last executing test programs: 12.043628679s ago: executing program 0 (id=2352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x86, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1c440, 0x4, 0x0, 0x4, 0x4e, 0x4, 0x1, 0x0, 0xa}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x40002041) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x3, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52dc) sendmsg$inet(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000440)="9fe71f5dc6f41da40c6c9c3edab483b67f10112281dfa1c8f82fa7610379c99f5896de2d7d3d0f06ff5052e15cfe348494c669bc5e329f22a17ab9809a3549e6be59865182d3c3ee9caf97bc5c41bd386b7ee2184abb8b72c20a6aeccef1bfeb56eb1992348b0ffeb2c3f7ac8a29c34dc14814a7ae5bd98127b08bab", 0x7c}, {&(0x7f00000005c0)="e66d6b66e279b20143cdf9dc25190749276f05f16798309fc88c4ee55f846dec89b906a05d7afaf81eae517ee25d4597a8f2d97f4d4ed6048ef5ed92829c0e1f9998cd62eccfe2a199616f13600b4fb8e2c3b3", 0x53}, {&(0x7f00000006c0)="66a97a9cf2c36e905b3529b670ead0ae9f730414c3334a469dfdb5bcf8d26b56a944c08e46882fff805e552b417fbc7534a4907938b1333226d5b62fe106eb7623cd7930ec3b5d54573f78e8f424bbb5a56d5eee39f8e1cbb23d56dd49e34d67bf1cfd63d631828fe52379e8776ee8663ef87eb7dc2cf4f3920b56117980c6742af0e0601f", 0x85}, {&(0x7f00000002c0)='L', 0x1}, {&(0x7f0000000780)="0d678739a227747a35414fed1a849789266bfa72618b7d48d619457bc08db19a16809eda3482350f93c47167380f7956bfbda23a6e", 0x35}, {&(0x7f0000000800)="117e0ec0567a3c10ee12cdc6d58005ae936c9aab8e6bd350a7ab72b60f499d6f7efc1d0c0236147908972b466d18ecb6c3e909a012a8e9c473290c18c83c6732e89217317d0998e0303f08ba742f8afc53b43b8f9d77c2abf4791e873f405b778cdb2194d5ee19826f46776829571ff9db31c7f7b815d50ff95b2d564f7be9a00a199170db45311928a4ef346d1f2074cbc0adc6a7365e4d5617cb29d4e6f9f318b52176058040dc94", 0xa9}, {&(0x7f00000008c0)="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", 0x56d}], 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000010000)='cpu\t&00&\t\x94\xce\xd6\x8b\xea\xceABz$b\x98\xf7\xd3\x10\x89j\x11\x1d\x10Q\xd3\xc0\f\xd3\x99gk\xdc\x9e\xef\xdd\xce\x80\x04\x86Y*\xb5+\vs\x91\x05\xbb\x1a\x13\xbd\\\xcew!7\xe0\xea\xc4Tc\b\xa0\xba|\xb0J\x8e:\x01\xb7\x92') 11.870014527s ago: executing program 0 (id=2353): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xf632}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 11.752713748s ago: executing program 0 (id=2354): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b00000000009500002000000000e4aafdcdccff464ac0855bd3bff7489bae0c5621345bdda9449437f810c5fc316f04e947b54d780465eb664d0b6b04"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006d6ded0730030600", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000850000002a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 10.577577724s ago: executing program 0 (id=2358): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x8, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x200, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6465766963657320a1ee7265657a657220"], 0x12) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.750768776s ago: executing program 0 (id=2368): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x8, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x200, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6465766963657320a1ee7265657a657220"], 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r3) 9.432195557s ago: executing program 0 (id=2362): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014cd197618f817554f00b8a766e6aa700d752de461e25696400000b703000000000000856b17cdb6789be2ec2707000000000000bf0900000000000055090100000000009500000000000000bf91000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000380)="b1a0ae5dcb15c5548e44dbc2137adc3eede9657969800254f66ad7c6b271fad8f1238f", &(0x7f0000000000)=""/9, 0x0, 0x0, 0xc}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x7, 0x7, 0x0, 0x0, 0x9, 0x12, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x46, 0x2}, 0x100100, 0xd, 0x3, 0x3, 0xb, 0x31d, 0xa9, 0x0, 0x1ff, 0x0, 0x48000000}, r5, 0x6, r2, 0x8) r6 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000540)={r6}) setsockopt$sock_attach_bpf(r6, 0x29, 0x2f, 0x0, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.941078659s ago: executing program 2 (id=2400): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="dbbac951f18e51a471fb385d867f0c07aede9ff771d2f5b37de7db370b8381604ef6283639e1e01be79386213517f8f4d8914757fd30c4739dd5a6373eb2eed55fa3683334568c131b49511be000888aeb26e682bde9212955be62d91c949189d1e6a9c10b374d", 0x67}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x480}}], 0x30}, 0x24004000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x80000000000ca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f600000000000000000000da90f689c7c9027a09c708fc79ce6664c1564f07278fa5b1c190299d74727e7f29018d7278b62a809ced6f6e13f49580954d362c007b69cf1618de9d790ae54f5016a424eb15a28dc0cae36084509143b3d56f77950f61e242bd091ad388dd14d7e8334721f9cdb6b4eb1d475ede63234833886e81f3f773ccd4b410c1ae914a46ad925099c6c24578"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x44400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) 2.643641899s ago: executing program 2 (id=2402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.583763644s ago: executing program 2 (id=2403): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x8, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x200, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6465766963657320a1ee7265657a657220"], 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r3) 2.477565455s ago: executing program 1 (id=2405): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3ff, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfe33) (fail_nth: 1) 1.351791126s ago: executing program 2 (id=2407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x86, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1c440, 0x4, 0x0, 0x4, 0x4e, 0x4, 0x1, 0x0, 0xa}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x40002041) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x3, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52dc) sendmsg$inet(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000440)="9fe71f5dc6f41da40c6c9c3edab483b67f10112281dfa1c8f82fa7610379c99f5896de2d7d3d0f06ff5052e15cfe348494c669bc5e329f22a17ab9809a3549e6be59865182d3c3ee9caf97bc5c41bd386b7ee2184abb8b72c20a6aeccef1bfeb56eb1992348b0ffeb2c3f7ac8a29c34dc14814a7ae5bd98127b08bab", 0x7c}, {&(0x7f00000005c0)="e66d6b66e279b20143cdf9dc25190749276f05f16798309fc88c4ee55f846dec89b906a05d7afaf81eae517ee25d4597a8f2d97f4d4ed6048ef5ed92829c0e1f9998cd62eccfe2a199616f13600b4fb8e2c3b3", 0x53}, {&(0x7f00000006c0)="66a97a9cf2c36e905b3529b670ead0ae9f730414c3334a469dfdb5bcf8d26b56a944c08e46882fff805e552b417fbc7534a4907938b1333226d5b62fe106eb7623cd7930ec3b5d54573f78e8f424bbb5a56d5eee39f8e1cbb23d56dd49e34d67bf1cfd63d631828fe52379e8776ee8663ef87eb7dc2cf4f3920b56117980c6742af0e0601f", 0x85}, {&(0x7f00000002c0)='L', 0x1}, {&(0x7f0000000780)="0d678739a227747a35414fed1a849789266bfa72618b7d48d619457bc08db19a16809eda3482350f93c47167380f7956bfbda23a6e69b2164478c25a4693b8fc8c57", 0x42}, {&(0x7f0000000800)="117e0ec0567a3c10ee12cdc6d58005ae936c9aab8e6bd350a7ab72b60f499d6f7efc1d0c0236147908972b466d18ecb6c3e909a012a8e9c473290c18c83c6732e89217317d0998e0303f08ba742f8afc53b43b8f9d77c2abf4791e873f405b778cdb2194d5ee19826f46776829571ff9db31c7f7b815d50ff95b2d564f7be9a00a199170db45311928a4ef346d1f2074cbc0adc6a7365e4d5617cb29d4e6f9f318b52176058040dc94", 0xa9}, {&(0x7f00000008c0)="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", 0x56d}], 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000010000)='cpu\t&00&\t\x94\xce\xd6\x8b\xea\xceABz$b\x98\xf7\xd3\x10\x89j\x11\x1d\x10Q\xd3\xc0\f\xd3\x99gk\xdc\x9e\xef\xdd\xce\x80\x04\x86Y*\xb5+\vs\x91\x05\xbb\x1a\x13\xbd\\\xcew!7\xe0\xea\xc4Tc\b\xa0\xba|\xb0J\x8e:\x01\xb7\x92') 1.351411856s ago: executing program 3 (id=2408): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) (fail_nth: 1) 1.062690034s ago: executing program 3 (id=2409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000500)=@framed={{}, [@printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x58}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 955.530405ms ago: executing program 1 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 870.996204ms ago: executing program 1 (id=2411): r0 = perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 802.70062ms ago: executing program 3 (id=2412): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x8, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x200, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6465766963657320a1ee7265657a657220"], 0x12) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 773.726243ms ago: executing program 2 (id=2413): socket$kcm(0x2c, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000240)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x1c}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000180)=r5, 0x4) close(r2) 617.597438ms ago: executing program 1 (id=2414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000005}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82f8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 490.556161ms ago: executing program 1 (id=2415): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x8, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x200, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6465766963657320a1ee7265657a657220"], 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r3) 461.666374ms ago: executing program 3 (id=2416): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x70}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 390.553981ms ago: executing program 2 (id=2417): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x100000000, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="18657554b0f92be9466256be0000000000000001d6f33bf5c41d06f3387da5b38f611702d3c16cf1c2a6fcfe11dd72c2adbad9deb720586e67b082657815d7b26af491bba0be108400a08eb1d7dd2a78110bcc85b9896ffdd540c733b4e5937f344cca83f8c59527ec63fdc1a522d8a350ee888ccb26b0b388b48dd70c51401224882eb3c3d15563b9b4937f97eb574298412a63afda96aec8f1622395605b594190b97a1678c4ab760ba30220"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="020000fd4c5dd52bfdc594b96bcb0204000000083df555ce5efe8de5d7f54fc31520598cfc556838f0674240", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210b, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) 206.792839ms ago: executing program 3 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 103.30044ms ago: executing program 1 (id=2419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) 0s ago: executing program 3 (id=2420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x86, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1c440, 0x4, 0x0, 0x4, 0x4e, 0x4, 0x1, 0x0, 0xa}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x40002041) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x3, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52dc) sendmsg$inet(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000440)="9fe71f5dc6f41da40c6c9c3edab483b67f10112281dfa1c8f82fa7610379c99f5896de2d7d3d0f06ff5052e15cfe348494c669bc5e329f22a17ab9809a3549e6be59865182d3c3ee9caf97bc5c41bd386b7ee2184abb8b72c20a6aeccef1bfeb56eb1992348b0ffeb2c3f7ac8a29c34dc14814a7ae5bd98127b08bab", 0x7c}, {&(0x7f00000005c0)="e66d6b66e279b20143cdf9dc25190749276f05f16798309fc88c4ee55f846dec89b906a05d7afaf81eae517ee25d4597a8f2d97f4d4ed6048ef5ed92829c0e1f9998cd62eccfe2a199616f13600b4fb8e2c3b3", 0x53}, {&(0x7f00000006c0)="66a97a9cf2c36e905b3529b670ead0ae9f730414c3334a469dfdb5bcf8d26b56a944c08e46882fff805e552b417fbc7534a4907938b1333226d5b62fe106eb7623cd7930ec3b5d54573f78e8f424bbb5a56d5eee39f8e1cbb23d56dd49e34d67bf1cfd63d631828fe52379e8776ee8663ef87eb7dc2cf4f3920b56117980c6742af0e0601f", 0x85}, {&(0x7f00000002c0)='L', 0x1}, {&(0x7f0000000780)="0d678739a227747a35414fed1a849789266bfa72618b7d48d619457bc08db19a16809eda3482350f93c47167380f7956bfbda23a6e69b2164478c25a4693b8fc8c57", 0x42}, {&(0x7f0000000800)="117e0ec0567a3c10ee12cdc6d58005ae936c9aab8e6bd350a7ab72b60f499d6f7efc1d0c0236147908972b466d18ecb6c3e909a012a8e9c473290c18c83c6732e89217317d0998e0303f08ba742f8afc53b43b8f9d77c2abf4791e873f405b778cdb2194d5ee19826f46776829571ff9db31c7f7b815d50ff95b2d564f7be9a00a199170db45311928a4ef346d1f2074cbc0adc6a7365e4d5617cb29d4e6f9f318b52176058040dc94", 0xa9}, {&(0x7f00000008c0)="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", 0x56d}], 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000010000)='cpu\t&00&\t\x94\xce\xd6\x8b\xea\xceABz$b\x98\xf7\xd3\x10\x89j\x11\x1d\x10Q\xd3\xc0\f\xd3\x99gk\xdc\x9e\xef\xdd\xce\x80\x04\x86Y*\xb5+\vs\x91\x05\xbb\x1a\x13\xbd\\\xcew!7\xe0\xea\xc4Tc\b\xa0\xba|\xb0J\x8e:\x01\xb7\x92') kernel console output (not intermixed with test programs): 0255] R13: 00007f946f3e6038 R14: 00007f946f3e5fa0 R15: 00007ffeb0063d58 [ 276.970309][T10255] [ 277.031701][T10264] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1518'. [ 277.103330][T10255] socket: no more sockets [ 277.345270][T10264] hsr_slave_0: left promiscuous mode [ 277.362934][T10264] hsr_slave_1: left promiscuous mode [ 282.237858][T10306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1533'. [ 282.259665][T10306] hsr_slave_0: left promiscuous mode [ 282.281301][T10306] hsr_slave_1: left promiscuous mode [ 282.398335][T10309] FAULT_INJECTION: forcing a failure. [ 282.398335][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 282.411618][T10309] CPU: 1 PID: 10309 Comm: syz.3.1534 Not tainted syzkaller #0 [ 282.419131][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.429231][T10309] Call Trace: [ 282.432550][T10309] [ 282.435517][T10309] dump_stack_lvl+0x16c/0x230 [ 282.440254][T10309] ? show_regs_print_info+0x20/0x20 [ 282.445510][T10309] ? load_image+0x3b0/0x3b0 [ 282.450062][T10309] ? rt6_nlmsg_size+0xca/0x480 [ 282.454883][T10309] ? __lock_acquire+0x7c80/0x7c80 [ 282.460114][T10309] should_fail_ex+0x39d/0x4d0 [ 282.464875][T10309] should_failslab+0x9/0x20 [ 282.469463][T10309] slab_pre_alloc_hook+0x59/0x310 [ 282.474728][T10309] ? rt6_nlmsg_size+0x3fe/0x480 [ 282.479635][T10309] kmem_cache_alloc_node+0x60/0x330 [ 282.484890][T10309] ? __alloc_skb+0x108/0x2c0 [ 282.489552][T10309] __alloc_skb+0x108/0x2c0 [ 282.494035][T10309] inet6_rt_notify+0xb4/0x240 [ 282.498793][T10309] fib6_del+0x1066/0x14f0 [ 282.503217][T10309] ? fib6_locate_1+0x6c0/0x6c0 [ 282.508047][T10309] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 282.513663][T10309] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 282.519458][T10309] fib6_clean_node+0x29a/0x580 [ 282.524290][T10309] ? node_free_rcu+0x30/0x30 [ 282.528962][T10309] ? __local_bh_enable_ip+0x12e/0x1c0 [ 282.534401][T10309] fib6_walk_continue+0x672/0x900 [ 282.539507][T10309] fib6_walk+0x149/0x290 [ 282.543825][T10309] __fib6_clean_all+0x235/0x380 [ 282.548840][T10309] ? __fib6_clean_all+0x9c/0x380 [ 282.553851][T10309] ? rt6_sync_down_dev+0x150/0x150 [ 282.559026][T10309] ? fib6_clean_all+0x30/0x30 [ 282.563774][T10309] ? node_free_rcu+0x30/0x30 [ 282.568428][T10309] ? rt6_sync_down_dev+0x150/0x150 [ 282.573616][T10309] rt6_disable_ip+0x125/0x7a0 [ 282.578371][T10309] ? fib6_ifdown+0x4b0/0x4b0 [ 282.583014][T10309] ? __lock_acquire+0x7c80/0x7c80 [ 282.588098][T10309] ? rcu_is_watching+0x15/0xb0 [ 282.592957][T10309] addrconf_ifdown+0x15e/0x1880 [ 282.597912][T10309] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 282.603659][T10309] ? tls_dev_event+0x71f/0xf00 [ 282.608490][T10309] ? addrconf_cleanup+0x1e0/0x1e0 [ 282.613594][T10309] addrconf_notify+0x6c6/0x1010 [ 282.618518][T10309] notifier_call_chain+0x197/0x390 [ 282.623799][T10309] __dev_notify_flags+0x18e/0x2e0 [ 282.629047][T10309] ? __dev_change_flags+0x6a0/0x6a0 [ 282.634313][T10309] ? __dev_change_flags+0x4bf/0x6a0 [ 282.639615][T10309] ? dev_get_flags+0x1c0/0x1c0 [ 282.644540][T10309] ? __mutex_lock+0x95d/0xcc0 [ 282.649299][T10309] dev_change_flags+0xe8/0x1a0 [ 282.654146][T10309] dev_ifsioc+0x6a7/0xe20 [ 282.658550][T10309] ? dev_ioctl+0x1170/0x1170 [ 282.663204][T10309] ? dev_load+0x21/0x1f0 [ 282.667684][T10309] ? dev_load+0x21/0x1f0 [ 282.671994][T10309] dev_ioctl+0x7e2/0x1170 [ 282.676408][T10309] sock_do_ioctl+0x226/0x2f0 [ 282.681068][T10309] ? sock_show_fdinfo+0xb0/0xb0 [ 282.686023][T10309] sock_ioctl+0x623/0x7a0 [ 282.690480][T10309] ? sock_poll+0x3d0/0x3d0 [ 282.695005][T10309] ? bpf_lsm_file_ioctl+0x9/0x10 [ 282.700093][T10309] ? security_file_ioctl+0x80/0xa0 [ 282.705281][T10309] ? sock_poll+0x3d0/0x3d0 [ 282.709764][T10309] __se_sys_ioctl+0xfd/0x170 [ 282.714414][T10309] do_syscall_64+0x55/0xb0 [ 282.718897][T10309] ? clear_bhb_loop+0x40/0x90 [ 282.723633][T10309] ? clear_bhb_loop+0x40/0x90 [ 282.728372][T10309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.734328][T10309] RIP: 0033:0x7f2099f8eec9 [ 282.738800][T10309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.758463][T10309] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.766961][T10309] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 282.774987][T10309] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000009 [ 282.783097][T10309] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 282.791120][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.799197][T10309] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 282.808733][T10309] [ 283.317417][T10331] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1542'. [ 286.300817][T10352] FAULT_INJECTION: forcing a failure. [ 286.300817][T10352] name failslab, interval 1, probability 0, space 0, times 0 [ 286.332688][T10352] CPU: 0 PID: 10352 Comm: syz.0.1546 Not tainted syzkaller #0 [ 286.340448][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.350821][T10352] Call Trace: [ 286.354182][T10352] [ 286.357156][T10352] dump_stack_lvl+0x16c/0x230 [ 286.361906][T10352] ? show_regs_print_info+0x20/0x20 [ 286.367180][T10352] ? load_image+0x3b0/0x3b0 [ 286.371765][T10352] ? __might_sleep+0xe0/0xe0 [ 286.376421][T10352] ? __lock_acquire+0x7c80/0x7c80 [ 286.381598][T10352] should_fail_ex+0x39d/0x4d0 [ 286.386427][T10352] should_failslab+0x9/0x20 [ 286.391084][T10352] slab_pre_alloc_hook+0x59/0x310 [ 286.396187][T10352] kmem_cache_alloc+0x5a/0x2e0 [ 286.401033][T10352] ? security_inode_alloc+0x34/0x110 [ 286.406389][T10352] security_inode_alloc+0x34/0x110 [ 286.411751][T10352] inode_init_always+0x8fc/0xc90 [ 286.416806][T10352] new_inode_pseudo+0x95/0x1d0 [ 286.421638][T10352] __sock_create+0x12d/0x940 [ 286.426296][T10352] ? __asan_memset+0x22/0x40 [ 286.430958][T10352] udp_sock_create4+0xbf/0x4b0 [ 286.435876][T10352] ? erspan_exit_batch_net+0x30/0x30 [ 286.441309][T10352] rxrpc_lookup_local+0xccb/0x1550 [ 286.446457][T10352] ? rxrpc_local_dont_fragment+0x70/0x70 [ 286.452213][T10352] ? lockdep_hardirqs_on+0x98/0x150 [ 286.457444][T10352] ? _local_bh_enable+0xa0/0xa0 [ 286.462414][T10352] rxrpc_sendmsg+0x30a/0x5b0 [ 286.467038][T10352] ? rxrpc_getsockopt+0x150/0x150 [ 286.472107][T10352] ____sys_sendmsg+0x5bf/0x950 [ 286.476910][T10352] ? __sys_sendmsg_sock+0x30/0x30 [ 286.481959][T10352] ? __import_iovec+0x3fa/0x860 [ 286.486854][T10352] ? import_iovec+0x73/0xa0 [ 286.491390][T10352] ___sys_sendmsg+0x220/0x290 [ 286.496100][T10352] ? __sys_sendmsg+0x270/0x270 [ 286.500905][T10352] ? __lock_acquire+0x7c80/0x7c80 [ 286.505967][T10352] __se_sys_sendmsg+0x1a5/0x270 [ 286.510851][T10352] ? __x64_sys_sendmsg+0x80/0x80 [ 286.515828][T10352] ? lockdep_hardirqs_on+0x98/0x150 [ 286.521060][T10352] do_syscall_64+0x55/0xb0 [ 286.525511][T10352] ? clear_bhb_loop+0x40/0x90 [ 286.530303][T10352] ? clear_bhb_loop+0x40/0x90 [ 286.535001][T10352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.540913][T10352] RIP: 0033:0x7fb8f8f8eec9 [ 286.545350][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.565437][T10352] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.573876][T10352] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 286.581877][T10352] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 286.589870][T10352] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 286.597881][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.605876][T10352] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 286.613928][T10352] [ 286.650146][T10352] socket: no more sockets [ 287.224058][T10364] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1550'. [ 287.252078][T10364] hsr_slave_0: left promiscuous mode [ 287.262152][T10364] hsr_slave_1: left promiscuous mode [ 287.914559][T10388] FAULT_INJECTION: forcing a failure. [ 287.914559][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 287.943394][T10388] CPU: 1 PID: 10388 Comm: syz.3.1559 Not tainted syzkaller #0 [ 287.951124][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.961240][T10388] Call Trace: [ 287.964571][T10388] [ 287.967550][T10388] dump_stack_lvl+0x16c/0x230 [ 287.972286][T10388] ? show_regs_print_info+0x20/0x20 [ 287.977539][T10388] ? load_image+0x3b0/0x3b0 [ 287.982096][T10388] ? __might_sleep+0xe0/0xe0 [ 287.986962][T10388] ? __lock_acquire+0x7c80/0x7c80 [ 287.992247][T10388] should_fail_ex+0x39d/0x4d0 [ 287.996991][T10388] should_failslab+0x9/0x20 [ 288.001589][T10388] slab_pre_alloc_hook+0x59/0x310 [ 288.006870][T10388] ? sctp_association_new+0x89/0x25c0 [ 288.012665][T10388] __kmem_cache_alloc_node+0x53/0x260 [ 288.018202][T10388] ? sctp_association_new+0x89/0x25c0 [ 288.023734][T10388] kmalloc_trace+0x2a/0xe0 [ 288.028401][T10388] sctp_association_new+0x89/0x25c0 [ 288.033754][T10388] ? sctp_do_bind+0x6bb/0x9a0 [ 288.038677][T10388] ? __ipv6_addr_type+0x118/0x2f0 [ 288.043917][T10388] sctp_connect_new_asoc+0x2bf/0x690 [ 288.049357][T10388] ? __sctp_connect+0xd20/0xd20 [ 288.054700][T10388] ? __local_bh_enable_ip+0x12e/0x1c0 [ 288.060119][T10388] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 288.065815][T10388] ? security_sctp_bind_connect+0x89/0xb0 [ 288.071584][T10388] sctp_sendmsg+0x155c/0x27e0 [ 288.076352][T10388] ? sctp_getsockopt+0xb60/0xb60 [ 288.081472][T10388] ? aa_sk_perm+0x7fc/0x930 [ 288.086034][T10388] ? aa_af_perm+0x2b0/0x2b0 [ 288.090610][T10388] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 288.097162][T10388] ? sock_rps_record_flow+0x19/0x400 [ 288.102486][T10388] ? inet_send_prepare+0x260/0x260 [ 288.107640][T10388] ? inet_sendmsg+0xe9/0x2f0 [ 288.112268][T10388] ? inet_send_prepare+0x260/0x260 [ 288.117537][T10388] ____sys_sendmsg+0x5bf/0x950 [ 288.122374][T10388] ? __asan_memset+0x22/0x40 [ 288.127190][T10388] ? __sys_sendmsg_sock+0x30/0x30 [ 288.132285][T10388] ? __import_iovec+0x5f2/0x860 [ 288.137504][T10388] ? import_iovec+0x73/0xa0 [ 288.142436][T10388] ___sys_sendmsg+0x220/0x290 [ 288.147197][T10388] ? __sys_sendmsg+0x270/0x270 [ 288.152228][T10388] ? __lock_acquire+0x7c80/0x7c80 [ 288.157353][T10388] __se_sys_sendmsg+0x1a5/0x270 [ 288.162358][T10388] ? __x64_sys_sendmsg+0x80/0x80 [ 288.167470][T10388] ? lockdep_hardirqs_on+0x98/0x150 [ 288.172750][T10388] do_syscall_64+0x55/0xb0 [ 288.177315][T10388] ? clear_bhb_loop+0x40/0x90 [ 288.182221][T10388] ? clear_bhb_loop+0x40/0x90 [ 288.186967][T10388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.193004][T10388] RIP: 0033:0x7f2099f8eec9 [ 288.197464][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.217900][T10388] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.226374][T10388] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 288.234391][T10388] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 288.242490][T10388] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 288.250543][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.258655][T10388] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 288.267281][T10388] [ 