last executing test programs: 18m57.974723453s ago: executing program 1 (id=3911): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x12, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040)}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x1, 0x0) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x43) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18m56.034500895s ago: executing program 1 (id=3925): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="00b8f7a638fdc80c9d7001590300000000000900000000000000ff801800000000000000000000a3c900000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, 0x0, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r6 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000b00000000000000da0f000000000000", @ANYRES32, @ANYBLOB="22cf40e0f22b4c281d5262ce958bf5df56348429dd15bc822a48be26e1f26d03c3977957d4e24b50442a6824d11448220e0932b2e958551ebce353e843ffff8f8feb0f637afe1ae81be0dcb8ae09c43530bf43e7d85112c1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0xcb, 0x7, 0x0, 0xba, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x1000, 0xac, 0x4, 0x2, 0x6, 0x0, 0x81, 0x0, 0x800, 0x0, 0xf}, r6, 0x4, r0, 0x8) 18m54.011744583s ago: executing program 1 (id=3926): r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x4, 0x0, 0x6d0c100138c2776d, 0x10002, 0x33a6, 0x0, 0x0, 0x40}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="ace7f004b9c3a301000000030000000000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x80, 0x0, 0xfffffffffffffef7}, 0x48c0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0x0, &(0x7f0000000080)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x7097, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffc00000000004, 0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 18m53.292969907s ago: executing program 1 (id=3932): socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071109700000020009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x2000000000009, 0x6, 0x1, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0xfffeffff, 0x0, 0x3}, 0x0, 0x40000000012, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008000) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x21, &(0x7f0000000000), 0x8) 18m52.139722169s ago: executing program 1 (id=3934): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="620af8ff0c200021bfa1fe000000000007010000f8ffffffb702000003000000bd12fcff000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764d5d94ab0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1abd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe2226a7499bd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e710400000000000000c4be290159f6bcd75f0dda9de53100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569ee2683d30fa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fda31088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000000000000000000000000000000095aaff19177d8a0a2d105421554e73f60edf3b77eca70708ba00ffd6478235c8924c5f1a2c2da54b8317adf2d4047d4b5bb696bb67791ab3a5e422960289b4fe9e788972d15bd1fc302b2d7a64d3ec9278102ed981b76f8edd8fac3d758645a3a34234fd75e377d8f4debc576cc7a6a379795f55bde340a8e88748716a7cdc432063c8"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 18m51.67778039s ago: executing program 1 (id=3937): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x8}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)}], 0x1}, 0x80d1) 18m36.600406283s ago: executing program 32 (id=3937): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x8}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)}], 0x1}, 0x80d1) 28.8728823s ago: executing program 4 (id=9454): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100840, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xa, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x2, 0xa, 0x4, 0xfffffffffffffffe, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'devices'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x0, 'memory'}, {0x2d, 'perf_event'}]}, 0x2a) 26.737326548s ago: executing program 4 (id=9457): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001300)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x282, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) 26.108169593s ago: executing program 4 (id=9463): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x1800, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 24.932461547s ago: executing program 4 (id=9466): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x2d, 'blkio'}]}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_freezer_state(r2, &(0x7f0000000000)='THAWED\x00', 0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)="898cb1ae4fb692e8d836f19e4820d0c199800437904292a944e4386fb040b3cdd955ac76902318313bf73b17a8116b322de23abf8cf1bb7d77ac8a48bf011c86d06bd1f79308aa5647097b56ed7802b7be8ef9b7b1c25bbdbd07af87edfe5956fe3c0fefccfdb8ff74d94ce1e338b07c965c11857f6c8d15885d5eafc042e0067cf8f7a384478d8f881761da9c2cc8f80ebc8d760ffc9d1ae8807fd71fe94a12d2cc491a1712f04904af95e39be408aab7bff43033f83b865a9e230e1c04ffc2d53f43180289813f9d8ab98e5e3531ff4bf15a9518a14b", 0xd7}, {&(0x7f0000000240)="2bde87d53aa4198a7e107750f1d5c47acdca7315c3bf7d66fcd9ba3e6bd2c926f07cdf4c110390f3ef719e67626eb0715e6283f3f1ca19fd5c63e4b18c131ee1a6a2e132a10bc207427ad30d6c3d799507213bf6e9d743d1b4acb017c5b757976938121ffe7ee5a6fc17279559fb3bebb271780412bf821dd61647d54ad448f4bca1aff40f986e4148c002a51954a5e14e7b8b0ca4dbe91f02bb329fda6aed2e07215507fc14761f3769f79a2500b8ad15d0d384f4885eddd74e76711e26a46653549b3a", 0xc4}, {&(0x7f0000000400)="8219dc0dac71b90765eb54a162f631e0b657a69d4c2c4b149388a741de04d4d751bdb30163abe6a0617e846604a384690bc0afa6412405f94129b1fe13fd27c8eba6f868437aef8b86637e6275b8e8cad02a6fa7549ebee0dfb64da34f95c7612b714c976c160bb37beb505872a73463e77f3bda39973a3c9d600898f25d63fc4547d51f12e2941099c5bd472dd7036b62b85f4c9c988f70b34f1c2c6ff17c5bd22af5bd112d5e8ef66f41c2971af5d02f864a7601f777c805c4323c18dc9c", 0xbf}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000004c0)="9c669d6782a2c129c188eb6b985768e448cac1a1436c86698737261e7034567f4858e4fb68f15f46aaabdbf264c0227c0cecaf9d09844f5923da746d61aa608f121ba3ad0d3d4cf9e9a53c543dafaf6c14483424d89339aedbcc5e0d8fd99c44d7ecea76343c4a694622948a5ce3e90e87d5b94c56cf4a2b797e7c8c1f2fcae7b8668992a475d5a49bb02c80e6aa57e90f2af1f35a6e7ae0e1f5e3bd5dd8451d489336680d0cf8d25f94f1f24031a2b32b96b6833c2589beeebbb80f4d6fc43f24d932b6f96da552408d9329df1f9f9d37ffe5b9c9c0deba7383594f7742561d2bc4f49ed37b4e04e515ce45a8fa7d3a69fb6174e8ad8dd4d9", 0xf9}, {&(0x7f00000005c0)="034da1c6b66d5d68169a551b14945d898a88841c00b2a90aa181bb7412e91a4a0a1fc7752490e720c72c7ef08230c7e578a9a83bd178f2161c95a9c4f2789d5ad1600e27c5f88f26949e5dc3bdae8a89da4f8f38e02f7ef8b43eeb0b987f319ec1e6ddf6a758c87bc4c8a71a25edab5c2cd4d1621ba87173e8badbc90695b9466cef25e17f6d13ee3e7190be2de1", 0x8e}, {&(0x7f0000000340)="37a68da85d595ed7961a81df74", 0xd}, {&(0x7f0000000680)="86f03d0bd29630f39bbf261b492dde501578a48b520ed901c541ad1ff66f88fa01574fa906616151a09c20d5b7077fde28811bea948647fdf99da419f46240de8233991c15b6a4891a56e1a42af69bbda0dd5f130308bed3d862c2d289d03e054cb1c1748072233599d568d9473e56900c14f9e1d5b8d023c810446b85eb9b56f7572d5ac9825d3180244e794e0790f55c2e0c1bb0195356adb124fe90e1a784e1a98a7710b68f5a027b7d793a69bafeaabeee5f1aecaa94cc5f1e82b5d848381b482b9e7d96019b7667ad9483ebc9f62acb25c169f90ce84b312f514b0c1b90835419baffa4", 0xe6}, {&(0x7f0000000780)="008575e2871d068e6b31ce2f0b1d728dcab398a14faef46ec6b8a84b0b679c239003261bc982fb95f2058640f76fc42d499af27a56bdb8ec594f9175c943164b2f87d0b381cc6ce4", 0x48}, {&(0x7f0000000380)="6353b7319ccc159e524327aea910398273272abcd39e3954467448eb366b42c30e09101203", 0x25}], 0xa, &(0x7f00000008c0)}, 0x44) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x0) 24.594805407s ago: executing program 4 (id=9469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001300)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x282, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) 16.855609801s ago: executing program 4 (id=9486): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe3e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xa, 0x9}, {0x10000002, 0x1, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) write$cgroup_subtree(r7, 0x0, 0x16) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 14.853253818s ago: executing program 0 (id=9501): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x59) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x8, 0x7, 0x6, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x931, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r1], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x2, 0xa}, {0x2, 0x3, 0x1, 0x4}, {0x5, 0x1, 0x7, 0xb}, {0x3, 0x5, 0x1, 0x88a146b4e2208b34}, {0x5, 0x4, 0xe, 0x1}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.370226027s ago: executing program 5 (id=9494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup(0xffffffffffffffff, &(0x7f0000001a00)='syz0\x00', 0x200002, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (fail_nth: 2) 11.374139225s ago: executing program 0 (id=9496): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001300)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x282, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) 11.181216972s ago: executing program 2 (id=9497): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100840, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xa, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x2, 0xa, 0x4, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'devices'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x0, 'memory'}, {0x2d, 'perf_event'}]}, 0x2a) 10.802333226s ago: executing program 5 (id=9498): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848130000005e140602800000000e000a001000000002900000123f", 0x2e}], 0x1}, 0x8044) 10.364668285s ago: executing program 5 (id=9500): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e0900000080a6d33aaad447788d", 0x10}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0300180000000000000024000000240000000200000000000000000000040000000300000000000000060400000000000000be00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) recvmsg$unix(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x4}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x5}, 0x8) 10.353860375s ago: executing program 2 (id=9502): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xfffffffe}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000085000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) 10.353232665s ago: executing program 0 (id=9503): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe1e}, 0x94) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 8.758672726s ago: executing program 0 (id=9505): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x41, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b1800007150511e0845013f2325f004408050b038da1880b25181a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x51, 0x800000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000040000000711229000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) 8.642156077s ago: executing program 5 (id=9506): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x59) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x8, 0x7, 0x6, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x931, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r1], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x2, 0xa}, {0x2, 0x3, 0x1, 0x4}, {0x5, 0x1, 0x7, 0xb}, {0x3, 0x5, 0x1, 0x88a146b4e2208b34}, {0x5, 0x4, 0xe, 0x1}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.100984064s ago: executing program 3 (id=9507): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000800), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000038424a08000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 6.841385286s ago: executing program 0 (id=9508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) (fail_nth: 2) 6.606685016s ago: executing program 3 (id=9509): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000140)="1af537db814204415d12f383d5fa49d07cba0100de0d8322ab412da144496f260ac88d58e8e9eb837cd2f23bcf7b63d6325b88df523089be3fe2f29b6cafde60bbdf7c203da6537bcf67ee09ed65f7041a0dc9df294469734e002d56ac96b17ac1a968214f5f3e019eb8f22a8a43160085175eae1e239418b50df14e5cf6d29c3744ed247ca7fd82710e1cf1b5e72eb9880200000056be5c7f", &(0x7f00000000c0)=""/17}, 0xfffffffffffffef8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e0000004e0081880400e3bd6efb440009030e000a0010000000ba8000001201199cfb2472e0bcbae16854fd46a7", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000001e00)=ANY=[@ANYBLOB="05000069111e0000000000851000000200000085000000a000000095000000000000009500a50500000000000000000089c7187cad8ef8bc341b5a1e34f1e0b4be3b13ab531bb9418ce28a87fd59ece6c6856fad5d7bef052b131bbf8ea6308fdd2eeb37c0b676c231e20ec77759f7d5cd51467a2bf13ec9f35c239daa2c34aaba41db5f2b9571bb0cc277545af05684f49f8481bc52280058687be87c0daeecbc75821e0e5b63dc4df5df8eb08ad9d5007aed2300"/194], &(0x7f0000000080)='GPL\x00', 0x5, 0x108, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001600)={'ip6gre0\x00', @remote}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$tipc(r7, &(0x7f0000003080)={&(0x7f0000001f00)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)="983cd6f0c7ba9ed0909a5286243fd87e241080213feb3faf8af098934c37d4a174111be436c14eef8a33a175cc5ab2507311129f11cabe2ba393440e3e19bb145bffec4c", 0x44}], 0x3, &(0x7f0000003040)="309707183decfd84947401e78f39cfdf1c00dd246969bf977a5632cd324842cab09159345bcbff2d24a2ffab56f0ff17a9367a28bbd9503d", 0x38, 0x4048804}, 0x8880) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x50) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b80)={@cgroup, 0x22, 0x0, 0x5, &(0x7f0000001a80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001ac0)=[0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0], &(0x7f0000001b40)=[0x0], 0x0}, 0x40) (async, rerun: 64) r11 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001bc0)={@fallback=r11, r8, 0x1d, 0x0, 0x0, @void, @value=r8, @void, @void, r10}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x1e, &(0x7f0000001700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x69d, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xfd, 0xc, 0xe, 0xc, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x5, 0x200, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000400)=[{0x4005, 0x403, 0x3, 0x9}, {0x0, 0x4, 0x4, 0xb}, {0x5, 0x3, 0x6, 0x4}, {0x2, 0x3, 0xd}, {0x2, 0x1, 0x10, 0x2}, {0x3, 0x1, 0xe, 0xc}, {0x5, 0xfffffffe, 0xf, 0x7}], 0x10, 0x6}, 0x94) (async, rerun: 32) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x21, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd86d, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x1, 0x3, 0x8, 0xfffffffffffffff0, 0x10}, @jmp={0x5, 0x0, 0xa, 0x5, 0x9, 0x80, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001640)={0x49, 0xd, 0x80000000, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001680)=[r0, r1], &(0x7f0000001940)=[{0x2, 0x2, 0xd, 0x8}, {0x1bf, 0x4, 0x5, 0x9}, {0x2, 0x4, 0x5, 0x7}, {0x4, 0x4, 0xa, 0x1}, {0x3, 0x3, 0x3, 0xb}, {0x1, 0x1, 0x4, 0xb}], 0x10, 0x8000}, 0x94) (rerun: 32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000016c0)={r5, r14, 0x0, r13}, 0x10) 5.476622036s ago: executing program 5 (id=9510): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1141c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x0, 0x280004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10}, {0x18, 0x110, 0xa, "c2c767"}], 0x28}, 0xc0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x2, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100c, 0x7, 0x0, 0x7, 0x0, 0x7, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r5, &(0x7f00000005c0)="a4668a7a84c2892e0b2ea9e88855ae2be6bae9bd6d1ef7f8ff225d5cbae17cc51bb75ad402ddd671f44659067296431bd6ad03117daea90f3f536596ebd7b4d3d982b597f50ccba3f5529e43ddc717766064bab8d221af564937ff6c164d8dff98ecc543927393a25bb393c9768486d4c2", &(0x7f0000000640)=""/144, 0x4}, 0x20) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000002c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80}, 0x80, &(0x7f00000000c0)=[{0xfffffffffffffffc}, {&(0x7f0000000340)="5ae4812039d9b4ca8be81d2054e602d277b0a8cbd3e955f51e4b4eea8562f0fbeda2dab26dd39cae674287ac11e461108ef3e6ec4237c9d7c91b7c489dd343e02f45cf974eff9e7390c75220d3012a2b9cab8c4513a71bc7ada96290d49e1374176aec0a8f46d3a035c07e081dd23587cb3949197cad0066de1eb6e2a01b70eb1f8d0d121204cbe2577f00520bf9c36f1ea3225e24b981a2a6a667c1aba33b8d43a9ed", 0xa3}], 0x2, &(0x7f0000000500)=[{0x70, 0x113, 0x3d2b3b25, "e56e61f4d857a3e9753633c0244bd5138f32dc2ec621381635597c9080fecabfbca57db849587661a972f00a12161c3a5a79bc05058bd0cb45860e4c64725b98576a69ae67e3992c936de19fdd6efe63d2f3f3a6fd7acc52b745"}, {0x38, 0x103, 0x3ff000, "8234f9db67d37c4dff0e10cc822baff78e3d05b7901fe16510b1b5fc4bfb6d3423"}], 0xa8}, 0x24048840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 5.476396746s ago: executing program 2 (id=9511): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000f40)={0x2, 0x1, @local}, 0x10, &(0x7f0000001500)=[{&(0x7f00000011c0)='o', 0x1}], 0x1}, 0x0) 5.475096836s ago: executing program 3 (id=9512): socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0024000071103600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 5.333763509s ago: executing program 2 (id=9513): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100840, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xa, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x2, 0xa, 0x4, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'devices'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x0, 'memory'}, {0x2d, 'perf_event'}]}, 0x2a) 5.331799349s ago: executing program 3 (id=9514): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001300)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x282, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) socket$kcm(0xa, 0x5, 0x0) 5.162462314s ago: executing program 0 (id=9515): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x59) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x8, 0x7, 0x6, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x931, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r1], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x2, 0xa}, {0x2, 0x3, 0x1, 0x4}, {0x5, 0x1, 0x7, 0xb}, {0x3, 0x5, 0x1, 0x88a146b4e2208b34}, {0x5, 0x4, 0xe, 0x1}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.845908952s ago: executing program 5 (id=9516): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x59) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x8, 0x7, 0x6, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x931, 0x25, &(0x7f00000003c0)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r1], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x2, 0xa}, {0x2, 0x3, 0x1, 0x4}, {0x5, 0x1, 0x7, 0xb}, {0x3, 0x5, 0x1, 0x88a146b4e2208b34}, {0x5, 0x4, 0xe, 0x1}, {0x0, 0x2, 0x4, 0x4}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.85587007s ago: executing program 2 (id=9517): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x33, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000080000000000000100000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe80"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2c7125ae743ee85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x10000, 0x0, 0xfffffffc, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000780)="a60284fc", 0x4}], 0x1}, 0x8000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef28"], 0xffdd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x39, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 3.821612622s ago: executing program 3 (id=9518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100001}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x10000000, 0x1}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.629277496s ago: executing program 33 (id=9486): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe3e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xa, 0x9}, {0x10000002, 0x1, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) write$cgroup_subtree(r7, 0x0, 0x16) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 336.03854ms ago: executing program 3 (id=9520): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x41, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b1800007150511e0845013f2325f004408050b038da1880b25181a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x51, 0x800000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400000002000000000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000040000000711229000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106280, 0xe8, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 0s ago: executing program 2 (id=9521): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xfffffffe}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000085000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118", 0x1d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) kernel console output (not intermixed with test programs): k_acquire+0x12f4/0x7d10 [ 1658.999796][T29075] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1659.005075][T29075] ? security_socket_recvmsg+0x85/0xb0 [ 1659.010535][T29075] ? netlink_sendmsg+0xbd0/0xbd0 [ 1659.015478][T29075] ____sys_recvmsg+0x2cb/0x5e0 [ 1659.020250][T29075] ? __sys_recvmsg_sock+0x40/0x40 [ 1659.025283][T29075] ? import_iovec+0x6f/0xa0 [ 1659.029784][T29075] ___sys_recvmsg+0x212/0x590 [ 1659.034478][T29075] ? __sys_recvmsg+0x290/0x290 [ 1659.039270][T29075] ? trace_call_bpf+0xbf/0x6b0 [ 1659.044065][T29075] ? trace_call_bpf+0x5d6/0x6b0 [ 1659.048921][T29075] ? __fget_files+0x43d/0x4b0 [ 1659.053691][T29075] __x64_sys_recvmsg+0x205/0x2e0 [ 1659.058630][T29075] ? perf_trace_preemptirq_template+0x268/0x320 [ 1659.064868][T29075] ? ___sys_recvmsg+0x590/0x590 [ 1659.069727][T29075] ? lockdep_hardirqs_on+0x94/0x140 [ 1659.074941][T29075] do_syscall_64+0x4c/0xa0 [ 1659.079362][T29075] ? clear_bhb_loop+0x60/0xb0 [ 1659.084034][T29075] ? clear_bhb_loop+0x60/0xb0 [ 1659.088809][T29075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1659.094722][T29075] RIP: 0033:0x7f9a1c39c629 [ 1659.099139][T29075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.118933][T29075] RSP: 002b:00007f9a1d195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1659.127346][T29075] RAX: ffffffffffffffda RBX: 00007f9a1c616090 RCX: 00007f9a1c39c629 [ 1659.135314][T29075] RDX: 0000000000010122 RSI: 0000200000000500 RDI: 0000000000000003 [ 1659.143281][T29075] RBP: 00007f9a1d195090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.151251][T29075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.159220][T29075] R13: 00007f9a1c616128 R14: 00007f9a1c616090 R15: 00007fff686aeab8 [ 1659.167287][T29075] [ 1660.660574][T29106] netlink: 'syz.0.7532': attribute type 11 has an invalid length. [ 1660.744165][T29106] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7532'. [ 1660.800446][T29105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1662.602257][T29152] netlink: 'syz.5.7545': attribute type 11 has an invalid length. [ 1662.624636][T29152] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7545'. [ 1662.717484][T29150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1662.867533][T29162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1662.950245][T29162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1665.884950][T29215] netlink: 'syz.2.7564': attribute type 11 has an invalid length. [ 1665.924782][T29215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7564'. [ 1665.959215][T29213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1667.221746][T29235] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.7569'. [ 1667.270481][T29232] device pim6reg1 entered promiscuous mode [ 1667.463483][T29240] netlink: 'syz.0.7571': attribute type 7 has an invalid length. [ 1668.779509][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.785881][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.769983][T29271] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7579'. [ 1671.144179][T29285] netlink: 'syz.3.7586': attribute type 3 has an invalid length. [ 1671.161970][T29285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7586'. [ 1673.652276][T29322] netlink: 'syz.3.7599': attribute type 11 has an invalid length. [ 1673.666626][T29322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7599'. [ 1673.699675][T29321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.307931][T29331] Ÿë: port 1(gretap0) entered blocking state [ 1674.331181][T29331] Ÿë: port 1(gretap0) entered disabled state [ 1674.348699][T29331] device gretap0 entered promiscuous mode [ 1674.660492][T29338] netlink: 'syz.4.7603': attribute type 10 has an invalid length. [ 1674.712931][T29338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1675.085665][T29338] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1675.094336][T29338] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.129617][T29338] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1675.266574][T29340] netlink: 'syz.0.7604': attribute type 10 has an invalid length. [ 1675.274509][T29340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1675.327878][T29340] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1675.370322][T29340] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.459747][T29340] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1675.502249][T29353] netlink: 'syz.3.7606': attribute type 10 has an invalid length. [ 1675.516972][T29353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1675.541581][T29353] device team0 entered promiscuous mode [ 1675.588790][T29353] device team_slave_0 entered promiscuous mode [ 1675.606873][T29353] device team_slave_1 entered promiscuous mode [ 1675.637992][T29353] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1676.074822][T29364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1676.137911][T29364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1676.323012][T29369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1676.349758][T29367] device pim6reg1 entered promiscuous mode [ 1676.453942][T29369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1676.489959][T29372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1676.522154][T29374] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.7611'. [ 1676.553014][T29375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1677.698744][T29396] netlink: 'syz.5.7619': attribute type 3 has an invalid length. [ 1677.716864][T29396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1680.418236][T29419] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1680.466801][T29419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1680.727283][T29427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1680.769010][T29427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1680.886878][T29424] netlink: 'syz.4.7627': attribute type 41 has an invalid length. [ 1681.475941][T29434] netlink: 'syz.2.7629': attribute type 11 has an invalid length. [ 1681.507052][T29434] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1681.585674][T29433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.733295][T29445] device wlan1 entered promiscuous mode [ 1683.441878][T29477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1683.485120][T29477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1685.621883][T29485] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1685.647832][T29485] bridge_slave_1: default FDB implementation only supports local addresses [ 1685.954944][T29505] netlink: 'syz.0.7650': attribute type 1 has an invalid length. [ 1686.074338][T29513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7652'. [ 1686.129942][T29513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7652'. [ 1686.200848][T29515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7652'. [ 1686.751005][T29527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1686.799024][T29519] netlink: 'syz.0.7655': attribute type 11 has an invalid length. [ 1686.871854][T29519] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7655'. [ 1686.932724][T29531] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1686.948749][T29518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.757089][T29538] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7661'. [ 1688.330299][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1688.348106][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1688.365363][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1688.390089][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1689.340021][T29567] netlink: 'syz.3.7670': attribute type 11 has an invalid length. [ 1689.403877][T29567] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7670'. [ 1689.588024][T29566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.312936][T29592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7678'. [ 1692.136075][T29627] netlink: 'syz.2.7691': attribute type 10 has an invalid length. [ 