tun: tun_net_xmit 1510 [ 1923.651238][T12509] syz_tun: tun_net_xmit 1510 [ 1923.671809][T12509] syz_tun: tun_net_xmit 1510 [ 1923.682488][T12509] syz_tun: tun_net_xmit 1510 [ 1923.698464][T12509] syz_tun: tun_net_xmit 1510 [ 1923.714193][T12509] syz_tun: tun_net_xmit 1510 [ 1923.724428][T12509] syz_tun: tun_net_xmit 1510 [ 1923.756304][T12509] syz_tun: tun_net_xmit 1510 [ 1923.767861][T12509] syz_tun: tun_net_xmit 1510 [ 1923.773596][T12509] syz_tun: tun_net_xmit 1510 [ 1923.786257][T12509] syz_tun: tun_net_xmit 694 [ 1924.739623][T12529] netlink: 'syz.2.13772': attribute type 2 has an invalid length. [ 1924.748063][T12529] netlink: 'syz.2.13772': attribute type 8 has an invalid length. [ 1924.761020][T12529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13772'. [ 1924.777013][T12529] netlink: 'syz.2.13772': attribute type 2 has an invalid length. [ 1924.786059][T12529] netlink: 'syz.2.13772': attribute type 8 has an invalid length. [ 1924.794628][T12529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13772'. [ 1924.837721][T12530] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1924.852637][T12530] device syzkaller0 entered promiscuous mode [ 1928.097315][T12566] netlink: 'syz.2.13785': attribute type 10 has an invalid length. [ 1929.004175][T12586] netlink: 'syz.0.13790': attribute type 2 has an invalid length. [ 1929.020008][T12586] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.13790'. [ 1929.547500][T12590] netlink: 'syz.2.13792': attribute type 10 has an invalid length. [ 1929.628016][T12590] bridge0: port 3(bond0) entered disabled state [ 1929.653057][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.654784][T12602] netlink: 'syz.3.13794': attribute type 9 has an invalid length. [ 1929.691283][T12602] netlink: 668 bytes leftover after parsing attributes in process `syz.3.13794'. [ 1929.695438][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.787349][T12590] device bridge0 left promiscuous mode [ 1930.300112][T12611] device syzkaller0 entered promiscuous mode [ 1930.522956][T12621] netlink: 'syz.0.13799': attribute type 10 has an invalid length. [ 1930.562529][T12621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13799'. [ 1930.591434][T12621] bridge0: port 4(veth0_vlan) entered blocking state [ 1930.603964][T12621] bridge0: port 4(veth0_vlan) entered disabled state [ 1930.629440][T12621] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1932.769526][T12638] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1932.790977][T12638] device syzkaller0 entered promiscuous mode [ 1933.291226][T12674] FAULT_INJECTION: forcing a failure. [ 1933.291226][T12674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1933.323499][T12674] CPU: 1 PID: 12674 Comm: syz.0.13815 Not tainted syzkaller #0 [ 1933.331282][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1933.341352][T12674] Call Trace: [ 1933.344643][T12674] [ 1933.347587][T12674] dump_stack_lvl+0x188/0x24e [ 1933.352290][T12674] ? show_regs_print_info+0x12/0x12 [ 1933.357498][T12674] ? load_image+0x410/0x410 [ 1933.362021][T12674] ? __lock_acquire+0x7ea0/0x7ea0 [ 1933.367063][T12674] should_fail_ex+0x390/0x4c0 [ 1933.371756][T12674] _copy_from_user+0x2c/0x170 [ 1933.376441][T12674] __copy_msghdr+0x384/0x560 [ 1933.381041][T12674] ___sys_sendmsg+0x210/0x360 [ 1933.385738][T12674] ? __sys_sendmsg+0x2a0/0x2a0 [ 1933.390541][T12674] ? __lock_acquire+0x7ea0/0x7ea0 [ 1933.395618][T12674] __se_sys_sendmsg+0x1c3/0x2b0 [ 1933.400488][T12674] ? ct_nmi_exit+0x145/0x1c0 [ 1933.405091][T12674] ? __x64_sys_sendmsg+0x80/0x80 [ 1933.410052][T12674] ? lockdep_hardirqs_on+0x94/0x140 [ 1933.415262][T12674] do_syscall_64+0x4c/0xa0 [ 1933.419678][T12674] ? clear_bhb_loop+0x60/0xb0 [ 1933.424356][T12674] ? clear_bhb_loop+0x60/0xb0 [ 1933.429048][T12674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1933.434941][T12674] RIP: 0033:0x7f02faf9e199 [ 1933.439361][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1933.458979][T12674] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1933.467397][T12674] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1933.475371][T12674] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000005 [ 1933.483358][T12674] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.491337][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.499308][T12674] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1933.507307][T12674] [ 1933.828160][T12681] FAULT_INJECTION: forcing a failure. [ 1933.828160][T12681] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.841727][T12681] CPU: 1 PID: 12681 Comm: syz.0.13818 Not tainted syzkaller #0 [ 1933.849320][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1933.859402][T12681] Call Trace: [ 1933.862707][T12681] [ 1933.865653][T12681] dump_stack_lvl+0x188/0x24e [ 1933.870381][T12681] ? show_regs_print_info+0x12/0x12 [ 1933.875594][T12681] ? load_image+0x410/0x410 [ 1933.880118][T12681] ? __might_sleep+0xd0/0xd0 [ 1933.884720][T12681] ? __lock_acquire+0x7ea0/0x7ea0 [ 1933.889767][T12681] should_fail_ex+0x390/0x4c0 [ 1933.894473][T12681] should_failslab+0x5/0x20 [ 1933.898978][T12681] slab_pre_alloc_hook+0x59/0x300 [ 1933.904018][T12681] kmem_cache_alloc_node+0x5a/0x310 [ 1933.909216][T12681] ? __alloc_skb+0xf9/0x7d0 [ 1933.913728][T12681] __alloc_skb+0xf9/0x7d0 [ 1933.918090][T12681] alloc_skb_with_frags+0xa7/0x710 [ 1933.923202][T12681] ? __might_fault+0xa6/0x120 [ 1933.927891][T12681] ? __lock_acquire+0x7ea0/0x7ea0 [ 1933.932921][T12681] ? perf_tp_event+0xa8e/0xc10 [ 1933.937698][T12681] sock_alloc_send_pskb+0x87f/0x9a0 [ 1933.942938][T12681] ? sock_kzfree_s+0x50/0x50 [ 1933.947545][T12681] ? dev_get_by_index+0x1e/0x2d0 [ 1933.952488][T12681] ? dev_get_by_index+0x1e/0x2d0 [ 1933.957437][T12681] packet_sendmsg+0x31b9/0x4c30 [ 1933.962325][T12681] ? __might_sleep+0xd0/0xd0 [ 1933.966919][T12681] ? perf_trace_lock+0x301/0x390 [ 1933.971868][T12681] ? trace_event_raw_event_lock+0x230/0x230 [ 1933.977775][T12681] ? aa_sk_perm+0x81f/0x950 [ 1933.982311][T12681] ? aa_af_perm+0x340/0x340 [ 1933.986827][T12681] ? packet_getsockopt+0x980/0x980 [ 1933.991956][T12681] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1933.997510][T12681] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1934.002889][T12681] ? security_socket_sendmsg+0x7c/0xa0 [ 1934.008368][T12681] ? packet_getsockopt+0x980/0x980 [ 1934.013510][T12681] ____sys_sendmsg+0x5ed/0x9a0 [ 1934.018293][T12681] ? __sys_sendmsg_sock+0x30/0x30 [ 1934.023316][T12681] ? __import_iovec+0x306/0x510 [ 1934.028187][T12681] ? import_iovec+0x6f/0xa0 [ 1934.032699][T12681] ___sys_sendmsg+0x2a2/0x360 [ 1934.037383][T12681] ? __sys_sendmsg+0x2a0/0x2a0 [ 1934.042173][T12681] ? __lock_acquire+0x7ea0/0x7ea0 [ 1934.047254][T12681] __se_sys_sendmsg+0x1c3/0x2b0 [ 1934.052106][T12681] ? ct_nmi_exit+0x145/0x1c0 [ 1934.056709][T12681] ? __x64_sys_sendmsg+0x80/0x80 [ 1934.061671][T12681] ? lockdep_hardirqs_on+0x94/0x140 [ 1934.066880][T12681] do_syscall_64+0x4c/0xa0 [ 1934.071296][T12681] ? clear_bhb_loop+0x60/0xb0 [ 1934.075989][T12681] ? clear_bhb_loop+0x60/0xb0 [ 1934.080671][T12681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1934.086569][T12681] RIP: 0033:0x7f02faf9e199 [ 1934.090989][T12681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.110792][T12681] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1934.119207][T12681] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1934.127190][T12681] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1934.135158][T12681] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.143130][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.151102][T12681] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1934.159100][T12681] [ 1935.804099][T12661] netlink: 'syz.1.13809': attribute type 2 has an invalid length. [ 1935.812126][T12661] netlink: 'syz.1.13809': attribute type 8 has an invalid length. [ 1935.820272][T12661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13809'. [ 1935.832790][T12667] netlink: 'syz.1.13809': attribute type 2 has an invalid length. [ 1935.842449][T12667] netlink: 'syz.1.13809': attribute type 8 has an invalid length. [ 1935.850551][T12667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13809'. [ 1935.865581][T12672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13813'. [ 1936.142600][T12704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13825'. [ 1936.184238][T12699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1936.264679][T12699] device syzkaller0 entered promiscuous mode [ 1936.769119][T12726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13833'. [ 1937.006552][T12733] delete_channel: no stack [ 1937.011137][T12733] delete_channel: no stack [ 1939.547397][T12754] tap0: tun_chr_ioctl cmd 1074025681 [ 1939.696895][T12764] netlink: 'syz.1.13849': attribute type 21 has an invalid length. [ 1939.705117][T12764] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13849'. [ 1939.772230][T12767] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1939.848510][T12767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13851'. [ 1939.921373][T12774] device batadv0 entered promiscuous mode [ 1940.077156][T12783] netlink: 'syz.0.13855': attribute type 10 has an invalid length. [ 1941.051146][T12802] syz_tun: tun_net_xmit 