289.554056][T10407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1568'. [ 289.595152][T10407] hsr_slave_0: left promiscuous mode [ 289.631341][T10407] hsr_slave_1: left promiscuous mode [ 289.692849][T10414] netlink: 'syz.0.1570': attribute type 9 has an invalid length. [ 289.717434][T10414] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 289.946800][T10418] netlink: 'syz.0.1570': attribute type 9 has an invalid length. [ 289.963610][T10418] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 291.352089][T10459] netlink: 'syz.0.1587': attribute type 29 has an invalid length. [ 291.371944][T10459] netlink: 'syz.0.1587': attribute type 29 has an invalid length. [ 291.851389][T10478] FAULT_INJECTION: forcing a failure. [ 291.851389][T10478] name failslab, interval 1, probability 0, space 0, times 0 [ 291.869941][T10478] CPU: 1 PID: 10478 Comm: syz.2.1593 Not tainted syzkaller #0 [ 291.877738][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.887816][T10478] Call Trace: [ 291.891119][T10478] [ 291.894074][T10478] dump_stack_lvl+0x16c/0x230 [ 291.898776][T10478] ? show_regs_print_info+0x20/0x20 [ 291.903996][T10478] ? load_image+0x3b0/0x3b0 [ 291.908521][T10478] ? __might_sleep+0xe0/0xe0 [ 291.913146][T10478] ? __lock_acquire+0x7c80/0x7c80 [ 291.918185][T10478] ? __asan_memset+0x22/0x40 [ 291.922799][T10478] should_fail_ex+0x39d/0x4d0 [ 291.927502][T10478] should_failslab+0x9/0x20 [ 291.932035][T10478] slab_pre_alloc_hook+0x59/0x310 [ 291.937113][T10478] ? sctp_add_bind_addr+0x8c/0x360 [ 291.942257][T10478] __kmem_cache_alloc_node+0x53/0x260 [ 291.947655][T10478] ? sctp_add_bind_addr+0x8c/0x360 [ 291.952794][T10478] kmalloc_trace+0x2a/0xe0 [ 291.957244][T10478] sctp_add_bind_addr+0x8c/0x360 [ 291.962208][T10478] sctp_bind_addr_copy+0xb3/0x3c0 [ 291.967277][T10478] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 291.973640][T10478] sctp_connect_new_asoc+0x2da/0x690 [ 291.978961][T10478] ? __sctp_connect+0xd20/0xd20 [ 291.983919][T10478] ? __local_bh_enable_ip+0x12e/0x1c0 [ 291.989315][T10478] ? _local_bh_enable+0xa0/0xa0 [ 291.994182][T10478] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 292.000011][T10478] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 292.006103][T10478] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 292.011679][T10478] ? security_sctp_bind_connect+0x89/0xb0 [ 292.017444][T10478] sctp_sendmsg+0x155c/0x27e0 [ 292.022159][T10478] ? sctp_getsockopt+0xb60/0xb60 [ 292.027131][T10478] ? aa_sk_perm+0x7fc/0x930 [ 292.031687][T10478] ? aa_af_perm+0x2b0/0x2b0 [ 292.036234][T10478] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 292.042694][T10478] ? sock_rps_record_flow+0x19/0x400 [ 292.048005][T10478] ? inet_send_prepare+0x260/0x260 [ 292.053135][T10478] ? inet_sendmsg+0x7c/0x2f0 [ 292.057745][T10478] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 292.063050][T10478] ? security_socket_sendmsg+0x80/0xa0 [ 292.068587][T10478] ? inet_send_prepare+0x260/0x260 [ 292.073723][T10478] ____sys_sendmsg+0x5bf/0x950 [ 292.078522][T10478] ? __asan_memset+0x22/0x40 [ 292.083232][T10478] ? __sys_sendmsg_sock+0x30/0x30 [ 292.088280][T10478] ? __import_iovec+0x5f2/0x860 [ 292.093190][T10478] ? import_iovec+0x73/0xa0 [ 292.097722][T10478] ___sys_sendmsg+0x220/0x290 [ 292.102458][T10478] ? __sys_sendmsg+0x270/0x270 [ 292.107281][T10478] ? __lock_acquire+0x7c80/0x7c80 [ 292.112349][T10478] __se_sys_sendmsg+0x1a5/0x270 [ 292.117323][T10478] ? __x64_sys_sendmsg+0x80/0x80 [ 292.122300][T10478] ? lockdep_hardirqs_on+0x98/0x150 [ 292.127528][T10478] do_syscall_64+0x55/0xb0 [ 292.132502][T10478] ? clear_bhb_loop+0x40/0x90 [ 292.137212][T10478] ? clear_bhb_loop+0x40/0x90 [ 292.142027][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.147966][T10478] RIP: 0033:0x7f918558eec9 [ 292.152580][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.173221][T10478] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.181879][T10478] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 292.189871][T10478] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 292.197945][T10478] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 292.206377][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.214390][T10478] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 292.222424][T10478] [ 292.591672][T10484] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1597'. [ 292.642542][T10491] netlink: 'syz.1.1598': attribute type 153 has an invalid length. [ 292.652379][T10491] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1598'. [ 293.511345][T10523] netlink: 'syz.0.1606': attribute type 2 has an invalid length. [ 293.543930][T10523] netlink: 'syz.0.1606': attribute type 8 has an invalid length. [ 293.584872][T10523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1606'. [ 296.306003][T10567] netlink: 'syz.2.1618': attribute type 22 has an invalid length. [ 296.329789][T10567] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1618'. [ 301.994000][T10577] delete_channel: no stack [ 302.429341][T10595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1625'. [ 302.560264][T10599] netlink: 'syz.0.1628': attribute type 39 has an invalid length. [ 303.366108][T10620] delete_channel: no stack [ 303.370910][T10629] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.443881][T10653] netlink: 'syz.3.1644': attribute type 6 has an invalid length. [ 305.777120][T10660] delete_channel: no stack [ 305.987718][T10675] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 306.305318][T10694] FAULT_INJECTION: forcing a failure. [ 306.305318][T10694] name failslab, interval 1, probability 0, space 0, times 0 [ 306.363169][T10694] CPU: 1 PID: 10694 Comm: syz.2.1657 Not tainted syzkaller #0 [ 306.370800][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.380895][T10694] Call Trace: [ 306.384198][T10694] [ 306.387147][T10694] dump_stack_lvl+0x16c/0x230 [ 306.391857][T10694] ? show_regs_print_info+0x20/0x20 [ 306.397115][T10694] ? load_image+0x3b0/0x3b0 [ 306.401688][T10694] ? __lock_acquire+0x7c80/0x7c80 [ 306.406744][T10694] should_fail_ex+0x39d/0x4d0 [ 306.411813][T10694] should_failslab+0x9/0x20 [ 306.416430][T10694] slab_pre_alloc_hook+0x59/0x310 [ 306.421486][T10694] ? vmemdup_user+0x49/0x1e0 [ 306.426110][T10694] ? vmemdup_user+0x49/0x1e0 [ 306.430748][T10694] __kmem_cache_alloc_node+0x53/0x260 [ 306.436147][T10694] ? vmemdup_user+0x49/0x1e0 [ 306.440759][T10694] __kmalloc_node+0xa4/0x230 [ 306.445391][T10694] vmemdup_user+0x49/0x1e0 [ 306.449929][T10694] map_lookup_elem+0x276/0x7c0 [ 306.454709][T10694] ? __might_fault+0xaa/0x120 [ 306.459403][T10694] ? security_bpf+0x7e/0xa0 [ 306.463949][T10694] __sys_bpf+0x3dc/0x800 [ 306.468210][T10694] ? bpf_link_show_fdinfo+0x350/0x350 [ 306.473611][T10694] ? lock_chain_count+0x20/0x20 [ 306.478522][T10694] __x64_sys_bpf+0x7c/0x90 [ 306.482967][T10694] do_syscall_64+0x55/0xb0 [ 306.487413][T10694] ? clear_bhb_loop+0x40/0x90 [ 306.492126][T10694] ? clear_bhb_loop+0x40/0x90 [ 306.496825][T10694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.502738][T10694] RIP: 0033:0x7f918558eec9 [ 306.507174][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.526974][T10694] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.535426][T10694] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 306.543444][T10694] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 306.551443][T10694] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 306.559425][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.567419][T10694] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 306.575548][T10694] [ 306.772221][T10703] netlink: 'syz.1.1662': attribute type 2 has an invalid length. [ 306.780584][T10703] netlink: 'syz.1.1662': attribute type 11 has an invalid length. [ 306.789824][T10703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1662'. [ 306.892166][T10706] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 