1692.404800][T29624] __nla_validate_parse: 5 callbacks suppressed [ 1692.404862][T29624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1692.866498][T29624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1692.932542][T29638] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7694'. [ 1692.958428][T29628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1692.995267][T29631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1693.286847][T29650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7698'. [ 1693.479946][T29656] netlink: 'syz.2.7699': attribute type 2 has an invalid length. [ 1693.541000][T29656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7699'. [ 1696.067146][T29698] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.7713'. [ 1696.189950][T29698] netlink: 'syz.0.7713': attribute type 3 has an invalid length. [ 1696.230516][T29698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7713'. [ 1696.860388][T29716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7720'. [ 1701.287139][T29757] FAULT_INJECTION: forcing a failure. [ 1701.287139][T29757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.380411][T29757] CPU: 1 PID: 29757 Comm: syz.5.7731 Not tainted syzkaller #0 [ 1701.387971][T29757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1701.398070][T29757] Call Trace: [ 1701.401372][T29757] [ 1701.404324][T29757] dump_stack_lvl+0x188/0x24e [ 1701.409045][T29757] ? show_regs_print_info+0x12/0x12 [ 1701.414273][T29757] ? load_image+0x400/0x400 [ 1701.418818][T29757] ? __lock_acquire+0x7d10/0x7d10 [ 1701.423886][T29757] should_fail_ex+0x399/0x4d0 [ 1701.428610][T29757] _copy_from_user+0x2c/0x170 [ 1701.433320][T29757] __copy_msghdr+0x3b7/0x580 [ 1701.437954][T29757] ___sys_sendmsg+0x210/0x360 [ 1701.442673][T29757] ? __sys_sendmsg+0x290/0x290 [ 1701.447525][T29757] ? __lock_acquire+0x7d10/0x7d10 [ 1701.452644][T29757] __se_sys_sendmsg+0x1bb/0x2a0 [ 1701.457710][T29757] ? __x64_sys_sendmsg+0x80/0x80 [ 1701.462722][T29757] ? lockdep_hardirqs_on+0x94/0x140 [ 1701.467958][T29757] do_syscall_64+0x4c/0xa0 [ 1701.472400][T29757] ? clear_bhb_loop+0x60/0xb0 [ 1701.477100][T29757] ? clear_bhb_loop+0x60/0xb0 [ 1701.481901][T29757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.487819][T29757] RIP: 0033:0x7f583539c629 [ 1701.492268][T29757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.511904][T29757] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.520354][T29757] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1701.528360][T29757] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000005 [ 1701.536360][T29757] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.544356][T29757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.552363][T29757] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1701.560408][T29757] [ 1701.673062][T29758] netlink: 'syz.3.7729': attribute type 21 has an invalid length. [ 1701.693664][T29758] __nla_validate_parse: 3 callbacks suppressed [ 1701.693851][T29758] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1701.987210][T29773] netlink: 'syz.2.7735': attribute type 9 has an invalid length. [ 1702.024059][T29773] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1703.131226][T29795] FAULT_INJECTION: forcing a failure. [ 1703.131226][T29795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1703.172509][T29795] CPU: 0 PID: 29795 Comm: syz.2.7744 Not tainted syzkaller #0 [ 1703.180047][T29795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.190145][T29795] Call Trace: [ 1703.193446][T29795] [ 1703.196401][T29795] dump_stack_lvl+0x188/0x24e [ 1703.201129][T29795] ? show_regs_print_info+0x12/0x12 [ 1703.206368][T29795] ? load_image+0x400/0x400 [ 1703.210900][T29795] ? __lock_acquire+0x7d10/0x7d10 [ 1703.215969][T29795] should_fail_ex+0x399/0x4d0 [ 1703.220699][T29795] prepare_alloc_pages+0x1e2/0x5f0 [ 1703.225881][T29795] __alloc_pages+0x130/0x4f0 [ 1703.230523][T29795] ? zone_statistics+0x170/0x170 [ 1703.235514][T29795] ? alloc_pages+0x4d8/0x740 [ 1703.240257][T29795] alloc_skb_with_frags+0x20c/0x710 [ 1703.245504][T29795] sock_alloc_send_pskb+0x87f/0x9a0 [ 1703.250759][T29795] ? sock_kzfree_s+0x50/0x50 [ 1703.255397][T29795] ? do_raw_spin_lock+0x128/0x2f0 [ 1703.260455][T29795] ? __rwlock_init+0x140/0x140 [ 1703.265330][T29795] ? do_raw_spin_unlock+0x11d/0x230 [ 1703.270654][T29795] unix_dgram_sendmsg+0x539/0x16e0 [ 1703.275807][T29795] ? aa_sk_perm+0x81f/0x950 [ 1703.280356][T29795] ? __might_fault+0xa6/0x120 [ 1703.285062][T29795] ? unix_dgram_poll+0x680/0x680 [ 1703.290034][T29795] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1703.296493][T29795] ? aa_sock_msg_perm+0x94/0x150 [ 1703.301464][T29795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1703.306784][T29795] ? security_socket_sendmsg+0x7c/0xa0 [ 1703.312284][T29795] ? unix_dgram_poll+0x680/0x680 [ 1703.317007][T29801] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.7749'. [ 1703.317240][T29795] ____sys_sendmsg+0x5be/0x970 [ 1703.331417][T29795] ? __sys_sendmsg_sock+0x30/0x30 [ 1703.336482][T29795] ? __import_iovec+0x315/0x500 [ 1703.341374][T29795] ? import_iovec+0x6f/0xa0 [ 1703.345908][T29795] ___sys_sendmsg+0x2a2/0x360 [ 1703.350623][T29795] ? __sys_sendmsg+0x290/0x290 [ 1703.355442][T29795] ? __lock_acquire+0x7d10/0x7d10 [ 1703.360521][T29795] __se_sys_sendmsg+0x1bb/0x2a0 [ 1703.365411][T29795] ? __x64_sys_sendmsg+0x80/0x80 [ 1703.370406][T29795] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.375639][T29795] do_syscall_64+0x4c/0xa0 [ 1703.380096][T29795] ? clear_bhb_loop+0x60/0xb0 [ 1703.384807][T29795] ? clear_bhb_loop+0x60/0xb0 [ 1703.389519][T29795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.395441][T29795] RIP: 0033:0x7f5c90f9c629 [ 1703.399892][T29795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.419620][T29795] RSP: 002b:00007f5c91ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.428046][T29795] RAX: ffffffffffffffda RBX: 00007f5c91215fa0 RCX: 00007f5c90f9c629 [ 1703.436028][T29795] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1703.444098][T29795] RBP: 00007f5c91ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.452075][T29795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.460070][T29795] R13: 00007f5c91216038 R14: 00007f5c91215fa0 R15: 00007ffdc532b548 [ 1703.468062][T29795] [ 1704.558667][T29826] netlink: 'syz.3.7755': attribute type 3 has an invalid length. [ 1704.595276][T29826] netlink: 'syz.3.7755': attribute type 1 has an invalid length. [ 1704.624228][T29826] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1704.865769][T29835] FAULT_INJECTION: forcing a failure. [ 1704.865769][T29835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.884647][T29835] CPU: 1 PID: 29835 Comm: syz.5.7758 Not tainted syzkaller #0 [ 1704.892170][T29835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.902259][T29835] Call Trace: [ 1704.905568][T29835] [ 1704.908616][T29835] dump_stack_lvl+0x188/0x24e [ 1704.913342][T29835] ? show_regs_print_info+0x12/0x12 [ 1704.918664][T29835] ? load_image+0x400/0x400 [ 1704.923285][T29835] ? __lock_acquire+0x7d10/0x7d10 [ 1704.928348][T29835] ? __virt_addr_valid+0x188/0x540 [ 1704.933496][T29835] should_fail_ex+0x399/0x4d0 [ 1704.938220][T29835] _copy_from_user+0x2c/0x170 [ 1704.942941][T29835] btf_new_fd+0x324/0x780 [ 1704.947323][T29835] __sys_bpf+0x612/0x780 [ 1704.951608][T29835] ? bpf_link_show_fdinfo+0x380/0x380 [ 1704.957053][T29835] ? lock_chain_count+0x20/0x20 [ 1704.961961][T29835] __x64_sys_bpf+0x78/0x90 [ 1704.966420][T29835] do_syscall_64+0x4c/0xa0 [ 1704.970957][T29835] ? clear_bhb_loop+0x60/0xb0 [ 1704.975738][T29835] ? clear_bhb_loop+0x60/0xb0 [ 1704.980429][T29835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.986330][T29835] RIP: 0033:0x7f583539c629 [ 1704.990750][T29835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.010364][T29835] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1705.018795][T29835] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1705.026779][T29835] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1705.034948][T29835] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.042924][T29835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.050996][T29835] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1705.058987][T29835] [ 1705.133272][T29836] delete_channel: no stack [ 1705.408822][T29839] device syzkaller0 entered promiscuous mode [ 1708.629288][T29873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.644275][T29873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.706247][T29873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.736907][T29873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.224868][T29907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1710.399106][T29907] netlink: 'syz.2.7781': attribute type 1 has an invalid length. [ 1710.414715][T29907] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1711.377967][T29914] delete_channel: no stack [ 1714.310715][T29964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.448016][T29964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.514936][T29964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.678030][T29964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.851012][T29964] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1715.063786][T29964] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1726.408957][T30172] tap0: tun_chr_ioctl cmd 1074025672 [ 1726.414370][T30172] tap0: ignored: set checksum enabled [ 1726.462852][T30173] device syzkaller0 entered promiscuous mode [ 1730.210079][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.230088][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.721014][T30237] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 1731.737306][T30240] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 1740.234375][T30551] FAULT_INJECTION: forcing a failure. [ 1740.234375][T30551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.276825][T30551] CPU: 0 PID: 30551 Comm: syz.0.8052 Not tainted syzkaller #0 [ 1740.284356][T30551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1740.294451][T30551] Call Trace: [ 1740.297762][T30551] [ 1740.300735][T30551] dump_stack_lvl+0x188/0x24e [ 1740.305465][T30551] ? show_regs_print_info+0x12/0x12 [ 1740.310711][T30551] ? load_image+0x400/0x400 [ 1740.315254][T30551] ? __lock_acquire+0x7d10/0x7d10 [ 1740.320327][T30551] should_fail_ex+0x399/0x4d0 [ 1740.325052][T30551] _copy_from_user+0x2c/0x170 [ 1740.329774][T30551] ___sys_sendmsg+0x1c3/0x360 [ 1740.334503][T30551] ? __sys_sendmsg+0x290/0x290 [ 1740.339334][T30551] ? __lock_acquire+0x7d10/0x7d10 [ 1740.344398][T30551] __se_sys_sendmsg+0x1bb/0x2a0 [ 1740.349258][T30551] ? __x64_sys_sendmsg+0x80/0x80 [ 1740.354226][T30551] ? lockdep_hardirqs_on+0x94/0x140 [ 1740.359420][T30551] do_syscall_64+0x4c/0xa0 [ 1740.363842][T30551] ? clear_bhb_loop+0x60/0xb0 [ 1740.368518][T30551] ? clear_bhb_loop+0x60/0xb0 [ 1740.373191][T30551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1740.379090][T30551] RIP: 0033:0x7f9a1c39c629 [ 1740.383515][T30551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.403217][T30551] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.411660][T30551] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1740.419645][T30551] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1740.427980][T30551] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.435951][T30551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.443921][T30551] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1740.452166][T30551] [ 1740.820040][T30560] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.8056'. [ 1741.935003][T30586] FAULT_INJECTION: forcing a failure. [ 1741.935003][T30586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.980209][T30586] CPU: 1 PID: 30586 Comm: syz.3.8064 Not tainted syzkaller #0 [ 1741.987756][T30586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1741.997844][T30586] Call Trace: [ 1742.001150][T30586] [ 1742.004100][T30586] dump_stack_lvl+0x188/0x24e [ 1742.008806][T30586] ? show_regs_print_info+0x12/0x12 [ 1742.014020][T30586] ? load_image+0x400/0x400 [ 1742.018570][T30586] ? __lock_acquire+0x7d10/0x7d10 [ 1742.023612][T30586] should_fail_ex+0x399/0x4d0 [ 1742.028322][T30586] _copy_from_user+0x2c/0x170 [ 1742.033009][T30586] ___sys_recvmsg+0x172/0x590 [ 1742.037711][T30586] ? __sys_recvmsg+0x290/0x290 [ 1742.042495][T30586] ? common_file_perm+0x171/0x1c0 [ 1742.047581][T30586] ? __fget_files+0x43d/0x4b0 [ 1742.052287][T30586] __x64_sys_recvmsg+0x205/0x2e0 [ 1742.057332][T30586] ? ___sys_recvmsg+0x590/0x590 [ 1742.062213][T30586] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.067419][T30586] do_syscall_64+0x4c/0xa0 [ 1742.071857][T30586] ? clear_bhb_loop+0x60/0xb0 [ 1742.076552][T30586] ? clear_bhb_loop+0x60/0xb0 [ 1742.081237][T30586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.087136][T30586] RIP: 0033:0x7f550839c629 [ 1742.091562][T30586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.111184][T30586] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1742.119607][T30586] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1742.127587][T30586] RDX: 0000000000000000 RSI: 0000200000001480 RDI: 0000000000000003 [ 1742.135562][T30586] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.143545][T30586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.151524][T30586] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1742.159517][T30586] [ 1742.302978][T30591] FAULT_INJECTION: forcing a failure. [ 1742.302978][T30591] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.324128][T30591] CPU: 1 PID: 30591 Comm: syz.3.8067 Not tainted syzkaller #0 [ 1742.331655][T30591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1742.341826][T30591] Call Trace: [ 1742.345129][T30591] [ 1742.348090][T30591] dump_stack_lvl+0x188/0x24e [ 1742.352811][T30591] ? show_regs_print_info+0x12/0x12 [ 1742.358053][T30591] ? load_image+0x400/0x400 [ 1742.362593][T30591] ? __might_sleep+0xd0/0xd0 [ 1742.367220][T30591] ? __lock_acquire+0x7d10/0x7d10 [ 1742.372289][T30591] should_fail_ex+0x399/0x4d0 [ 1742.377019][T30591] should_failslab+0x5/0x20 [ 1742.381561][T30591] slab_pre_alloc_hook+0x59/0x310 [ 1742.386623][T30591] kmem_cache_alloc_node+0x5a/0x320 [ 1742.391854][T30591] ? lock_chain_count+0x20/0x20 [ 1742.396748][T30591] ? dup_task_struct+0x57/0x6b0 [ 1742.401635][T30591] dup_task_struct+0x57/0x6b0 [ 1742.406352][T30591] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.411579][T30591] copy_process+0x5fa/0x4030 [ 1742.416198][T30591] ? __lock_acquire+0x7d10/0x7d10 [ 1742.421287][T30591] ? idle_dummy+0x10/0x10 [ 1742.425664][T30591] kernel_clone+0x24b/0x900 [ 1742.430192][T30591] ? ksys_write+0x1c0/0x250 [ 1742.434745][T30591] ? create_io_thread+0x170/0x170 [ 1742.439816][T30591] __x64_sys_clone+0x1a7/0x220 [ 1742.444603][T30591] ? __fget_files+0x43d/0x4b0 [ 1742.449319][T30591] ? __ia32_sys_vfork+0x140/0x140 [ 1742.454376][T30591] ? lock_chain_count+0x20/0x20 [ 1742.459263][T30591] ? lockdep_hardirqs_on+0x94/0x140 [ 1742.464490][T30591] do_syscall_64+0x4c/0xa0 [ 1742.468934][T30591] ? clear_bhb_loop+0x60/0xb0 [ 1742.473653][T30591] ? clear_bhb_loop+0x60/0xb0 [ 1742.478364][T30591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.484297][T30591] RIP: 0033:0x7f550839c629 [ 1742.488752][T30591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.508401][T30591] RSP: 002b:00007f55092b2fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1742.516846][T30591] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1742.524845][T30591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.532847][T30591] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.540932][T30591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.549016][T30591] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1742.557040][T30591] [ 1744.129358][T30628] FAULT_INJECTION: forcing a failure. [ 1744.129358][T30628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.171722][T30628] CPU: 1 PID: 30628 Comm: syz.4.8080 Not tainted syzkaller #0 [ 1744.179349][T30628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1744.189445][T30628] Call Trace: [ 1744.192766][T30628] [ 1744.195731][T30628] dump_stack_lvl+0x188/0x24e [ 1744.200457][T30628] ? show_regs_print_info+0x12/0x12 [ 1744.205703][T30628] ? load_image+0x400/0x400 [ 1744.210248][T30628] ? __lock_acquire+0x7d10/0x7d10 [ 1744.215314][T30628] should_fail_ex+0x399/0x4d0 [ 1744.220041][T30628] _copy_from_user+0x2c/0x170 [ 1744.224760][T30628] ___sys_recvmsg+0x172/0x590 [ 1744.229499][T30628] ? __sys_recvmsg+0x290/0x290 [ 1744.234318][T30628] ? common_file_perm+0x171/0x1c0 [ 1744.239398][T30628] ? __fget_files+0x43d/0x4b0 [ 1744.244127][T30628] __x64_sys_recvmsg+0x205/0x2e0 [ 1744.249110][T30628] ? ___sys_recvmsg+0x590/0x590 [ 1744.254196][T30628] ? lockdep_hardirqs_on+0x94/0x140 [ 1744.259433][T30628] do_syscall_64+0x4c/0xa0 [ 1744.263890][T30628] ? clear_bhb_loop+0x60/0xb0 [ 1744.268626][T30628] ? clear_bhb_loop+0x60/0xb0 [ 1744.273344][T30628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.279269][T30628] RIP: 0033:0x7f150479c629 [ 1744.283800][T30628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.303443][T30628] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1744.311904][T30628] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1744.319906][T30628] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1744.327891][T30628] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1744.335877][T30628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.343861][T30628] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1744.351857][T30628] [ 1745.110040][T30652] FAULT_INJECTION: forcing a failure. [ 1745.110040][T30652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.171211][T30652] CPU: 1 PID: 30652 Comm: syz.3.8091 Not tainted syzkaller #0 [ 1745.178747][T30652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1745.188832][T30652] Call Trace: [ 1745.192138][T30652] [ 1745.195099][T30652] dump_stack_lvl+0x188/0x24e [ 1745.199823][T30652] ? show_regs_print_info+0x12/0x12 [ 1745.205053][T30652] ? load_image+0x400/0x400 [ 1745.209592][T30652] ? __lock_acquire+0x7d10/0x7d10 [ 1745.214658][T30652] should_fail_ex+0x399/0x4d0 [ 1745.219381][T30652] _copy_from_user+0x2c/0x170 [ 1745.224096][T30652] ___sys_recvmsg+0x172/0x590 [ 1745.228819][T30652] ? __sys_recvmsg+0x290/0x290 [ 1745.233624][T30652] ? common_file_perm+0x171/0x1c0 [ 1745.238717][T30652] ? __fget_files+0x43d/0x4b0 [ 1745.243442][T30652] __x64_sys_recvmsg+0x205/0x2e0 [ 1745.248417][T30652] ? ___sys_recvmsg+0x590/0x590 [ 1745.253314][T30652] ? lockdep_hardirqs_on+0x94/0x140 [ 1745.258546][T30652] do_syscall_64+0x4c/0xa0 [ 1745.262989][T30652] ? clear_bhb_loop+0x60/0xb0 [ 1745.267696][T30652] ? clear_bhb_loop+0x60/0xb0 [ 1745.272406][T30652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.278332][T30652] RIP: 0033:0x7f550839c629 [ 1745.282777][T30652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.302423][T30652] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1745.310870][T30652] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1745.318964][T30652] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1745.326971][T30652] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.334972][T30652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.342975][T30652] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1745.350995][T30652] [ 1747.369152][T30706] FAULT_INJECTION: forcing a failure. [ 1747.369152][T30706] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.390304][T30706] CPU: 1 PID: 30706 Comm: syz.5.8112 Not tainted syzkaller #0 [ 1747.397804][T30706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1747.407944][T30706] Call Trace: [ 1747.411244][T30706] [ 1747.414188][T30706] dump_stack_lvl+0x188/0x24e [ 1747.418894][T30706] ? show_regs_print_info+0x12/0x12 [ 1747.424109][T30706] ? load_image+0x400/0x400 [ 1747.428633][T30706] ? __might_sleep+0xd0/0xd0 [ 1747.433231][T30706] ? __lock_acquire+0x7d10/0x7d10 [ 1747.438278][T30706] should_fail_ex+0x399/0x4d0 [ 1747.442979][T30706] should_failslab+0x5/0x20 [ 1747.447499][T30706] slab_pre_alloc_hook+0x59/0x310 [ 1747.452535][T30706] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1747.458362][T30706] __kmem_cache_alloc_node+0x4f/0x260 [ 1747.463749][T30706] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1747.469480][T30706] __kmalloc+0xa0/0x240 [ 1747.473654][T30706] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1747.479243][T30706] ? tomoyo_path_number_perm+0x205/0x650 [ 1747.484906][T30706] tomoyo_path_number_perm+0x22f/0x650 [ 1747.490392][T30706] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1747.497001][T30706] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1747.502482][T30706] ? ksys_write+0x1c0/0x250 [ 1747.507014][T30706] ? common_file_perm+0x171/0x1c0 [ 1747.512082][T30706] ? __fget_files+0x28/0x4b0 [ 1747.516686][T30706] ? __fget_files+0x28/0x4b0 [ 1747.521303][T30706] security_file_ioctl+0x6c/0xa0 [ 1747.526257][T30706] __se_sys_ioctl+0x48/0x170 [ 1747.530864][T30706] do_syscall_64+0x4c/0xa0 [ 1747.535293][T30706] ? clear_bhb_loop+0x60/0xb0 [ 1747.539979][T30706] ? clear_bhb_loop+0x60/0xb0 [ 1747.544666][T30706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1747.550583][T30706] RIP: 0033:0x7f583539c629 [ 1747.555008][T30706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.574625][T30706] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.583053][T30706] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1747.591031][T30706] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000006 [ 1747.599012][T30706] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.606990][T30706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.614965][T30706] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1747.622958][T30706] [ 1747.846869][T30706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.229888][T30724] FAULT_INJECTION: forcing a failure. [ 1748.229888][T30724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.268318][T30724] CPU: 0 PID: 30724 Comm: syz.4.8118 Not tainted syzkaller #0 [ 1748.275854][T30724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1748.285949][T30724] Call Trace: [ 1748.289260][T30724] [ 1748.292317][T30724] dump_stack_lvl+0x188/0x24e [ 1748.297048][T30724] ? show_regs_print_info+0x12/0x12 [ 1748.302291][T30724] ? load_image+0x400/0x400 [ 1748.306835][T30724] ? __lock_acquire+0x7d10/0x7d10 [ 1748.311903][T30724] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1748.317599][T30724] should_fail_ex+0x399/0x4d0 [ 1748.322324][T30724] _copy_from_user+0x2c/0x170 [ 1748.327057][T30724] ___sys_sendmsg+0x1c3/0x360 [ 1748.331815][T30724] ? __sys_sendmsg+0x290/0x290 [ 1748.336664][T30724] ? __lock_acquire+0x7d10/0x7d10 [ 1748.341770][T30724] __se_sys_sendmsg+0x1bb/0x2a0 [ 1748.346662][T30724] ? ct_nmi_exit+0x145/0x1c0 [ 1748.351291][T30724] ? __x64_sys_sendmsg+0x80/0x80 [ 1748.356297][T30724] ? lockdep_hardirqs_on+0x94/0x140 [ 1748.361533][T30724] do_syscall_64+0x4c/0xa0 [ 1748.365997][T30724] ? clear_bhb_loop+0x60/0xb0 [ 1748.370707][T30724] ? clear_bhb_loop+0x60/0xb0 [ 1748.375419][T30724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.381348][T30724] RIP: 0033:0x7f150479c629 [ 1748.385795][T30724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.405439][T30724] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1748.413889][T30724] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1748.421989][T30724] RDX: 000000000000fc40 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1748.430074][T30724] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.438078][T30724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.446080][T30724] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1748.454103][T30724] [ 1748.483969][T30732] netlink: 'syz.5.8120': attribute type 10 has an invalid length. [ 1748.512493][T30732] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8120'. [ 1748.540660][T30732] device dummy0 entered promiscuous mode [ 1748.567326][T30732] bridge0: port 2(dummy0) entered blocking state [ 1748.609879][T30732] bridge0: port 2(dummy0) entered disabled state [ 1748.641909][T30732] bridge0: port 2(dummy0) entered blocking state [ 1748.648439][T30732] bridge0: port 2(dummy0) entered forwarding state [ 1750.324286][T30776] FAULT_INJECTION: forcing a failure. [ 1750.324286][T30776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.360233][T30776] CPU: 0 PID: 30776 Comm: syz.4.8138 Not tainted syzkaller #0 [ 1750.367768][T30776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1750.377866][T30776] Call Trace: [ 1750.381173][T30776] [ 1750.384138][T30776] dump_stack_lvl+0x188/0x24e [ 1750.388857][T30776] ? show_regs_print_info+0x12/0x12 [ 1750.394081][T30776] ? load_image+0x400/0x400 [ 1750.398611][T30776] ? __lock_acquire+0x7d10/0x7d10 [ 1750.403744][T30776] should_fail_ex+0x399/0x4d0 [ 1750.408446][T30776] _copy_from_user+0x2c/0x170 [ 1750.413134][T30776] __sys_bpf+0x2ea/0x780 [ 1750.417394][T30776] ? bpf_link_show_fdinfo+0x380/0x380 [ 1750.422789][T30776] ? lock_chain_count+0x20/0x20 [ 1750.427666][T30776] __x64_sys_bpf+0x78/0x90 [ 1750.432095][T30776] do_syscall_64+0x4c/0xa0 [ 1750.436520][T30776] ? clear_bhb_loop+0x60/0xb0 [ 1750.441209][T30776] ? clear_bhb_loop+0x60/0xb0 [ 1750.445892][T30776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1750.451789][T30776] RIP: 0033:0x7f150479c629 [ 1750.456210][T30776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.475822][T30776] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1750.484256][T30776] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1750.492233][T30776] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 1750.500216][T30776] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.508195][T30776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.516167][T30776] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1750.524162][T30776] [ 1751.345507][T30799] FAULT_INJECTION: forcing a failure. [ 1751.345507][T30799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1751.447796][T30799] CPU: 0 PID: 30799 Comm: syz.3.8146 Not tainted syzkaller #0 [ 1751.455329][T30799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1751.465414][T30799] Call Trace: [ 1751.468718][T30799] [ 1751.471676][T30799] dump_stack_lvl+0x188/0x24e [ 1751.476493][T30799] ? show_regs_print_info+0x12/0x12 [ 1751.481734][T30799] ? load_image+0x400/0x400 [ 1751.486263][T30799] ? __lock_acquire+0x7d10/0x7d10 [ 1751.491328][T30799] should_fail_ex+0x399/0x4d0 [ 1751.496052][T30799] _copy_from_user+0x2c/0x170 [ 1751.500751][T30799] __sys_bpf+0x2ea/0x780 [ 1751.505015][T30799] ? bpf_link_show_fdinfo+0x380/0x380 [ 1751.510449][T30799] ? lock_chain_count+0x20/0x20 [ 1751.515344][T30799] __x64_sys_bpf+0x78/0x90 [ 1751.519781][T30799] do_syscall_64+0x4c/0xa0 [ 1751.524239][T30799] ? clear_bhb_loop+0x60/0xb0 [ 1751.528951][T30799] ? clear_bhb_loop+0x60/0xb0 [ 1751.533672][T30799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1751.539615][T30799] RIP: 0033:0x7f550839c629 [ 1751.544059][T30799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.563708][T30799] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1751.572143][T30799] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1751.580130][T30799] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1751.588114][T30799] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.596092][T30799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.604073][T30799] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1751.612071][T30799] [ 1752.753127][T30832] netlink: 'syz.0.8159': attribute type 3 has an invalid length. [ 1752.763781][T30832] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1753.337013][T30845] netlink: 'syz.3.8164': attribute type 29 has an invalid length. [ 1753.902837][T30858] FAULT_INJECTION: forcing a failure. [ 1753.902837][T30858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.926553][T30858] CPU: 1 PID: 30858 Comm: syz.0.8169 Not tainted syzkaller #0 [ 1753.934077][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1753.944164][T30858] Call Trace: [ 1753.947473][T30858] [ 1753.950432][T30858] dump_stack_lvl+0x188/0x24e [ 1753.955155][T30858] ? show_regs_print_info+0x12/0x12 [ 1753.960396][T30858] ? load_image+0x400/0x400 [ 1753.964933][T30858] ? __lock_acquire+0x7d10/0x7d10 [ 1753.970020][T30858] should_fail_ex+0x399/0x4d0 [ 1753.974739][T30858] _copy_from_user+0x2c/0x170 [ 1753.979451][T30858] ___sys_sendmsg+0x1c3/0x360 [ 1753.984176][T30858] ? __sys_sendmsg+0x290/0x290 [ 1753.989000][T30858] ? __lock_acquire+0x7d10/0x7d10 [ 1753.994093][T30858] __se_sys_sendmsg+0x1bb/0x2a0 [ 1753.998992][T30858] ? __x64_sys_sendmsg+0x80/0x80 [ 1754.003986][T30858] ? lockdep_hardirqs_on+0x94/0x140 [ 1754.009222][T30858] do_syscall_64+0x4c/0xa0 [ 1754.013681][T30858] ? clear_bhb_loop+0x60/0xb0 [ 1754.018395][T30858] ? clear_bhb_loop+0x60/0xb0 [ 1754.023111][T30858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1754.029035][T30858] RIP: 