42 [ 1941.577559][T12800] device syzkaller0 entered promiscuous mode [ 1941.591433][T12806] netlink: 'syz.1.13863': attribute type 21 has an invalid length. [ 1941.610827][T12810] netlink: 'syz.2.13864': attribute type 10 has an invalid length. [ 1941.626143][T12810] bond0: (slave dummy0): Releasing backup interface [ 1941.634824][T12810] device dummy0 left promiscuous mode [ 1942.109552][ C1] syz_tun: tun_net_xmit 42 [ 1943.147527][ C1] syz_tun: tun_net_xmit 42 [ 1943.812894][T12816] netlink: 'syz.3.13865': attribute type 46 has an invalid length. [ 1943.821192][T12816] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1943.830530][T12821] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13869'. [ 1943.840014][T12829] netlink: 'syz.1.13872': attribute type 10 has an invalid length. [ 1943.859109][T12829] device gre0 entered promiscuous mode [ 1944.014126][T12829] team0: Device gre0 is of different type [ 1944.185705][ C1] syz_tun: tun_net_xmit 42 [ 1944.272911][T12836] syz_tun: tun_net_xmit 42 [ 1944.341317][T12844] device syzkaller0 entered promiscuous mode [ 1944.719652][T12860] FAULT_INJECTION: forcing a failure. [ 1944.719652][T12860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1944.775932][T12860] CPU: 0 PID: 12860 Comm: syz.4.13883 Not tainted syzkaller #0 [ 1944.783545][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1944.793623][T12860] Call Trace: [ 1944.796921][T12860] [ 1944.799871][T12860] dump_stack_lvl+0x188/0x24e [ 1944.804575][T12860] ? show_regs_print_info+0x12/0x12 [ 1944.809803][T12860] ? load_image+0x410/0x410 [ 1944.814338][T12860] ? __lock_acquire+0x7ea0/0x7ea0 [ 1944.819397][T12860] should_fail_ex+0x390/0x4c0 [ 1944.824103][T12860] _copy_from_user+0x2c/0x170 [ 1944.828810][T12860] iovec_from_user+0x143/0x360 [ 1944.833606][T12860] __import_iovec+0x6c/0x510 [ 1944.838234][T12860] import_iovec+0x6f/0xa0 [ 1944.842587][T12860] ___sys_sendmsg+0x252/0x360 [ 1944.847302][T12860] ? __sys_sendmsg+0x2a0/0x2a0 [ 1944.852084][T12860] ? __lock_acquire+0x7ea0/0x7ea0 [ 1944.857479][T12860] __se_sys_sendmsg+0x1c3/0x2b0 [ 1944.862347][T12860] ? __x64_sys_sendmsg+0x80/0x80 [ 1944.867340][T12860] ? lockdep_hardirqs_on+0x94/0x140 [ 1944.872551][T12860] do_syscall_64+0x4c/0xa0 [ 1944.876989][T12860] ? clear_bhb_loop+0x60/0xb0 [ 1944.881673][T12860] ? clear_bhb_loop+0x60/0xb0 [ 1944.886362][T12860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1944.892270][T12860] RIP: 0033:0x7fd5a079e199 [ 1944.896694][T12860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1944.916322][T12860] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1944.924749][T12860] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1944.932757][T12860] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1944.940747][T12860] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1944.948716][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1944.956684][T12860] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1944.964686][T12860] [ 1945.235852][ C1] syz_tun: tun_net_xmit 42 [ 1945.315457][ C1] syz_tun: tun_net_xmit 42 [ 1946.276034][ C1] syz_tun: tun_net_xmit 42 [ 1946.346399][ C1] syz_tun: tun_net_xmit 42 [ 1947.396753][ C1] syz_tun: tun_net_xmit 42 [ 1948.427128][ C1] syz_tun: tun_net_xmit 42 [ 1949.475468][ C1] syz_tun: tun_net_xmit 42 [ 1949.982707][T12864] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1950.003823][T12864] device syzkaller0 entered promiscuous mode [ 1950.015715][T12897] netlink: 'syz.3.13893': attribute type 9 has an invalid length. [ 1950.023573][T12897] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.13893'. [ 1951.639778][T12922] syz_tun: tun_net_xmit 42 [ 1952.671454][ C1] syz_tun: tun_net_xmit 42 [ 1953.392671][T12900] delete_channel: no stack [ 1953.705448][ C1] syz_tun: tun_net_xmit 42 [ 1953.722919][T12943] netlink: 'syz.2.13911': attribute type 3 has an invalid length. [ 1953.749430][T12943] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13911'. [ 1953.839061][T12949] FAULT_INJECTION: forcing a failure. [ 1953.839061][T12949] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.865568][T12949] CPU: 0 PID: 12949 Comm: syz.4.13913 Not tainted syzkaller #0 [ 1953.873209][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1953.883317][T12949] Call Trace: [ 1953.886711][T12949] [ 1953.889679][T12949] dump_stack_lvl+0x188/0x24e [ 1953.894409][T12949] ? show_regs_print_info+0x12/0x12 [ 1953.899652][T12949] ? load_image+0x410/0x410 [ 1953.904207][T12949] ? __might_sleep+0xd0/0xd0 [ 1953.908834][T12949] ? __lock_acquire+0x7ea0/0x7ea0 [ 1953.913902][T12949] should_fail_ex+0x390/0x4c0 [ 1953.918635][T12949] should_failslab+0x5/0x20 [ 1953.923167][T12949] slab_pre_alloc_hook+0x59/0x300 [ 1953.928236][T12949] kmem_cache_alloc_node+0x5a/0x310 [ 1953.933452][T12949] ? __alloc_skb+0xf9/0x7d0 [ 1953.937972][T12949] __alloc_skb+0xf9/0x7d0 [ 1953.942322][T12949] alloc_skb_with_frags+0xa7/0x710 [ 1953.947534][T12949] ? __might_fault+0xa6/0x120 [ 1953.952227][T12949] ? __lock_acquire+0x7ea0/0x7ea0 [ 1953.957274][T12949] ? perf_tp_event+0xa8e/0xc10 [ 1953.962088][T12949] sock_alloc_send_pskb+0x87f/0x9a0 [ 1953.967339][T12949] ? sock_kzfree_s+0x50/0x50 [ 1953.972052][T12949] ? dev_get_by_index+0x1e/0x2d0 [ 1953.977002][T12949] ? dev_get_by_index+0x1e/0x2d0 [ 1953.981956][T12949] packet_sendmsg+0x31b9/0x4c30 [ 1953.986849][T12949] ? __might_sleep+0xd0/0xd0 [ 1953.991445][T12949] ? perf_trace_lock+0x301/0x390 [ 1953.996394][T12949] ? trace_event_raw_event_lock+0x230/0x230 [ 1954.002314][T12949] ? aa_sk_perm+0x81f/0x950 [ 1954.006837][T12949] ? aa_af_perm+0x340/0x340 [ 1954.011367][T12949] ? packet_getsockopt+0x980/0x980 [ 1954.016503][T12949] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1954.022058][T12949] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1954.027344][T12949] ? security_socket_sendmsg+0x7c/0xa0 [ 1954.032984][T12949] ? packet_getsockopt+0x980/0x980 [ 1954.038121][T12949] ____sys_sendmsg+0x5ed/0x9a0 [ 1954.042900][T12949] ? __sys_sendmsg_sock+0x30/0x30 [ 1954.047927][T12949] ? __import_iovec+0x306/0x510 [ 1954.052799][T12949] ? import_iovec+0x6f/0xa0 [ 1954.057315][T12949] ___sys_sendmsg+0x2a2/0x360 [ 1954.062008][T12949] ? __sys_sendmsg+0x2a0/0x2a0 [ 1954.066805][T12949] ? __lock_acquire+0x7ea0/0x7ea0 [ 1954.071868][T12949] __se_sys_sendmsg+0x1c3/0x2b0 [ 1954.076735][T12949] ? __x64_sys_sendmsg+0x80/0x80 [ 1954.081703][T12949] ? lockdep_hardirqs_on+0x94/0x140 [ 1954.086931][T12949] do_syscall_64+0x4c/0xa0 [ 1954.091352][T12949] ? clear_bhb_loop+0x60/0xb0 [ 1954.096035][T12949] ? clear_bhb_loop+0x60/0xb0 [ 1954.100716][T12949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1954.106615][T12949] RIP: 0033:0x7fd5a079e199 [ 1954.111036][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.130672][T12949] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1954.139132][T12949] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1954.147114][T12949] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1954.155097][T12949] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.163071][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.171044][T12949] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1954.179045][T12949] [ 1954.290858][T12960] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13918'. [ 1954.335977][T12955] netlink: 'syz.2.13916': attribute type 10 has an invalid length. [ 1954.476039][T12955] device netdevsim0 entered promiscuous mode [ 1954.534837][T12955] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1954.663166][T12961] netlink: 'syz.2.13916': attribute type 10 has an invalid length. [ 1954.718513][T12961] netlink: 'syz.2.13916': attribute type 4 has an invalid length. [ 1954.771787][ C1] syz_tun: tun_net_xmit 42 [ 1954.783460][T12961] netlink: 116 bytes leftover after parsing attributes in process `syz.2.13916'. [ 1955.042206][T12961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1955.155706][T12962] netlink: 'syz.0.13917': attribute type 10 has an invalid length. [ 1955.176104][T12962] bridge0: port 3(bond0) entered disabled state [ 1955.183311][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.190800][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.231304][T12962] bridge0: port 3(bond0) entered blocking state [ 1955.237839][T12962] bridge0: port 3(bond0) entered forwarding state [ 1955.244585][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.251752][T12962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1955.259179][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.266364][T12962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.343639][T12962] bridge0: port 3(bond0) entered disabled state [ 1955.350284][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.357563][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.419605][T12972] netlink: 'syz.3.13921': attribute type 10 has an invalid length. [ 1955.445468][T12972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13921'. [ 1955.463386][T12972] bridge0: port 4(veth0_vlan) entered blocking state [ 1955.488299][T12972] bridge0: port 4(veth0_vlan) entered disabled state [ 1955.515310][T12972] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1955.614321][T12977] device syzkaller0 entered promiscuous mode [ 1955.785515][ C1] syz_tun: tun_net_xmit 42 [ 1956.835612][ C1] syz_tun: tun_net_xmit 42 [ 1958.288086][T12991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13924'. [ 1958.513928][T13025] netlink: 'syz.0.13935': attribute type 10 has an invalid length. [ 1958.620772][T13025] netlink: 'syz.0.13935': attribute type 10 has an invalid length. [ 1958.655678][T13025] netlink: 'syz.0.13935': attribute type 4 has an invalid length. [ 1958.672868][T13025] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13935'. [ 1958.689316][T13025] wlan1: mtu greater than device maximum [ 1958.695820][T13025] team0: Device wlan1 failed to change mtu [ 1958.720270][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13943'. [ 1959.259511][T13067] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1959.314652][T13070] syz_tun: tun_net_xmit 42 [ 1959.316866][T13067] device syzkaller0 entered promiscuous mode [ 1959.403674][T13071] netlink: 'syz.3.13953': attribute type 10 has an invalid length. [ 1959.733170][T13071] device team_slave_0 left promiscuous mode [ 1959.899899][T13071] team0 (unregistering): Port device team_slave_0 removed [ 1959.911546][T13071] device team_slave_1 left promiscuous mode [ 1959.939633][T13071] team0 (unregistering): Port device team_slave_1 removed [ 1960.015191][T13077] netlink: 'syz.2.13954': attribute type 10 has an invalid length. [ 1960.032967][T13077] bridge0: port 3(bond0) entered blocking state [ 1960.039384][T13077] bridge0: port 3(bond0) entered listening state [ 1960.046036][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.053192][T13077] bridge0: port 2(bridge_slave_1) entered listening state [ 1960.060597][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.067807][T13077] bridge0: port 1(bridge_slave_0) entered listening state [ 1960.086858][T13077] bridge0: port 3(bond0) entered disabled state [ 1960.093307][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.100571][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.139363][T13082] netlink: 'syz.4.13957': attribute type 10 has an invalid length. [ 1960.156012][T13082] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13957'. [ 1960.345619][ C0] syz_tun: tun_net_xmit 42 [ 1961.385673][ C0] syz_tun: tun_net_xmit 42 [ 1962.425995][ C0] syz_tun: tun_net_xmit 42 [ 1962.663625][T13092] netlink: 'syz.3.13961': attribute type 10 has an invalid length. [ 1962.688424][T13092] device netdevsim0 entered promiscuous mode [ 1962.694909][T13092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1962.703965][T13097] netlink: 'syz.3.13961': attribute type 10 has an invalid length. [ 1962.712615][T13097] netlink: 'syz.3.13961': attribute type 4 has an invalid length. [ 1962.721067][T13097] netlink: 116 bytes leftover after parsing attributes in process `syz.3.13961'. [ 1962.869766][T13114] netlink: 'syz.2.13968': attribute type 21 has an invalid length. [ 1963.220333][T13129] netlink: 'syz.1.13973': attribute type 39 has an invalid length. [ 1963.280851][T13132] syz_tun: tun_net_xmit 62 [ 1963.465501][ C1] syz_tun: tun_net_xmit 42 [ 1964.226387][T13148] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1964.236916][T13148] dvmrp1: linktype set to 769 [ 1964.346629][T13152] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1964.360088][T13158] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.13983'. [ 1964.401242][T13152] device syzkaller0 entered promiscuous mode [ 1964.437882][T13158] netlink: 'syz.2.13983': attribute type 21 has an invalid length. [ 1964.483266][T13163] FAULT_INJECTION: forcing a failure. [ 1964.483266][T13163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.505487][ C1] syz_tun: tun_net_xmit 42 [ 1964.508685][T13163] CPU: 0 PID: 13163 Comm: syz.0.13985 Not tainted syzkaller #0 [ 1964.517755][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1964.527822][T13163] Call Trace: [ 1964.531112][T13163] [ 1964.534041][T13163] dump_stack_lvl+0x188/0x24e [ 1964.538737][T13163] ? show_regs_print_info+0x12/0x12 [ 1964.543934][T13163] ? load_image+0x410/0x410 [ 1964.548444][T13163] ? __lock_acquire+0x7ea0/0x7ea0 [ 1964.553471][T13163] ? tomoyo_path_number_perm+0x205/0x650 [ 1964.559106][T13163] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1964.564825][T13163] should_fail_ex+0x390/0x4c0 [ 1964.569509][T13163] _copy_from_user+0x2c/0x170 [ 1964.574195][T13163] wext_handle_ioctl+0xc4/0x1d0 [ 1964.579045][T13163] ? call_commit_handler+0xf0/0xf0 [ 1964.584159][T13163] sock_ioctl+0x143/0x700 [ 1964.588491][T13163] ? sock_poll+0x420/0x420 [ 1964.592907][T13163] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1964.597845][T13163] ? security_file_ioctl+0x7c/0xa0 [ 1964.602966][T13163] ? sock_poll+0x420/0x420 [ 1964.607377][T13163] __se_sys_ioctl+0xfa/0x170 [ 1964.611974][T13163] do_syscall_64+0x4c/0xa0 [ 1964.616388][T13163] ? clear_bhb_loop+0x60/0xb0 [ 1964.621068][T13163] ? clear_bhb_loop+0x60/0xb0 [ 1964.625744][T13163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1964.631629][T13163] RIP: 0033:0x7f02faf9e199 [ 1964.636043][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1964.655646][T13163] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1964.664054][T13163] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1964.672218][T13163] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 1964.680268][T13163] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.688233][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.696195][T13163] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1964.704203][T13163] [ 1968.323127][T13193] netlink: 'syz.0.13997': attribute type 16 has an invalid length. [ 1968.331854][T13193] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13997'. [ 1968.382054][T13210] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1968.399491][T13210] syzkaller0: linktype set to 804 [ 1968.415253][T13212] netlink: 'syz.2.14003': attribute type 1 has an invalid length. [ 1968.436045][T13212] netlink: 'syz.2.14003': attribute type 4 has an invalid length. [ 1968.444607][T13212] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.14003'. [ 1968.502292][T13224] netlink: 'syz.4.14006': attribute type 10 has an invalid length. [ 1968.577728][T13224] team0: Device wg1 is of different type [ 1968.980749][T13242] device syzkaller0 entered promiscuous mode [ 1969.093561][T13251] netlink: 'syz.2.14015': attribute type 10 has an invalid length. [ 1969.316026][T13251] team0 (unregistering): Port device team_slave_0 removed [ 1969.458503][T13251] team0 (unregistering): Port device team_slave_1 removed [ 1972.928726][T13296] netlink: 'syz.2.14028': attribute type 39 has an invalid length. [ 1973.102324][T13317] netlink: 'syz.4.14034': attribute type 3 has an invalid length. [ 1973.125451][T13317] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14034'. [ 1973.627996][T13340] FAULT_INJECTION: forcing a failure. [ 1973.627996][T13340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1973.663839][T13340] CPU: 0 PID: 13340 Comm: syz.4.14046 Not tainted syzkaller #0 [ 1973.671465][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1973.681645][T13340] Call Trace: [ 1973.684955][T13340] [ 1973.687928][T13340] dump_stack_lvl+0x188/0x24e [ 1973.692667][T13340] ? show_regs_print_info+0x12/0x12 [ 1973.697918][T13340] ? load_image+0x410/0x410 [ 1973.702476][T13340] ? __might_fault+0xa6/0x120 [ 1973.707215][T13340] should_fail_ex+0x390/0x4c0 [ 1973.711947][T13340] copyin+0x1b/0x120 [ 1973.715901][T13340] _copy_from_iter+0x447/0x1130 [ 1973.720802][T13340] ? copyout_mc+0x110/0x110 [ 1973.725350][T13340] ? dev_get_by_index+0x1e/0x2d0 [ 1973.730328][T13340] ? dev_get_by_index+0x1e/0x2d0 [ 1973.735312][T13340] packet_sendmsg+0x2fcd/0x4c30 [ 1973.740413][T13340] ? __might_sleep+0xd0/0xd0 [ 1973.745201][T13340] ? perf_trace_lock+0x301/0x390 [ 1973.750190][T13340] ? trace_event_raw_event_lock+0x230/0x230 [ 1973.756130][T13340] ? aa_sk_perm+0x81f/0x950 [ 1973.760681][T13340] ? aa_af_perm+0x340/0x340 [ 1973.765224][T13340] ? packet_getsockopt+0x980/0x980 [ 1973.770385][T13340] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1973.775972][T13340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1973.781287][T13340] ? security_socket_sendmsg+0x7c/0xa0 [ 1973.786774][T13340] ? packet_getsockopt+0x980/0x980 [ 1973.791922][T13340] ____sys_sendmsg+0x5ed/0x9a0 [ 1973.796747][T13340] ? __sys_sendmsg_sock+0x30/0x30 [ 1973.801801][T13340] ? __import_iovec+0x306/0x510 [ 1973.806701][T13340] ? import_iovec+0x6f/0xa0 [ 1973.811246][T13340] ___sys_sendmsg+0x2a2/0x360 [ 1973.815969][T13340] ? __sys_sendmsg+0x2a0/0x2a0 [ 1973.820801][T13340] ? __lock_acquire+0x7ea0/0x7ea0 [ 1973.825911][T13340] __se_sys_sendmsg+0x1c3/0x2b0 [ 1973.830803][T13340] ? __x64_sys_sendmsg+0x80/0x80 [ 1973.835842][T13340] ? lockdep_hardirqs_on+0x94/0x140 [ 1973.841078][T13340] do_syscall_64+0x4c/0xa0 [ 1973.845527][T13340] ? clear_bhb_loop+0x60/0xb0 [ 1973.850275][T13340] ? clear_bhb_loop+0x60/0xb0 [ 1973.855014][T13340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1973.860909][T13340] RIP: 0033:0x7fd5a079e199 [ 1973.865322][T13340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.872819][T13350] FAULT_INJECTION: forcing a failure. [ 