306.900755][T10706] netlink: 'syz.1.1663': attribute type 4 has an invalid length. [ 306.909979][T10706] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1663'. [ 307.533901][T10729] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 307.559156][T10729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 307.594699][T10729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.876693][T10736] FAULT_INJECTION: forcing a failure. [ 307.876693][T10736] name failslab, interval 1, probability 0, space 0, times 0 [ 307.900262][T10736] CPU: 0 PID: 10736 Comm: syz.2.1673 Not tainted syzkaller #0 [ 307.908005][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.918281][T10736] Call Trace: [ 307.921592][T10736] [ 307.925065][T10736] dump_stack_lvl+0x16c/0x230 [ 307.929900][T10736] ? show_regs_print_info+0x20/0x20 [ 307.935160][T10736] ? load_image+0x3b0/0x3b0 [ 307.939726][T10736] ? __might_sleep+0xe0/0xe0 [ 307.944385][T10736] ? __lock_acquire+0x7c80/0x7c80 [ 307.949498][T10736] should_fail_ex+0x39d/0x4d0 [ 307.954237][T10736] should_failslab+0x9/0x20 [ 307.958794][T10736] slab_pre_alloc_hook+0x59/0x310 [ 307.963969][T10736] kmem_cache_alloc_lru+0x4d/0x2e0 [ 307.969131][T10736] ? __d_alloc+0x31/0x730 [ 307.973552][T10736] __d_alloc+0x31/0x730 [ 307.977767][T10736] ? __lock_acquire+0x7c80/0x7c80 [ 307.982837][T10736] ? do_raw_spin_lock+0x121/0x2c0 [ 307.988020][T10736] d_alloc_pseudo+0x1d/0x70 [ 307.992582][T10736] alloc_file_pseudo+0xcc/0x200 [ 307.997490][T10736] ? alloc_empty_backing_file+0xe0/0xe0 [ 308.003068][T10736] ? alloc_fd+0x58f/0x630 [ 308.007425][T10736] anon_inode_getfd+0xca/0x1c0 [ 308.012253][T10736] btf_new_fd+0x7ea/0x980 [ 308.016700][T10736] ? bpf_btf_show_fdinfo+0x80/0x80 [ 308.021845][T10736] ? capable+0x88/0xe0 [ 308.025936][T10736] __sys_bpf+0x60e/0x800 [ 308.030304][T10736] ? bpf_link_show_fdinfo+0x350/0x350 [ 308.035716][T10736] ? bpf_trace_run1+0x3b0/0x3b0 [ 308.040682][T10736] ? lock_chain_count+0x20/0x20 [ 308.045565][T10736] __x64_sys_bpf+0x7c/0x90 [ 308.050003][T10736] do_syscall_64+0x55/0xb0 [ 308.054451][T10736] ? clear_bhb_loop+0x40/0x90 [ 308.059145][T10736] ? clear_bhb_loop+0x40/0x90 [ 308.063839][T10736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.069746][T10736] RIP: 0033:0x7f918558eec9 [ 308.074186][T10736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.093914][T10736] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.102437][T10736] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 308.110422][T10736] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 308.118456][T10736] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 308.126567][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.134642][T10736] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 308.142648][T10736] [ 309.008200][T10770] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1684'. [ 309.057479][T10770] netlink: 'syz.0.1684': attribute type 16 has an invalid length. [ 309.093281][T10770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1684'. [ 309.143386][T10770] bridge_slave_0: entered allmulticast mode [ 309.883512][T10802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1693'. [ 310.989954][T10820] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 311.013998][T10820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1697'. [ 311.034374][T10820] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 311.181678][T10815] macsec0: entered promiscuous mode [ 311.187356][T10815] macsec0: entered allmulticast mode [ 311.199803][T10815] veth1_macvtap: entered allmulticast mode [ 311.378620][T10828] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1700'. [ 311.673384][T10841] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1705'. [ 312.081004][T10848] netlink: 'syz.2.1708': attribute type 10 has an invalid length. [ 312.090794][T10848] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1708'. [ 312.113689][T10848] bond0: entered promiscuous mode [ 312.472859][T10860] veth1_macvtap: left promiscuous mode [ 312.508118][T10860] macsec0: entered promiscuous mode [ 312.513468][T10860] macsec0: entered allmulticast mode [ 312.571584][T10860] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 312.598460][T10860] team0: left promiscuous mode [ 312.607538][T10860] team_slave_1: left promiscuous mode [ 312.616643][T10860] dummy0: left promiscuous mode [ 312.627864][T10860] team0: left allmulticast mode [ 312.632943][T10860] team_slave_1: left allmulticast mode [ 312.639436][T10860] dummy0: left allmulticast mode [ 312.653494][T10866] sock: sock_set_timeout: `syz.1.1712' (pid 10866) tries to set negative timeout [ 312.665393][T10865] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 313.282671][T10890] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 313.301343][T10890] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1720'. [ 313.401108][T10890] sit0: entered allmulticast mode [ 313.499547][T10890] sit0: entered promiscuous mode [ 314.191689][T10900] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 314.213108][T10900] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1723'. [ 314.243299][T10900] bond0: entered promiscuous mode [ 314.373446][T10909] netlink: 'syz.1.1726': attribute type 21 has an invalid length. [ 314.413959][T10909] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 314.421875][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1726'. [ 314.495966][T10908] netlink: 'syz.1.1726': attribute type 10 has an invalid length. [ 314.507498][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1726'. [ 314.521446][T10908] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 314.535705][T10908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.603080][T10911] FAULT_INJECTION: forcing a failure. [ 314.603080][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 314.634673][T10911] CPU: 1 PID: 10911 Comm: syz.0.1727 Not tainted syzkaller #0 [ 314.642246][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.652368][T10911] Call Trace: [ 314.655701][T10911] [ 314.658706][T10911] dump_stack_lvl+0x16c/0x230 [ 314.663488][T10911] ? show_regs_print_info+0x20/0x20 [ 314.668769][T10911] ? load_image+0x3b0/0x3b0 [ 314.673364][T10911] ? __might_sleep+0xe0/0xe0 [ 314.678044][T10911] ? __lock_acquire+0x7c80/0x7c80 [ 314.683172][T10911] should_fail_ex+0x39d/0x4d0 [ 314.687983][T10911] should_failslab+0x9/0x20 [ 314.692535][T10911] slab_pre_alloc_hook+0x59/0x310 [ 314.697708][T10911] ? trace_call_bpf+0x5ba/0x690 [ 314.702628][T10911] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.708405][T10911] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.714213][T10911] __kmem_cache_alloc_node+0x53/0x260 [ 314.719685][T10911] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.725471][T10911] __kmalloc+0xa4/0x240 [ 314.729718][T10911] tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.735360][T10911] tomoyo_path_number_perm+0x1ea/0x590 [ 314.740867][T10911] ? tomoyo_path_number_perm+0x1ba/0x590 [ 314.746575][T10911] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 314.752085][T10911] ? ksys_write+0x1c1/0x250 [ 314.756732][T10911] ? __fget_files+0x28/0x4d0 [ 314.761404][T10911] security_file_ioctl+0x70/0xa0 [ 314.766396][T10911] __se_sys_ioctl+0x48/0x170 [ 314.771035][T10911] do_syscall_64+0x55/0xb0 [ 314.775493][T10911] ? clear_bhb_loop+0x40/0x90 [ 314.780216][T10911] ? clear_bhb_loop+0x40/0x90 [ 314.785031][T10911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.790976][T10911] RIP: 0033:0x7fb8f8f8eec9 [ 314.795442][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.815271][T10911] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.823825][T10911] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 314.831829][T10911] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000005 [ 314.839838][T10911] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 