0033:0x7f9a1c39c629 [ 1754.033482][T30858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.053124][T30858] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1754.059203][T30863] FAULT_INJECTION: forcing a failure. [ 1754.059203][T30863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.061555][T30858] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1754.061573][T30858] RDX: 00000000040000d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 1754.061587][T30858] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.061600][T30858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.106551][T30858] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1754.114736][T30858] [ 1754.117857][T30863] CPU: 0 PID: 30863 Comm: syz.4.8172 Not tainted syzkaller #0 [ 1754.125346][T30863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1754.135438][T30863] Call Trace: [ 1754.138724][T30863] [ 1754.141659][T30863] dump_stack_lvl+0x188/0x24e [ 1754.146352][T30863] ? show_regs_print_info+0x12/0x12 [ 1754.151563][T30863] ? load_image+0x400/0x400 [ 1754.156082][T30863] ? __lock_acquire+0x7d10/0x7d10 [ 1754.161127][T30863] should_fail_ex+0x399/0x4d0 [ 1754.165824][T30863] _copy_from_user+0x2c/0x170 [ 1754.170513][T30863] __sys_bpf+0x2ea/0x780 [ 1754.174775][T30863] ? bpf_link_show_fdinfo+0x380/0x380 [ 1754.180178][T30863] ? lock_chain_count+0x20/0x20 [ 1754.185138][T30863] __x64_sys_bpf+0x78/0x90 [ 1754.189570][T30863] do_syscall_64+0x4c/0xa0 [ 1754.193993][T30863] ? clear_bhb_loop+0x60/0xb0 [ 1754.198680][T30863] ? clear_bhb_loop+0x60/0xb0 [ 1754.203363][T30863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1754.209267][T30863] RIP: 0033:0x7f150479c629 [ 1754.213690][T30863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.233397][T30863] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1754.241819][T30863] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1754.249798][T30863] RDX: 000000000000000c RSI: 00002000000000c0 RDI: 000000000000000a [ 1754.257773][T30863] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.265747][T30863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.273726][T30863] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1754.281749][T30863] [ 1755.369863][T30880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8177'. [ 1755.407540][T30880] device batadv_slave_1 entered promiscuous mode [ 1755.843928][T30897] FAULT_INJECTION: forcing a failure. [ 1755.843928][T30897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.897095][T30897] CPU: 0 PID: 30897 Comm: syz.0.8185 Not tainted syzkaller #0 [ 1755.904660][T30897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1755.914773][T30897] Call Trace: [ 1755.918079][T30897] [ 1755.921064][T30897] dump_stack_lvl+0x188/0x24e [ 1755.925793][T30897] ? show_regs_print_info+0x12/0x12 [ 1755.931031][T30897] ? load_image+0x400/0x400 [ 1755.935585][T30897] ? __lock_acquire+0x7d10/0x7d10 [ 1755.940665][T30897] should_fail_ex+0x399/0x4d0 [ 1755.945397][T30897] _copy_from_user+0x2c/0x170 [ 1755.950118][T30897] ___sys_sendmsg+0x1c3/0x360 [ 1755.954846][T30897] ? __sys_sendmsg+0x290/0x290 [ 1755.959697][T30897] ? __lock_acquire+0x7d10/0x7d10 [ 1755.964993][T30897] __se_sys_sendmsg+0x1bb/0x2a0 [ 1755.969884][T30897] ? __x64_sys_sendmsg+0x80/0x80 [ 1755.974893][T30897] ? lockdep_hardirqs_on+0x94/0x140 [ 1755.980124][T30897] do_syscall_64+0x4c/0xa0 [ 1755.984567][T30897] ? clear_bhb_loop+0x60/0xb0 [ 1755.989272][T30897] ? clear_bhb_loop+0x60/0xb0 [ 1755.993980][T30897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1755.999894][T30897] RIP: 0033:0x7f9a1c39c629 [ 1756.004335][T30897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.023966][T30897] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1756.032408][T30897] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1756.040401][T30897] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1756.048398][T30897] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.056390][T30897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.064391][T30897] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1756.072426][T30897] [ 1757.417891][T30925] FAULT_INJECTION: forcing a failure. [ 1757.417891][T30925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.481897][T30925] CPU: 0 PID: 30925 Comm: syz.5.8195 Not tainted syzkaller #0 [ 1757.489432][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1757.499788][T30925] Call Trace: [ 1757.503099][T30925] [ 1757.506068][T30925] dump_stack_lvl+0x188/0x24e [ 1757.510786][T30925] ? show_regs_print_info+0x12/0x12 [ 1757.516114][T30925] ? load_image+0x400/0x400 [ 1757.520660][T30925] ? __lock_acquire+0x7d10/0x7d10 [ 1757.525745][T30925] should_fail_ex+0x399/0x4d0 [ 1757.530481][T30925] _copy_from_user+0x2c/0x170 [ 1757.535208][T30925] ___sys_sendmsg+0x1c3/0x360 [ 1757.539935][T30925] ? __sys_sendmsg+0x290/0x290 [ 1757.544767][T30925] ? trace_call_bpf+0xbf/0x6b0 [ 1757.549601][T30925] __se_sys_sendmsg+0x1bb/0x2a0 [ 1757.554498][T30925] ? __x64_sys_sendmsg+0x80/0x80 [ 1757.559497][T30925] ? lockdep_hardirqs_on+0x94/0x140 [ 1757.564746][T30925] do_syscall_64+0x4c/0xa0 [ 1757.569198][T30925] ? clear_bhb_loop+0x60/0xb0 [ 1757.573906][T30925] ? clear_bhb_loop+0x60/0xb0 [ 1757.578622][T30925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.584547][T30925] RIP: 0033:0x7f583539c629 [ 1757.588994][T30925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.608632][T30925] RSP: 002b:00007f58361dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1757.617096][T30925] RAX: ffffffffffffffda RBX: 00007f5835616090 RCX: 00007f583539c629 [ 1757.625189][T30925] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1757.633192][T30925] RBP: 00007f58361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.641194][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.649199][T30925] R13: 00007f5835616128 R14: 00007f5835616090 R15: 00007ffd51b61498 [ 1757.657225][T30925] [ 1758.461472][T30938] netlink: 'syz.3.8201': attribute type 11 has an invalid length. [ 1758.486564][T30938] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1758.541474][T30937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.556681][T30942] FAULT_INJECTION: forcing a failure. [ 1758.556681][T30942] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.569772][T30942] CPU: 1 PID: 30942 Comm: syz.0.8203 Not tainted syzkaller #0 [ 1758.577290][T30942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1758.587404][T30942] Call Trace: [ 1758.590734][T30942] [ 1758.593713][T30942] dump_stack_lvl+0x188/0x24e [ 1758.598468][T30942] ? show_regs_print_info+0x12/0x12 [ 1758.603746][T30942] ? load_image+0x400/0x400 [ 1758.608320][T30942] ? verify_lock_unused+0x140/0x140 [ 1758.613579][T30942] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1758.619342][T30942] should_fail_ex+0x399/0x4d0 [ 1758.624069][T30942] should_failslab+0x5/0x20 [ 1758.628687][T30942] slab_pre_alloc_hook+0x59/0x310 [ 1758.633750][T30942] ? ref_tracker_alloc+0x14e/0x4b0 [ 1758.638986][T30942] __kmem_cache_alloc_node+0x4f/0x260 [ 1758.644390][T30942] ? ref_tracker_alloc+0x14e/0x4b0 [ 1758.649555][T30942] kmalloc_trace+0x26/0xe0 [ 1758.654008][T30942] ref_tracker_alloc+0x14e/0x4b0 [ 1758.659071][T30942] ? ref_tracker_dir_print+0x150/0x150 [ 1758.664572][T30942] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1758.670603][T30942] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1758.676089][T30942] ? _raw_spin_lock+0x40/0x40 [ 1758.680810][T30942] linkwatch_fire_event+0x1a9/0x210 [ 1758.686051][T30942] __tun_detach+0xcbb/0x1500 [ 1758.690711][T30942] tun_chr_close+0x109/0x1b0 [ 1758.695334][T30942] ? tun_chr_open+0x4d0/0x4d0 [ 1758.700034][T30942] __fput+0x22c/0x920 [ 1758.704076][T30942] task_work_run+0x1d0/0x260 [ 1758.708706][T30942] ? task_work_cancel+0x220/0x220 [ 1758.713772][T30942] ? exit_to_user_mode_loop+0x3b/0x110 [ 1758.719273][T30942] exit_to_user_mode_loop+0xe6/0x110 [ 1758.724591][T30942] exit_to_user_mode_prepare+0xee/0x180 [ 1758.730170][T30942] syscall_exit_to_user_mode+0x16/0x40 [ 1758.735652][T30942] do_syscall_64+0x58/0xa0 [ 1758.740115][T30942] ? clear_bhb_loop+0x60/0xb0 [ 1758.744833][T30942] ? clear_bhb_loop+0x60/0xb0 [ 1758.749570][T30942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.755503][T30942] RIP: 0033:0x7f9a1c39c629 [ 1758.760040][T30942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.779676][T30942] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1758.788135][T30942] RAX: 0000000000000000 RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1758.796128][T30942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1758.804256][T30942] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.812251][T30942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.820245][T30942] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1758.828374][T30942] [ 1759.566326][T30947] delete_channel: no stack [ 1759.905905][T30961] FAULT_INJECTION: forcing a failure. [ 1759.905905][T30961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.969344][T30961] CPU: 1 PID: 30961 Comm: syz.3.8210 Not tainted syzkaller #0 [ 1759.976888][T30961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1759.986972][T30961] Call Trace: [ 1759.990280][T30961] [ 1759.993239][T30961] dump_stack_lvl+0x188/0x24e [ 1759.997964][T30961] ? show_regs_print_info+0x12/0x12 [ 1760.003207][T30961] ? load_image+0x400/0x400 [ 1760.007743][T30961] ? __lock_acquire+0x7d10/0x7d10 [ 1760.012801][T30961] should_fail_ex+0x399/0x4d0 [ 1760.017507][T30961] _copy_from_user+0x2c/0x170 [ 1760.022198][T30961] __sys_bpf+0x2ea/0x780 [ 1760.026470][T30961] ? bpf_link_show_fdinfo+0x380/0x380 [ 1760.031870][T30961] ? lock_chain_count+0x20/0x20 [ 1760.036743][T30961] __x64_sys_bpf+0x78/0x90 [ 1760.041175][T30961] do_syscall_64+0x4c/0xa0 [ 1760.045607][T30961] ? clear_bhb_loop+0x60/0xb0 [ 1760.050293][T30961] ? clear_bhb_loop+0x60/0xb0 [ 1760.055075][T30961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.060979][T30961] RIP: 0033:0x7f550839c629 [ 1760.065411][T30961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.085047][T30961] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1760.093503][T30961] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1760.101489][T30961] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1760.109473][T30961] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.117457][T30961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.125434][T30961] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1760.133435][T30961] [ 1762.724290][T30998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1763.235021][T31012] FAULT_INJECTION: forcing a failure. [ 1763.235021][T31012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.306953][T31012] CPU: 1 PID: 31012 Comm: syz.4.8228 Not tainted syzkaller #0 [ 1763.314493][T31012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1763.324580][T31012] Call Trace: [ 1763.327893][T31012] [ 1763.330864][T31012] dump_stack_lvl+0x188/0x24e [ 1763.335571][T31012] ? show_regs_print_info+0x12/0x12 [ 1763.340795][T31012] ? load_image+0x400/0x400 [ 1763.345315][T31012] ? __lock_acquire+0x7d10/0x7d10 [ 1763.350362][T31012] ? trace_call_bpf+0x5d6/0x6b0 [ 1763.355240][T31012] should_fail_ex+0x399/0x4d0 [ 1763.359948][T31012] _copy_from_user+0x2c/0x170 [ 1763.364645][T31012] __sys_bpf+0x2ea/0x780 [ 1763.368909][T31012] ? bpf_link_show_fdinfo+0x380/0x380 [ 1763.374308][T31012] ? lock_chain_count+0x20/0x20 [ 1763.379181][T31012] __x64_sys_bpf+0x78/0x90 [ 1763.383613][T31012] do_syscall_64+0x4c/0xa0 [ 1763.388050][T31012] ? clear_bhb_loop+0x60/0xb0 [ 1763.392736][T31012] ? clear_bhb_loop+0x60/0xb0 [ 1763.397433][T31012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.403376][T31012] RIP: 0033:0x7f150479c629 [ 1763.407806][T31012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.427423][T31012] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1763.435846][T31012] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1763.443829][T31012] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1763.452420][T31012] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.460401][T31012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.468378][T31012] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1763.476369][T31012] [ 1763.944053][T31025] sctp: [Deprecated]: syz.5.8231 (pid 31025) Use of int in maxseg socket option. [ 1763.944053][T31025] Use struct sctp_assoc_value instead [ 1765.334077][T31047] FAULT_INJECTION: forcing a failure. [ 1765.334077][T31047] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.347318][T31047] CPU: 1 PID: 31047 Comm: syz.3.8241 Not tainted syzkaller #0 [ 1765.354841][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1765.364954][T31047] Call Trace: [ 1765.368285][T31047] [ 1765.371267][T31047] dump_stack_lvl+0x188/0x24e [ 1765.376044][T31047] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1765.382008][T31047] ? show_regs_print_info+0x12/0x12 [ 1765.387279][T31047] ? load_image+0x400/0x400 [ 1765.391873][T31047] ? skb_network_protocol+0x525/0x780 [ 1765.397326][T31047] should_fail_ex+0x399/0x4d0 [ 1765.402088][T31047] should_failslab+0x5/0x20 [ 1765.406655][T31047] slab_pre_alloc_hook+0x59/0x310 [ 1765.411756][T31047] kmem_cache_alloc+0x56/0x2f0 [ 1765.416571][T31047] ? skb_clone+0x1e7/0x370 [ 1765.421034][T31047] skb_clone+0x1e7/0x370 [ 1765.425300][T31047] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 1765.430532][T31047] dev_queue_xmit_nit+0x249/0xbb0 [ 1765.435584][T31047] ? dev_queue_xmit_nit+0x29/0xbb0 [ 1765.440746][T31047] dev_hard_start_xmit+0x154/0x870 [ 1765.445925][T31047] __dev_queue_xmit+0x1a7f/0x37f0 [ 1765.451088][T31047] ? __dev_queue_xmit+0x26b/0x37f0 [ 1765.456249][T31047] ? netdev_core_pick_tx+0x340/0x340 [ 1765.461566][T31047] ? ref_tracker_alloc+0x34e/0x4b0 [ 1765.466709][T31047] ? __copy_skb_header+0x3ba/0x4f0 [ 1765.471861][T31047] ? memcpy+0x3c/0x60 [ 1765.475870][T31047] ? __copy_skb_header+0x3ba/0x4f0 [ 1765.481022][T31047] ? __skb_clone+0x480/0x790 [ 1765.485667][T31047] ? skb_clone+0x21b/0x370 [ 1765.490125][T31047] __netlink_deliver_tap+0x580/0x800 [ 1765.495487][T31047] ? netlink_deliver_tap+0x2e/0x1b0 [ 1765.500730][T31047] netlink_deliver_tap+0x19c/0x1b0 [ 1765.505884][T31047] netlink_unicast+0x728/0x8d0 [ 1765.510706][T31047] netlink_sendmsg+0x8ad/0xbd0 [ 1765.515524][T31047] ? netlink_getsockopt+0x550/0x550 [ 1765.520763][T31047] ? aa_sock_msg_perm+0x94/0x150 [ 1765.525762][T31047] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1765.531089][T31047] ? security_socket_sendmsg+0x7c/0xa0 [ 1765.536946][T31047] ? netlink_getsockopt+0x550/0x550 [ 1765.542182][T31047] ____sys_sendmsg+0x5be/0x970 [ 1765.547009][T31047] ? __sys_sendmsg_sock+0x30/0x30 [ 1765.552062][T31047] ? __import_iovec+0x315/0x500 [ 1765.556962][T31047] ? import_iovec+0x6f/0xa0 [ 1765.561496][T31047] ___sys_sendmsg+0x2a2/0x360 [ 1765.566224][T31047] ? __sys_sendmsg+0x290/0x290 [ 1765.571159][T31047] ? __lock_acquire+0x7d10/0x7d10 [ 1765.576308][T31047] __se_sys_sendmsg+0x1bb/0x2a0 [ 1765.581223][T31047] ? __x64_sys_sendmsg+0x80/0x80 [ 1765.586248][T31047] ? lockdep_hardirqs_on+0x94/0x140 [ 1765.591489][T31047] do_syscall_64+0x4c/0xa0 [ 1765.595943][T31047] ? clear_bhb_loop+0x60/0xb0 [ 1765.600649][T31047] ? clear_bhb_loop+0x60/0xb0 [ 1765.605362][T31047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.611376][T31047] RIP: 0033:0x7f550839c629 [ 1765.615907][T31047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.635547][T31047] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.643992][T31047] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1765.652052][T31047] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1765.660060][T31047] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.668064][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.676064][T31047] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1765.684110][T31047] [ 1769.251777][T31076] netlink: 'syz.2.8250': attribute type 21 has an invalid length. [ 1769.292226][T31076] netlink: 'syz.2.8250': attribute type 10 has an invalid length. [ 1769.418681][T31076] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1769.438788][T31080] FAULT_INJECTION: forcing a failure. [ 1769.438788][T31080] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.467029][T31080] CPU: 1 PID: 31080 Comm: syz.3.8252 Not tainted syzkaller #0 [ 1769.474571][T31080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.484662][T31080] Call Trace: [ 1769.487982][T31080] [ 1769.490935][T31080] dump_stack_lvl+0x188/0x24e [ 1769.495690][T31080] ? show_regs_print_info+0x12/0x12 [ 1769.500923][T31080] ? load_image+0x400/0x400 [ 1769.505463][T31080] ? __might_sleep+0xd0/0xd0 [ 1769.510082][T31080] ? __lock_acquire+0x7d10/0x7d10 [ 1769.515145][T31080] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1769.521165][T31080] should_fail_ex+0x399/0x4d0 [ 1769.525884][T31080] should_failslab+0x5/0x20 [ 1769.530433][T31080] slab_pre_alloc_hook+0x59/0x310 [ 1769.535489][T31080] ? lockdep_hardirqs_on+0x94/0x140 [ 1769.540720][T31080] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1769.546305][T31080] __kmem_cache_alloc_node+0x4f/0x260 [ 1769.551719][T31080] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1769.557302][T31080] __kmalloc+0xa0/0x240 [ 1769.561507][T31080] bpf_prog_test_run_skb+0x234/0x12a0 [ 1769.566918][T31080] ? __fget_files+0x28/0x4b0 [ 1769.571544][T31080] ? __fget_files+0x28/0x4b0 [ 1769.576173][T31080] ? __fget_files+0x43d/0x4b0 [ 1769.580904][T31080] ? cpu_online+0xa0/0xa0 [ 1769.585266][T31080] bpf_prog_test_run+0x31e/0x390 [ 1769.590250][T31080] __sys_bpf+0x62b/0x780 [ 1769.594531][T31080] ? bpf_link_show_fdinfo+0x380/0x380 [ 1769.599953][T31080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1769.606151][T31080] __x64_sys_bpf+0x78/0x90 [ 1769.610600][T31080] do_syscall_64+0x4c/0xa0 [ 1769.615054][T31080] ? clear_bhb_loop+0x60/0xb0 [ 1769.619762][T31080] ? clear_bhb_loop+0x60/0xb0 [ 1769.624475][T31080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1769.630403][T31080] RIP: 0033:0x7f550839c629 [ 1769.635281][T31080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.655013][T31080] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1769.663464][T31080] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1769.671495][T31080] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1769.679584][T31080] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.687582][T31080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.695586][T31080] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1769.703604][T31080] [ 1774.872265][T31191] netlink: 105084 bytes leftover after parsing attributes in process `syz.5.8291'. [ 1774.939398][T31191] netlink: 31 bytes leftover after parsing attributes in process `syz.5.8291'. [ 1776.770183][T31215] FAULT_INJECTION: forcing a failure. [ 1776.770183][T31215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.959013][T31215] CPU: 0 PID: 31215 Comm: syz.3.8297 Not tainted syzkaller #0 [ 1776.966588][T31215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1776.976689][T31215] Call Trace: [ 1776.980003][T31215] [ 1776.982961][T31215] dump_stack_lvl+0x188/0x24e [ 1776.987679][T31215] ? show_regs_print_info+0x12/0x12 [ 1776.992923][T31215] ? load_image+0x400/0x400 [ 1776.997473][T31215] ? __lock_acquire+0x7d10/0x7d10 [ 1777.002544][T31215] should_fail_ex+0x399/0x4d0 [ 1777.007263][T31215] _copy_from_user+0x2c/0x170 [ 1777.011980][T31215] bpf_prog_test_run_skb+0x262/0x12a0 [ 1777.017387][T31215] ? __fget_files+0x28/0x4b0 [ 1777.022098][T31215] ? __fget_files+0x28/0x4b0 [ 1777.026743][T31215] ? __fget_files+0x43d/0x4b0 [ 1777.031461][T31215] ? cpu_online+0xa0/0xa0 [ 1777.035819][T31215] bpf_prog_test_run+0x31e/0x390 [ 1777.040796][T31215] __sys_bpf+0x62b/0x780 [ 1777.045085][T31215] ? bpf_link_show_fdinfo+0x380/0x380 [ 1777.050503][T31215] ? lock_chain_count+0x20/0x20 [ 1777.055400][T31215] __x64_sys_bpf+0x78/0x90 [ 1777.059857][T31215] do_syscall_64+0x4c/0xa0 [ 1777.064415][T31215] ? clear_bhb_loop+0x60/0xb0 [ 1777.069121][T31215] ? clear_bhb_loop+0x60/0xb0 [ 1777.073844][T31215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.079775][T31215] RIP: 0033:0x7f550839c629 [ 1777.084229][T31215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.103867][T31215] RSP: 002b:00007f5509292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.112319][T31215] RAX: ffffffffffffffda RBX: 00007f5508616090 RCX: 00007f550839c629 [ 1777.120322][T31215] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1777.128323][T31215] RBP: 00007f5509292090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.136318][T31215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.144316][T31215] R13: 00007f5508616128 R14: 00007f5508616090 R15: 00007fff7123b208 [ 1777.152331][T31215] [ 1786.625523][T31386] FAULT_INJECTION: forcing a failure. [ 1786.625523][T31386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.716852][T31386] CPU: 1 PID: 31386 Comm: syz.2.8363 Not tainted syzkaller #0 [ 1786.724449][T31386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1786.734568][T31386] Call Trace: [ 1786.737870][T31386] [ 1786.740821][T31386] dump_stack_lvl+0x188/0x24e [ 1786.745540][T31386] ? show_regs_print_info+0x12/0x12 [ 1786.750771][T31386] ? load_image+0x400/0x400 [ 1786.755304][T31386] ? __lock_acquire+0x7d10/0x7d10 [ 1786.760391][T31386] should_fail_ex+0x399/0x4d0 [ 1786.765118][T31386] _copy_from_user+0x2c/0x170 [ 1786.769854][T31386] __sys_bpf+0x2ea/0x780 [ 1786.774155][T31386] ? bpf_link_show_fdinfo+0x380/0x380 [ 1786.779615][T31386] ? lock_chain_count+0x20/0x20 [ 1786.784530][T31386] __x64_sys_bpf+0x78/0x90 [ 1786.789079][T31386] do_syscall_64+0x4c/0xa0 [ 1786.793537][T31386] ? clear_bhb_loop+0x60/0xb0 [ 1786.798251][T31386] ? clear_bhb_loop+0x60/0xb0 [ 1786.802961][T31386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1786.808882][T31386] RIP: 0033:0x7f5c90f9c629 [ 1786.813410][T31386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.833037][T31386] RSP: 002b:00007f5c91ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1786.841482][T31386] RAX: ffffffffffffffda RBX: 00007f5c91215fa0 RCX: 00007f5c90f9c629 [ 1786.849477][T31386] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1786.857470][T31386] RBP: 00007f5c91ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.865472][T31386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.873635][T31386] R13: 00007f5c91216038 R14: 00007f5c91215fa0 R15: 00007ffdc532b548 [ 1786.881668][T31386] [ 1787.861468][T31407] netlink: 'syz.5.8371': attribute type 3 has an invalid length. [ 1787.876592][T31407] netlink: 'syz.5.8371': attribute type 7 has an invalid length. [ 1787.916827][T31407] netlink: 198388 bytes leftover after parsing attributes in process `syz.5.8371'. [ 1789.106374][T31434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8377'. [ 1789.209641][T31432] FAULT_INJECTION: forcing a failure. [ 1789.209641][T31432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.256750][T31432] CPU: 1 PID: 31432 Comm: syz.5.8376 Not tainted syzkaller #0 [ 1789.264281][T31432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1789.274383][T31432] Call Trace: [ 1789.277680][T31432] [ 1789.280633][T31432] dump_stack_lvl+0x188/0x24e [ 1789.285337][T31432] ? show_regs_print_info+0x12/0x12 [ 1789.290551][T31432] ? load_image+0x400/0x400 [ 1789.295064][T31432] ? __lock_acquire+0x7d10/0x7d10 [ 1789.300110][T31432] ? snprintf+0xe5/0x140 [ 1789.304365][T31432] should_fail_ex+0x399/0x4d0 [ 1789.309060][T31432] _copy_to_user+0x2c/0x130 [ 1789.313578][T31432] simple_read_from_buffer+0xe3/0x150 [ 1789.318971][T31432] proc_fail_nth_read+0x1a6/0x220 [ 1789.324005][T31432] ? proc_fault_inject_write+0x310/0x310 [ 1789.329651][T31432] ? fsnotify_perm+0x248/0x550 [ 1789.334425][T31432] ? proc_fault_inject_write+0x310/0x310 [ 1789.340079][T31432] vfs_read+0x2de/0xa00 [ 1789.344254][T31432] ? kernel_read+0x1e0/0x1e0 [ 1789.348856][T31432] ? __fget_files+0x28/0x4b0 [ 1789.353465][T31432] ? __fget_files+0x28/0x4b0 [ 1789.358071][T31432] ? __fget_files+0x43d/0x4b0 [ 1789.362768][T31432] ? __fdget_pos+0x2ae/0x360 [ 1789.367367][T31432] ? ksys_read+0x71/0x250 [ 1789.371711][T31432] ksys_read+0x14c/0x250 [ 1789.375966][T31432] ? vfs_write+0xa30/0xa30 [ 1789.380397][T31432] ? lockdep_hardirqs_on+0x94/0x140 [ 1789.385614][T31432] do_syscall_64+0x4c/0xa0 [ 1789.390126][T31432] ? clear_bhb_loop+0x60/0xb0 [ 1789.394809][T31432] ? clear_bhb_loop+0x60/0xb0 [ 1789.399499][T31432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.405409][T31432] RIP: 0033:0x7f583535cece [ 1789.409837][T31432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1789.429449][T31432] RSP: 002b:00007f58361fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1789.437957][T31432] RAX: ffffffffffffffda RBX: 00007f58361fd6c0 RCX: 00007f583535cece [ 1789.445941][T31432] RDX: 000000000000000f RSI: 00007f58361fd0a0 RDI: 0000000000000005 [ 1789.453920][T31432] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.461896][T31432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.469870][T31432] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1789.477879][T31432] [ 1791.651511][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.657930][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.275922][T31445] netlink: 'syz.2.8377': attribute type 10 has an invalid length. [ 1794.298228][T31469] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1794.304167][T31469] syzkaller0: linktype set to 769 [ 1794.309694][T31471] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1794.315575][T31472] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1794.325471][T31472] syzkaller0: linktype set to 769 [ 1794.330850][T31474] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1795.975505][T31539] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8407'. [ 1796.004486][T31539] netlink: zone id is out of range [ 1796.288902][T31551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1796.432227][T31559] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8413'. [ 1799.014906][T31591] netlink: 'syz.4.8424': attribute type 3 has an invalid length. [ 1799.056593][T31591] netlink: 'syz.4.8424': attribute type 7 has an invalid length. [ 1799.145621][T31591] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.8424'. [ 1800.651378][T31621] netlink: 'syz.3.8432': attribute type 5 has an invalid length. [ 1800.768733][T31621] netlink: 'syz.3.8432': attribute type 13 has an invalid length. [ 1800.799225][T31621] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1801.074217][T31629] netlink: 'syz.2.8435': attribute type 21 has an invalid length. [ 1801.138212][T31629] netlink: 14542 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1801.835490][T31646] netlink: 'syz.0.8440': attribute type 3 has an invalid length. [ 1801.909204][T31646] netlink: 'syz.0.8440': attribute type 7 has an invalid length. [ 1802.020124][T31646] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.8440'. [ 1802.491400][T31653] netlink: 'syz.4.8442': attribute type 25 has an invalid length. [ 1805.188763][T31708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1806.748801][T31735] netlink: 'syz.0.8468': attribute type 6 has an invalid length. [ 1806.775874][T31735] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8468'. [ 1810.602527][T31759] netlink: 'syz.0.8474': attribute type 5 has an invalid length. [ 1811.902823][T31767] netlink: 'syz.5.8478': attribute type 10 has an invalid length. [ 1811.918914][T31767] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8478'. [ 1811.977392][T31767] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1812.028766][T31783] netlink: 'syz.4.8485': attribute type 5 has an invalid length. [ 1812.050346][T31782] netlink: 'syz.3.8484': attribute type 39 has an invalid length. [ 1812.213203][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1812.240463][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1812.584262][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1812.632077][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1813.148513][T31800] netlink: 'syz.4.8491': attribute type 2 has an invalid length. [ 1814.492270][T31838] netlink: 'syz.4.8502': attribute type 6 has an invalid length. [ 1814.553001][T31838] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1814.842449][T31843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8504'. [ 1814.932781][T31843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8504'. [ 1815.210882][T31843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8504'. [ 1815.242817][T31848] netlink: 'syz.3.8506': attribute type 10 has an invalid length. [ 1815.261470][T31848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8506'. [ 1815.287256][T31848] device batadv0 entered promiscuous mode [ 1815.294649][T31848] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1815.820685][T31866] FAULT_INJECTION: forcing a failure. [ 1815.820685][T31866] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.843973][T31866] CPU: 