1973.872819][T13350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1973.884933][T13340] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.884961][T13340] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1973.884975][T13340] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000005 [ 1973.884988][T13340] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1973.885000][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.885012][T13340] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1973.885054][T13340] [ 1973.965790][T13350] CPU: 0 PID: 13350 Comm: syz.3.14050 Not tainted syzkaller #0 [ 1973.973400][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1973.983496][T13350] Call Trace: [ 1973.986802][T13350] [ 1973.989756][T13350] dump_stack_lvl+0x188/0x24e [ 1973.994555][T13350] ? show_regs_print_info+0x12/0x12 [ 1973.999863][T13350] ? load_image+0x410/0x410 [ 1974.004397][T13350] ? __might_fault+0xa6/0x120 [ 1974.009109][T13350] should_fail_ex+0x390/0x4c0 [ 1974.013820][T13350] copyin+0x1b/0x120 [ 1974.017741][T13350] _copy_from_iter+0x447/0x1130 [ 1974.022619][T13350] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1974.028115][T13350] ? copyout_mc+0x110/0x110 [ 1974.032642][T13350] ? __virt_addr_valid+0x188/0x540 [ 1974.037777][T13350] ? __virt_addr_valid+0x188/0x540 [ 1974.042909][T13350] ? __virt_addr_valid+0x467/0x540 [ 1974.048058][T13350] ? __check_object_size+0x4f6/0xa70 [ 1974.053372][T13350] skb_copy_datagram_from_iter+0xee/0x6b0 [ 1974.059117][T13350] ? dev_get_by_index+0x1e/0x2d0 [ 1974.064177][T13350] ? skb_put+0x10e/0x200 [ 1974.068443][T13350] packet_sendmsg+0x35e7/0x4c30 [ 1974.073375][T13350] ? trace_event_raw_event_lock+0x230/0x230 [ 1974.079297][T13350] ? aa_sk_perm+0x81f/0x950 [ 1974.083837][T13350] ? aa_af_perm+0x340/0x340 [ 1974.088363][T13350] ? packet_getsockopt+0x980/0x980 [ 1974.093511][T13350] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1974.099082][T13350] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1974.104383][T13350] ? security_socket_sendmsg+0x7c/0xa0 [ 1974.109861][T13350] ? packet_getsockopt+0x980/0x980 [ 1974.114995][T13350] ____sys_sendmsg+0x5ed/0x9a0 [ 1974.119809][T13350] ? __sys_sendmsg_sock+0x30/0x30 [ 1974.124846][T13350] ? __import_iovec+0x306/0x510 [ 1974.129759][T13350] ? import_iovec+0x6f/0xa0 [ 1974.134305][T13350] ___sys_sendmsg+0x2a2/0x360 [ 1974.139056][T13350] ? __sys_sendmsg+0x2a0/0x2a0 [ 1974.143895][T13350] ? __lock_acquire+0x7ea0/0x7ea0 [ 1974.148992][T13350] __se_sys_sendmsg+0x1c3/0x2b0 [ 1974.154306][T13350] ? __x64_sys_sendmsg+0x80/0x80 [ 1974.159381][T13350] ? lockdep_hardirqs_on+0x94/0x140 [ 1974.164615][T13350] do_syscall_64+0x4c/0xa0 [ 1974.169050][T13350] ? clear_bhb_loop+0x60/0xb0 [ 1974.173744][T13350] ? clear_bhb_loop+0x60/0xb0 [ 1974.178446][T13350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1974.184353][T13350] RIP: 0033:0x7f52ea19e199 [ 1974.188789][T13350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1974.208412][T13350] RSP: 002b:00007f52eafab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1974.216851][T13350] RAX: ffffffffffffffda RBX: 00007f52ea425fa0 RCX: 00007f52ea19e199 [ 1974.224837][T13350] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000004 [ 1974.232837][T13350] RBP: 00007f52eafab090 R08: 0000000000000000 R09: 0000000000000000 [ 1974.240830][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1974.248831][T13350] R13: 00007f52ea426038 R14: 00007f52ea425fa0 R15: 00007ffd238d6f98 [ 1974.256853][T13350] [ 1974.333196][T13351] netlink: 'syz.2.14051': attribute type 10 has an invalid length. [ 1974.979416][T13387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14065'. [ 1975.518454][T13406] netlink: 'syz.0.14072': attribute type 49 has an invalid length. [ 1975.534618][T13406] netlink: 'syz.0.14072': attribute type 49 has an invalid length. [ 1975.896473][T13411] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1976.109883][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.114961][T13411] device syzkaller0 entered promiscuous mode [ 1976.116584][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.244216][T13420] netlink: 'syz.4.14077': attribute type 10 has an invalid length. [ 1976.482855][T13432] netlink: 'syz.3.14081': attribute type 21 has an invalid length. [ 1978.190458][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 1978.953092][T13461] netlink: 'syz.0.14090': attribute type 10 has an invalid length. [ 1978.970666][T13461] bridge0: port 3(bond0) entered blocking state [ 1978.977375][T13461] bridge0: port 3(bond0) entered forwarding state [ 1978.985861][T13461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.993110][T13461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.000587][T13461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.007798][T13461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.024655][T13461] team0: Port device bridge0 added [ 1979.051665][T13466] netlink: 'syz.3.14093': attribute type 21 has an invalid length. [ 1979.078321][T30069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1979.261151][T13476] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14099'. [ 1979.568444][T13489] netlink: 'syz.4.14102': attribute type 39 has an invalid length. [ 1979.619122][T13493] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.14103'. [ 1979.639472][T13493] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.14103'. [ 1979.658326][T13493] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14103'. [ 1979.739754][T13499] netlink: 'syz.2.14106': attribute type 10 has an invalid length. [ 1979.982244][T13504] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1980.085958][T13504] device syzkaller0 entered promiscuous mode [ 1980.430924][T13527] netlink: 'syz.1.14116': attribute type 49 has an invalid length. [ 1982.305649][T13520] netlink: 'syz.0.14112': attribute type 10 has an invalid length. [ 1982.313921][T13527] netlink: 'syz.1.14116': attribute type 49 has an invalid length. [ 1982.325545][T13535] netlink: 'syz.2.14119': attribute type 10 has an invalid length. [ 1982.523342][ T4291] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1982.678625][T13546] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14125'. [ 1982.987479][T13560] netlink: 'syz.3.14130': attribute type 49 has an invalid length. [ 1983.006542][T13560] netlink: 'syz.3.14130': attribute type 49 has an invalid length. [ 1983.041685][T13563] FAULT_INJECTION: forcing a failure. [ 1983.041685][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.077412][T13563] CPU: 0 PID: 13563 Comm: syz.0.14131 Not tainted syzkaller #0 [ 1983.085028][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1983.095104][T13563] Call Trace: [ 1983.098395][T13563] [ 1983.101338][T13563] dump_stack_lvl+0x188/0x24e [ 1983.106044][T13563] ? show_regs_print_info+0x12/0x12 [ 1983.111446][T13563] ? load_image+0x410/0x410 [ 1983.115976][T13563] ? __might_sleep+0xd0/0xd0 [ 1983.120578][T13563] ? __lock_acquire+0x7ea0/0x7ea0 [ 1983.125629][T13563] should_fail_ex+0x390/0x4c0 [ 1983.130418][T13563] should_failslab+0x5/0x20 [ 1983.135021][T13563] slab_pre_alloc_hook+0x59/0x300 [ 1983.140075][T13563] kmem_cache_alloc_node+0x5a/0x310 [ 1983.145295][T13563] ? __alloc_skb+0xf9/0x7d0 [ 1983.149851][T13563] __alloc_skb+0xf9/0x7d0 [ 1983.154209][T13563] alloc_skb_with_frags+0xa7/0x710 [ 1983.159360][T13563] ? __might_fault+0xa6/0x120 [ 1983.164030][T13563] ? __lock_acquire+0x7ea0/0x7ea0 [ 1983.169045][T13563] ? mark_lock+0x94/0x320 [ 1983.173367][T13563] sock_alloc_send_pskb+0x87f/0x9a0 [ 1983.178572][T13563] ? sock_kzfree_s+0x50/0x50 [ 1983.183171][T13563] ? __lock_acquire+0x142d/0x7ea0 [ 1983.188193][T13563] ? __kmem_cache_free+0xb6/0x200 [ 1983.193218][T13563] ? dev_get_by_index+0x1e/0x2d0 [ 1983.198154][T13563] ? dev_get_by_index+0x1e/0x2d0 [ 1983.203114][T13563] packet_sendmsg+0x31b9/0x4c30 [ 1983.207977][T13563] ? __might_sleep+0xd0/0xd0 [ 1983.212575][T13563] ? verify_lock_unused+0x140/0x140 [ 1983.217783][T13563] ? aa_sk_perm+0x81f/0x950 [ 1983.222294][T13563] ? aa_af_perm+0x340/0x340 [ 1983.226888][T13563] ? packet_getsockopt+0x980/0x980 [ 1983.232004][T13563] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1983.237551][T13563] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1983.242838][T13563] ? security_socket_sendmsg+0x7c/0xa0 [ 1983.248296][T13563] ? packet_getsockopt+0x980/0x980 [ 1983.253405][T13563] ____sys_sendmsg+0x5ed/0x9a0 [ 1983.258195][T13563] ? __sys_sendmsg_sock+0x30/0x30 [ 1983.263216][T13563] ? __import_iovec+0x306/0x510 [ 1983.268071][T13563] ? import_iovec+0x6f/0xa0 [ 1983.272575][T13563] ___sys_sendmsg+0x2a2/0x360 [ 1983.277254][T13563] ? __sys_sendmsg+0x2a0/0x2a0 [ 1983.282027][T13563] ? __lock_acquire+0x7ea0/0x7ea0 [ 1983.287068][T13563] __se_sys_sendmsg+0x1c3/0x2b0 [ 1983.291921][T13563] ? __x64_sys_sendmsg+0x80/0x80 [ 1983.296886][T13563] ? lockdep_hardirqs_on+0x94/0x140 [ 1983.302093][T13563] do_syscall_64+0x4c/0xa0 [ 1983.306506][T13563] ? clear_bhb_loop+0x60/0xb0 [ 1983.311177][T13563] ? clear_bhb_loop+0x60/0xb0 [ 1983.315856][T13563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1983.321778][T13563] RIP: 0033:0x7f02faf9e199 [ 