314.847882][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.855908][T10911] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 314.863968][T10911] [ 314.893506][T10911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.462103][T10950] veth1_macvtap: left allmulticast mode [ 316.468812][T10950] veth1_macvtap: left promiscuous mode [ 316.550174][T10950] netlink: 'syz.0.1741': attribute type 10 has an invalid length. [ 316.561992][T10950] team0: left promiscuous mode [ 316.573780][T10950] team_slave_1: left promiscuous mode [ 316.579661][T10950] dummy0: left promiscuous mode [ 316.590888][T10950] team0: left allmulticast mode [ 316.599305][T10950] team_slave_1: left allmulticast mode [ 316.610858][T10950] dummy0: left allmulticast mode [ 316.632724][T10950] batman_adv: batadv0: Adding interface: team0 [ 316.640449][T10950] batman_adv: batadv0: The MTU of interface team0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.681484][T10950] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 316.810870][T10953] netlink: 'syz.0.1741': attribute type 10 has an invalid length. [ 316.842870][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.863129][T10953] batadv0: entered promiscuous mode [ 316.870384][T10953] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 316.956746][T10958] bond_slave_0: left promiscuous mode [ 316.962620][T10958] bond_slave_1: left promiscuous mode [ 317.033632][T10958] batadv0: left promiscuous mode [ 317.053418][T10958] bond0: entered promiscuous mode [ 317.073427][T10958] bond_slave_0: entered promiscuous mode [ 317.094625][T10967] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 317.102601][T10967] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1746'. [ 317.117874][T10958] bond_slave_1: entered promiscuous mode [ 317.125421][T10958] batadv0: entered promiscuous mode [ 317.269544][T10967] sit0: entered allmulticast mode [ 317.363185][T10969] sit0: entered promiscuous mode [ 317.510062][T10972] FAULT_INJECTION: forcing a failure. [ 317.510062][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 317.533115][T10972] CPU: 1 PID: 10972 Comm: syz.0.1747 Not tainted syzkaller #0 [ 317.540660][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.550837][T10972] Call Trace: [ 317.554150][T10972] [ 317.557113][T10972] dump_stack_lvl+0x16c/0x230 [ 317.561843][T10972] ? show_regs_print_info+0x20/0x20 [ 317.567087][T10972] ? load_image+0x3b0/0x3b0 [ 317.571630][T10972] ? __might_sleep+0xe0/0xe0 [ 317.576272][T10972] ? __lock_acquire+0x7c80/0x7c80 [ 317.581341][T10972] ? trace_contention_end+0x39/0xe0 [ 317.586599][T10972] should_fail_ex+0x39d/0x4d0 [ 317.591340][T10972] should_failslab+0x9/0x20 [ 317.595908][T10972] slab_pre_alloc_hook+0x59/0x310 [ 317.601057][T10972] kmem_cache_alloc+0x5a/0x2e0 [ 317.605937][T10972] ? skb_clone+0x1eb/0x370 [ 317.610393][T10972] skb_clone+0x1eb/0x370 [ 317.614668][T10972] pfkey_sendmsg+0x459/0x1050 [ 317.619528][T10972] ? pfkey_release+0x320/0x320 [ 317.624366][T10972] ? aa_sock_msg_perm+0x94/0x150 [ 317.629880][T10972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.635559][T10972] ? security_socket_sendmsg+0x80/0xa0 [ 317.641325][T10972] ? pfkey_release+0x320/0x320 [ 317.646182][T10972] ____sys_sendmsg+0x5bf/0x950 [ 317.651017][T10972] ? __asan_memset+0x22/0x40 [ 317.655632][T10972] ? __sys_sendmsg_sock+0x30/0x30 [ 317.660694][T10972] ? __import_iovec+0x5f2/0x860 [ 317.665580][T10972] ? import_iovec+0x73/0xa0 [ 317.670119][T10972] ___sys_sendmsg+0x220/0x290 [ 317.674910][T10972] ? __sys_sendmsg+0x270/0x270 [ 317.679807][T10972] ? __lock_acquire+0x7c80/0x7c80 [ 317.684871][T10972] __se_sys_sendmsg+0x1a5/0x270 [ 317.689840][T10972] ? __x64_sys_sendmsg+0x80/0x80 [ 317.694990][T10972] ? lockdep_hardirqs_on+0x98/0x150 [ 317.700261][T10972] do_syscall_64+0x55/0xb0 [ 317.704697][T10972] ? clear_bhb_loop+0x40/0x90 [ 317.709390][T10972] ? clear_bhb_loop+0x40/0x90 [ 317.714086][T10972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.720356][T10972] RIP: 0033:0x7fb8f8f8eec9 [ 317.724791][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.745040][T10972] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.753663][T10972] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 317.761657][T10972] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000004 [ 317.769741][T10972] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 317.777908][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.785908][T10972] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 317.793933][T10972] [ 317.809000][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.815639][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.923519][T10997] netlink: 'syz.1.1755': attribute type 3 has an invalid length. [ 319.096063][T10997] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1755'. [ 320.062567][T11022] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 320.077361][T11022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1764'. [ 320.092443][T11022] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 320.300620][T11025] netlink: 'syz.2.1765': attribute type 3 has an invalid length. [ 320.312661][T11025] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1765'. [ 321.933934][T11062] netlink: 'syz.2.1776': attribute type 3 has an invalid length. [ 321.942296][T11062] netlink: 99696 bytes leftover after parsing attributes in process `syz.2.1776'. [ 322.638863][T11080] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1784'. [ 322.715255][T11084] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 322.827317][T11082] netlink: 'syz.2.1786': attribute type 3 has an invalid length. [ 322.843156][T11082] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1786'. [ 324.442723][T11115] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1797'. [ 326.732032][T11153] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1809'. [ 330.527380][T11212] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1835'. [ 331.207761][T11231] syzkaller0: entered promiscuous mode [ 331.217657][T11231] syzkaller0: entered allmulticast mode [ 334.497902][T11269] veth0_vlan: entered allmulticast mode [ 334.550349][T11273] veth0_vlan: left promiscuous mode [ 334.568869][T11273] veth0_vlan: entered promiscuous mode [ 334.727626][T11278] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 334.764678][T11278] netlink: 'syz.1.1858': attribute type 9 has an invalid length. [ 334.780870][T11278] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1858'. [ 334.806033][T11282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1865'. [ 335.235491][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1868'. [ 335.674236][T11318] netlink: 'syz.3.1871': attribute type 2 has an invalid length. [ 335.699167][T11318] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1871'. [ 336.962323][T11339] netlink: 'syz.0.1878': attribute type 3 has an invalid length. [ 336.992506][T11339] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1878'. [ 340.298766][T11338] netlink: 'syz.0.1878': attribute type 12 has an invalid length. [ 340.306900][T11338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1878'. [ 340.829823][T11365] FAULT_INJECTION: forcing a failure. [ 340.829823][T11365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.848415][T11362] syzkaller0: entered promiscuous mode [ 340.866560][T11362] syzkaller0: entered allmulticast mode [ 340.883810][T11365] CPU: 0 PID: 11365 Comm: syz.3.1886 Not tainted syzkaller #0 [ 340.891459][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.901622][T11365] Call Trace: [ 340.905049][T11365] [ 340.908048][T11365] dump_stack_lvl+0x16c/0x230 [ 340.912790][T11365] ? show_regs_print_info+0x20/0x20 [ 340.918060][T11365] ? load_image+0x3b0/0x3b0 [ 340.922597][T11365] ? __might_fault+0xaa/0x120 [ 340.927308][T11365] ? __lock_acquire+0x7c80/0x7c80 [ 340.932377][T11365] should_fail_ex+0x39d/0x4d0 [ 340.937229][T11365] _copy_from_iter+0x1d3/0x1290 [ 340.942112][T11365] ? __might_fault+0xaa/0x120 [ 340.946830][T11365] ? _copy_from_iter+0x248/0x1290 [ 340.951895][T11365] ? __virt_addr_valid+0x18c/0x540 [ 340.957061][T11365] ? __lock_acquire+0x7c80/0x7c80 [ 340.962148][T11365] ? copyout_mc+0x70/0x70 [ 340.966682][T11365] ? copyout_mc+0x70/0x70 [ 340.971327][T11365] ? __virt_addr_valid+0x18c/0x540 [ 340.976470][T11365] ? page_copy_sane+0x16a/0x270 [ 340.981353][T11365] copy_page_from_iter+0x7b/0x100 [ 340.986609][T11365] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 340.992571][T11365] tun_get_user+0x1583/0x3bf0 [ 340.997496][T11365] ? aa_file_perm+0x120/0xec0 [ 341.002389][T11365] ? aa_file_perm+0x3e8/0xec0 [ 341.007190][T11365] ? rcu_read_unlock+0xa0/0xa0 [ 341.012000][T11365] ? tun_get+0x1c/0x2e0 [ 341.016188][T11365] ? __lock_acquire+0x7c80/0x7c80 [ 341.021241][T11365] ? tun_get+0x1c/0x2e0 [ 341.025431][T11365] tun_chr_write_iter+0x119/0x200 [ 341.030488][T11365] vfs_write+0x43b/0x940 [ 341.034772][T11365] ? file_end_write+0x250/0x250 [ 341.039760][T11365] ? __fget_files+0x44a/0x4d0 [ 341.044467][T11365] ? __fdget_pos+0x1d8/0x330 [ 341.049163][T11365] ? ksys_write+0x75/0x250 [ 341.053631][T11365] ksys_write+0x147/0x250 [ 341.058017][T11365] ? __ia32_sys_read+0x90/0x90 [ 341.062820][T11365] ? lockdep_hardirqs_on+0x98/0x150 [ 341.068052][T11365] do_syscall_64+0x55/0xb0 [ 341.072600][T11365] ? clear_bhb_loop+0x40/0x90 [ 341.077293][T11365] ? clear_bhb_loop+0x40/0x90 [ 341.081999][T11365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.087908][T11365] RIP: 0033:0x7f2099f8eec9 [ 341.092346][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.112001][T11365] RSP: 002b:00007f209ae98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.120437][T11365] RAX: ffffffffffffffda RBX: 00007f209a1e6090 RCX: 00007f2099f8eec9 [ 341.128428][T11365] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000004 [ 341.136416][T11365] RBP: 00007f209ae98090 R08: 0000000000000000 R09: 0000000000000000 [ 341.144445][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.152443][T11365] R13: 00007f209a1e6128 R14: 00007f209a1e6090 R15: 00007ffdb722ccc8 [ 341.160546][T11365] [ 345.290321][T11422] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.340006][T11422] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.362096][T11424] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.379861][T11423] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.406356][T11424] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.424181][T11423] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.451276][T11423] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.470408][T11424] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.481009][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1909'. [ 345.492228][T11423] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.516233][T11428] netlink: 'syz.0.1909': attribute type 12 has an invalid length. [ 345.525015][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1909'. [ 345.535730][T11423] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 345.544865][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1909'. [ 345.560921][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1909'. [ 345.583184][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1909'. [ 345.781150][T11434] FAULT_INJECTION: forcing a failure. [ 345.781150][T11434] name failslab, interval 1, probability 0, space 0, times 0 [ 345.801599][T11434] CPU: 0 PID: 11434 Comm: syz.3.1912 Not tainted syzkaller #0 [ 345.809157][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.819274][T11434] Call Trace: [ 345.822595][T11434] [ 345.825570][T11434] dump_stack_lvl+0x16c/0x230 [ 345.830316][T11434] ? show_regs_print_info+0x20/0x20 [ 345.835584][T11434] ? load_image+0x3b0/0x3b0 [ 345.840149][T11434] ? __might_sleep+0xe0/0xe0 [ 345.844821][T11434] ? __lock_acquire+0x7c80/0x7c80 [ 345.850004][T11434] should_fail_ex+0x39d/0x4d0 [ 345.854745][T11434] should_failslab+0x9/0x20 [ 345.859298][T11434] slab_pre_alloc_hook+0x59/0x310 [ 345.864633][T11434] ? __lock_acquire+0x7c80/0x7c80 [ 345.869802][T11434] kmem_cache_alloc_node+0x60/0x330 [ 345.875052][T11434] ? __alloc_skb+0x108/0x2c0 [ 345.879708][T11434] __alloc_skb+0x108/0x2c0 [ 345.884182][T11434] netlink_sendmsg+0x65b/0xbe0 [ 345.889004][T11434] ? netlink_getsockopt+0x580/0x580 [ 345.894251][T11434] ? aa_sock_msg_perm+0x94/0x150 [ 345.899241][T11434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.904571][T11434] ? security_socket_sendmsg+0x80/0xa0 [ 345.910075][T11434] ? netlink_getsockopt+0x580/0x580 [ 345.915581][T11434] ____sys_sendmsg+0x5bf/0x950 [ 345.920409][T11434] ? __asan_memset+0x22/0x40 [ 345.925050][T11434] ? __sys_sendmsg_sock+0x30/0x30 [ 345.930122][T11434] ? __import_iovec+0x5f2/0x860 [ 345.935125][T11434] ? import_iovec+0x73/0xa0 [ 345.939676][T11434] ___sys_sendmsg+0x220/0x290 [ 345.944407][T11434] ? __sys_sendmsg+0x270/0x270 [ 345.949242][T11434] ? __lock_acquire+0x7c80/0x7c80 [ 345.954334][T11434] __se_sys_sendmsg+0x1a5/0x270 [ 345.959240][T11434] ? __x64_sys_sendmsg+0x80/0x80 [ 345.964238][T11434] ? lockdep_hardirqs_on+0x98/0x150 [ 345.969576][T11434] do_syscall_64+0x55/0xb0 [ 345.974030][T11434] ? clear_bhb_loop+0x40/0x90 [ 345.978744][T11434] ? clear_bhb_loop+0x40/0x90 [ 345.983464][T11434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.989395][T11434] RIP: 0033:0x7f2099f8eec9 [ 345.993852][T11434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.013591][T11434] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.022048][T11434] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 346.030231][T11434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 346.038237][T11434] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 346.046255][T11434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.054271][T11434] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 346.062303][T11434] [ 348.992123][T11507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1937'. [ 349.907403][T11534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1948'. [ 349.917522][T11534] FAULT_INJECTION: forcing a failure. [ 349.917522][T11534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.930846][T11534] CPU: 1 PID: 11534 Comm: syz.2.1948 Not tainted syzkaller #0 [ 349.938356][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.948463][T11534] Call Trace: [ 349.951868][T11534] [ 349.954847][T11534] dump_stack_lvl+0x16c/0x230 [ 349.959588][T11534] ? show_regs_print_info+0x20/0x20 [ 349.964847][T11534] ? load_image+0x3b0/0x3b0 [ 349.969425][T11534] ? __lock_acquire+0x7c80/0x7c80 [ 349.974501][T11534] ? snprintf+0xdb/0x120 [ 349.978884][T11534] should_fail_ex+0x39d/0x4d0 [ 349.983626][T11534] _copy_to_user+0x2f/0xa0 [ 349.988127][T11534] simple_read_from_buffer+0xe7/0x150 [ 349.993570][T11534] proc_fail_nth_read+0x1e3/0x250 [ 349.998652][T11534] ? proc_fault_inject_write+0x340/0x340 [ 350.004352][T11534] ? fsnotify_perm+0x271/0x5e0 [ 350.009171][T11534] ? proc_fault_inject_write+0x340/0x340 [ 350.014860][T11534] vfs_read+0x27e/0x920 [ 350.019081][T11534] ? kernel_read+0x1e0/0x1e0 [ 350.023737][T11534] ? __fget_files+0x28/0x4d0 [ 350.028392][T11534] ? __fget_files+0x44a/0x4d0 [ 350.033134][T11534] ? __fdget_pos+0x2a3/0x330 [ 350.037774][T11534] ? ksys_read+0x75/0x250 [ 350.042205][T11534] ksys_read+0x147/0x250 [ 350.046481][T11534] ? vfs_write+0x940/0x940 [ 350.050926][T11534] ? lockdep_hardirqs_on+0x98/0x150 [ 350.056157][T11534] do_syscall_64+0x55/0xb0 [ 350.060599][T11534] ? clear_bhb_loop+0x40/0x90 [ 350.065301][T11534] ? clear_bhb_loop+0x40/0x90 [ 350.069999][T11534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.075934][T11534] RIP: 0033:0x7f918558d8dc [ 350.080395][T11534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.100133][T11534] RSP: 