0 PID: 31866 Comm: syz.2.8514 Not tainted syzkaller #0 [ 1815.851495][T31866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.861686][T31866] Call Trace: [ 1815.864991][T31866] [ 1815.867949][T31866] dump_stack_lvl+0x188/0x24e [ 1815.872668][T31866] ? show_regs_print_info+0x12/0x12 [ 1815.877911][T31866] ? load_image+0x400/0x400 [ 1815.882449][T31866] ? __might_sleep+0xd0/0xd0 [ 1815.887068][T31866] ? __lock_acquire+0x7d10/0x7d10 [ 1815.892149][T31866] should_fail_ex+0x399/0x4d0 [ 1815.896924][T31866] should_failslab+0x5/0x20 [ 1815.901466][T31866] slab_pre_alloc_hook+0x59/0x310 [ 1815.906523][T31866] ? apparmor_sk_alloc_security+0x74/0x100 [ 1815.912370][T31866] __kmem_cache_alloc_node+0x4f/0x260 [ 1815.917782][T31866] ? apparmor_sk_alloc_security+0x74/0x100 [ 1815.923636][T31866] kmalloc_trace+0x26/0xe0 [ 1815.928103][T31866] apparmor_sk_alloc_security+0x74/0x100 [ 1815.933803][T31866] security_sk_alloc+0x6a/0xa0 [ 1815.938610][T31866] sk_prot_alloc+0x101/0x210 [ 1815.943233][T31866] ? sk_alloc+0x20/0x340 [ 1815.947513][T31866] sk_alloc+0x36/0x340 [ 1815.951616][T31866] ? bpf_ctx_init+0x163/0x1a0 [ 1815.956325][T31866] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1815.961901][T31866] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1815.967307][T31866] ? __fget_files+0x28/0x4b0 [ 1815.971938][T31866] ? __fget_files+0x43d/0x4b0 [ 1815.976749][T31866] ? cpu_online+0xa0/0xa0 [ 1815.981147][T31866] bpf_prog_test_run+0x31e/0x390 [ 1815.986133][T31866] __sys_bpf+0x62b/0x780 [ 1815.990424][T31866] ? bpf_link_show_fdinfo+0x380/0x380 [ 1815.995848][T31866] ? lock_chain_count+0x20/0x20 [ 1816.000736][T31866] __x64_sys_bpf+0x78/0x90 [ 1816.005198][T31866] do_syscall_64+0x4c/0xa0 [ 1816.009651][T31866] ? clear_bhb_loop+0x60/0xb0 [ 1816.014373][T31866] ? clear_bhb_loop+0x60/0xb0 [ 1816.019092][T31866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.025017][T31866] RIP: 0033:0x7f5c90f9c629 [ 1816.029466][T31866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.049633][T31866] RSP: 002b:00007f5c91ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1816.058090][T31866] RAX: ffffffffffffffda RBX: 00007f5c91215fa0 RCX: 00007f5c90f9c629 [ 1816.066098][T31866] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1816.074118][T31866] RBP: 00007f5c91ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.082151][T31866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.090280][T31866] R13: 00007f5c91216038 R14: 00007f5c91215fa0 R15: 00007ffdc532b548 [ 1816.098329][T31866] [ 1818.928099][T31881] __nla_validate_parse: 1 callbacks suppressed [ 1818.928118][T31881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8520'. [ 1819.685647][T31860] device syzkaller0 entered promiscuous mode [ 1821.672795][T31881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8520'. [ 1821.902458][T31900] FAULT_INJECTION: forcing a failure. [ 1821.902458][T31900] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.915860][T31900] CPU: 1 PID: 31900 Comm: syz.5.8525 Not tainted syzkaller #0 [ 1821.922823][T31896] netlink: 'syz.2.8522': attribute type 6 has an invalid length. [ 1821.923342][T31900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1821.923358][T31900] Call Trace: [ 1821.923367][T31900] [ 1821.923376][T31900] dump_stack_lvl+0x188/0x24e [ 1821.923412][T31900] ? show_regs_print_info+0x12/0x12 [ 1821.923438][T31900] ? load_image+0x400/0x400 [ 1821.923464][T31900] ? __might_sleep+0xd0/0xd0 [ 1821.923493][T31900] ? __lock_acquire+0x7d10/0x7d10 [ 1821.923527][T31900] should_fail_ex+0x399/0x4d0 [ 1821.923562][T31900] should_failslab+0x5/0x20 [ 1821.923588][T31900] slab_pre_alloc_hook+0x59/0x310 [ 1821.923612][T31900] ? tomoyo_encode+0x27e/0x540 [ 1821.923640][T31900] __kmem_cache_alloc_node+0x4f/0x260 [ 1821.923668][T31900] ? tomoyo_encode+0x27e/0x540 [ 1821.923692][T31900] __kmalloc+0xa0/0x240 [ 1821.923723][T31900] tomoyo_encode+0x27e/0x540 [ 1821.923755][T31900] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1821.923796][T31900] ? tomoyo_path_number_perm+0x205/0x650 [ 1821.923821][T31900] tomoyo_path_number_perm+0x22f/0x650 [ 1821.923849][T31900] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1821.923874][T31900] ? ksys_write+0x1c0/0x250 [ 1821.923900][T31900] ? common_file_perm+0x171/0x1c0 [ 1821.923964][T31900] ? __fget_files+0x28/0x4b0 [ 1821.923988][T31900] ? __fget_files+0x28/0x4b0 [ 1821.924029][T31900] security_file_ioctl+0x6c/0xa0 [ 1821.924058][T31900] __se_sys_ioctl+0x48/0x170 [ 1821.924086][T31900] do_syscall_64+0x4c/0xa0 [ 1821.924109][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1821.924130][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1821.924155][T31900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.924176][T31900] RIP: 0033:0x7f583539c629 [ 1821.924196][T31900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.924213][T31900] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.924237][T31900] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1821.924253][T31900] RDX: 0000200000000000 RSI: 0000000000008994 RDI: 0000000000000004 [ 1821.924268][T31900] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.947454][T31898] FAULT_INJECTION: forcing a failure. [ 1821.947454][T31898] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.948280][T31900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.956692][T31896] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8522'. [ 1821.958142][T31900] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1821.958183][T31900] [ 1821.970840][T31900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1821.972009][T31898] CPU: 1 PID: 31898 Comm: syz.3.8524 Not tainted syzkaller #0 [ 1821.972034][T31898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1821.972049][T31898] Call Trace: [ 1821.972058][T31898] [ 1821.972070][T31898] dump_stack_lvl+0x188/0x24e [ 1821.972110][T31898] ? show_regs_print_info+0x12/0x12 [ 1821.972140][T31898] ? load_image+0x400/0x400 [ 1821.972171][T31898] ? __might_sleep+0xd0/0xd0 [ 1821.972196][T31898] ? __lock_acquire+0x7d10/0x7d10 [ 1821.972221][T31898] ? rcu_is_watching+0x11/0xa0 [ 1821.972260][T31898] should_fail_ex+0x399/0x4d0 [ 1821.972302][T31898] should_failslab+0x5/0x20 [ 1821.972329][T31898] slab_pre_alloc_hook+0x59/0x310 [ 1821.972369][T31898] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1821.972403][T31898] __kmem_cache_alloc_node+0x4f/0x260 [ 1821.972434][T31898] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1821.972463][T31898] kmalloc_trace+0x26/0xe0 [ 1821.972506][T31898] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1821.972561][T31898] sctp_association_new+0x15e5/0x25d0 [ 1821.972629][T31898] sctp_connect_new_asoc+0x2da/0x6a0 [ 1821.972667][T31898] ? __sctp_connect+0xd80/0xd80 [ 1821.972693][T31898] ? __local_bh_enable_ip+0x136/0x1c0 [ 1821.972728][T31898] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1821.972751][T31898] ? security_sctp_bind_connect+0x85/0xb0 [ 1821.972783][T31898] sctp_sendmsg+0x15b0/0x2940 [ 1821.972851][T31898] ? sctp_getsockopt+0x8a0/0x8a0 [ 1821.972882][T31898] ? __lock_acquire+0x7d10/0x7d10 [ 1821.972911][T31898] ? aa_af_perm+0x340/0x340 [ 1821.972934][T31898] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1821.972984][T31898] ? inet_sendmsg+0xe5/0x2f0 [ 1821.973020][T31898] ? inet_send_prepare+0x260/0x260 [ 1821.973048][T31898] ____sys_sendmsg+0x5be/0x970 [ 1821.973097][T31898] ? __sys_sendmsg_sock+0x30/0x30 [ 1821.973123][T31898] ? __import_iovec+0x315/0x500 [ 1821.973165][T31898] ? import_iovec+0x6f/0xa0 [ 1821.973197][T31898] ___sys_sendmsg+0x2a2/0x360 [ 1821.973238][T31898] ? __sys_sendmsg+0x290/0x290 [ 1821.973314][T31898] ? __lock_acquire+0x7d10/0x7d10 [ 1821.973396][T31898] __se_sys_sendmsg+0x1bb/0x2a0 [ 1821.973432][T31898] ? __x64_sys_sendmsg+0x80/0x80 [ 1821.973504][T31898] ? lockdep_hardirqs_on+0x94/0x140 [ 1821.973535][T31898] do_syscall_64+0x4c/0xa0 [ 1821.973558][T31898] ? clear_bhb_loop+0x60/0xb0 [ 1821.973581][T31898] ? clear_bhb_loop+0x60/0xb0 [ 1821.973608][T31898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.973630][T31898] RIP: 0033:0x7f550839c629 [ 1821.973653][T31898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.973671][T31898] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1821.973697][T31898] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1821.973713][T31898] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 1821.973727][T31898] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.973742][T31898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1821.973756][T31898] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1821.973805][T31898] [ 1824.109025][T31937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8547'. [ 1825.712025][T31958] netlink: 'syz.2.8546': attribute type 10 has an invalid length. [ 1826.286954][T31958] device wlan1 left promiscuous mode [ 1826.440790][T31968] FAULT_INJECTION: forcing a failure. [ 1826.440790][T31968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.513795][T31958] team0: Port device wlan1 removed [ 1826.524265][T31968] CPU: 1 PID: 31968 Comm: syz.4.8551 Not tainted syzkaller #0 [ 1826.531842][T31968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.541942][T31968] Call Trace: [ 1826.545267][T31968] [ 1826.548242][T31968] dump_stack_lvl+0x188/0x24e [ 1826.552985][T31968] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1826.559200][T31968] ? show_regs_print_info+0x12/0x12 [ 1826.564455][T31968] ? load_image+0x400/0x400 [ 1826.569059][T31968] should_fail_ex+0x399/0x4d0 [ 1826.573894][T31968] _copy_from_user+0x2c/0x170 [ 1826.578630][T31968] ___sys_recvmsg+0x172/0x590 [ 1826.583394][T31968] ? __sys_recvmsg+0x290/0x290 [ 1826.588283][T31968] ? __fget_files+0x43d/0x4b0 [ 1826.593068][T31968] __x64_sys_recvmsg+0x205/0x2e0 [ 1826.598069][T31968] ? ___sys_recvmsg+0x590/0x590 [ 1826.603047][T31968] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1826.609025][T31968] do_syscall_64+0x4c/0xa0 [ 1826.613627][T31968] ? clear_bhb_loop+0x60/0xb0 [ 1826.618363][T31968] ? clear_bhb_loop+0x60/0xb0 [ 1826.623114][T31968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1826.629103][T31968] RIP: 0033:0x7f150479c629 [ 1826.633570][T31968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.653312][T31968] RSP: 002b:00007f15056d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1826.661788][T31968] RAX: ffffffffffffffda RBX: 00007f1504a16090 RCX: 00007f150479c629 [ 1826.669812][T31968] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1826.677911][T31968] RBP: 00007f15056d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.685924][T31968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.693942][T31968] R13: 00007f1504a16128 R14: 00007f1504a16090 R15: 00007ffe472509f8 [ 1826.702037][T31968] [ 1826.775437][T31958] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1828.038233][T31983] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8554'. [ 1829.385161][T32002] netlink: 'syz.0.8561': attribute type 2 has an invalid length. [ 1829.454343][T32002] netlink: 'syz.0.8561': attribute type 8 has an invalid length. [ 1829.521516][T32002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8561'. [ 1832.439268][T32027] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8570'. [ 1834.002471][T32066] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1834.035023][T32066] netlink: 'syz.0.8584': attribute type 3 has an invalid length. [ 1834.075894][T32069] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8585'. [ 1834.076854][T32066] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1835.021234][T32106] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.8600'. [ 1835.067494][T32103] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1835.613103][T32116] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8604'. [ 1836.105482][T32125] netlink: 'syz.2.8606': attribute type 10 has an invalid length. [ 1836.869124][T32133] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8610'. [ 1836.917618][T32139] FAULT_INJECTION: forcing a failure. [ 1836.917618][T32139] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.016467][T32139] CPU: 0 PID: 32139 Comm: syz.5.8612 Not tainted syzkaller #0 [ 1837.024004][T32139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1837.034102][T32139] Call Trace: [ 1837.037420][T32139] [ 1837.040380][T32139] dump_stack_lvl+0x188/0x24e [ 1837.045126][T32139] ? fib_rules_lookup+0x98/0xb40 [ 1837.050107][T32139] ? show_regs_print_info+0x12/0x12 [ 1837.055350][T32139] ? load_image+0x400/0x400 [ 1837.059890][T32139] ? fib_rules_lookup+0x98/0xb40 [ 1837.064865][T32139] should_fail_ex+0x399/0x4d0 [ 1837.069675][T32139] should_failslab+0x5/0x20 [ 1837.074215][T32139] slab_pre_alloc_hook+0x59/0x310 [ 1837.079276][T32139] ? __lock_acquire+0x7d10/0x7d10 [ 1837.084343][T32139] ? find_exception+0x171/0xa30 [ 1837.089241][T32139] kmem_cache_alloc+0x56/0x2f0 [ 1837.094038][T32139] ? dst_alloc+0x101/0x160 [ 1837.098487][T32139] dst_alloc+0x101/0x160 [ 1837.102742][T32139] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1837.108817][T32139] ? ip_route_output_key_hash_rcu+0x1361/0x23f0 [ 1837.115074][T32139] ? ip_route_output_key_hash+0x139/0x330 [ 1837.120802][T32139] ip_route_output_key_hash+0x1ef/0x330 [ 1837.126386][T32139] ? kfree+0x30/0x190 [ 1837.130382][T32139] ? ip_route_input_rcu+0x3160/0x3160 [ 1837.135769][T32139] ? ip_cmsg_send+0x9a5/0xa50 [ 1837.140464][T32139] ip_route_output_flow+0x26/0x150 [ 1837.145672][T32139] ? security_sk_classify_flow+0x77/0x90 [ 1837.151319][T32139] udp_sendmsg+0x1626/0x23b0 [ 1837.155930][T32139] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1837.160790][T32139] ? udp_cmsg_send+0x350/0x350 [ 1837.165577][T32139] ? verify_lock_unused+0x140/0x140 [ 1837.170800][T32139] ? verify_lock_unused+0x140/0x140 [ 1837.176189][T32139] ? release_sock+0x2b/0x1b0 [ 1837.180786][T32139] udpv6_sendmsg+0x86c/0x2420 [ 1837.185489][T32139] ? udp_v6_early_demux+0xf80/0xf80 [ 1837.190713][T32139] ? lock_chain_count+0x20/0x20 [ 1837.195582][T32139] ? _local_bh_enable+0xa0/0xa0 [ 1837.200455][T32139] ? inet_send_prepare+0x1af/0x260 [ 1837.205579][T32139] ? inet_send_prepare+0x1af/0x260 [ 1837.210702][T32139] ? inet6_sendmsg+0x5b/0xd0 [ 1837.215307][T32139] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1837.220517][T32139] ____sys_sendmsg+0x5be/0x970 [ 1837.225300][T32139] ? __sys_sendmsg_sock+0x30/0x30 [ 1837.230334][T32139] ? __import_iovec+0x315/0x500 [ 1837.235237][T32139] ? import_iovec+0x6f/0xa0 [ 1837.239750][T32139] ___sys_sendmsg+0x2a2/0x360 [ 1837.244448][T32139] ? __sys_sendmsg+0x290/0x290 [ 1837.249252][T32139] ? __lock_acquire+0x7d10/0x7d10 [ 1837.254310][T32139] __se_sys_sendmsg+0x1bb/0x2a0 [ 1837.259174][T32139] ? __x64_sys_sendmsg+0x80/0x80 [ 1837.264134][T32139] ? lockdep_hardirqs_on+0x94/0x140 [ 1837.269446][T32139] do_syscall_64+0x4c/0xa0 [ 1837.273875][T32139] ? clear_bhb_loop+0x60/0xb0 [ 1837.278568][T32139] ? clear_bhb_loop+0x60/0xb0 [ 1837.283252][T32139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.289175][T32139] RIP: 0033:0x7f583539c629 [ 1837.293599][T32139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.313219][T32139] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.321648][T32139] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1837.329630][T32139] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 1837.337616][T32139] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.345594][T32139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.353570][T32139] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1837.361570][T32139] [ 1837.629467][T32152] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1838.367344][T32149] netlink: 'syz.2.8616': attribute type 21 has an invalid length. [ 1838.375309][T32149] netlink: 'syz.2.8616': attribute type 1 has an invalid length. [ 1838.394994][T32149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1842.405770][T32208] IPv6: NLM_F_CREATE should be specified when creating new route [ 1842.414692][T32208] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8633'. [ 1842.692958][T32214] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8635'. [ 1844.168615][T32223] device syzkaller0 entered promiscuous mode [ 1847.541506][T32256] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8648'. [ 1848.651335][T32294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8660'. [ 1848.957313][T32299] FAULT_INJECTION: forcing a failure. [ 1848.957313][T32299] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.970666][T32299] CPU: 1 PID: 32299 Comm: syz.4.8663 Not tainted syzkaller #0 [ 1848.978162][T32299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1848.988249][T32299] Call Trace: [ 1848.991570][T32299] [ 1848.994528][T32299] dump_stack_lvl+0x188/0x24e [ 1848.999249][T32299] ? lock_chain_count+0x20/0x20 [ 1849.004148][T32299] ? show_regs_print_info+0x12/0x12 [ 1849.009395][T32299] ? load_image+0x400/0x400 [ 1849.013971][T32299] should_fail_ex+0x399/0x4d0 [ 1849.018694][T32299] should_failslab+0x5/0x20 [ 1849.023236][T32299] slab_pre_alloc_hook+0x59/0x310 [ 1849.028311][T32299] kmem_cache_alloc+0x56/0x2f0 [ 1849.033107][T32299] ? __inet_hash_connect+0x832/0x18e0 [ 1849.038515][T32299] __inet_hash_connect+0x832/0x18e0 [ 1849.043731][T32299] ? inet_hash_connect+0x130/0x130 [ 1849.048875][T32299] ? inet_bhash2_reset_saddr+0x80/0x80 [ 1849.054356][T32299] ? rcu_is_watching+0x11/0xa0 [ 1849.059139][T32299] tcp_v4_connect+0xc96/0x18e0 [ 1849.063923][T32299] ? tcp_twsk_unique+0x990/0x990 [ 1849.068875][T32299] __inet_stream_connect+0x242/0xe10 [ 1849.074182][T32299] ? inet_dgram_connect+0x360/0x360 [ 1849.079404][T32299] tcp_sendmsg_fastopen+0x38f/0x600 [ 1849.084613][T32299] tcp_sendmsg_locked+0x39dd/0x3f50 [ 1849.089816][T32299] ? verify_lock_unused+0x140/0x140 [ 1849.095041][T32299] ? __might_sleep+0xd0/0xd0 [ 1849.099641][T32299] ? mark_lock+0x94/0x320 [ 1849.104076][T32299] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1849.110085][T32299] ? lock_chain_count+0x20/0x20 [ 1849.114954][T32299] ? tcp_sendmsg+0x1d/0x40 [ 1849.119387][T32299] ? tcp_set_state+0x520/0x520 [ 1849.124174][T32299] tcp_sendmsg+0x2b/0x40 [ 1849.128423][T32299] ? inet_send_prepare+0x260/0x260 [ 1849.133547][T32299] ____sys_sendmsg+0x5be/0x970 [ 1849.138329][T32299] ? __sys_sendmsg_sock+0x30/0x30 [ 1849.143358][T32299] ? __import_iovec+0x315/0x500 [ 1849.148219][T32299] ? import_iovec+0x6f/0xa0 [ 1849.152736][T32299] ___sys_sendmsg+0x2a2/0x360 [ 1849.157434][T32299] ? __sys_sendmsg+0x290/0x290 [ 1849.162225][T32299] ? __lock_acquire+0x7d10/0x7d10 [ 1849.167290][T32299] __se_sys_sendmsg+0x1bb/0x2a0 [ 1849.172181][T32299] ? __x64_sys_sendmsg+0x80/0x80 [ 1849.177157][T32299] ? lockdep_hardirqs_on+0x94/0x140 [ 1849.182364][T32299] do_syscall_64+0x4c/0xa0 [ 1849.186799][T32299] ? clear_bhb_loop+0x60/0xb0 [ 1849.191831][T32299] ? clear_bhb_loop+0x60/0xb0 [ 1849.196513][T32299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1849.202419][T32299] RIP: 0033:0x7f150479c629 [ 1849.206844][T32299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.226457][T32299] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1849.234879][T32299] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1849.242858][T32299] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000003 [ 1849.250921][T32299] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.258900][T32299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.266876][T32299] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1849.274865][T32299] [ 1850.158964][T32338] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8675'. [ 1851.137037][T32354] FAULT_INJECTION: forcing a failure. [ 1851.137037][T32354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.267872][T32354] CPU: 0 PID: 32354 Comm: syz.5.8680 Not tainted syzkaller #0 [ 1851.275588][T32354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1851.285676][T32354] Call Trace: [ 1851.288991][T32354] [ 1851.291946][T32354] dump_stack_lvl+0x188/0x24e [ 1851.296665][T32354] ? show_regs_print_info+0x12/0x12 [ 1851.301900][T32354] ? load_image+0x400/0x400 [ 1851.306443][T32354] ? __lock_acquire+0x7d10/0x7d10 [ 1851.311522][T32354] should_fail_ex+0x399/0x4d0 [ 1851.316245][T32354] _copy_from_iter+0x1c0/0x1130 [ 1851.321138][T32354] ? __lock_acquire+0x7d10/0x7d10 [ 1851.326203][T32354] ? mark_lock+0x94/0x320 [ 1851.330584][T32354] ? copyout_mc+0x110/0x110 [ 1851.335129][T32354] ? __virt_addr_valid+0x188/0x540 [ 1851.340274][T32354] ? __virt_addr_valid+0x188/0x540 [ 1851.345428][T32354] ? __virt_addr_valid+0x465/0x540 [ 1851.350661][T32354] ? __check_object_size+0x500/0xa40 [ 1851.355988][T32354] skb_copy_datagram_from_iter+0xef/0x690 [ 1851.361847][T32354] ? napi_get_frags+0xb7/0x140 [ 1851.366648][T32354] tun_get_user+0xb81/0x3c70 [ 1851.371288][T32354] ? rcu_read_unlock+0xa0/0xa0 [ 1851.376109][T32354] ? tun_get+0x1c/0x2e0 [ 1851.380300][T32354] ? __lock_acquire+0x7d10/0x7d10 [ 1851.385368][T32354] ? tun_get+0x1c/0x2e0 [ 1851.389567][T32354] tun_chr_write_iter+0x112/0x1f0 [ 1851.394732][T32354] vfs_write+0x4b1/0xa30 [ 1851.399022][T32354] ? file_end_write+0x250/0x250 [ 1851.403927][T32354] ? __fget_files+0x43d/0x4b0 [ 1851.408649][T32354] ? __fdget_pos+0x1d4/0x360 [ 1851.413357][T32354] ? ksys_write+0x71/0x250 [ 1851.417813][T32354] ksys_write+0x14c/0x250 [ 1851.422179][T32354] ? __ia32_sys_read+0x80/0x80 [ 1851.426981][T32354] ? lockdep_hardirqs_on+0x94/0x140 [ 1851.432208][T32354] do_syscall_64+0x4c/0xa0 [ 1851.436653][T32354] ? clear_bhb_loop+0x60/0xb0 [ 1851.441361][T32354] ? clear_bhb_loop+0x60/0xb0 [ 1851.446158][T32354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.452091][T32354] RIP: 0033:0x7f583539c629 [ 1851.456545][T32354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.476281][T32354] RSP: 002b:00007f58361dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1851.484745][T32354] RAX: ffffffffffffffda RBX: 00007f5835616090 RCX: 00007f583539c629 [ 1851.492749][T32354] RDX: 0000000000000280 RSI: 0000200000000380 RDI: 0000000000000003 [ 1851.500754][T32354] RBP: 00007f58361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.508761][T32354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.516846][T32354] R13: 00007f5835616128 R14: 00007f5835616090 R15: 00007ffd51b61498 [ 1851.524948][T32354] [ 1853.140434][T32393] FAULT_INJECTION: forcing a failure. [ 1853.140434][T32393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.150988][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.165730][T32393] CPU: 1 PID: 32393 Comm: syz.0.8693 Not tainted syzkaller #0 [ 1853.171899][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.173218][T32393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1853.189528][T32393] Call Trace: [ 1853.192811][T32393] [ 1853.195746][T32393] dump_stack_lvl+0x188/0x24e [ 1853.200445][T32393] ? show_regs_print_info+0x12/0x12 [ 1853.205654][T32393] ? load_image+0x400/0x400 [ 1853.210170][T32393] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1853.216336][T32393] should_fail_ex+0x399/0x4d0 [ 1853.221038][T32393] _copy_from_user+0x2c/0x170 [ 1853.225730][T32393] ___sys_recvmsg+0x172/0x590 [ 1853.230428][T32393] ? __sys_recvmsg+0x290/0x290 [ 1853.235302][T32393] ? __fget_files+0x43d/0x4b0 [ 1853.240005][T32393] __x64_sys_recvmsg+0x205/0x2e0 [ 1853.244958][T32393] ? ___sys_recvmsg+0x590/0x590 [ 1853.249835][T32393] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1853.255746][T32393] do_syscall_64+0x4c/0xa0 [ 1853.260170][T32393] ? clear_bhb_loop+0x60/0xb0 [ 1853.264854][T32393] ? clear_bhb_loop+0x60/0xb0 [ 1853.269539][T32393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.275441][T32393] RIP: 0033:0x7f9a1c39c629 [ 1853.279869][T32393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.299480][T32393] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1853.307904][T32393] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1853.315894][T32393] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1853.323875][T32393] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.331850][T32393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.339824][T32393] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1853.347989][T32393] [ 1855.098230][T32402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8696'. [ 1855.351591][T32409] device syzkaller0 entered promiscuous mode [ 1856.041071][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8703'. [ 1856.075260][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8703'. [ 1856.100689][T32429] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8703'. [ 1856.123584][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8703'. [ 1856.345749][T32433] FAULT_INJECTION: forcing a failure. [ 1856.345749][T32433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.392633][T32433] CPU: 1 PID: 32433 Comm: syz.0.8705 Not tainted syzkaller #0 [ 1856.400252][T32433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1856.410441][T32433] Call Trace: [ 1856.413765][T32433] [ 1856.416731][T32433] dump_stack_lvl+0x188/0x24e [ 1856.421457][T32433] ? show_regs_print_info+0x12/0x12 [ 1856.426693][T32433] ? load_image+0x400/0x400 [ 1856.431289][T32433] ? __lock_acquire+0x7d10/0x7d10 [ 1856.436341][T32433] should_fail_ex+0x399/0x4d0 [ 1856.441149][T32433] _copy_from_user+0x2c/0x170 [ 1856.445861][T32433] __sys_bpf+0x2ea/0x780 [ 1856.450144][T32433] ? bpf_link_show_fdinfo+0x380/0x380 [ 1856.455580][T32433] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1856.461850][T32433] __x64_sys_bpf+0x78/0x90 [ 1856.466283][T32433] do_syscall_64+0x4c/0xa0 [ 1856.470806][T32433] ? clear_bhb_loop+0x60/0xb0 [ 1856.475501][T32433] ? clear_bhb_loop+0x60/0xb0 [ 1856.480182][T32433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.486078][T32433] RIP: 0033:0x7f9a1c39c629 [ 1856.490505][T32433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.510122][T32433] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1856.518542][T32433] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1856.526599][T32433] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1856.534598][T32433] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.542591][T32433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.550599][T32433] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1856.558605][T32433] [ 1857.018262][T32455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8713'. [ 1858.359142][T32482] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1858.377817][T32482] bridge_slave_1: default FDB implementation only supports local addresses [ 1858.968818][T32509] netlink: 'syz.4.8731': attribute type 11 has an invalid length. [ 1858.982105][T32509] netlink: 148404 bytes leftover after parsing attributes in process `syz.4.8731'. [ 1859.003028][T32509] netlink: 'syz.4.8731': attribute type 11 has an invalid length. [ 1859.012222][T32509] netlink: 148404 bytes leftover after parsing attributes in process `syz.4.8731'. [ 1859.040310][T32508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.127365][T32512] netlink: 'syz.2.8732': attribute type 10 has an invalid length. [ 1859.588355][T32524] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1859.760410][T32524] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1859.807014][T32525] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1859.817598][T32526] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1859.907857][T32524] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1859.958741][T32529] netlink: 'syz.0.8736': attribute type 29 has an invalid length. [ 1860.303732][T32541] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8743'. [ 1860.418500][T32546] netlink: 'syz.4.8745': attribute type 29 has an invalid length. [ 1860.501910][T32546] netlink: 'syz.4.8745': attribute type 29 has an invalid length. [ 1860.526278][T32547] netlink: 'syz.4.8745': attribute type 29 has an invalid length. [ 1861.344182][T32563] delete_channel: no stack [ 1861.446329][T32572] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1862.695899][T32606] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1862.994326][T32612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1863.078334][T32611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.163888][T32611] device bond0 entered promiscuous mode [ 1863.173705][T32611] device bond_slave_1 entered promiscuous mode [ 1863.182189][T32611] device netdevsim0 entered promiscuous mode [ 1863.196787][T32611] device wlan1 entered promiscuous mode [ 1863.204080][T32611] team0: Port device bond0 added [ 1863.228138][T32612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1863.302304][T32607] delete_channel: no stack [ 1863.543103][T32625] FAULT_INJECTION: forcing a failure. [ 1863.543103][T32625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1863.594236][T32625] CPU: 1 PID: 32625 Comm: syz.5.8769 Not tainted syzkaller #0 [ 1863.601777][T32625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.611952][T32625] Call Trace: [ 1863.615266][T32625] [ 1863.618238][T32625] dump_stack_lvl+0x188/0x24e [ 1863.623049][T32625] ? show_regs_print_info+0x12/0x12 [ 1863.628292][T32625] ? load_image+0x400/0x400 [ 1863.632841][T32625] ? __lock_acquire+0x7d10/0x7d10 [ 1863.637909][T32625] should_fail_ex+0x399/0x4d0 [ 1863.642633][T32625] _copy_from_user+0x2c/0x170 [ 1863.647351][T32625] iovec_from_user+0x143/0x360 [ 1863.652152][T32625] __import_iovec+0x6d/0x500 [ 1863.656789][T32625] import_iovec+0x6f/0xa0 [ 1863.661156][T32625] ___sys_sendmsg+0x252/0x360 [ 1863.665895][T32625] ? __sys_sendmsg+0x290/0x290 [ 1863.670727][T32625] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1863.676537][T32625] __se_sys_sendmsg+0x1bb/0x2a0 [ 1863.681433][T32625] ? __x64_sys_sendmsg+0x80/0x80 [ 1863.686423][T32625] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1863.692354][T32625] do_syscall_64+0x4c/0xa0 [ 1863.696809][T32625] ? clear_bhb_loop+0x60/0xb0 [ 1863.696983][T32631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8769'. [ 1863.701512][T32625] ? clear_bhb_loop+0x60/0xb0 [ 1863.701539][T32625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.701561][T32625] RIP: 0033:0x7f583539c629 [ 1863.701578][T32625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.701594][T32625] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.701616][T32625] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1863.701631][T32625] RDX: 0000000000000084 RSI: 0000200000000600 RDI: 000000000000000d [ 1863.701642][T32625] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.701656][T32625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.785574][T32625] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1863.793597][T32625] [ 1863.797608][T32631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8769'. [ 1863.862843][T32624] delete_channel: no stack [ 1864.603413][T32643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1865.500324][T32675] validate_nla: 4 callbacks suppressed [ 1865.500361][T32675] netlink: 'syz.5.8786': attribute type 28 has an invalid length. [ 1865.560014][T32675] netlink: 'syz.5.8786': attribute type 29 has an invalid length. [ 1865.587248][T32675] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8786'. [ 1865.769986][T32686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1865.955094][T32697] netlink: 'syz.2.8793': attribute type 11 has an invalid length. [ 1866.018713][T32697] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1866.221970][T32697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1867.820495][T32737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1869.101574][T32757] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.8812'. [ 1869.291179][T32762] FAULT_INJECTION: forcing a failure. [ 1869.291179][T32762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.324470][T32762] CPU: 1 PID: 32762 Comm: syz.2.8814 Not tainted syzkaller #0 [ 1869.332098][T32762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.342194][T32762] Call Trace: [ 1869.345504][T32762] [ 1869.348458][T32762] dump_stack_lvl+0x188/0x24e [ 1869.353188][T32762] ? show_regs_print_info+0x12/0x12 [ 1869.358524][T32762] ? load_image+0x400/0x400 [ 1869.363060][T32762] ? __lock_acquire+0x7d10/0x7d10 [ 1869.368129][T32762] should_fail_ex+0x399/0x4d0 [ 1869.372838][T32762] _copy_from_user+0x2c/0x170 [ 1869.377628][T32762] __copy_msghdr+0x3b7/0x580 [ 1869.382249][T32762] ___sys_sendmsg+0x210/0x360 [ 1869.386944][T32762] ? __sys_sendmsg+0x290/0x290 [ 1869.391737][T32762] ? __lock_acquire+0x7d10/0x7d10 [ 1869.396796][T32762] __se_sys_sendmsg+0x1bb/0x2a0 [ 1869.401746][T32762] ? __x64_sys_sendmsg+0x80/0x80 [ 1869.406708][T32762] ? lockdep_hardirqs_on+0x94/0x140 [ 1869.411933][T32762] do_syscall_64+0x4c/0xa0 [ 1869.416358][T32762] ? clear_bhb_loop+0x60/0xb0 [ 1869.421059][T32762] ? clear_bhb_loop+0x60/0xb0 [ 1869.425741][T32762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.431648][T32762] RIP: 0033:0x7f5c90f9c629 [ 1869.436075][T32762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.455864][T32762] RSP: 002b:00007f5c91ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1869.464291][T32762] RAX: ffffffffffffffda RBX: 00007f5c91215fa0 RCX: 00007f5c90f9c629 [ 1869.472269][T32762] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1869.480246][T32762] RBP: 00007f5c91ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.488320][T32762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.496309][T32762] R13: 00007f5c91216038 R14: 00007f5c91215fa0 R15: 00007ffdc532b548 [ 1869.504405][T32762] [ 1869.518223][T32765] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1869.538812][T32764] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1869.814339][T32765] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1869.824874][T32766] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1870.187741][ T305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1870.940738][ T316] __nla_validate_parse: 1 callbacks suppressed [ 1870.940764][ T316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8820'. [ 1871.728709][ T326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8823'. [ 1871.760443][ T332] netlink: 'syz.0.8826': attribute type 33 has an invalid length. [ 1871.776128][ T337] netlink: 'syz.0.8826': attribute type 1 has an invalid length. [ 1871.785246][ T337] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1871.859879][ T332] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1873.200785][ T353] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1873.300960][ T351] netlink: 'syz.2.8830': attribute type 22 has an invalid length. [ 1873.367126][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1873.385307][ T358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1873.810237][ T373] netlink: 62811 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1873.888776][ T376] FAULT_INJECTION: forcing a failure. [ 1873.888776][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.972203][ T376] CPU: 1 PID: 376 Comm: syz.5.8838 Not tainted syzkaller #0 [ 1873.979563][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1873.989652][ T376] Call Trace: [ 1873.992947][ T376] [ 1873.995896][ T376] dump_stack_lvl+0x188/0x24e [ 1874.000600][ T376] ? show_regs_print_info+0x12/0x12 [ 1874.005816][ T376] ? load_image+0x400/0x400 [ 1874.010334][ T376] ? __might_sleep+0xd0/0xd0 [ 1874.014933][ T376] ? __lock_acquire+0x7d10/0x7d10 [ 1874.019978][ T376] should_fail_ex+0x399/0x4d0 [ 1874.024676][ T376] should_failslab+0x5/0x20 [ 1874.029192][ T376] slab_pre_alloc_hook+0x59/0x310 [ 1874.034225][ T376] ? tomoyo_encode+0x27e/0x540 [ 1874.039001][ T376] __kmem_cache_alloc_node+0x4f/0x260 [ 1874.044385][ T376] ? tomoyo_encode+0x27e/0x540 [ 1874.049157][ T376] __kmalloc+0xa0/0x240 [ 1874.053327][ T376] tomoyo_encode+0x27e/0x540 [ 1874.057932][ T376] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1874.063668][ T376] ? tomoyo_path_number_perm+0x205/0x650 [ 1874.069316][ T376] tomoyo_path_number_perm+0x22f/0x650 [ 1874.074810][ T376] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1874.080283][ T376] ? ksys_write+0x1c0/0x250 [ 1874.084799][ T376] ? common_file_perm+0x171/0x1c0 [ 1874.089863][ T376] ? __fget_files+0x28/0x4b0 [ 1874.094462][ T376] ? __fget_files+0x28/0x4b0 [ 1874.099073][ T376] security_file_ioctl+0x6c/0xa0 [ 1874.104026][ T376] __se_sys_ioctl+0x48/0x170 [ 1874.108630][ T376] do_syscall_64+0x4c/0xa0 [ 1874.113056][ T376] ? clear_bhb_loop+0x60/0xb0 [ 1874.117742][ T376] ? clear_bhb_loop+0x60/0xb0 [ 1874.122443][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.128346][ T376] RIP: 0033:0x7f583539c629 [ 1874.132770][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.152382][ T376] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1874.160805][ T376] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1874.168783][ T376] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 1874.176758][ T376] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.184738][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.192711][ T376] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1874.200700][ T376] [ 1874.286585][ T376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1874.981733][ T400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8846'. [ 1875.071240][ T405] netlink: 'syz.0.8847': attribute type 29 has an invalid length. [ 1875.144278][ T406] netlink: 'syz.0.8847': attribute type 29 has an invalid length. [ 1875.404732][ T405] netlink: 'syz.0.8847': attribute type 29 has an invalid length. [ 1875.414400][ T406] netlink: 'syz.0.8847': attribute type 29 has an invalid length. [ 1876.270983][ T430] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8853'. [ 1876.933302][ T433] netlink: 131064 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1877.218975][ T444] FAULT_INJECTION: forcing a failure. [ 1877.218975][ T444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.236183][ T444] CPU: 1 PID: 444 Comm: syz.3.8858 Not tainted syzkaller #0 [ 1877.243519][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.253593][ T444] Call Trace: [ 1877.256890][ T444] [ 1877.259832][ T444] dump_stack_lvl+0x188/0x24e [ 1877.264534][ T444] ? show_regs_print_info+0x12/0x12 [ 1877.269764][ T444] ? load_image+0x400/0x400 [ 1877.274282][ T444] ? __lock_acquire+0x7d10/0x7d10 [ 1877.279325][ T444] should_fail_ex+0x399/0x4d0 [ 1877.284022][ T444] _copy_from_user+0x2c/0x170 [ 1877.288709][ T444] iovec_from_user+0x143/0x360 [ 1877.293493][ T444] __import_iovec+0x6d/0x500 [ 1877.298099][ T444] import_iovec+0x6f/0xa0 [ 1877.302437][ T444] ___sys_sendmsg+0x252/0x360 [ 1877.307131][ T444] ? __sys_sendmsg+0x290/0x290 [ 1877.311928][ T444] ? __lock_acquire+0x7d10/0x7d10 [ 1877.316983][ T444] __se_sys_sendmsg+0x1bb/0x2a0 [ 1877.321848][ T444] ? __x64_sys_sendmsg+0x80/0x80 [ 1877.326810][ T444] ? lockdep_hardirqs_on+0x94/0x140 [ 1877.332103][ T444] do_syscall_64+0x4c/0xa0 [ 1877.336528][ T444] ? clear_bhb_loop+0x60/0xb0 [ 1877.341213][ T444] ? clear_bhb_loop+0x60/0xb0 [ 1877.345928][ T444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1877.351827][ T444] RIP: 0033:0x7f550839c629 [ 1877.356248][ T444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.375862][ T444] RSP: 002b:00007f55092b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1877.384293][ T444] RAX: ffffffffffffffda RBX: 00007f5508615fa0 RCX: 00007f550839c629 [ 1877.392271][ T444] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1877.400249][ T444] RBP: 00007f55092b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.408228][ T444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.416211][ T444] R13: 00007f5508616038 R14: 00007f5508615fa0 R15: 00007fff7123b208 [ 1877.424293][ T444] [ 1877.571087][ T449] netlink: 'syz.0.8861': attribute type 3 has an invalid length. [ 1877.587963][ T442] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8859'. [ 1877.613644][ T449] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8861'. [ 1877.854976][ T458] netlink: 763 bytes leftover after parsing attributes in process `syz.0.8864'. [ 1877.887306][ T452] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8863'. [ 1877.990069][ T452] bridge_slave_1: default FDB implementation only supports local addresses [ 1878.214284][ T462] delete_channel: no stack [ 1878.278342][ T465] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8866'. [ 1878.587076][ T470] device syzkaller0 entered promiscuous mode [ 1878.774753][ T470] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1878.830846][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1881.511436][ T497] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8875'. [ 1881.774715][ T516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8882'. [ 1882.563755][ T544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1882.765519][ T549] netlink: 'syz.5.8891': attribute type 21 has an invalid length. [ 1882.786714][ T549] netlink: 'syz.5.8891': attribute type 3 has an invalid length. [ 1882.902476][ T549] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8891'. [ 1883.180967][ T557] netlink: 'syz.2.8893': attribute type 21 has an invalid length. [ 1883.214137][ T557] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8893'. [ 1883.238145][ T557] netlink: 'syz.2.8893': attribute type 4 has an invalid length. [ 1883.286275][ T557] netlink: 'syz.2.8893': attribute type 5 has an invalid length. [ 1883.337126][ T557] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8893'. [ 1883.634683][ T569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1883.920547][ T578] TCP: TCP_TX_DELAY enabled [ 1884.572368][ T590] netlink: 'syz.0.8905': attribute type 8 has an invalid length. [ 1884.593761][ T590] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1884.629141][ T586] netlink: 'syz.3.8903': attribute type 2 has an invalid length. [ 1884.689168][ T586] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.8903'. [ 1884.960900][ T602] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8910'. [ 1884.998081][ T603] FAULT_INJECTION: forcing a failure. [ 1884.998081][ T603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.046929][ T603] CPU: 1 PID: 603 Comm: syz.0.8909 Not tainted syzkaller #0 [ 1885.054545][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1885.064641][ T603] Call Trace: [ 1885.067957][ T603] [ 1885.070918][ T603] dump_stack_lvl+0x188/0x24e [ 1885.075641][ T603] ? show_regs_print_info+0x12/0x12 [ 1885.080875][ T603] ? load_image+0x400/0x400 [ 1885.085415][ T603] ? __lock_acquire+0x7d10/0x7d10 [ 1885.090572][ T603] should_fail_ex+0x399/0x4d0 [ 1885.095294][ T603] _copy_from_user+0x2c/0x170 [ 1885.100108][ T603] ___sys_sendmsg+0x1c3/0x360 [ 1885.104845][ T603] ? __sys_sendmsg+0x290/0x290 [ 1885.109655][ T603] ? __lock_acquire+0x7d10/0x7d10 [ 1885.114716][ T603] __se_sys_sendmsg+0x1bb/0x2a0 [ 1885.119595][ T603] ? __x64_sys_sendmsg+0x80/0x80 [ 1885.124560][ T603] ? lockdep_hardirqs_on+0x94/0x140 [ 1885.129857][ T603] do_syscall_64+0x4c/0xa0 [ 1885.134376][ T603] ? clear_bhb_loop+0x60/0xb0 [ 1885.139064][ T603] ? clear_bhb_loop+0x60/0xb0 [ 1885.143749][ T603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.149647][ T603] RIP: 0033:0x7f9a1c39c629 [ 1885.154067][ T603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.173684][ T603] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1885.182109][ T603] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1885.190086][ T603] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1885.198062][ T603] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.206038][ T603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.214016][ T603] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1885.222008][ T603] [ 1885.580259][ T611] tap0: tun_chr_ioctl cmd 2148553947 [ 1886.821142][ T640] FAULT_INJECTION: forcing a failure. [ 1886.821142][ T640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.873452][ T640] CPU: 0 PID: 640 Comm: syz.0.8924 Not tainted syzkaller #0 [ 1886.880807][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1886.891009][ T640] Call Trace: [ 1886.894326][ T640] [ 1886.897289][ T640] dump_stack_lvl+0x188/0x24e [ 1886.902012][ T640] ? show_regs_print_info+0x12/0x12 [ 1886.907252][ T640] ? load_image+0x400/0x400 [ 1886.911803][ T640] ? __lock_acquire+0x7d10/0x7d10 [ 1886.916890][ T640] should_fail_ex+0x399/0x4d0 [ 1886.921614][ T640] _copy_from_user+0x2c/0x170 [ 1886.926335][ T640] __copy_msghdr+0x3b7/0x580 [ 1886.930965][ T640] ___sys_sendmsg+0x210/0x360 [ 1886.935689][ T640] ? __sys_sendmsg+0x290/0x290 [ 1886.940510][ T640] ? __lock_acquire+0x7d10/0x7d10 [ 1886.945604][ T640] __se_sys_sendmsg+0x1bb/0x2a0 [ 1886.950495][ T640] ? __x64_sys_sendmsg+0x80/0x80 [ 1886.955492][ T640] ? lockdep_hardirqs_on+0x94/0x140 [ 1886.960812][ T640] do_syscall_64+0x4c/0xa0 [ 1886.965276][ T640] ? clear_bhb_loop+0x60/0xb0 [ 1886.970078][ T640] ? clear_bhb_loop+0x60/0xb0 [ 1886.974798][ T640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.980736][ T640] RIP: 0033:0x7f9a1c39c629 [ 1886.985174][ T640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.004808][ T640] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1887.013242][ T640] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1887.021396][ T640] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000e [ 1887.029378][ T640] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.037357][ T640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.045350][ T640] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1887.053367][ T640] [ 1887.106142][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.114014][ T649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.124987][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.132740][ T649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.363477][ T660] FAULT_INJECTION: forcing a failure. [ 1887.363477][ T660] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.416626][ T660] CPU: 0 PID: 660 Comm: syz.4.8930 Not tainted syzkaller #0 [ 1887.424073][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1887.434166][ T660] Call Trace: [ 1887.437481][ T660] [ 1887.440446][ T660] dump_stack_lvl+0x188/0x24e [ 1887.445174][ T660] ? show_regs_print_info+0x12/0x12 [ 1887.450420][ T660] ? load_image+0x400/0x400 [ 1887.454967][ T660] ? __might_sleep+0xd0/0xd0 [ 1887.459591][ T660] ? __lock_acquire+0x7d10/0x7d10 [ 1887.464657][ T660] should_fail_ex+0x399/0x4d0 [ 1887.469388][ T660] should_failslab+0x5/0x20 [ 1887.473944][ T660] slab_pre_alloc_hook+0x59/0x310 [ 1887.479099][ T660] kmem_cache_alloc_node+0x5a/0x320 [ 1887.484335][ T660] ? __alloc_skb+0xfc/0x7e0 [ 1887.488906][ T660] __alloc_skb+0xfc/0x7e0 [ 1887.493282][ T660] ? netlink_autobind+0xda/0x300 [ 1887.498270][ T660] netlink_sendmsg+0x654/0xbd0 [ 1887.503088][ T660] ? netlink_getsockopt+0x550/0x550 [ 1887.508340][ T660] ? aa_sock_msg_perm+0x94/0x150 [ 1887.513408][ T660] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1887.518737][ T660] ? security_socket_sendmsg+0x7c/0xa0 [ 1887.524258][ T660] ? netlink_getsockopt+0x550/0x550 [ 1887.529510][ T660] ____sys_sendmsg+0x5be/0x970 [ 1887.534334][ T660] ? __sys_sendmsg_sock+0x30/0x30 [ 1887.539408][ T660] ? __import_iovec+0x315/0x500 [ 1887.544280][ T660] ? import_iovec+0x6f/0xa0 [ 1887.548807][ T660] ___sys_sendmsg+0x2a2/0x360 [ 1887.553514][ T660] ? __sys_sendmsg+0x290/0x290 [ 1887.558321][ T660] ? __lock_acquire+0x7d10/0x7d10 [ 1887.563391][ T660] __se_sys_sendmsg+0x1bb/0x2a0 [ 1887.568268][ T660] ? __x64_sys_sendmsg+0x80/0x80 [ 1887.573240][ T660] ? lockdep_hardirqs_on+0x94/0x140 [ 1887.578454][ T660] do_syscall_64+0x4c/0xa0 [ 1887.582885][ T660] ? clear_bhb_loop+0x60/0xb0 [ 1887.587575][ T660] ? clear_bhb_loop+0x60/0xb0 [ 1887.592261][ T660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1887.598168][ T660] RIP: 0033:0x7f150479c629 [ 1887.602602][ T660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.622228][ T660] RSP: 002b:00007f15056f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1887.630650][ T660] RAX: ffffffffffffffda RBX: 00007f1504a15fa0 RCX: 00007f150479c629 [ 1887.638731][ T660] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1887.646716][ T660] RBP: 00007f15056f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.654697][ T660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.662675][ T660] R13: 00007f1504a16038 R14: 00007f1504a15fa0 R15: 00007ffe472509f8 [ 1887.670678][ T660] [ 1887.825636][ T671] FAULT_INJECTION: forcing a failure. [ 1887.825636][ T671] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.876579][ T671] CPU: 0 PID: 671 Comm: syz.5.8933 Not tainted syzkaller #0 [ 1887.883946][ T671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1887.894043][ T671] Call Trace: [ 1887.897366][ T671] [ 1887.900333][ T671] dump_stack_lvl+0x188/0x24e [ 1887.905070][ T671] ? show_regs_print_info+0x12/0x12 [ 1887.910314][ T671] ? load_image+0x400/0x400 [ 1887.914877][ T671] ? __lock_acquire+0x7d10/0x7d10 [ 1887.919942][ T671] ? perf_trace_lock+0xf8/0x390 [ 1887.924824][ T671] should_fail_ex+0x399/0x4d0 [ 1887.929528][ T671] should_failslab+0x5/0x20 [ 1887.934053][ T671] slab_pre_alloc_hook+0x59/0x310 [ 1887.939101][ T671] kmem_cache_alloc_lru+0x49/0x2e0 [ 1887.944227][ T671] ? __d_alloc+0x31/0x700 [ 1887.948585][ T671] __d_alloc+0x31/0x700 [ 1887.952758][ T671] d_alloc_pseudo+0x19/0x70 [ 1887.957280][ T671] alloc_file_pseudo+0xe0/0x200 [ 1887.962144][ T671] ? alloc_empty_file_noaccount+0x80/0x80 [ 1887.967891][ T671] ? _raw_spin_unlock+0x24/0x40 [ 1887.972758][ T671] ? alloc_fd+0x58f/0x630 [ 1887.977117][ T671] sock_alloc_file+0xb3/0x240 [ 1887.981813][ T671] __sys_socket+0x12a/0x190 [ 1887.986330][ T671] __x64_sys_socket+0x76/0x80 [ 1887.991028][ T671] do_syscall_64+0x4c/0xa0 [ 1887.995460][ T671] ? clear_bhb_loop+0x60/0xb0 [ 1888.000144][ T671] ? clear_bhb_loop+0x60/0xb0 [ 1888.004832][ T671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.010732][ T671] RIP: 0033:0x7f583539c629 [ 1888.015156][ T671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.034809][ T671] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1888.043257][ T671] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1888.051251][ T671] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 1888.059237][ T671] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.067215][ T671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.075281][ T671] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1888.083278][ T671] [ 1888.693758][ T694] __nla_validate_parse: 1 callbacks suppressed [ 1888.693778][ T694] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1888.731616][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1888.763890][ T700] netlink: 'syz.3.8942': attribute type 2 has an invalid length. [ 1888.774661][ T700] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8942'. [ 1889.430983][ T716] netlink: 'syz.2.8948': attribute type 21 has an invalid length. [ 1889.456815][ T716] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8948'. [ 1889.965878][ T739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8965'. [ 1890.523019][ T753] netlink: 'syz.4.8960': attribute type 2 has an invalid length. [ 1890.546819][ T753] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.8960'. [ 1893.417836][ T828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8983'. [ 1893.531957][ T835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1894.254242][ T851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1895.441523][ T855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1895.453860][ T862] netlink: 'syz.5.8992': attribute type 2 has an invalid length. [ 1895.462545][ T862] netlink: 193088 bytes leftover after parsing attributes in process `syz.5.8992'. [ 1895.686697][ T877] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8994'. [ 1895.815484][ T877] team0: Port device team_slave_0 removed [ 1895.842562][ T877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1896.696037][ T898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8999'. [ 1897.195008][ T929] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9007'. [ 1897.322574][T13723] Bluetooth: hci3: ISO packet for unknown connection handle 3846 [ 1897.469061][ T936] netlink: 'syz.4.9011': attribute type 10 has an invalid length. [ 1898.273135][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.315586][ T936] device bridge_slave_1 left promiscuous mode [ 1898.330322][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.719266][ T936] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1899.015522][ T961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9017'. [ 1899.890548][ T970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1900.072347][ T975] FAULT_INJECTION: forcing a failure. [ 1900.072347][ T975] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.149786][ T975] CPU: 1 PID: 975 Comm: syz.2.9021 Not tainted syzkaller #0 [ 1900.157139][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1900.167228][ T975] Call Trace: [ 1900.170535][ T975] [ 1900.173494][ T975] dump_stack_lvl+0x188/0x24e [ 1900.178215][ T975] ? show_regs_print_info+0x12/0x12 [ 1900.183454][ T975] ? load_image+0x400/0x400 [ 1900.187993][ T975] ? __might_sleep+0xd0/0xd0 [ 1900.192705][ T975] ? __lock_acquire+0x7d10/0x7d10 [ 1900.197771][ T975] should_fail_ex+0x399/0x4d0 [ 1900.202495][ T975] should_failslab+0x5/0x20 [ 1900.207036][ T975] slab_pre_alloc_hook+0x59/0x310 [ 1900.212110][ T975] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1900.217954][ T975] __kmem_cache_alloc_node+0x4f/0x260 [ 1900.223364][ T975] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1900.229124][ T975] __kmalloc+0xa0/0x240 [ 1900.233322][ T975] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1900.238921][ T975] ? tomoyo_path_number_perm+0x205/0x650 [ 1900.244588][ T975] tomoyo_path_number_perm+0x22f/0x650 [ 1900.250090][ T975] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1900.255592][ T975] ? ksys_write+0x1c0/0x250 [ 1900.260130][ T975] ? common_file_perm+0x171/0x1c0 [ 1900.265229][ T975] ? __fget_files+0x28/0x4b0 [ 1900.269861][ T975] ? __fget_files+0x28/0x4b0 [ 1900.274510][ T975] security_file_ioctl+0x6c/0xa0 [ 1900.279484][ T975] __se_sys_ioctl+0x48/0x170 [ 1900.284118][ T975] do_syscall_64+0x4c/0xa0 [ 1900.288580][ T975] ? clear_bhb_loop+0x60/0xb0 [ 1900.293291][ T975] ? clear_bhb_loop+0x60/0xb0 [ 1900.298005][ T975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1900.303934][ T975] RIP: 0033:0x7f5c90f9c629 [ 1900.308393][ T975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.328048][ T975] RSP: 002b:00007f5c91eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.336512][ T975] RAX: ffffffffffffffda RBX: 00007f5c91216090 RCX: 00007f5c90f9c629 [ 1900.344531][ T975] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000005 [ 1900.352542][ T975] RBP: 00007f5c91eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.360549][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.368557][ T975] R13: 00007f5c91216128 R14: 00007f5c91216090 R15: 00007ffdc532b548 [ 1900.376674][ T975] [ 1900.395691][ T975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1901.054198][ T996] netlink: 'syz.0.9026': attribute type 39 has an invalid length. [ 1903.265126][ T1042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1903.329189][ T1045] netlink: 'syz.5.9036': attribute type 3 has an invalid length. [ 1903.392963][ T1045] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9036'. [ 1903.794530][ T1057] sock: sock_set_timeout: `syz.5.9038' (pid 1057) tries to set negative timeout [ 1904.391787][ T1072] FAULT_INJECTION: forcing a failure. [ 1904.391787][ T1072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.418067][ T1072] CPU: 1 PID: 1072 Comm: syz.2.9046 Not tainted syzkaller #0 [ 1904.425509][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1904.435588][ T1072] Call Trace: [ 1904.438884][ T1072] [ 1904.441841][ T1072] dump_stack_lvl+0x188/0x24e [ 1904.446548][ T1072] ? show_regs_print_info+0x12/0x12 [ 1904.451792][ T1072] ? load_image+0x400/0x400 [ 1904.456328][ T1072] ? __lock_acquire+0x7d10/0x7d10 [ 1904.461389][ T1072] should_fail_ex+0x399/0x4d0 [ 1904.466097][ T1072] _copy_from_user+0x2c/0x170 [ 1904.470802][ T1072] iovec_from_user+0x143/0x360 [ 1904.475830][ T1072] __import_iovec+0x6d/0x500 [ 1904.480449][ T1072] import_iovec+0x6f/0xa0 [ 1904.484807][ T1072] ___sys_sendmsg+0x252/0x360 [ 1904.489515][ T1072] ? __sys_sendmsg+0x290/0x290 [ 1904.494327][ T1072] ? __lock_acquire+0x7d10/0x7d10 [ 1904.499414][ T1072] __se_sys_sendmsg+0x1bb/0x2a0 [ 1904.504289][ T1072] ? __x64_sys_sendmsg+0x80/0x80 [ 1904.509270][ T1072] ? lockdep_hardirqs_on+0x94/0x140 [ 1904.514484][ T1072] do_syscall_64+0x4c/0xa0 [ 1904.518915][ T1072] ? clear_bhb_loop+0x60/0xb0 [ 1904.523618][ T1072] ? clear_bhb_loop+0x60/0xb0 [ 1904.528399][ T1072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1904.534325][ T1072] RIP: 0033:0x7f5c90f9c629 [ 1904.538763][ T1072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.558493][ T1072] RSP: 002b:00007f5c91ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.566931][ T1072] RAX: ffffffffffffffda RBX: 00007f5c91215fa0 RCX: 00007f5c90f9c629 [ 1904.574932][ T1072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1904.582924][ T1072] RBP: 00007f5c91ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.590908][ T1072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.598897][ T1072] R13: 00007f5c91216038 R14: 00007f5c91215fa0 R15: 00007ffdc532b548 [ 1904.606908][ T1072] [ 1904.727616][ T1055] netlink: 'syz.5.9038': attribute type 2 has an invalid length. [ 1904.740214][ T1055] netlink: 'syz.5.9038': attribute type 8 has an invalid length. [ 1904.748987][ T1055] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9038'. [ 1905.156896][ T1084] netlink: 'syz.5.9049': attribute type 39 has an invalid length. [ 1908.735896][ T1137] netlink: 'syz.0.9066': attribute type 2 has an invalid length. [ 1910.465995][ T1171] netlink: 'syz.5.9075': attribute type 10 has an invalid length. [ 1911.271998][ T1192] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9082'. [ 1911.559435][ T1201] netlink: 