1983.326189][T13563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.345791][T13563] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.354245][T13563] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1983.362209][T13563] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1983.370182][T13563] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.378150][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.386115][T13563] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1983.394092][T13563] [ 1983.581850][T13578] netlink: 'syz.1.14137': attribute type 2 has an invalid length. [ 1983.604886][T13578] netlink: 'syz.1.14137': attribute type 1 has an invalid length. [ 1983.641971][T13578] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.14137'. [ 1983.735612][T13591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14138'. [ 1986.598045][T13594] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1986.688763][T13594] device syzkaller0 entered promiscuous mode [ 1986.892187][T13599] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.14144'. [ 1988.862044][T13598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14144'. [ 1989.077069][T13617] validate_nla: 1 callbacks suppressed [ 1989.077107][T13617] netlink: 'syz.2.14148': attribute type 49 has an invalid length. [ 1989.109466][T13620] bridge0: port 3(bond0) entered disabled state [ 1989.120661][T13620] device bridge_slave_1 left promiscuous mode [ 1989.127429][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.138570][T13620] device bridge_slave_0 left promiscuous mode [ 1989.144934][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.248439][T13617] netlink: 'syz.2.14148': attribute type 49 has an invalid length. [ 1989.498220][T13630] netlink: 'syz.3.14154': attribute type 46 has an invalid length. [ 1989.535606][T13630] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14154'. [ 1989.922228][T13644] netlink: 'syz.0.14160': attribute type 9 has an invalid length. [ 1989.940581][T13644] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.14160'. [ 1990.100527][T13649] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.14162'. [ 1990.145474][T13649] netlink: zone id is out of range [ 1990.179748][T13649] netlink: zone id is out of range [ 1990.214391][T13649] netlink: zone id is out of range [ 1990.235531][T13649] netlink: zone id is out of range [ 1990.262469][T13649] netlink: zone id is out of range [ 1990.305508][T13649] netlink: zone id is out of range [ 1990.342386][T13649] netlink: zone id is out of range [ 1990.355601][T13649] netlink: zone id is out of range [ 1990.360757][T13649] netlink: zone id is out of range [ 1990.395461][T13649] netlink: zone id is out of range [ 1990.733211][T13658] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1990.943478][T13658] device syzkaller0 entered promiscuous mode [ 1994.294247][T13686] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14169'. [ 1994.537371][T13694] netlink: 'syz.3.14172': attribute type 16 has an invalid length. [ 1994.546271][T13694] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14172'. [ 1994.662183][T13699] FAULT_INJECTION: forcing a failure. [ 1994.662183][T13699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.695496][T13699] CPU: 0 PID: 13699 Comm: syz.4.14173 Not tainted syzkaller #0 [ 1994.703097][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1994.713161][T13699] Call Trace: [ 1994.716446][T13699] [ 1994.719380][T13699] dump_stack_lvl+0x188/0x24e [ 1994.724076][T13699] ? show_regs_print_info+0x12/0x12 [ 1994.729378][T13699] ? load_image+0x410/0x410 [ 1994.733902][T13699] ? __might_fault+0xa6/0x120 [ 1994.738618][T13699] should_fail_ex+0x390/0x4c0 [ 1994.743328][T13699] copyin+0x1b/0x120 [ 1994.747235][T13699] _copy_from_iter+0x447/0x1130 [ 1994.752092][T13699] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1994.757568][T13699] ? copyout_mc+0x110/0x110 [ 1994.762072][T13699] ? __virt_addr_valid+0x188/0x540 [ 1994.767191][T13699] ? __virt_addr_valid+0x188/0x540 [ 1994.772321][T13699] ? __virt_addr_valid+0x467/0x540 [ 1994.777446][T13699] ? __check_object_size+0x4f6/0xa70 [ 1994.782741][T13699] skb_copy_datagram_from_iter+0xee/0x6b0 [ 1994.788468][T13699] ? dev_get_by_index+0x1e/0x2d0 [ 1994.793436][T13699] ? skb_put+0x10e/0x200 [ 1994.797688][T13699] packet_sendmsg+0x35e7/0x4c30 [ 1994.802603][T13699] ? trace_event_raw_event_lock+0x230/0x230 [ 1994.808520][T13699] ? aa_sk_perm+0x81f/0x950 [ 1994.813037][T13699] ? aa_af_perm+0x340/0x340 [ 1994.817541][T13699] ? packet_getsockopt+0x980/0x980 [ 1994.822668][T13699] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1994.828224][T13699] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1994.833506][T13699] ? security_socket_sendmsg+0x7c/0xa0 [ 1994.838972][T13699] ? packet_getsockopt+0x980/0x980 [ 1994.844089][T13699] ____sys_sendmsg+0x5ed/0x9a0 [ 1994.848890][T13699] ? __sys_sendmsg_sock+0x30/0x30 [ 1994.853932][T13699] ? __import_iovec+0x306/0x510 [ 1994.858813][T13699] ? import_iovec+0x6f/0xa0 [ 1994.863458][T13699] ___sys_sendmsg+0x2a2/0x360 [ 1994.868349][T13699] ? __sys_sendmsg+0x2a0/0x2a0 [ 1994.873153][T13699] ? __lock_acquire+0x7ea0/0x7ea0 [ 1994.878224][T13699] __se_sys_sendmsg+0x1c3/0x2b0 [ 1994.883092][T13699] ? __x64_sys_sendmsg+0x80/0x80 [ 1994.888056][T13699] ? lockdep_hardirqs_on+0x94/0x140 [ 1994.893266][T13699] do_syscall_64+0x4c/0xa0 [ 1994.897688][T13699] ? clear_bhb_loop+0x60/0xb0 [ 1994.902368][T13699] ? clear_bhb_loop+0x60/0xb0 [ 1994.907049][T13699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1994.912942][T13699] RIP: 0033:0x7fd5a079e199 [ 1994.917361][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.937081][T13699] RSP: 002b:00007fd5a158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.945520][T13699] RAX: ffffffffffffffda RBX: 00007fd5a0a25fa0 RCX: 00007fd5a079e199 [ 1994.953498][T13699] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000003 [ 1994.961471][T13699] RBP: 00007fd5a158c090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.969451][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.977625][T13699] R13: 00007fd5a0a26038 R14: 00007fd5a0a25fa0 R15: 00007ffd1d5ca248 [ 1994.985640][T13699] [ 1995.224001][T13709] netlink: 'syz.0.14178': attribute type 3 has an invalid length. [ 1995.265567][T13709] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14178'. [ 1996.516604][T13727] device syzkaller0 entered promiscuous mode [ 1996.671713][T13736] FAULT_INJECTION: forcing a failure. [ 1996.671713][T13736] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.710477][T13736] CPU: 1 PID: 13736 Comm: syz.0.14187 Not tainted syzkaller #0 [ 1996.718115][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1996.728188][T13736] Call Trace: [ 1996.731473][T13736] [ 1996.734411][T13736] dump_stack_lvl+0x188/0x24e [ 1996.739116][T13736] ? show_regs_print_info+0x12/0x12 [ 1996.744328][T13736] ? load_image+0x410/0x410 [ 1996.748867][T13736] ? __might_sleep+0xd0/0xd0 [ 1996.753474][T13736] ? __lock_acquire+0x7ea0/0x7ea0 [ 1996.758518][T13736] should_fail_ex+0x390/0x4c0 [ 1996.763226][T13736] should_failslab+0x5/0x20 [ 1996.767752][T13736] slab_pre_alloc_hook+0x59/0x300 [ 1996.772805][T13736] kmem_cache_alloc_node+0x5a/0x310 [ 1996.778011][T13736] ? __alloc_skb+0xf9/0x7d0 [ 1996.782532][T13736] __alloc_skb+0xf9/0x7d0 [ 1996.786899][T13736] alloc_skb_with_frags+0xa7/0x710 [ 1996.792026][T13736] ? __might_fault+0xa6/0x120 [ 1996.796724][T13736] ? __lock_acquire+0x7ea0/0x7ea0 [ 1996.801769][T13736] ? perf_tp_event+0xa8e/0xc10 [ 1996.806548][T13736] sock_alloc_send_pskb+0x87f/0x9a0 [ 1996.811786][T13736] ? sock_kzfree_s+0x50/0x50 [ 1996.816402][T13736] ? dev_get_by_index+0x1e/0x2d0 [ 1996.821357][T13736] ? dev_get_by_index+0x1e/0x2d0 [ 1996.826335][T13736] packet_sendmsg+0x31b9/0x4c30 [ 1996.831252][T13736] ? __might_sleep+0xd0/0xd0 [ 1996.835961][T13736] ? perf_trace_lock+0x301/0x390 [ 1996.840947][T13736] ? trace_event_raw_event_lock+0x230/0x230 [ 1996.846871][T13736] ? aa_sk_perm+0x81f/0x950 [ 1996.851402][T13736] ? aa_af_perm+0x340/0x340 [ 1996.855920][T13736] ? packet_getsockopt+0x980/0x980 [ 1996.861112][T13736] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1996.866673][T13736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1996.871970][T13736] ? security_socket_sendmsg+0x7c/0xa0 [ 1996.877436][T13736] ? packet_getsockopt+0x980/0x980 [ 1996.882561][T13736] ____sys_sendmsg+0x5ed/0x9a0 [ 1996.887347][T13736] ? __sys_sendmsg_sock+0x30/0x30 [ 1996.892373][T13736] ? __import_iovec+0x306/0x510 [ 1996.897245][T13736] ? import_iovec+0x6f/0xa0 [ 1996.901790][T13736] ___sys_sendmsg+0x2a2/0x360 [ 1996.906482][T13736] ? __sys_sendmsg+0x2a0/0x2a0 [ 1996.911279][T13736] ? __lock_acquire+0x7ea0/0x7ea0 [ 1996.916345][T13736] __se_sys_sendmsg+0x1c3/0x2b0 [ 1996.921205][T13736] ? __x64_sys_sendmsg+0x80/0x80 [ 1996.926168][T13736] ? lockdep_hardirqs_on+0x94/0x140 [ 1996.931379][T13736] do_syscall_64+0x4c/0xa0 [ 1996.935799][T13736] ? clear_bhb_loop+0x60/0xb0 [ 1996.940478][T13736] ? clear_bhb_loop+0x60/0xb0 [ 1996.945163][T13736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1996.951068][T13736] RIP: 0033:0x7f02faf9e199 [ 1996.955493][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1996.975317][T13736] RSP: 002b:00007f02fbf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1996.983770][T13736] RAX: ffffffffffffffda RBX: 00007f02fb225fa0 RCX: 00007f02faf9e199 [ 1996.991755][T13736] RDX: 0000000004004051 RSI: 0000200000001300 RDI: 0000000000000005 [ 1996.999741][T13736] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.007750][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.015724][T13736] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 1997.023734][T13736] [ 1997.200785][T13738] netlink: 'syz.2.14188': attribute type 10 has an invalid length. [ 1997.215824][T13738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1997.246536][T13738] netlink: 'syz.2.14188': attribute type 10 has an invalid length. [ 1997.265548][T13738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1997.302356][T13742] netlink: 'syz.2.14188': attribute type 10 has an invalid length. [ 1997.325482][T13742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1997.358112][T13748] FAULT_INJECTION: forcing a failure. [ 1997.358112][T13748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1997.402260][T13748] CPU: 1 PID: 13748 Comm: syz.3.14192 Not tainted syzkaller #0 [ 1997.409980][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1997.420087][T13748] Call Trace: [ 1997.423372][T13748] [ 1997.426312][T13748] dump_stack_lvl+0x188/0x24e [ 1997.431027][T13748] ? show_regs_print_info+0x12/0x12 [ 1997.436240][T13748] ? load_image+0x410/0x410 [ 1997.440764][T13748] ? __lock_acquire+0x7ea0/0x7ea0 [ 1997.445804][T13748] ? snprintf+0xe5/0x140 [ 1997.450071][T13748] should_fail_ex+0x390/0x4c0 [ 1997.454784][T13748] _copy_to_user+0x2c/0x130 [ 1997.459330][T13748] simple_read_from_buffer+0xe3/0x150 [ 1997.464896][T13748] proc_fail_nth_read+0x1a6/0x220 [ 1997.469935][T13748] ? proc_fault_inject_write+0x310/0x310 [ 1997.475590][T13748] ? fsnotify_perm+0x248/0x550 [ 1997.480360][T13748] ? proc_fault_inject_write+0x310/0x310 [ 1997.486000][T13748] vfs_read+0x2db/0x960 [ 1997.490170][T13748] ? kernel_read+0x1e0/0x1e0 [ 1997.494765][T13748] ? __fget_files+0x28/0x460 [ 1997.499378][T13748] ? __fget_files+0x3fc/0x460 [ 1997.504076][T13748] ? __fdget_pos+0x2ae/0x360 [ 1997.508667][T13748] ? ksys_read+0x70/0x260 [ 1997.513004][T13748] ksys_read+0x14d/0x260 [ 1997.517259][T13748] ? vfs_write+0x9a0/0x9a0 [ 1997.521710][T13748] ? lockdep_hardirqs_on+0x94/0x140 [ 1997.526933][T13748] do_syscall_64+0x4c/0xa0 [ 1997.531356][T13748] ? clear_bhb_loop+0x60/0xb0 [ 1997.536040][T13748] ? clear_bhb_loop+0x60/0xb0 [ 1997.540718][T13748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1997.546632][T13748] RIP: 0033:0x7f52ea15e9ce [ 1997.551049][T13748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1997.570653][T13748] RSP: 002b:00007f52eafaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1997.579069][T13748] RAX: ffffffffffffffda RBX: 00007f52eafab6c0 RCX: 00007f52ea15e9ce [ 1997.587041][T13748] RDX: 000000000000000f RSI: 00007f52eafab0a0 RDI: 0000000000000005 [ 1997.595010][T13748] RBP: 00007f52eafab090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.602981][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.610951][T13748] R13: 00007f52ea426038 R14: 00007f52ea425fa0 R15: 00007ffd238d6f98 [ 1997.618951][T13748] [ 1997.992832][T13760] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14196'. [ 1998.018846][T13770] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.14199'. [ 1998.072472][T13772] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14198'. [ 1998.203000][T13779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14203'. [ 1998.856788][T13796] netlink: 'syz.0.14206': attribute type 10 has an invalid length. [ 1998.892684][T13793] netlink: 'syz.3.14207': attribute type 10 has an invalid length. [ 1998.919693][T13793] bridge0: port 3(bond0) entered blocking state [ 1998.926736][T13793] bridge0: port 3(bond0) entered listening state [ 1998.934459][T13793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.942475][T13793] bridge0: port 2(bridge_slave_1) entered listening state [ 1998.951472][T13793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.959630][T13793] bridge0: port 1(bridge_slave_0) entered listening state [ 1999.134818][T13793] bridge0: port 3(bond0) entered disabled state [ 1999.142557][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.150672][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.812597][T13817] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1999.887497][T13818] netlink: 'syz.0.14216': attribute type 10 has an invalid length. [ 1999.938308][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.974294][T13818] device bridge_slave_1 left promiscuous mode [ 1999.997624][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.047243][T13818] device bridge_slave_1 entered promiscuous mode [ 2000.077043][T13818] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2000.379510][T13832] netlink: 'syz.0.14222': attribute type 10 has an invalid length. [ 2000.447293][T13832] bridge0: port 3(bond0) entered disabled state [ 2000.454057][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.534791][T13832] team0: Port device bridge0 removed [ 2000.543026][T13832] bridge0: port 3(bond0) entered blocking state [ 2000.549501][T13832] bridge0: port 3(bond0) entered forwarding state [ 2000.556369][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.563647][T13832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.578928][T13832] bridge0: port 3(bond0) entered disabled state [ 2000.585580][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.998431][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14231'. [ 2001.023489][T13855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14231'. [ 2001.131841][T13859] netlink: 'syz.1.14233': attribute type 10 has an invalid length. [ 2001.938202][T13859] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2001.993689][T13865] netlink: 763 bytes leftover after parsing attributes in process `syz.4.14234'. [ 2002.057349][T13884] netlink: 'syz.2.14241': attribute type 21 has an invalid length. [ 2004.235482][T13923] ¥: port 1(team0) entered blocking state [ 2004.241964][T13923] ¥: port 1(team0) entered disabled state [ 2004.300232][T13923] device team0 entered promiscuous mode [ 2004.312192][T13923] device team_slave_0 entered promiscuous mode [ 2004.336287][T13923] device team_slave_1 entered promiscuous mode [ 2004.343105][T13923] device wlan1 entered promiscuous mode [ 2004.475611][T13931] device team0 left promiscuous mode [ 2004.498730][T13931] device team_slave_0 left promiscuous mode [ 2004.518792][T13931] device team_slave_1 left promiscuous mode [ 2004.549082][T13931] device wlan1 left promiscuous mode [ 2004.569200][T13931] ¥: port 1(team0) entered disabled state [ 2005.147608][T13951] netlink: 'syz.2.14263': attribute type 10 has an invalid length. [ 2005.361398][T13957] netlink: 'syz.0.14266': attribute type 10 has an invalid length. [ 2005.393410][T13957] bond0: (slave dummy0): Releasing backup interface [ 2005.432092][T13957] device dummy0 left promiscuous mode [ 2005.805638][T13977] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14273'. [ 2005.932918][T13978] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14272'. [ 2005.955534][T13978] bond0: (slave bond_slave_0): Releasing backup interface [ 2005.977916][T13978] device bond_slave_0 left promiscuous mode [ 2006.012131][T13978] net_ratelimit: 3660 callbacks suppressed [ 2006.012166][T13978] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2006.073413][T13980] netlink: 'syz.4.14274': attribute type 10 has an invalid length. [ 2006.107691][T13980] team0: Device wg1 is of different type [ 2006.276841][T13991] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2006.320168][T13991] device syzkaller0 entered promiscuous mode [ 2006.457532][T14009] netlink: 'syz.3.14283': attribute type 13 has an invalid length. [ 2006.475460][T14009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14283'. [ 2006.496046][T14009] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2007.045975][T14028] netlink: 'syz.1.14287': attribute type 10 has an invalid length. [ 2007.054132][T14028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14287'. [ 2009.210443][T14025] netlink: 'syz.0.14289': attribute type 10 has an invalid length. [ 2009.221440][T14025] device dummy0 entered promiscuous mode [ 2009.228159][T14025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2009.237453][T14028] netlink: 'syz.1.14287': attribute type 10 has an invalid length. [ 2009.251123][T14028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14287'. [ 2009.263409][T14032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2009.508055][T14042] netlink: 'syz.0.14295': attribute type 10 has an invalid length. [ 2009.659644][T14042] team0: Device gre0 is of different type [ 2009.911997][T14055] netlink: 'syz.1.14299': attribute type 46 has an invalid length. [ 2009.920504][T14055] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14299'. [ 2009.945601][T14048] netlink: 'syz.4.14297': attribute type 39 has an invalid length. [ 2010.256270][T14066] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2010.308375][T14067] syz_tun: tun_net_xmit 42 [ 2010.333478][T14066] device syzkaller0 entered promiscuous mode [ 2010.519466][T14076] netlink: 'syz.3.14305': attribute type 10 has an invalid length. [ 2010.534470][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14305'. [ 2010.553292][T14076] netlink: 'syz.3.14305': attribute