'syz.0.9085': attribute type 10 has an invalid length. [ 1911.941257][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 1912.090734][ T1217] FAULT_INJECTION: forcing a failure. [ 1912.090734][ T1217] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.187572][ T1217] CPU: 0 PID: 1217 Comm: syz.5.9090 Not tainted syzkaller #0 [ 1912.195016][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1912.205099][ T1217] Call Trace: [ 1912.208405][ T1217] [ 1912.211365][ T1217] dump_stack_lvl+0x188/0x24e [ 1912.216087][ T1217] ? show_regs_print_info+0x12/0x12 [ 1912.221328][ T1217] ? load_image+0x400/0x400 [ 1912.225868][ T1217] ? __might_sleep+0xd0/0xd0 [ 1912.230490][ T1217] ? __lock_acquire+0x7d10/0x7d10 [ 1912.235581][ T1217] should_fail_ex+0x399/0x4d0 [ 1912.240307][ T1217] should_failslab+0x5/0x20 [ 1912.244848][ T1217] slab_pre_alloc_hook+0x59/0x310 [ 1912.249907][ T1217] ? nsim_bpf+0x78e/0xd30 [ 1912.254295][ T1217] __kmem_cache_alloc_node+0x4f/0x260 [ 1912.259706][ T1217] ? nsim_bpf+0x78e/0xd30 [ 1912.264076][ T1217] kmalloc_trace+0x26/0xe0 [ 1912.268536][ T1217] nsim_bpf+0x78e/0xd30 [ 1912.272739][ T1217] bpf_map_offload_map_alloc+0x3d9/0x630 [ 1912.278407][ T1217] ? bpf_prog_offload_info_fill_ns+0x290/0x290 [ 1912.284589][ T1217] ? __lock_acquire+0x7d10/0x7d10 [ 1912.289633][ T1217] ? array_map_alloc_check+0x265/0x380 [ 1912.295108][ T1217] map_create+0x534/0x1000 [ 1912.299537][ T1217] ? bpf_lsm_bpf+0x5/0x10 [ 1912.303878][ T1217] __sys_bpf+0x38b/0x780 [ 1912.308137][ T1217] ? bpf_link_show_fdinfo+0x380/0x380 [ 1912.313530][ T1217] ? lock_chain_count+0x20/0x20 [ 1912.318400][ T1217] __x64_sys_bpf+0x78/0x90 [ 1912.322829][ T1217] do_syscall_64+0x4c/0xa0 [ 1912.327258][ T1217] ? clear_bhb_loop+0x60/0xb0 [ 1912.331948][ T1217] ? clear_bhb_loop+0x60/0xb0 [ 1912.336759][ T1217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.342663][ T1217] RIP: 0033:0x7f583539c629 [ 1912.347092][ T1217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.366707][ T1217] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1912.375129][ T1217] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1912.383110][ T1217] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000000 [ 1912.391088][ T1217] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.399067][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.407043][ T1217] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1912.415036][ T1217] [ 1912.836108][ T1235] FAULT_INJECTION: forcing a failure. [ 1912.836108][ T1235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.942643][ T1235] CPU: 0 PID: 1235 Comm: syz.5.9097 Not tainted syzkaller #0 [ 1912.950104][ T1235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1912.960194][ T1235] Call Trace: [ 1912.963504][ T1235] [ 1912.966471][ T1235] dump_stack_lvl+0x188/0x24e [ 1912.971204][ T1235] ? show_regs_print_info+0x12/0x12 [ 1912.976452][ T1235] ? load_image+0x400/0x400 [ 1912.981087][ T1235] ? __lock_acquire+0x7d10/0x7d10 [ 1912.985293][ T1232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1912.986141][ T1235] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1912.986176][ T1235] should_fail_ex+0x399/0x4d0 [ 1912.986212][ T1235] strncpy_from_user+0x32/0x350 [ 1912.986244][ T1235] bpf_prog_load+0x1f3/0x1560 [ 1912.986283][ T1235] ? map_freeze+0x390/0x390 [ 1912.986308][ T1235] ? __might_fault+0xa6/0x120 [ 1912.986344][ T1235] ? __might_fault+0xa6/0x120 [ 1912.986364][ T1235] ? __might_fault+0xc2/0x120 [ 1912.986381][ T1235] ? __might_fault+0xa6/0x120 [ 1912.986403][ T1235] ? bpf_lsm_bpf+0x5/0x10 [ 1912.986423][ T1235] ? security_bpf+0x7a/0xa0 [ 1912.986446][ T1235] __sys_bpf+0x5b8/0x780 [ 1912.986475][ T1235] ? bpf_link_show_fdinfo+0x380/0x380 [ 1912.986519][ T1235] ? lock_chain_count+0x20/0x20 [ 1912.986555][ T1235] __x64_sys_bpf+0x78/0x90 [ 1912.986581][ T1235] do_syscall_64+0x4c/0xa0 [ 1912.986603][ T1235] ? clear_bhb_loop+0x60/0xb0 [ 1912.986625][ T1235] ? clear_bhb_loop+0x60/0xb0 [ 1912.986649][ T1235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.086491][ T1235] RIP: 0033:0x7f583539c629 [ 1913.090927][ T1235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.110729][ T1235] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1913.119159][ T1235] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1913.127143][ T1235] RDX: 000000000000002e RSI: 0000200000000080 RDI: 0000000000000005 [ 1913.135134][ T1235] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1913.143119][ T1235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1913.151194][ T1235] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1913.159214][ T1235] [ 1913.270863][ T1238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9098'. [ 1913.504757][ T1245] netlink: 'syz.2.9099': attribute type 1 has an invalid length. [ 1913.546051][ T1245] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1913.559022][ T1248] netlink: 'syz.3.9101': attribute type 3 has an invalid length. [ 1913.606519][ T1248] netlink: 197536 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1913.695278][ T1244] tipc: Started in network mode [ 1913.713281][ T1244] tipc: Node identity 9215a268, cluster identity 4711 [ 1913.729054][ T1244] tipc: Node number set to 2450891368 [ 1913.942878][ T1269] netlink: 'syz.0.9104': attribute type 3 has an invalid length. [ 1913.967818][ T1269] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9104'. [ 1914.181145][ T1275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1914.540297][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.546829][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.350720][ T1301] device sit0 entered promiscuous mode [ 1915.896818][ T1308] netlink: 'syz.2.9117': attribute type 2 has an invalid length. [ 1916.076020][ T1308] device 0 entered promiscuous mode [ 1916.774827][ T1324] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9122'. [ 1918.038560][ T1351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1918.051050][ T1351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1918.059145][ T1351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1918.076835][ T1351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1918.085324][ T1351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1918.092969][ T1351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1918.262964][T23391] bond0: (slave syz_tun): Releasing backup interface [ 1918.500298][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.793156][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.867910][ T1365] Ÿë: port 1(gretap0) entered blocking state [ 1919.874179][ T1365] Ÿë: port 1(gretap0) entered disabled state [ 1919.889220][ T1365] device gretap0 entered promiscuous mode [ 1920.138151][ T1351] Bluetooth: hci3: command 0x0409 tx timeout [ 1920.243086][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.500638][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.932954][ T1350] chnl_net:caif_netlink_parms(): no params data found [ 1921.170397][ T1398] netlink: 'syz.0.9142': attribute type 10 has an invalid length. [ 1921.610628][ T1412] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9144'. [ 1921.664128][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.676496][ T1350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.703686][ T1350] device bridge_slave_0 entered promiscuous mode [ 1921.732170][ T1350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.776761][ T1350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.824199][ T1350] device bridge_slave_1 entered promiscuous mode [ 1922.206591][ T1351] Bluetooth: hci3: command 0x041b tx timeout [ 1922.218650][ T1350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.387700][ T1350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.641061][ T1350] team0: Port device team_slave_0 added [ 1922.787152][ T1429] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9156'. [ 1922.843944][ T1350] team0: Port device team_slave_1 added [ 1923.449442][ T1350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1923.468593][ T1443] netlink: 'syz.5.9148': attribute type 3 has an invalid length. [ 1923.476578][ T1350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1923.476610][ T1350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1923.546561][ T1441] netlink: 14423 bytes leftover after parsing attributes in process `syz.5.9148'. [ 1923.593264][ T1350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1923.593671][ T1443] netlink: 'syz.5.9148': attribute type 4 has an invalid length. [ 1923.614481][ T1350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1923.614514][ T1350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.736546][ T1443] netlink: 'syz.5.9148': attribute type 6 has an invalid length. [ 1923.748678][ T1443] netlink: 'syz.5.9148': attribute type 15 has an invalid length. [ 1923.780302][ T1443] netlink: 'syz.5.9148': attribute type 16 has an invalid length. [ 1923.812914][ T1443] netlink: 'syz.5.9148': attribute type 20 has an invalid length. [ 1923.816709][ T1350] device hsr_slave_0 entered promiscuous mode [ 1923.841283][ T1443] netlink: 'syz.5.9148': attribute type 21 has an invalid length. [ 1923.856934][ T1350] device hsr_slave_1 entered promiscuous mode [ 1923.874381][ T1440] delete_channel: no stack [ 1923.906534][ T1443] netlink: 'syz.5.9148': attribute type 23 has an invalid length. [ 1923.914879][ T1443] netlink: 'syz.5.9148': attribute type 25 has an invalid length. [ 1924.286540][T13723] Bluetooth: hci3: command 0x040f tx timeout [ 1924.491921][ T1464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9152'. [ 1924.633938][ T1464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9152'. [ 1924.915495][ T1471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9152'. [ 1926.367530][T13723] Bluetooth: hci3: command 0x0419 tx timeout [ 1927.231321][ T1513] validate_nla: 4 callbacks suppressed [ 1927.231342][ T1513] netlink: 'syz.3.9165': attribute type 3 has an invalid length. [ 1927.266410][ T1513] netlink: 'syz.3.9165': attribute type 4 has an invalid length. [ 1927.274201][ T1513] netlink: 'syz.3.9165': attribute type 6 has an invalid length. [ 1927.346435][ T1513] netlink: 'syz.3.9165': attribute type 15 has an invalid length. [ 1927.354351][ T1513] netlink: 'syz.3.9165': attribute type 16 has an invalid length. [ 1927.429895][ T1495] delete_channel: no stack [ 1927.445485][ T1506] netlink: 14423 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1927.541112][ T1513] netlink: 'syz.3.9165': attribute type 20 has an invalid length. [ 1927.567775][ T57] device hsr_slave_0 left promiscuous mode [ 1927.575490][ T57] device hsr_slave_1 left promiscuous mode [ 1927.589922][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1927.602947][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.611376][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1927.624045][ T1513] netlink: 'syz.3.9165': attribute type 21 has an invalid length. [ 1927.632656][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1927.645307][ T1513] netlink: 'syz.3.9165': attribute type 23 has an invalid length. [ 1927.655158][ T57] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1927.666288][ T57] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1927.680566][ T1513] netlink: 'syz.3.9165': attribute type 25 has an invalid length. [ 1927.689026][ T1513] netlink: 'syz.3.9165': attribute type 27 has an invalid length. [ 1927.701736][ T57] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1927.715443][ T57] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1927.731219][ T57] device bridge_slave_0 left promiscuous mode [ 1927.750320][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.240209][ T57] device veth1_macvtap left promiscuous mode [ 1928.254240][ T57] device veth0_macvtap left promiscuous mode [ 1928.270359][ T57] device veth1_vlan left promiscuous mode [ 1928.276758][ T57] device veth0_vlan left promiscuous mode [ 1928.362422][ T1537] FAULT_INJECTION: forcing a failure. [ 1928.362422][ T1537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.417439][ T1537] CPU: 1 PID: 1537 Comm: syz.5.9174 Not tainted syzkaller #0 [ 1928.424980][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1928.435072][ T1537] Call Trace: [ 1928.438378][ T1537] [ 1928.441341][ T1537] dump_stack_lvl+0x188/0x24e [ 1928.446058][ T1537] ? show_regs_print_info+0x12/0x12 [ 1928.452173][ T1537] ? load_image+0x400/0x400 [ 1928.456716][ T1537] ? __might_fault+0xa6/0x120 [ 1928.461437][ T1537] should_fail_ex+0x399/0x4d0 [ 1928.466165][ T1537] copyin+0x1b/0x120 [ 1928.470100][ T1537] _copy_from_iter+0x447/0x1130 [ 1928.475011][ T1537] ? copyout_mc+0x110/0x110 [ 1928.479560][ T1537] ? __virt_addr_valid+0x188/0x540 [ 1928.484725][ T1537] ? __virt_addr_valid+0x188/0x540 [ 1928.489876][ T1537] ? __virt_addr_valid+0x465/0x540 [ 1928.495007][ T1537] ? __check_object_size+0x500/0xa40 [ 1928.500302][ T1537] netlink_sendmsg+0x755/0xbd0 [ 1928.505089][ T1537] ? netlink_getsockopt+0x550/0x550 [ 1928.510301][ T1537] ? aa_sock_msg_perm+0x94/0x150 [ 1928.515249][ T1537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1928.520543][ T1537] ? security_socket_sendmsg+0x7c/0xa0 [ 1928.526024][ T1537] ? netlink_getsockopt+0x550/0x550 [ 1928.531252][ T1537] ____sys_sendmsg+0x5be/0x970 [ 1928.536045][ T1537] ? __sys_sendmsg_sock+0x30/0x30 [ 1928.541086][ T1537] ? __import_iovec+0x315/0x500 [ 1928.545958][ T1537] ? import_iovec+0x6f/0xa0 [ 1928.550489][ T1537] ___sys_sendmsg+0x2a2/0x360 [ 1928.555196][ T1537] ? __sys_sendmsg+0x290/0x290 [ 1928.560000][ T1537] ? __lock_acquire+0x7d10/0x7d10 [ 1928.565065][ T1537] __se_sys_sendmsg+0x1bb/0x2a0 [ 1928.570024][ T1537] ? __x64_sys_sendmsg+0x80/0x80 [ 1928.574993][ T1537] ? lockdep_hardirqs_on+0x94/0x140 [ 1928.580204][ T1537] do_syscall_64+0x4c/0xa0 [ 1928.584646][ T1537] ? clear_bhb_loop+0x60/0xb0 [ 1928.589337][ T1537] ? clear_bhb_loop+0x60/0xb0 [ 1928.594023][ T1537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1928.599937][ T1537] RIP: 0033:0x7f583539c629 [ 1928.604364][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1928.623978][ T1537] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1928.632408][ T1537] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1928.640385][ T1537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1928.648358][ T1537] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.656338][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.664321][ T1537] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1928.672309][ T1537] [ 1929.531352][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1929.614385][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1929.658586][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1929.704506][ T57] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1929.977332][ T57] bond0 (unregistering): Released all slaves [ 1930.078193][ T1530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1930.269063][ T1350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1930.314084][ T1350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1930.343570][ T1552] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9179'. [ 1930.386805][ T1350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1930.441722][ T1552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9179'. [ 1930.554259][ T1350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1931.152259][ T1350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1931.202691][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1931.245432][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1931.272078][ T1350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1931.368796][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1931.388500][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1931.416075][T25525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.423419][T25525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1931.506229][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1931.623803][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1931.682760][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1931.722789][T25512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.730112][T25512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1931.855782][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1931.914162][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1931.985428][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1932.009816][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1932.062614][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1932.091988][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1932.121898][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1932.176938][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1932.190700][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1932.236860][ T1350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1932.259164][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1932.271497][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1932.281903][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1933.343482][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1933.355692][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1933.384118][ T1350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1933.980998][ T1637] FAULT_INJECTION: forcing a failure. [ 1933.980998][ T1637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.025007][ T1637] CPU: 1 PID: 1637 Comm: syz.5.9199 Not tainted syzkaller #0 [ 1934.032528][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1934.042608][ T1637] Call Trace: [ 1934.045908][ T1637] [ 1934.048859][ T1637] dump_stack_lvl+0x188/0x24e [ 1934.053586][ T1637] ? show_regs_print_info+0x12/0x12 [ 1934.058818][ T1637] ? load_image+0x400/0x400 [ 1934.063361][ T1637] ? __lock_acquire+0x7d10/0x7d10 [ 1934.068432][ T1637] ? snprintf+0xe5/0x140 [ 1934.072717][ T1637] should_fail_ex+0x399/0x4d0 [ 1934.077445][ T1637] _copy_to_user+0x2c/0x130 [ 1934.081995][ T1637] simple_read_from_buffer+0xe3/0x150 [ 1934.087422][ T1637] proc_fail_nth_read+0x1a6/0x220 [ 1934.092464][ T1637] ? proc_fault_inject_write+0x310/0x310 [ 1934.098114][ T1637] ? fsnotify_perm+0x248/0x550 [ 1934.102897][ T1637] ? proc_fault_inject_write+0x310/0x310 [ 1934.108548][ T1637] vfs_read+0x2de/0xa00 [ 1934.112726][ T1637] ? kernel_read+0x1e0/0x1e0 [ 1934.117328][ T1637] ? __fget_files+0x28/0x4b0 [ 1934.121929][ T1637] ? __fget_files+0x28/0x4b0 [ 1934.126536][ T1637] ? __fget_files+0x43d/0x4b0 [ 1934.131243][ T1637] ? __fdget_pos+0x2ae/0x360 [ 1934.135844][ T1637] ? ksys_read+0x71/0x250 [ 1934.140188][ T1637] ksys_read+0x14c/0x250 [ 1934.144444][ T1637] ? vfs_write+0xa30/0xa30 [ 1934.148878][ T1637] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1934.154787][ T1637] do_syscall_64+0x4c/0xa0 [ 1934.159214][ T1637] ? clear_bhb_loop+0x60/0xb0 [ 1934.163986][ T1637] ? clear_bhb_loop+0x60/0xb0 [ 1934.168680][ T1637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1934.174585][ T1637] RIP: 0033:0x7f583535cece [ 1934.179014][ T1637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1934.198627][ T1637] RSP: 002b:00007f58361fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1934.207062][ T1637] RAX: ffffffffffffffda RBX: 00007f58361fd6c0 RCX: 00007f583535cece [ 1934.215043][ T1637] RDX: 000000000000000f RSI: 00007f58361fd0a0 RDI: 0000000000000008 [ 1934.223024][ T1637] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.231001][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.238976][ T1637] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1934.246973][ T1637] [ 1934.715154][ T1636] delete_channel: no stack [ 1934.745845][ T1653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1934.902332][ T1661] FAULT_INJECTION: forcing a failure. [ 1934.902332][ T1661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.994351][ T1661] CPU: 1 PID: 1661 Comm: syz.5.9204 Not tainted syzkaller #0 [ 1935.001894][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1935.011994][ T1661] Call Trace: [ 1935.015326][ T1661] [ 1935.018295][ T1661] dump_stack_lvl+0x188/0x24e [ 1935.023027][ T1661] ? show_regs_print_info+0x12/0x12 [ 1935.028275][ T1661] ? load_image+0x400/0x400 [ 1935.032844][ T1661] ? __lock_acquire+0x7d10/0x7d10 [ 1935.037932][ T1661] ? snprintf+0xe5/0x140 [ 1935.042225][ T1661] should_fail_ex+0x399/0x4d0 [ 1935.046961][ T1661] _copy_to_user+0x2c/0x130 [ 1935.051543][ T1661] simple_read_from_buffer+0xe3/0x150 [ 1935.056973][ T1661] proc_fail_nth_read+0x1a6/0x220 [ 1935.062044][ T1661] ? proc_fault_inject_write+0x310/0x310 [ 1935.067722][ T1661] ? fsnotify_perm+0x248/0x550 [ 1935.072533][ T1661] ? proc_fault_inject_write+0x310/0x310 [ 1935.078214][ T1661] vfs_read+0x2de/0xa00 [ 1935.082423][ T1661] ? kernel_read+0x1e0/0x1e0 [ 1935.082563][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1935.087035][ T1661] ? __fget_files+0x28/0x4b0 [ 1935.087063][ T1661] ? __fget_files+0x28/0x4b0 [ 1935.087089][ T1661] ? __fget_files+0x43d/0x4b0 [ 1935.087122][ T1661] ? __fdget_pos+0x2ae/0x360 [ 1935.087146][ T1661] ? ksys_read+0x71/0x250 [ 1935.096058][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1935.099799][ T1661] ksys_read+0x14c/0x250 [ 1935.099835][ T1661] ? vfs_write+0xa30/0xa30 [ 1935.099864][ T1661] ? lockdep_hardirqs_on+0x94/0x140 [ 1935.099889][ T1661] do_syscall_64+0x4c/0xa0 [ 1935.099912][ T1661] ? clear_bhb_loop+0x60/0xb0 [ 1935.099933][ T1661] ? clear_bhb_loop+0x60/0xb0 [ 1935.145303][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1935.149485][ T1661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1935.149516][ T1661] RIP: 0033:0x7f583535cece [ 1935.149535][ T1661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1935.149560][ T1661] RSP: 002b:00007f58361fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1935.149584][ T1661] RAX: ffffffffffffffda RBX: 00007f58361fd6c0 RCX: 00007f583535cece [ 1935.149599][ T1661] RDX: 000000000000000f RSI: 00007f58361fd0a0 RDI: 0000000000000004 [ 1935.149612][ T1661] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1935.156057][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1935.161901][ T1661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.161919][ T1661] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1935.161948][ T1661] [ 1935.625196][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1935.672849][T25468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1935.697638][ T1350] device veth0_vlan entered promiscuous mode [ 1935.722393][ T1350] device veth1_vlan entered promiscuous mode [ 1935.816055][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1935.828115][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1935.859372][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1935.873688][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1935.889039][ T1350] device veth0_macvtap entered promiscuous mode [ 1935.909040][ T1350] device veth1_macvtap entered promiscuous mode [ 1935.935055][ T1350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1935.945155][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1935.955191][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1935.974199][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1936.029815][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1936.059176][ T1350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1936.110100][ T1350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1936.187598][ T1350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1936.211292][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1936.248213][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1936.280946][ T1350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.300163][ T1350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.313085][ T1350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.322518][ T1350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.651514][T25475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1936.690094][T25475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1936.758239][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1936.798164][T25525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1936.863463][T25525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1936.911039][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1937.052065][ T1712] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9215'. [ 1937.663897][ T1716] validate_nla: 5 callbacks suppressed [ 1937.663937][ T1716] netlink: 'syz.4.9124': attribute type 3 has an invalid length. [ 1937.721994][ T1716] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9124'. [ 1937.763782][ T1722] netlink: 'syz.5.9218': attribute type 10 has an invalid length. [ 1938.581531][T13723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1938.590389][T13723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1938.641355][T13723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1938.652597][T13723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1938.666928][T13723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1938.674402][T13723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1938.843535][T25475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.949631][T25475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.057928][T25475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.151590][T25475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.205074][ T1735] chnl_net:caif_netlink_parms(): no params data found [ 1939.286005][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.316752][ T1735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.324633][ T1735] device bridge_slave_0 entered promiscuous mode [ 1939.350225][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.361262][ T1735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.373368][ T1735] device bridge_slave_1 entered promiscuous mode [ 1939.485690][ T1735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1939.515858][T25475] tipc: Left network mode [ 1939.536958][ T1735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1939.918531][ T1735] team0: Port device team_slave_0 added [ 1939.950362][ T1735] team0: Port device team_slave_1 added [ 1940.564411][ T1735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.625533][ T1735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.736722][ T1735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.766855][T13723] Bluetooth: hci4: command 0x0409 tx timeout [ 1941.239421][ T1735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1941.266305][ T1735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1941.396998][ T1735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1941.839353][ T1735] device hsr_slave_0 entered promiscuous mode [ 1941.885871][ T1735] device hsr_slave_1 entered promiscuous mode [ 1941.913709][ T1735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1941.979975][ T1735] Cannot create hsr debugfs directory [ 1942.147354][T25475] device gretap0 left promiscuous mode [ 1942.152966][T25475] Ÿë: port 1(gretap0) entered disabled state [ 1942.856691][T13723] Bluetooth: hci4: command 0x041b tx timeout [ 1942.938472][ T1809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1943.371852][ T1809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1943.709856][ T1813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1943.719871][ T1814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1943.782616][ T1820] device wlan1 entered promiscuous mode [ 1944.054961][T25475] device hsr_slave_0 left promiscuous mode [ 1944.125915][T25475] device hsr_slave_1 left promiscuous mode [ 1944.231857][T25475] device veth1_macvtap left promiscuous mode [ 1944.249923][T25475] device veth0_macvtap left promiscuous mode [ 1944.315602][T25475] device veth1_vlan left promiscuous mode [ 1944.939833][T13723] Bluetooth: hci4: command 0x040f tx timeout [ 1946.569866][T25475] device team_slave_1 left promiscuous mode [ 1946.580627][T25475] team0 (unregistering): Port device team_slave_1 removed [ 1946.646159][T25475] device team_slave_0 left promiscuous mode [ 1946.653105][T25475] team0 (unregistering): Port device team_slave_0 removed [ 1946.695784][T25475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1947.006100][T25475] bond0 (unregistering): Released all slaves [ 1947.012281][T13723] Bluetooth: hci4: command 0x0419 tx timeout [ 1947.052664][ T1838] netlink: 'syz.4.9245': attribute type 11 has an invalid length. [ 1947.060677][ T1843] netlink: 'syz.0.9246': attribute type 10 has an invalid length. [ 1948.107777][ T1890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9255'. [ 1948.739073][ T1914] FAULT_INJECTION: forcing a failure. [ 1948.739073][ T1914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1948.764052][ T1914] CPU: 1 PID: 1914 Comm: syz.5.9258 Not tainted syzkaller #0 [ 1948.771486][ T1914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1948.781581][ T1914] Call Trace: [ 1948.784888][ T1914] [ 1948.787840][ T1914] dump_stack_lvl+0x188/0x24e [ 1948.792554][ T1914] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1948.798748][ T1914] ? show_regs_print_info+0x12/0x12 [ 1948.803983][ T1914] ? load_image+0x400/0x400 [ 1948.808610][ T1914] should_fail_ex+0x399/0x4d0 [ 1948.813325][ T1914] _copy_from_user+0x2c/0x170 [ 1948.818043][ T1914] __sys_bpf+0x2ea/0x780 [ 1948.822324][ T1914] ? bpf_link_show_fdinfo+0x380/0x380 [ 1948.827748][ T1914] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1948.833978][ T1914] __x64_sys_bpf+0x78/0x90 [ 1948.838428][ T1914] do_syscall_64+0x4c/0xa0 [ 1948.842869][ T1914] ? clear_bhb_loop+0x60/0xb0 [ 1948.847570][ T1914] ? clear_bhb_loop+0x60/0xb0 [ 1948.852271][ T1914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1948.858188][ T1914] RIP: 0033:0x7f583539c629 [ 1948.862649][ T1914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.882385][ T1914] RSP: 002b:00007f58361dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1948.890838][ T1914] RAX: ffffffffffffffda RBX: 00007f5835616090 RCX: 00007f583539c629 [ 1948.898840][ T1914] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 1948.906842][ T1914] RBP: 00007f58361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1948.914844][ T1914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1948.922862][ T1914] R13: 00007f5835616128 R14: 00007f5835616090 R15: 00007ffd51b61498 [ 1948.930906][ T1914] [ 1949.678882][ T1735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1949.777829][ T1735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1949.832143][ T1735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1949.871452][ T1735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1950.082465][ T1735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1950.148815][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1950.157625][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1950.185671][ T1735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.217830][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1950.238064][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1950.286281][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.293591][T13223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1950.343189][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1950.449226][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1950.515606][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1950.564072][T25525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.571321][T25525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1950.688055][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1950.735306][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1951.541765][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1951.583238][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1951.604752][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1951.625141][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1951.810216][ T1735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1951.828251][ T1735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1951.840650][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1951.849777][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1951.865933][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1951.895629][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1951.955362][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1951.998442][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1952.047872][ T1971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9270'. [ 1954.689784][ T1996] tap0: tun_chr_ioctl cmd 1074025675 [ 1954.705871][ T1996] tap0: persist enabled [ 1954.725980][ T2001] tap0: tun_chr_ioctl cmd 1074025675 [ 1954.785828][ T2001] tap0: persist disabled [ 1954.889163][ T2016] syz.4.9277[2016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1954.889303][ T2016] syz.4.9277[2016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1955.056260][ T2021] FAULT_INJECTION: forcing a failure. [ 1955.056260][ T2021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1955.212131][ T2021] CPU: 1 PID: 2021 Comm: syz.0.9280 Not tainted syzkaller #0 [ 1955.219667][ T2021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1955.229761][ T2021] Call Trace: [ 1955.233075][ T2021] [ 1955.236036][ T2021] dump_stack_lvl+0x188/0x24e [ 1955.240761][ T2021] ? show_regs_print_info+0x12/0x12 [ 1955.245991][ T2021] ? load_image+0x400/0x400 [ 1955.250616][ T2021] ? __lock_acquire+0x7d10/0x7d10 [ 1955.255692][ T2021] should_fail_ex+0x399/0x4d0 [ 1955.260429][ T2021] _copy_from_user+0x2c/0x170 [ 1955.265144][ T2021] ___sys_sendmsg+0x1c3/0x360 [ 1955.269859][ T2021] ? __sys_sendmsg+0x290/0x290 [ 1955.274676][ T2021] ? trace_call_bpf+0xbf/0x6b0 [ 1955.279504][ T2021] __se_sys_sendmsg+0x1bb/0x2a0 [ 1955.284395][ T2021] ? __x64_sys_sendmsg+0x80/0x80 [ 1955.289394][ T2021] ? lockdep_hardirqs_on+0x94/0x140 [ 1955.294637][ T2021] do_syscall_64+0x4c/0xa0 [ 1955.299088][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1955.303801][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1955.308521][ T2021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1955.314453][ T2021] RIP: 0033:0x7f9a1c39c629 [ 1955.318901][ T2021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.338552][ T2021] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.347011][ T2021] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1955.355113][ T2021] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1955.363121][ T2021] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.371129][ T2021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.379130][ T2021] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1955.387160][ T2021] [ 1955.468337][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1955.476000][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1955.529903][ T2013] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.9277'. [ 1955.553933][ T1735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1955.615683][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1955.638716][T25525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1956.613022][ T2041] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9283'. [ 1956.648620][ T1735] device veth0_vlan entered promiscuous mode [ 1956.668269][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1956.678187][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1956.688520][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1956.700412][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1956.725141][ T1735] device veth1_vlan entered promiscuous mode [ 1956.761022][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1956.780501][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1956.819758][ T1735] device veth0_macvtap entered promiscuous mode [ 1956.850014][ T1735] device veth1_macvtap entered promiscuous mode [ 1956.931627][ T2052] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9284'. [ 1956.959042][ T2050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1956.988405][ T1735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1957.025757][ T1735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.074055][ T1735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1957.135060][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1957.182499][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1957.220800][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1957.255664][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1957.352736][ T1735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1957.380162][ T1735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.408821][ T1735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1957.445484][ T1735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.512140][ T1735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.546482][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1957.562772][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1957.589292][ T1735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.616466][ T1735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.664598][ T1735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.733618][ T1735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.191037][T13223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.248814][T13223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.303172][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1958.464786][T25533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.492247][T25533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.992520][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1959.006723][ T2089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9293'. [ 1959.463479][ T2099] netlink: 'syz.4.9295': attribute type 11 has an invalid length. [ 1959.516014][ T2099] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9295'. [ 1960.150585][ T2097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.784416][ T2132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9301'. [ 1961.841622][T13723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1961.861005][T13723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1961.872338][T13723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1961.885856][T13723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1961.894786][T13723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1961.954906][T13723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1962.168076][T25512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.248145][ T2144] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9304'. [ 1962.475943][T25512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.935979][T25512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.368128][T25512] bond0: (slave netdevsim0): Releasing backup interface [ 1963.498821][T25512] device netdevsim0 left promiscuous mode [ 1963.529534][T25512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.012147][ T2179] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1964.052368][ T1351] Bluetooth: hci1: command 0x0409 tx timeout [ 1964.101718][ T2178] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1964.222229][ T2148] chnl_net:caif_netlink_parms(): no params data found [ 1964.365308][T25512] device 0 left promiscuous mode [ 1965.070963][ T2197] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9314'. [ 1966.140703][ T1351] Bluetooth: hci1: command 0x041b tx timeout [ 1966.256380][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.263647][ T2148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.314347][ T2148] device bridge_slave_0 entered promiscuous mode [ 1967.195803][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.210359][ T2148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.224697][ T2148] device bridge_slave_1 entered promiscuous mode [ 1967.463560][ T2225] netlink: 'syz.5.9321': attribute type 11 has an invalid length. [ 1967.488017][ T2225] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9321'. [ 1967.533442][ T2148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1967.832586][ T2224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.896970][ T2148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1968.208393][ T1351] Bluetooth: hci1: command 0x040f tx timeout [ 1968.266549][ T2148] team0: Port device team_slave_0 added [ 1968.332719][ T2148] team0: Port device team_slave_1 added [ 1968.856124][ T2148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1968.879146][ T2148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.157898][ T2148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.618651][ T2148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.625768][ T2148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.666497][ T2148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1969.725324][ T2258] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9330'. [ 1969.883923][ T2258] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9330'. [ 1969.896871][ T2263] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9330'. [ 1969.981473][ T2260] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9329'. [ 1970.171277][ T2265] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9330'. [ 1970.286637][ T1351] Bluetooth: hci1: command 0x0419 tx timeout [ 1970.390997][ T2148] device hsr_slave_0 entered promiscuous mode [ 1970.482296][ T2148] device hsr_slave_1 entered promiscuous mode [ 1970.549055][ T2148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1970.626525][ T2148] Cannot create hsr debugfs directory [ 1972.044797][ T2291] FAULT_INJECTION: forcing a failure. [ 1972.044797][ T2291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1972.204619][ T2291] CPU: 0 PID: 2291 Comm: syz.5.9335 Not tainted syzkaller #0 [ 1972.212069][ T2291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1972.222158][ T2291] Call Trace: [ 1972.225460][ T2291] [ 1972.228413][ T2291] dump_stack_lvl+0x188/0x24e [ 1972.233126][ T2291] ? show_regs_print_info+0x12/0x12 [ 1972.238356][ T2291] ? load_image+0x400/0x400 [ 1972.242888][ T2291] ? __lock_acquire+0x7d10/0x7d10 [ 1972.247945][ T2291] ? snprintf+0xe5/0x140 [ 1972.252221][ T2291] should_fail_ex+0x399/0x4d0 [ 1972.256936][ T2291] _copy_to_user+0x2c/0x130 [ 1972.261468][ T2291] simple_read_from_buffer+0xe3/0x150 [ 1972.266880][ T2291] proc_fail_nth_read+0x1a6/0x220 [ 1972.271936][ T2291] ? proc_fault_inject_write+0x310/0x310 [ 1972.277597][ T2291] ? fsnotify_perm+0x248/0x550 [ 1972.282396][ T2291] ? proc_fault_inject_write+0x310/0x310 [ 1972.288051][ T2291] vfs_read+0x2de/0xa00 [ 1972.292239][ T2291] ? kernel_read+0x1e0/0x1e0 [ 1972.296861][ T2291] ? __fget_files+0x28/0x4b0 [ 1972.301475][ T2291] ? __fget_files+0x28/0x4b0 [ 1972.306091][ T2291] ? __fget_files+0x43d/0x4b0 [ 1972.310809][ T2291] ? __fdget_pos+0x2ae/0x360 [ 1972.315431][ T2291] ? ksys_read+0x71/0x250 [ 1972.319791][ T2291] ksys_read+0x14c/0x250 [ 1972.324068][ T2291] ? vfs_write+0xa30/0xa30 [ 1972.328520][ T2291] ? lockdep_hardirqs_on+0x94/0x140 [ 1972.333747][ T2291] do_syscall_64+0x4c/0xa0 [ 1972.338188][ T2291] ? clear_bhb_loop+0x60/0xb0 [ 1972.342891][ T2291] ? clear_bhb_loop+0x60/0xb0 [ 1972.347594][ T2291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1972.353516][ T2291] RIP: 0033:0x7f583535cece [ 1972.357954][ T2291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1972.377585][ T2291] RSP: 002b:00007f58361dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1972.386031][ T2291] RAX: ffffffffffffffda RBX: 00007f58361dc6c0 RCX: 00007f583535cece [ 1972.394025][ T2291] RDX: 000000000000000f RSI: 00007f58361dc0a0 RDI: 0000000000000008 [ 1972.402020][ T2291] RBP: 00007f58361dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1972.410019][ T2291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.418106][ T2291] R13: 00007f5835616128 R14: 00007f5835616090 R15: 00007ffd51b61498 [ 1972.426115][ T2291] [ 1972.706086][T25512] bond0: (slave wlan1): Releasing backup interface [ 1973.913729][T25512] device batadv0 left promiscuous mode [ 1973.947845][T25512] ¤: port 1(batadv0) entered disabled state [ 1974.033302][T25512] device hsr_slave_0 left promiscuous mode [ 1974.123268][T25512] device hsr_slave_1 left promiscuous mode [ 1974.180026][T25512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1974.207609][T25512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1974.319904][T25512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1974.370135][T25512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1974.428604][T25512] bridge0: port 4(dummy0) entered disabled state [ 1974.515346][T25512] bridge0: port 3(team0) entered disabled state [ 1974.590669][T25512] device bridge_slave_1 left promiscuous mode [ 1974.633460][T25512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.598557][T25512] device bridge_slave_0 left promiscuous mode [ 1975.604894][T25512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.015042][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.021461][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.331925][T25512] device veth1_vlan left promiscuous mode [ 1977.536741][ T2345] delete_channel: no stack [ 1977.645740][T25512] device team_slave_1 left promiscuous mode [ 1977.661681][T25512] team0 (unregistering): Port device team_slave_1 removed [ 1977.722306][T25512] device team_slave_0 left promiscuous mode [ 1977.730845][T25512] team0 (unregistering): Port device team_slave_0 removed [ 1977.802887][T25512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1977.812830][T25512] device bond_slave_1 left promiscuous mode [ 1978.344265][T25512] device bond0 left promiscuous mode [ 1978.354943][T25512] team0 (unregistering): Port device bond0 removed [ 1978.412351][T25512] bond0 (unregistering): Released all slaves [ 1978.570134][ T2346] netlink: 'syz.3.9347': attribute type 10 has an invalid length. [ 1978.665853][ T2346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1978.728463][ T2346] team0: Port device bond0 added [ 1979.159653][ T2368] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9352'. [ 1979.668478][ T2148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1979.753681][ T2384] netlink: 'syz.4.9355': attribute type 4 has an invalid length. [ 1979.775982][ T2384] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1979.860982][ T2384] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1979.988499][ T2148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1980.022929][ T2148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1980.093009][ T2148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1980.168329][ T2389] FAULT_INJECTION: forcing a failure. [ 1980.168329][ T2389] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.298544][ T2389] CPU: 0 PID: 2389 Comm: syz.5.9356 Not tainted syzkaller #0 [ 1980.306011][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1980.316107][ T2389] Call Trace: [ 1980.319431][ T2389] [ 1980.322404][ T2389] dump_stack_lvl+0x188/0x24e [ 1980.327130][ T2389] ? show_regs_print_info+0x12/0x12 [ 1980.332379][ T2389] ? load_image+0x400/0x400 [ 1980.336934][ T2389] ? __might_sleep+0xd0/0xd0 [ 1980.341565][ T2389] ? __lock_acquire+0x7d10/0x7d10 [ 1980.346643][ T2389] should_fail_ex+0x399/0x4d0 [ 1980.351370][ T2389] should_failslab+0x5/0x20 [ 1980.356015][ T2389] slab_pre_alloc_hook+0x59/0x310 [ 1980.361076][ T2389] ? sk_prot_alloc+0xe7/0x210 [ 1980.365801][ T2389] __kmem_cache_alloc_node+0x4f/0x260 [ 1980.371209][ T2389] ? sk_prot_alloc+0xe7/0x210 [ 1980.375925][ T2389] __kmalloc+0xa0/0x240 [ 1980.380132][ T2389] sk_prot_alloc+0xe7/0x210 [ 1980.384681][ T2389] ? sk_alloc+0x20/0x340 [ 1980.389050][ T2389] sk_alloc+0x36/0x340 [ 1980.393147][ T2389] ? bpf_ctx_init+0x163/0x1a0 [ 1980.397849][ T2389] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1980.403417][ T2389] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1980.408798][ T2389] ? __fget_files+0x28/0x4b0 [ 1980.413496][ T2389] ? __fget_files+0x43d/0x4b0 [ 1980.418193][ T2389] ? cpu_online+0xa0/0xa0 [ 1980.422533][ T2389] bpf_prog_test_run+0x31e/0x390 [ 1980.427489][ T2389] __sys_bpf+0x62b/0x780 [ 1980.431746][ T2389] ? bpf_link_show_fdinfo+0x380/0x380 [ 1980.437147][ T2389] ? lock_chain_count+0x20/0x20 [ 1980.442022][ T2389] __x64_sys_bpf+0x78/0x90 [ 1980.446469][ T2389] do_syscall_64+0x4c/0xa0 [ 1980.450899][ T2389] ? clear_bhb_loop+0x60/0xb0 [ 1980.455583][ T2389] ? clear_bhb_loop+0x60/0xb0 [ 1980.460273][ T2389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1980.466173][ T2389] RIP: 0033:0x7f583539c629 [ 1980.470597][ T2389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1980.490213][ T2389] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1980.498659][ T2389] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 1980.506661][ T2389] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1980.514668][ T2389] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1980.522660][ T2389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.530676][ T2389] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 1980.538697][ T2389] [ 1980.746835][ T2148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.791223][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1980.807194][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1980.828239][ T2148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.879910][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1980.907338][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1980.926568][T25512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.933711][T25512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1981.026856][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1981.048819][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1981.171333][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1981.277000][T25512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.284184][T25512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1981.462028][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1981.501436][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1981.584726][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1981.622132][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1981.668562][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1981.729086][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1981.806234][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1981.904509][ T2148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1982.001036][ T2148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1982.030236][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1982.061301][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1982.122807][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1982.189884][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1982.216673][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1982.313906][ T2437] netlink: 'syz.5.9362': attribute type 10 has an invalid length. [ 1982.366171][ T2437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1982.419101][ T2437] team0: Port device bond0 added [ 1982.453705][ T2429] delete_channel: no stack [ 1982.647031][ T2447] netlink: 'syz.0.9363': attribute type 21 has an invalid length. [ 1982.654959][ T2447] netlink: 'syz.0.9363': attribute type 6 has an invalid length. [ 1982.717670][ T2447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9363'. [ 1982.990942][ T2463] FAULT_INJECTION: forcing a failure. [ 1982.990942][ T2463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.103519][ T2463] CPU: 0 PID: 2463 Comm: syz.4.9367 Not tainted syzkaller #0 [ 1983.110961][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1983.121053][ T2463] Call Trace: [ 1983.124355][ T2463] [ 1983.127312][ T2463] dump_stack_lvl+0x188/0x24e [ 1983.132030][ T2463] ? show_regs_print_info+0x12/0x12 [ 1983.137259][ T2463] ? load_image+0x400/0x400 [ 1983.141800][ T2463] ? __might_fault+0xa6/0x120 [ 1983.146522][ T2463] should_fail_ex+0x399/0x4d0 [ 1983.151261][ T2463] copyin+0x1b/0x120 [ 1983.155205][ T2463] _copy_from_iter+0x447/0x1130 [ 1983.160095][ T2463] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1983.165499][ T2463] ? copyout_mc+0x110/0x110 [ 1983.170030][ T2463] ? __virt_addr_valid+0x188/0x540 [ 1983.175264][ T2463] ? __virt_addr_valid+0x188/0x540 [ 1983.180409][ T2463] ? __virt_addr_valid+0x465/0x540 [ 1983.185560][ T2463] ? __check_object_size+0x500/0xa40 [ 1983.190882][ T2463] skb_copy_datagram_from_iter+0xef/0x690 [ 1983.196646][ T2463] ? skb_put+0x117/0x210 [ 1983.200927][ T2463] unix_dgram_sendmsg+0x5fb/0x16e0 [ 1983.206082][ T2463] ? aa_sk_perm+0x81f/0x950 [ 1983.210645][ T2463] ? __might_fault+0xa6/0x120 [ 1983.215356][ T2463] ? unix_dgram_poll+0x680/0x680 [ 1983.220324][ T2463] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1983.226791][ T2463] ? aa_sock_msg_perm+0x94/0x150 [ 1983.231758][ T2463] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1983.237086][ T2463] ? security_socket_sendmsg+0x7c/0xa0 [ 1983.242589][ T2463] ? unix_dgram_poll+0x680/0x680 [ 1983.247562][ T2463] ____sys_sendmsg+0x5be/0x970 [ 1983.252367][ T2463] ? __sys_sendmsg_sock+0x30/0x30 [ 1983.257429][ T2463] ? __import_iovec+0x315/0x500 [ 1983.262316][ T2463] ? import_iovec+0x6f/0xa0 [ 1983.266861][ T2463] ___sys_sendmsg+0x2a2/0x360 [ 1983.271582][ T2463] ? __sys_sendmsg+0x290/0x290 [ 1983.276406][ T2463] ? __lock_acquire+0x7d10/0x7d10 [ 1983.281491][ T2463] __se_sys_sendmsg+0x1bb/0x2a0 [ 1983.286376][ T2463] ? __x64_sys_sendmsg+0x80/0x80 [ 1983.291456][ T2463] ? lockdep_hardirqs_on+0x94/0x140 [ 1983.296687][ T2463] do_syscall_64+0x4c/0xa0 [ 1983.301132][ T2463] ? clear_bhb_loop+0x60/0xb0 [ 1983.305840][ T2463] ? clear_bhb_loop+0x60/0xb0 [ 1983.310549][ T2463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1983.316472][ T2463] RIP: 0033:0x7fba47d9c629 [ 1983.320907][ T2463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.340539][ T2463] RSP: 002b:00007fba48cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.348991][ T2463] RAX: ffffffffffffffda RBX: 00007fba48015fa0 RCX: 00007fba47d9c629 [ 1983.356999][ T2463] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1983.365006][ T2463] RBP: 00007fba48cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.373008][ T2463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.381009][ T2463] R13: 00007fba48016038 R14: 00007fba48015fa0 R15: 00007ffd980a0368 [ 1983.389032][ T2463] [ 1983.473419][ T2470] netlink: 'syz.3.9366': attribute type 10 has an invalid length. [ 1983.670880][ T2470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1983.807305][ T2470] device ipvlan1 entered promiscuous mode [ 1983.865755][ T2470] bridge0: port 3(ipvlan1) entered blocking state [ 1983.921498][ T2470] bridge0: port 3(ipvlan1) entered disabled state [ 1983.967953][ T2470] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1984.035502][ T2480] netlink: 'syz.4.9369': attribute type 2 has an invalid length. [ 1984.122113][ T2482] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.9370'. [ 1985.052267][ T2480] device 0 entered promiscuous mode [ 1985.064481][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1985.100657][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1985.159854][ T2148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.303133][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1985.344949][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1985.442347][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1985.483958][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1985.553875][ T2148] device veth0_vlan entered promiscuous mode [ 1985.579010][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1985.616115][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1985.677914][ T2148] device veth1_vlan entered promiscuous mode [ 1985.787736][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1985.839493][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1985.854894][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1985.865310][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1985.920125][ T2148] device veth0_macvtap entered promiscuous mode [ 1985.937916][ T2148] device veth1_macvtap entered promiscuous mode [ 1986.018757][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.042167][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.141280][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.214710][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.328011][ T2148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.364737][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1986.374335][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1986.415576][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1986.443195][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1986.538971][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.581684][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.667285][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1986.759556][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.856090][ T2148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1986.936213][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1986.987274][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1987.066072][ T2148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.118607][ T2148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.223987][ T2148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.335931][ T2148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.196790][T25475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.223159][T25475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.265879][ T2533] netlink: 'syz.4.9375': attribute type 10 has an invalid length. [ 1988.453601][ T2533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.580013][ T2533] team0: Port device bond0 added [ 