type 10 has an invalid length. [ 2010.562001][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14305'. [ 2010.590512][T14080] netlink: 'syz.3.14305': attribute type 10 has an invalid length. [ 2010.605429][T14080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14305'. [ 2011.385825][ C1] syz_tun: tun_net_xmit 42 [ 2011.433054][T14108] netlink: 'syz.2.14317': attribute type 11 has an invalid length. [ 2011.452276][T14108] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14317'. [ 2011.493297][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2011.872851][T14122] netlink: 'syz.4.14322': attribute type 9 has an invalid length. [ 2011.912323][T14122] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.14322'. [ 2012.425514][ C1] syz_tun: tun_net_xmit 42 [ 2013.481113][ C1] syz_tun: tun_net_xmit 42 [ 2014.515622][ C1] syz_tun: tun_net_xmit 42 [ 2015.436066][T14169] FAULT_INJECTION: forcing a failure. [ 2015.436066][T14169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2015.458587][T14167] netlink: 'syz.2.14337': attribute type 10 has an invalid length. [ 2015.477464][T14169] CPU: 0 PID: 14169 Comm: syz.0.14338 Not tainted syzkaller #0 [ 2015.485071][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2015.495132][T14169] Call Trace: [ 2015.498416][T14169] [ 2015.501357][T14169] dump_stack_lvl+0x188/0x24e [ 2015.506050][T14169] ? show_regs_print_info+0x12/0x12 [ 2015.511345][T14169] ? load_image+0x410/0x410 [ 2015.515868][T14169] ? __lock_acquire+0x7ea0/0x7ea0 [ 2015.520909][T14169] ? snprintf+0xe5/0x140 [ 2015.525168][T14169] should_fail_ex+0x390/0x4c0 [ 2015.529860][T14169] _copy_to_user+0x2c/0x130 [ 2015.534370][T14169] simple_read_from_buffer+0xe3/0x150 [ 2015.539767][T14169] proc_fail_nth_read+0x1a6/0x220 [ 2015.544804][T14169] ? proc_fault_inject_write+0x310/0x310 [ 2015.550450][T14169] ? fsnotify_perm+0x248/0x550 [ 2015.555219][T14169] ? proc_fault_inject_write+0x310/0x310 [ 2015.560853][T14169] vfs_read+0x2db/0x960 [ 2015.565024][T14169] ? kernel_read+0x1e0/0x1e0 [ 2015.569641][T14169] ? __fget_files+0x28/0x460 [ 2015.574236][T14169] ? __fget_files+0x3fc/0x460 [ 2015.578947][T14169] ? __fdget_pos+0x2ae/0x360 [ 2015.583542][T14169] ? ksys_read+0x70/0x260 [ 2015.585570][ C1] syz_tun: tun_net_xmit 42 [ 2015.587882][T14169] ksys_read+0x14d/0x260 [ 2015.596546][T14169] ? vfs_write+0x9a0/0x9a0 [ 2015.600975][T14169] ? lockdep_hardirqs_on+0x94/0x140 [ 2015.606188][T14169] do_syscall_64+0x4c/0xa0 [ 2015.610606][T14169] ? clear_bhb_loop+0x60/0xb0 [ 2015.615285][T14169] ? clear_bhb_loop+0x60/0xb0 [ 2015.619973][T14169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2015.625864][T14169] RIP: 0033:0x7f02faf5e9ce [ 2015.630280][T14169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2015.649884][T14169] RSP: 002b:00007f02fbf2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2015.658298][T14169] RAX: ffffffffffffffda RBX: 00007f02fbf306c0 RCX: 00007f02faf5e9ce [ 2015.666267][T14169] RDX: 000000000000000f RSI: 00007f02fbf300a0 RDI: 0000000000000005 [ 2015.674238][T14169] RBP: 00007f02fbf30090 R08: 0000000000000000 R09: 0000000000000000 [ 2015.682209][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2015.690180][T14169] R13: 00007f02fb226038 R14: 00007f02fb225fa0 R15: 00007ffe32ab95e8 [ 2015.698178][T14169] [ 2015.706126][T14167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14337'. [ 2016.051922][T14178] netlink: 'syz.0.14342': attribute type 11 has an invalid length. [ 2016.095984][T14178] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14342'. [ 2016.170657][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.112668][T14225] netlink: 'syz.4.14361': attribute type 11 has an invalid length. [ 2018.136283][T14225] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14361'. [ 2018.182297][T14225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.809473][T14254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14372'. [ 2019.243263][T14261] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14371'. [ 2019.934357][T14272] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14378'. [ 2019.986956][T14272] ksmbd: Unknown IPC event: 10, ignore. [ 2020.060595][T14275] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14380'. [ 2020.135210][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2020.169591][T14275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2020.218710][T14285] netlink: 'syz.0.14382': attribute type 10 has an invalid length. [ 2021.524081][T14316] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14393'. [ 2023.581635][T14308] netlink: 'syz.0.14388': attribute type 10 has an invalid length. [ 2023.634839][T14308] bridge0: port 3(bond0) entered blocking state [ 2023.641299][T14308] bridge0: port 3(bond0) entered forwarding state [ 2023.648039][T14308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.655209][T14308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2023.736079][T14308] bridge0: port 3(bond0) entered disabled state [ 2023.742576][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.135455][T14320] netlink: 'syz.4.14395': attribute type 10 has an invalid length. [ 2025.343183][T14363] netlink: 'syz.2.14409': attribute type 21 has an invalid length. [ 2025.754856][T14369] device syzkaller0 entered promiscuous mode [ 2025.921676][T14377] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2025.971419][T14377] device syzkaller0 entered promiscuous mode [ 2026.016978][T14378] netlink: 'syz.2.14411': attribute type 10 has an invalid length. [ 2026.111089][T14378] bridge0: port 3(bond0) entered blocking state [ 2026.118040][T14378] bridge0: port 3(bond0) entered listening state [ 2026.125554][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.132880][T14378] bridge0: port 2(bridge_slave_1) entered listening state [ 2026.140987][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.148308][T14378] bridge0: port 1(bridge_slave_0) entered listening state [ 2026.167153][T14378] bridge0: port 3(bond0) entered disabled state [ 2026.174145][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.181803][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.876329][T14379] netlink: 763 bytes leftover after parsing attributes in process `syz.3.14413'. [ 2030.886058][T14393] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14420'. [ 2031.121251][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.142086][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.162880][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.211464][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.235490][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.281814][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.329336][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.347200][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.366006][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.402707][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.425880][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.449320][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.494946][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.525238][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.584330][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.630083][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.673329][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.702281][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.770127][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.805593][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.836573][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2031.898326][T14416] netlink: 'syz.4.14426': attribute type 33 has an invalid length. [ 2031.930375][T14416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14426'. [ 2031.966882][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2032.279254][T14440] netlink: 'syz.2.14433': attribute type 2 has an invalid length. [ 2033.065595][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 2033.085562][ T28] Not tainted syzkaller #0 [ 2033.090574][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2033.120167][ T28] task:rcu_tasks_kthre state:D stack:27264 pid:12 ppid:2 flags:0x00004000 [ 2033.141451][ T28] Call Trace: [ 2033.144794][ T28] [ 2033.151643][ T28] __schedule+0x107f/0x4030 [ 2033.161834][ T28] ? release_firmware_map_entry+0x187/0x187 [ 2033.179127][ T28] schedule+0xb9/0x180 [ 2033.183506][ T28] schedule_timeout+0xbd/0x2d0 [ 2033.193762][ T28] ? console_conditional_schedule+0x40/0x40 [ 2033.210129][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2033.225453][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 2033.230815][ T28] ? lock_chain_count+0x20/0x20 [ 2033.245468][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2033.250597][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2033.265445][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2033.276679][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 2033.292430][ T28] ? wait_for_completion+0x26f/0x590 [ 2033.302616][ T28] wait_for_completion+0x2c2/0x590 [ 2033.312802][ T28] ? io_schedule+0xd0/0xd0 [ 2033.322949][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2033.339451][ T28] ? debug_object_active_state+0x6b/0x380 [ 2033.355413][ T28] __synchronize_srcu+0x2b3/0x350 [ 2033.360788][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2033.378872][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 2033.384918][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 2033.395147][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 2033.411295][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 2033.425605][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 2033.430951][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 2033.441131][ T28] ? lock_chain_count+0x20/0x20 [ 2033.451317][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2033.465926][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 2033.476634][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 2033.492556][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2033.502731][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2033.512905][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 2033.523074][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 2033.533237][ T28] rcu_tasks_kthread+0x6e/0x90 [ 2033.543415][ T28] kthread+0x29d/0x330 [ 2033.553567][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 2033.563756][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2033.573942][ T28] ret_from_fork+0x1f/0x30 [ 2033.584133][ T28] [ 2033.594423][ T28] [ 2033.594423][ T28] Showing all locks held in the system: [ 2033.612802][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2033.619713][ T28] #0: ffffffff8cb2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2033.645603][ T28] 1 lock held by rcu_tasks_trace/13: [ 2033.655641][ T28] #0: ffffffff8cb2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2033.677222][ T28] 1 lock held by khungtaskd/28: [ 2033.687400][ T28] #0: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2033.715423][ T28] 2 locks held by getty/4035: [ 2033.720519][ T28] #0: ffff88814d7e0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2033.742085][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2033.763044][ T28] 2 locks held by kworker/1:2/6507: [ 2033.779652][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2033.800741][ T28] #1: ffffc90003847d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2033.815696][ T28] 1 lock held by syz.1.14428/14420: [ 2033.820954][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.831237][ T28] 3 locks held by syz.1.14428/14425: [ 2033.836815][ T28] 2 locks held by syz.0.14429/14426: [ 2033.842418][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.852733][ T28] #1: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 2033.864270][ T28] 1 lock held by syz.2.14427/14433: [ 2033.870936][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.881164][ T28] 1 lock held by syz.3.14431/14434: [ 2033.887245][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.899902][ T28] 2 locks held by dhcpcd/14436: [ 2033.904786][ T28] #0: ffff888078c46130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 2033.918379][ T28] #1: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 2033.930008][ T28] 1 lock held by syz.4.14432/14437: [ 2033.935236][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.945846][ T28] 1 lock held by syz.4.14432/14438: [ 2033.951097][ T28] #0: ffffffff8dd59288 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 2033.964858][ T28] 1 lock held by syz.2.14433/14439: [ 2033.970561][ T28] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 2033.980989][ T28] 1 lock held by dhcpcd/14441: [ 2033.986083][ T28] #0: ffff8880821e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 2033.996715][ T28] [ 2033.999230][ T28] ============================================= [ 2033.999230][ T28] [ 2034.008788][ T28] NMI backtrace for cpu 1 [ 2034.013230][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2034.020424][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2034.030573][ T28] Call Trace: [ 2034.033848][ T28] [ 2034.036776][ T28] dump_stack_lvl+0x188/0x24e [ 2034.041457][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 2034.046796][ T28] ? show_regs_print_info+0x12/0x12 [ 2034.051994][ T28] ? load_image+0x410/0x410 [ 2034.056496][ T28] ? vprintk_emit+0x59f/0x6a0 [ 2034.061178][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 2034.066289][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 2034.071227][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2034.077376][ T28] ? _printk+0xda/0x130 [ 2034.081530][ T28] ? load_image+0x410/0x410 [ 2034.086046][ T28] ? load_image+0x410/0x410 [ 2034.090574][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2034.096657][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2034.102835][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2034.108828][ T28] watchdog+0xf0e/0xf50 [ 2034.112992][ T28] ? watchdog+0x1ed/0xf50 [ 2034.117352][ T28] kthread+0x29d/0x330 [ 2034.121526][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2034.126637][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2034.131238][ T28] ret_from_fork+0x1f/0x30 [ 2034.135683][ T28] [ 2034.139405][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2034.144648][ C0] NMI backtrace for cpu 0 [ 2034.144658][ C0] CPU: 0 PID: 343 Comm: kworker/u4:49 Not tainted syzkaller #0 [ 2034.144674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2034.144683][ C0] Workqueue: bat_events batadv_nc_worker [ 2034.144807][ C0] RIP: 0010:kasan_check_range+0xb/0x290 [ 2034.144834][ C0] Code: 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 <55> 41 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 [ 2034.144849][ C0] RSP: 0018:ffffc900033c79b8 EFLAGS: 00000002 [ 2034.144861][ C0] RAX: 0000000000000001 RBX: ffff888049e85a00 RCX: ffffffff8164beb4 [ 2034.144872][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b33318 [ 2034.144882][ C0] RBP: 0000000000000002 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 2034.144892][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000004 [ 2034.144902][ C0] R13: dffffc0000000000 R14: ffff888049e864e0 R15: 00000000000006cf [ 2034.144913][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2034.144925][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2034.144936][ C0] CR2: 00007fc115f486c8 CR3: 0000000077a9a000 CR4: 00000000003506f0 [ 2034.144949][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2034.144959][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2034.144968][ C0] Call Trace: [ 2034.144974][ C0] [ 2034.144979][ C0] mark_lock+0x94/0x320 [ 2034.145004][ C0] lockdep_hardirqs_on_prepare+0x237/0x7c0 [ 2034.145027][ C0] ? lock_chain_count+0x20/0x20 [ 2034.145048][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 2034.145063][ C0] ? trace_irq_enable_rcuidle+0xe6/0x140 [ 2034.145084][ C0] ? batadv_nc_purge_paths+0x305/0x3a0 [ 2034.145106][ C0] trace_hardirqs_on+0x34/0x40 [ 2034.145124][ C0] __local_bh_enable_ip+0x136/0x1c0 [ 2034.145139][ C0] ? _local_bh_enable+0xa0/0xa0 [ 2034.145153][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 2034.145168][ C0] ? batadv_nc_purge_paths+0x305/0x3a0 [ 2034.145188][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 2034.145204][ C0] batadv_nc_purge_paths+0x305/0x3a0 [ 2034.145227][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 2034.145251][ C0] batadv_nc_worker+0x35f/0x600 [ 2034.145273][ C0] ? process_one_work+0x7b4/0x1160 [ 2034.145291][ C0] process_one_work+0x8ab/0x1160 [ 2034.145315][ C0] ? worker_detach_from_pool+0x240/0x240 [ 2034.145333][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 2034.145354][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2034.145375][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2034.145398][ C0] ? wq_worker_running+0x97/0x190 [ 2034.145413][ C0] worker_thread+0xaf5/0x12a0 [ 2034.145444][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2034.145464][ C0] kthread+0x29d/0x330 [ 2034.145476][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 2034.145493][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2034.145507][ C0] ret_from_fork+0x1f/0x30 [ 2034.145533][ C0] [ 2034.164728][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2034.164742][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2034.164760][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2034.164770][ T28] Call Trace: [ 2034.164776][ T28] [ 2034.164783][ T28] dump_stack_lvl+0x188/0x24e [ 2034.164809][ T28] ? memcpy+0x3c/0x60 [ 2034.164828][ T28] ? show_regs_print_info+0x12/0x12 [ 2034.164848][ T28] ? load_image+0x410/0x410 [ 2034.164882][ T28] panic+0x2d3/0x710 [ 2034.164904][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2034.164934][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2034.164956][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 2034.164986][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2034.165008][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2034.165030][ T28] watchdog+0xf4d/0xf50 [ 2034.165054][ T28] ? watchdog+0x1ed/0xf50 [ 2034.165079][ T28] kthread+0x29d/0x330 [ 2034.165094][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2034.165111][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2034.165129][ T28] ret_from_fork+0x1f/0x30 [ 2034.165163][ T28] [ 2034.167803][ T28] Kernel Offset: disabled [ 2034.550426][ T28] Rebooting in 86400 seconds..