1988.596773][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1988.642896][T25512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.656659][T25512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.675350][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1988.694541][ T2530] delete_channel: no stack [ 1988.905904][ T2547] netlink: 'syz.2.9299': attribute type 21 has an invalid length. [ 1989.584565][ T2563] netlink: 'syz.2.9381': attribute type 2 has an invalid length. [ 1990.441836][ T2563] device 0 entered promiscuous mode [ 1991.683930][ T2587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1992.225958][ T2590] : port 1(ip6gretap0) entered blocking state [ 1992.286140][ T2590] : port 1(ip6gretap0) entered disabled state [ 1992.336739][ T2590] device ip6gretap0 entered promiscuous mode [ 1992.410900][ T2591] device ip6gretap0 left promiscuous mode [ 1992.531572][ T2591] : port 1(ip6gretap0) entered disabled state [ 1992.714515][ T2590] netlink: 'syz.0.9388': attribute type 21 has an invalid length. [ 1992.764273][ T2590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1995.245475][ T2625] netlink: 'syz.5.9398': attribute type 2 has an invalid length. [ 1995.383874][ T2625] device 0 entered promiscuous mode [ 1995.606933][ T2637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9401'. [ 1997.299127][ T2672] netlink: 'syz.2.9421': attribute type 10 has an invalid length. [ 1998.215611][ T2683] FAULT_INJECTION: forcing a failure. [ 1998.215611][ T2683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1998.356643][ T2683] CPU: 1 PID: 2683 Comm: syz.0.9413 Not tainted syzkaller #0 [ 1998.364105][ T2683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1998.374215][ T2683] Call Trace: [ 1998.377533][ T2683] [ 1998.380481][ T2683] dump_stack_lvl+0x188/0x24e [ 1998.385201][ T2683] ? show_regs_print_info+0x12/0x12 [ 1998.390421][ T2683] ? load_image+0x400/0x400 [ 1998.394948][ T2683] ? __lock_acquire+0x7d10/0x7d10 [ 1998.399992][ T2683] ? __kmem_cache_alloc_node+0x140/0x260 [ 1998.405641][ T2683] ? __virt_addr_valid+0x188/0x540 [ 1998.410774][ T2683] should_fail_ex+0x399/0x4d0 [ 1998.415482][ T2683] _copy_from_user+0x2c/0x170 [ 1998.420185][ T2683] map_update_elem+0x454/0x680 [ 1998.424985][ T2683] __sys_bpf+0x4ec/0x780 [ 1998.429250][ T2683] ? bpf_link_show_fdinfo+0x380/0x380 [ 1998.434665][ T2683] ? lock_chain_count+0x20/0x20 [ 1998.439550][ T2683] __x64_sys_bpf+0x78/0x90 [ 1998.443984][ T2683] do_syscall_64+0x4c/0xa0 [ 1998.448417][ T2683] ? clear_bhb_loop+0x60/0xb0 [ 1998.453106][ T2683] ? clear_bhb_loop+0x60/0xb0 [ 1998.457829][ T2683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1998.463736][ T2683] RIP: 0033:0x7f9a1c39c629 [ 1998.468256][ T2683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1998.487961][ T2683] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1998.496397][ T2683] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 1998.504379][ T2683] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 1998.512365][ T2683] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1998.520347][ T2683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1998.528424][ T2683] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 1998.536524][ T2683] [ 1998.590194][ T2672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1998.605096][ T2673] netlink: 'syz.3.9411': attribute type 21 has an invalid length. [ 2001.014840][ T2719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9423'. [ 2001.394576][ T2726] netlink: 'syz.5.9427': attribute type 10 has an invalid length. [ 2003.215873][ T2759] netlink: 'syz.3.9434': attribute type 10 has an invalid length. [ 2003.280529][ T2759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9434'. [ 2003.446025][ T2759] bridge0: port 3(veth0_vlan) entered blocking state [ 2003.557103][ T2759] bridge0: port 3(veth0_vlan) entered disabled state [ 2003.569042][ T2759] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2003.599656][ T2760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9435'. [ 2005.234121][ T2784] netlink: 48545 bytes leftover after parsing attributes in process `syz.3.9440'. [ 2005.576261][ T2790] FAULT_INJECTION: forcing a failure. [ 2005.576261][ T2790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2005.605307][ T2789] netlink: 'syz.3.9441': attribute type 10 has an invalid length. [ 2005.704736][ T2790] CPU: 1 PID: 2790 Comm: syz.2.9443 Not tainted syzkaller #0 [ 2005.712169][ T2790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2005.722271][ T2790] Call Trace: [ 2005.725581][ T2790] [ 2005.728541][ T2790] dump_stack_lvl+0x188/0x24e [ 2005.733258][ T2790] ? show_regs_print_info+0x12/0x12 [ 2005.738494][ T2790] ? load_image+0x400/0x400 [ 2005.743039][ T2790] ? __lock_acquire+0x7d10/0x7d10 [ 2005.748100][ T2790] should_fail_ex+0x399/0x4d0 [ 2005.752822][ T2790] _copy_from_user+0x2c/0x170 [ 2005.757528][ T2790] ___sys_sendmsg+0x1c3/0x360 [ 2005.762259][ T2790] ? __sys_sendmsg+0x290/0x290 [ 2005.767077][ T2790] ? __lock_acquire+0x7d10/0x7d10 [ 2005.772157][ T2790] __se_sys_sendmsg+0x1bb/0x2a0 [ 2005.777040][ T2790] ? __x64_sys_sendmsg+0x80/0x80 [ 2005.782024][ T2790] ? lockdep_hardirqs_on+0x94/0x140 [ 2005.787422][ T2790] do_syscall_64+0x4c/0xa0 [ 2005.791861][ T2790] ? clear_bhb_loop+0x60/0xb0 [ 2005.796649][ T2790] ? clear_bhb_loop+0x60/0xb0 [ 2005.801352][ T2790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.807267][ T2790] RIP: 0033:0x7f7db2f9c629 [ 2005.811708][ T2790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2005.831343][ T2790] RSP: 002b:00007f7db3da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2005.839787][ T2790] RAX: ffffffffffffffda RBX: 00007f7db3215fa0 RCX: 00007f7db2f9c629 [ 2005.847779][ T2790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2005.855858][ T2790] RBP: 00007f7db3da2090 R08: 0000000000000000 R09: 0000000000000000 [ 2005.863845][ T2790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2005.871834][ T2790] R13: 00007f7db3216038 R14: 00007f7db3215fa0 R15: 00007ffff41460c8 [ 2005.879840][ T2790] [ 2006.604245][ T2789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2006.641869][ T2807] netlink: 48545 bytes leftover after parsing attributes in process `syz.5.9445'. [ 2008.412108][ T2834] netlink: 'syz.2.9449': attribute type 10 has an invalid length. [ 2008.560955][ T2834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9449'. [ 2008.933448][ T2834] device ipvlan1 entered promiscuous mode [ 2008.943194][ T2834] bridge0: port 3(ipvlan1) entered blocking state [ 2008.949887][ T2834] bridge0: port 3(ipvlan1) entered disabled state [ 2008.958008][ T2834] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2010.512649][ T2853] netlink: 'syz.0.9456': attribute type 19 has an invalid length. [ 2012.060904][ T2867] netlink: 'syz.3.9458': attribute type 2 has an invalid length. [ 2012.129676][ T2867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9458'. [ 2013.368869][ T2872] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9460'. [ 2014.959721][ T2913] netlink: 'syz.3.9471': attribute type 19 has an invalid length. [ 2015.893298][ T2913] device syzkaller0 entered promiscuous mode [ 2016.450787][ T2928] FAULT_INJECTION: forcing a failure. [ 2016.450787][ T2928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.468262][ T2928] CPU: 1 PID: 2928 Comm: syz.2.9476 Not tainted syzkaller #0 [ 2016.475686][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2016.485769][ T2928] Call Trace: [ 2016.489070][ T2928] [ 2016.492021][ T2928] dump_stack_lvl+0x188/0x24e [ 2016.496737][ T2928] ? show_regs_print_info+0x12/0x12 [ 2016.501976][ T2928] ? load_image+0x400/0x400 [ 2016.506512][ T2928] ? __lock_acquire+0x7d10/0x7d10 [ 2016.511578][ T2928] should_fail_ex+0x399/0x4d0 [ 2016.516299][ T2928] strncpy_from_user+0x32/0x350 [ 2016.521194][ T2928] bpf_prog_load+0x1f3/0x1560 [ 2016.525932][ T2928] ? map_freeze+0x390/0x390 [ 2016.530561][ T2928] ? __might_fault+0xa6/0x120 [ 2016.535283][ T2928] ? __might_fault+0xa6/0x120 [ 2016.539985][ T2928] ? __might_fault+0xc2/0x120 [ 2016.544685][ T2928] ? __might_fault+0xa6/0x120 [ 2016.549395][ T2928] ? bpf_lsm_bpf+0x5/0x10 [ 2016.553841][ T2928] ? security_bpf+0x7a/0xa0 [ 2016.558383][ T2928] __sys_bpf+0x5b8/0x780 [ 2016.562666][ T2928] ? bpf_link_show_fdinfo+0x380/0x380 [ 2016.568092][ T2928] ? lock_chain_count+0x20/0x20 [ 2016.572995][ T2928] __x64_sys_bpf+0x78/0x90 [ 2016.577448][ T2928] do_syscall_64+0x4c/0xa0 [ 2016.581894][ T2928] ? clear_bhb_loop+0x60/0xb0 [ 2016.586599][ T2928] ? clear_bhb_loop+0x60/0xb0 [ 2016.591397][ T2928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2016.597304][ T2928] RIP: 0033:0x7f7db2f9c629 [ 2016.601726][ T2928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.621602][ T2928] RSP: 002b:00007f7db3da2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2016.630027][ T2928] RAX: ffffffffffffffda RBX: 00007f7db3215fa0 RCX: 00007f7db2f9c629 [ 2016.638006][ T2928] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 2016.645981][ T2928] RBP: 00007f7db3da2090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.653956][ T2928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.661940][ T2928] R13: 00007f7db3216038 R14: 00007f7db3215fa0 R15: 00007ffff41460c8 [ 2016.669938][ T2928] [ 2021.725680][ T2960] netlink: 'syz.2.9484': attribute type 2 has an invalid length. [ 2021.750176][ T2960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9484'. [ 2022.631159][ T2975] netlink: 'syz.4.9486': attribute type 10 has an invalid length. [ 2022.740521][ T2978] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.9489'. [ 2022.917550][ T2975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9486'. [ 2023.079531][ T2975] device ipvlan1 entered promiscuous mode [ 2023.309852][ T2975] bridge0: port 3(ipvlan1) entered blocking state [ 2023.379816][ T2975] bridge0: port 3(ipvlan1) entered disabled state [ 2023.410125][ T2975] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2025.195700][ T2995] FAULT_INJECTION: forcing a failure. [ 2025.195700][ T2995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2025.396867][ T2995] CPU: 1 PID: 2995 Comm: syz.5.9493 Not tainted syzkaller #0 [ 2025.404314][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2025.414400][ T2995] Call Trace: [ 2025.417707][ T2995] [ 2025.420664][ T2995] dump_stack_lvl+0x188/0x24e [ 2025.425379][ T2995] ? show_regs_print_info+0x12/0x12 [ 2025.430611][ T2995] ? load_image+0x400/0x400 [ 2025.435160][ T2995] ? __lock_acquire+0x7d10/0x7d10 [ 2025.440230][ T2995] should_fail_ex+0x399/0x4d0 [ 2025.444949][ T2995] _copy_from_user+0x2c/0x170 [ 2025.449657][ T2995] ___sys_sendmsg+0x1c3/0x360 [ 2025.454382][ T2995] ? __sys_sendmsg+0x290/0x290 [ 2025.459201][ T2995] ? __lock_acquire+0x7d10/0x7d10 [ 2025.464285][ T2995] __se_sys_sendmsg+0x1bb/0x2a0 [ 2025.469163][ T2995] ? ct_nmi_exit+0x145/0x1c0 [ 2025.473785][ T2995] ? __x64_sys_sendmsg+0x80/0x80 [ 2025.478777][ T2995] ? lockdep_hardirqs_on+0x94/0x140 [ 2025.484012][ T2995] do_syscall_64+0x4c/0xa0 [ 2025.488467][ T2995] ? clear_bhb_loop+0x60/0xb0 [ 2025.493172][ T2995] ? clear_bhb_loop+0x60/0xb0 [ 2025.497882][ T2995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2025.503803][ T2995] RIP: 0033:0x7f583539c629 [ 2025.508250][ T2995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.527886][ T2995] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2025.536340][ T2995] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 2025.544363][ T2995] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2025.552373][ T2995] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.560381][ T2995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.568384][ T2995] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 2025.576411][ T2995] [ 2026.863841][ T2999] FAULT_INJECTION: forcing a failure. [ 2026.863841][ T2999] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.900689][ T2999] CPU: 0 PID: 2999 Comm: syz.5.9494 Not tainted syzkaller #0 [ 2026.908134][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2026.918240][ T2999] Call Trace: [ 2026.921561][ T2999] [ 2026.924538][ T2999] dump_stack_lvl+0x188/0x24e [ 2026.929275][ T2999] ? show_regs_print_info+0x12/0x12 [ 2026.934534][ T2999] ? load_image+0x400/0x400 [ 2026.939096][ T2999] ? __might_sleep+0xd0/0xd0 [ 2026.943730][ T2999] ? __lock_acquire+0x7d10/0x7d10 [ 2026.948817][ T2999] should_fail_ex+0x399/0x4d0 [ 2026.953559][ T2999] should_failslab+0x5/0x20 [ 2026.958107][ T2999] slab_pre_alloc_hook+0x59/0x310 [ 2026.963189][ T2999] ? tomoyo_encode+0x27e/0x540 [ 2026.968012][ T2999] __kmem_cache_alloc_node+0x4f/0x260 [ 2026.973451][ T2999] ? tomoyo_encode+0x27e/0x540 [ 2026.978271][ T2999] __kmalloc+0xa0/0x240 [ 2026.982493][ T2999] tomoyo_encode+0x27e/0x540 [ 2026.987150][ T2999] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2026.992855][ T2999] ? tomoyo_path_number_perm+0x205/0x650 [ 2026.998534][ T2999] tomoyo_path_number_perm+0x22f/0x650 [ 2027.004041][ T2999] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2027.010774][ T2999] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2027.016284][ T2999] ? ksys_write+0x1c0/0x250 [ 2027.020920][ T2999] ? common_file_perm+0x171/0x1c0 [ 2027.026074][ T2999] ? __fget_files+0x28/0x4b0 [ 2027.030704][ T2999] ? __fget_files+0x28/0x4b0 [ 2027.035374][ T2999] security_file_ioctl+0x6c/0xa0 [ 2027.040454][ T2999] __se_sys_ioctl+0x48/0x170 [ 2027.045100][ T2999] do_syscall_64+0x4c/0xa0 [ 2027.049559][ T2999] ? clear_bhb_loop+0x60/0xb0 [ 2027.054277][ T2999] ? clear_bhb_loop+0x60/0xb0 [ 2027.058998][ T2999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2027.064952][ T2999] RIP: 0033:0x7f583539c629 [ 2027.069416][ T2999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.089507][ T2999] RSP: 002b:00007f58361fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2027.097971][ T2999] RAX: ffffffffffffffda RBX: 00007f5835615fa0 RCX: 00007f583539c629 [ 2027.105985][ T2999] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000006 [ 2027.113995][ T2999] RBP: 00007f58361fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.122005][ T2999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.130025][ T2999] R13: 00007f5835616038 R14: 00007f5835615fa0 R15: 00007ffd51b61498 [ 2027.138097][ T2999] [ 2027.296786][ T2999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2028.042482][ T3010] netlink: 'syz.5.9498': attribute type 10 has an invalid length. [ 2028.332167][ T3018] netlink: 'syz.0.9503': attribute type 2 has an invalid length. [ 2028.401394][ T3018] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.9503'. [ 2030.934533][ T3037] IPv6: pim6reg1: Disabled Multicast RS [ 2032.072605][ T3040] FAULT_INJECTION: forcing a failure. [ 2032.072605][ T3040] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.122495][ T3040] CPU: 1 PID: 3040 Comm: syz.0.9508 Not tainted syzkaller #0 [ 2032.129939][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2032.140104][ T3040] Call Trace: [ 2032.143399][ T3040] [ 2032.146360][ T3040] dump_stack_lvl+0x188/0x24e [ 2032.151074][ T3040] ? show_regs_print_info+0x12/0x12 [ 2032.156301][ T3040] ? load_image+0x400/0x400 [ 2032.160835][ T3040] ? __might_sleep+0xd0/0xd0 [ 2032.165444][ T3040] ? __lock_acquire+0x7d10/0x7d10 [ 2032.170588][ T3040] ? verify_lock_unused+0x140/0x140 [ 2032.175910][ T3040] should_fail_ex+0x399/0x4d0 [ 2032.180711][ T3040] should_failslab+0x5/0x20 [ 2032.185244][ T3040] slab_pre_alloc_hook+0x59/0x310 [ 2032.190298][ T3040] kmem_cache_alloc_node+0x5a/0x320 [ 2032.195521][ T3040] ? __alloc_skb+0xfc/0x7e0 [ 2032.200064][ T3040] __alloc_skb+0xfc/0x7e0 [ 2032.204428][ T3040] alloc_skb_with_frags+0xa7/0x710 [ 2032.209572][ T3040] ? __lock_acquire+0x7d10/0x7d10 [ 2032.214635][ T3040] sock_alloc_send_pskb+0x87f/0x9a0 [ 2032.219882][ T3040] ? sock_kzfree_s+0x50/0x50 [ 2032.224518][ T3040] tun_get_user+0x915/0x3c70 [ 2032.229157][ T3040] ? rcu_read_unlock+0xa0/0xa0 [ 2032.233956][ T3040] ? tun_get+0x1c/0x2e0 [ 2032.238140][ T3040] ? __lock_acquire+0x7d10/0x7d10 [ 2032.243201][ T3040] ? tun_get+0x1c/0x2e0 [ 2032.247401][ T3040] tun_chr_write_iter+0x112/0x1f0 [ 2032.252464][ T3040] vfs_write+0x4b1/0xa30 [ 2032.256746][ T3040] ? file_end_write+0x250/0x250 [ 2032.261629][ T3040] ? __fget_files+0x43d/0x4b0 [ 2032.266341][ T3040] ? __fdget_pos+0x1d4/0x360 [ 2032.270963][ T3040] ? ksys_write+0x71/0x250 [ 2032.275407][ T3040] ksys_write+0x14c/0x250 [ 2032.279764][ T3040] ? __ia32_sys_read+0x80/0x80 [ 2032.284557][ T3040] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.289778][ T3040] do_syscall_64+0x4c/0xa0 [ 2032.294217][ T3040] ? clear_bhb_loop+0x60/0xb0 [ 2032.298915][ T3040] ? clear_bhb_loop+0x60/0xb0 [ 2032.303614][ T3040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2032.309535][ T3040] RIP: 0033:0x7f9a1c39c629 [ 2032.313971][ T3040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.333600][ T3040] RSP: 002b:00007f9a1d1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2032.342044][ T3040] RAX: ffffffffffffffda RBX: 00007f9a1c615fa0 RCX: 00007f9a1c39c629 [ 2032.350065][ T3040] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000003 [ 2032.358065][ T3040] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.366055][ T3040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.374128][ T3040] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 2032.382153][ T3040] [ 2037.411449][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.417939][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.625919][T13723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2040.657012][T13723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2040.668484][T13723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2040.680695][T13723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2040.689105][T13723] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2040.696853][T13723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2040.789832][T25494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.972930][T25494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.423097][T25494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.818826][T25494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.609123][ T3108] FAULT_INJECTION: forcing a failure. [ 2042.609123][ T3108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2042.647232][T25494] device 0 left promiscuous mode [ 2042.668557][ T3108] CPU: 1 PID: 3108 Comm: syz.0.9526 Not tainted syzkaller #0 [ 2042.675981][ T3108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2042.686067][ T3108] Call Trace: [ 2042.689376][ T3108] [ 2042.692336][ T3108] dump_stack_lvl+0x188/0x24e [ 2042.697073][ T3108] ? show_regs_print_info+0x12/0x12 [ 2042.702324][ T3108] ? load_image+0x400/0x400 [ 2042.706871][ T3108] ? __lock_acquire+0x7d10/0x7d10 [ 2042.712020][ T3108] ? snprintf+0xe5/0x140 [ 2042.716383][ T3108] should_fail_ex+0x399/0x4d0 [ 2042.721107][ T3108] _copy_to_user+0x2c/0x130 [ 2042.725646][ T3108] simple_read_from_buffer+0xe3/0x150 [ 2042.731081][ T3108] proc_fail_nth_read+0x1a6/0x220 [ 2042.736145][ T3108] ? proc_fault_inject_write+0x310/0x310 [ 2042.741820][ T3108] ? fsnotify_perm+0x248/0x550 [ 2042.746615][ T3108] ? proc_fault_inject_write+0x310/0x310 [ 2042.752274][ T3108] vfs_read+0x2de/0xa00 [ 2042.756473][ T3108] ? kernel_read+0x1e0/0x1e0 [ 2042.761099][ T3108] ? __fget_files+0x28/0x4b0 [ 2042.765729][ T3108] ? __fget_files+0x28/0x4b0 [ 2042.770361][ T3108] ? __fget_files+0x43d/0x4b0 [ 2042.775077][ T3108] ? __fdget_pos+0x2ae/0x360 [ 2042.779701][ T3108] ? ksys_read+0x71/0x250 [ 2042.784074][ T3108] ksys_read+0x14c/0x250 [ 2042.786373][T13723] Bluetooth: hci3: command 0x0409 tx timeout [ 2042.788334][ T3108] ? vfs_write+0xa30/0xa30 [ 2042.798994][ T3108] ? lockdep_hardirqs_on+0x94/0x140 [ 2042.804224][ T3108] do_syscall_64+0x4c/0xa0 [ 2042.808668][ T3108] ? clear_bhb_loop+0x60/0xb0 [ 2042.813370][ T3108] ? clear_bhb_loop+0x60/0xb0 [ 2042.818069][ T3108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2042.823985][ T3108] RIP: 0033:0x7f9a1c35cece [ 2042.828422][ T3108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2042.848057][ T3108] RSP: 002b:00007f9a1d1b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2042.856508][ T3108] RAX: ffffffffffffffda RBX: 00007f9a1d1b66c0 RCX: 00007f9a1c35cece [ 2042.864506][ T3108] RDX: 000000000000000f RSI: 00007f9a1d1b60a0 RDI: 0000000000000004 [ 2042.872500][ T3108] RBP: 00007f9a1d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2042.880520][ T3108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2042.888520][ T3108] R13: 00007f9a1c616038 R14: 00007f9a1c615fa0 R15: 00007fff686aeab8 [ 2042.896619][ T3108] [ 2042.977934][ T3091] chnl_net:caif_netlink_parms(): no params data found [ 2044.591741][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.630959][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.676460][ T3091] device bridge_slave_0 entered promiscuous mode [ 2044.796569][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.803720][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.846593][T13723] Bluetooth: hci3: command 0x041b tx timeout [ 2044.847505][ T3091] device bridge_slave_1 entered promiscuous mode [ 2045.174750][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2045.208907][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2045.285217][ T3091] team0: Port device team_slave_0 added [ 2045.319939][ T3091] team0: Port device team_slave_1 added [ 2045.422317][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.429636][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.456994][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.491616][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2045.498891][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.524878][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2045.602171][ T3091] device hsr_slave_0 entered promiscuous mode [ 2045.611699][ T3091] device hsr_slave_1 entered promiscuous mode [ 2045.618448][ T3091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2045.626088][ T3091] Cannot create hsr debugfs directory [ 2045.776768][T25494] device hsr_slave_0 left promiscuous mode [ 2045.783233][T25494] device hsr_slave_1 left promiscuous mode [ 2045.791593][T25494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2045.799406][T25494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2045.809227][T25494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2045.816931][T25494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2045.824777][T25494] device bridge_slave_1 left promiscuous mode [ 2045.833981][T25494] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.849797][T25494] device bridge_slave_0 left promiscuous mode [ 2045.856092][T25494] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.884661][T25494] device veth1_macvtap left promiscuous mode [ 2045.890864][T25494] device veth0_macvtap left promiscuous mode [ 2045.897469][T25494] device veth1_vlan left promiscuous mode [ 2045.903346][T25494] device veth0_vlan left promiscuous mode [ 2046.611258][T25494] team0 (unregistering): Port device team_slave_1 removed [ 2046.652447][T25494] team0 (unregistering): Port device team_slave_0 removed [ 2046.693827][T25494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2046.734835][T25494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2046.936446][T13723] Bluetooth: hci3: command 0x040f tx timeout [ 2047.026562][T25494] team0 (unregistering): Port device bond0 removed [ 2047.058308][T25494] bond0 (unregistering): Released all slaves [ 2047.287136][ T3091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2047.297438][ T3091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2047.307807][ T3091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2047.317583][ T3091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2047.452689][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2047.466179][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2047.479311][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2047.493721][ T3091] 8021q: adding VLAN 0 to HW filter on device team0 [ 2047.518174][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2047.537171][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2047.576195][T25475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.583413][T25475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.611461][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2047.637591][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2047.646167][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2047.664518][T25475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.671691][T25475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.687313][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2047.695925][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2047.709473][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2047.722155][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2047.734334][T25475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2047.768231][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2047.781572][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2047.792838][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2047.805478][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2047.818999][ T3091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2047.834721][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2047.846091][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2047.859408][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2048.179725][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2048.191088][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2048.204839][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2048.666471][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2048.683431][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2048.710854][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2048.737735][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2048.756804][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2048.764598][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2048.804632][ T3091] device veth0_vlan entered promiscuous mode [ 2048.818209][ T3091] device veth1_vlan entered promiscuous mode [ 2048.840449][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2048.850020][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2048.859364][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2048.868261][T25533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2048.881852][ T3091] device veth0_macvtap entered promiscuous mode [ 2048.894278][ T3091] device veth1_macvtap entered promiscuous mode [ 2048.915849][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2048.928057][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.938335][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2048.967917][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.979502][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2048.992304][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2049.010941][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2049.012091][T13723] Bluetooth: hci3: command 0x0419 tx timeout [ 2049.021470][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2049.021489][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2049.022674][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2049.062174][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2049.072087][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2049.084220][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2049.102481][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2049.115618][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2049.125203][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2049.145733][ T3091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.159950][ T3091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.169588][ T3091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.182288][ T3091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.273753][T25512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.290603][T25512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.309513][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2049.335276][ T5370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.344805][ T5370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.353583][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2065.096514][ T1351] Bluetooth: hci4: command 0x0406 tx timeout [ 2085.566428][T13723] Bluetooth: hci1: command 0x0406 tx timeout [ 2098.848867][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.855200][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.289568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.295926][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.486449][ T1351] Bluetooth: hci3: command 0x0406 tx timeout [ 2221.739245][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.745593][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.168718][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.175054][ T1277] ieee802154 phy1 wpan1: encryption failed: -22