002b:00007f9186391030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.108597][T11534] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558d8dc [ 350.116612][T11534] RDX: 000000000000000f RSI: 00007f91863910a0 RDI: 0000000000000004 [ 350.124878][T11534] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 350.132993][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.141207][T11534] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 350.149223][T11534] [ 351.710511][T11586] syzkaller0: entered promiscuous mode [ 351.724460][T11586] syzkaller0: entered allmulticast mode [ 354.233024][T11599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 354.248335][T11602] validate_nla: 8 callbacks suppressed [ 354.248358][T11602] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 354.360879][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.395288][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.421317][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.443452][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.452202][T11607] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 354.462511][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.482136][T11605] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 354.504992][T11607] FAULT_INJECTION: forcing a failure. [ 354.504992][T11607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.523244][T11607] CPU: 1 PID: 11607 Comm: syz.3.1972 Not tainted syzkaller #0 [ 354.530866][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.541024][T11607] Call Trace: [ 354.544373][T11607] [ 354.547381][T11607] dump_stack_lvl+0x16c/0x230 [ 354.552215][T11607] ? show_regs_print_info+0x20/0x20 [ 354.557499][T11607] ? load_image+0x3b0/0x3b0 [ 354.562101][T11607] ? __lock_acquire+0x7c80/0x7c80 [ 354.567246][T11607] should_fail_ex+0x39d/0x4d0 [ 354.572030][T11607] _copy_from_user+0x2f/0xe0 [ 354.576706][T11607] __copy_msghdr+0x3bb/0x580 [ 354.581397][T11607] ___sys_sendmsg+0x1a6/0x290 [ 354.586170][T11607] ? __sys_sendmsg+0x270/0x270 [ 354.591123][T11607] ? __lock_acquire+0x7c80/0x7c80 [ 354.596345][T11607] __se_sys_sendmsg+0x1a5/0x270 [ 354.601295][T11607] ? __x64_sys_sendmsg+0x80/0x80 [ 354.606392][T11607] ? lockdep_hardirqs_on+0x98/0x150 [ 354.611703][T11607] do_syscall_64+0x55/0xb0 [ 354.616184][T11607] ? clear_bhb_loop+0x40/0x90 [ 354.620923][T11607] ? clear_bhb_loop+0x40/0x90 [ 354.625675][T11607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.631672][T11607] RIP: 0033:0x7f2099f8eec9 [ 354.636165][T11607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.655880][T11607] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.664375][T11607] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 354.672507][T11607] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 354.680543][T11607] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.688577][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.696637][T11607] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 354.704751][T11607] [ 354.812291][T11609] syzkaller0: entered promiscuous mode [ 354.822654][T11609] syzkaller0: entered allmulticast mode [ 354.891805][T11609] sctp: [Deprecated]: syz.1.1973 (pid 11609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.891805][T11609] Use struct sctp_sack_info instead [ 354.957511][T11613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1974'. [ 355.008319][T11614] syzkaller0: entered promiscuous mode [ 355.014894][T11614] syzkaller0: entered allmulticast mode [ 355.023129][T11615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'. [ 355.039063][T11613] netlink: 'syz.3.1974': attribute type 12 has an invalid length. [ 355.052446][T11613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1974'. [ 356.887306][T11615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'. [ 356.981030][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'. [ 357.229778][T11626] netlink: 'syz.1.1977': attribute type 9 has an invalid length. [ 357.264756][T11626] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1977'. [ 360.125341][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1980'. [ 360.199790][T11641] bridge_slave_0: entered allmulticast mode [ 361.391952][T11667] validate_nla: 1 callbacks suppressed [ 361.391970][T11667] netlink: 'syz.2.1991': attribute type 9 has an invalid length. [ 361.409224][T11667] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1991'. [ 361.547012][T11671] netlink: 'syz.1.1992': attribute type 9 has an invalid length. [ 361.573189][T11671] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1992'. [ 361.786538][T11669] netlink: 'syz.2.1991': attribute type 9 has an invalid length. [ 361.805920][T11669] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1991'. [ 362.101815][T11670] delete_channel: no stack [ 362.260927][T11666] delete_channel: no stack [ 362.807381][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2001'. [ 362.820477][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2001'. [ 362.831230][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2001'. [ 362.845637][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2001'. [ 364.629801][T11740] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2020'. [ 365.831887][T11770] netlink: 'syz.3.2032': attribute type 3 has an invalid length. [ 365.895048][T11770] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2032'. [ 367.495414][T11825] netlink: 'syz.2.2050': attribute type 17 has an invalid length. [ 367.503593][T11825] netlink: 'syz.2.2050': attribute type 16 has an invalid length. [ 367.512020][T11825] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2050'. [ 367.525629][T11825] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 367.537748][T11825] geneve0: entered promiscuous mode [ 367.574211][T11825] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 368.008689][T11835] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 368.118184][T11833] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 368.164482][T11833] bond0: (slave wlan1): Releasing backup interface [ 368.566596][T11833] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 368.742809][T11833] team0: Port device wlan1 added [ 369.506064][T11864] FAULT_INJECTION: forcing a failure. [ 369.506064][T11864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.520676][T11864] CPU: 0 PID: 11864 Comm: syz.3.2065 Not tainted syzkaller #0 [ 369.528204][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.538312][T11864] Call Trace: [ 369.541637][T11864] [ 369.544606][T11864] dump_stack_lvl+0x16c/0x230 [ 369.549324][T11864] ? show_regs_print_info+0x20/0x20 [ 369.554555][T11864] ? load_image+0x3b0/0x3b0 [ 369.559081][T11864] ? __lock_acquire+0x7c80/0x7c80 [ 369.564170][T11864] should_fail_ex+0x39d/0x4d0 [ 369.568882][T11864] _copy_from_user+0x2f/0xe0 [ 369.573509][T11864] __copy_msghdr+0x3bb/0x580 [ 369.578138][T11864] ___sys_sendmsg+0x1a6/0x290 [ 369.582858][T11864] ? __sys_sendmsg+0x270/0x270 [ 369.587689][T11864] ? __lock_acquire+0x7c80/0x7c80 [ 369.592751][T11864] __se_sys_sendmsg+0x1a5/0x270 [ 369.597629][T11864] ? __x64_sys_sendmsg+0x80/0x80 [ 369.602605][T11864] ? lockdep_hardirqs_on+0x98/0x150 [ 369.607834][T11864] do_syscall_64+0x55/0xb0 [ 369.612274][T11864] ? clear_bhb_loop+0x40/0x90 [ 369.616972][T11864] ? clear_bhb_loop+0x40/0x90 [ 369.621685][T11864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.627600][T11864] RIP: 0033:0x7f2099f8eec9 [ 369.632041][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.651785][T11864] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.660219][T11864] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 369.668211][T11864] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 369.676292][T11864] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 369.684302][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.692314][T11864] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 369.700320][T11864] [ 372.616428][T11875] netlink: 'syz.1.2069': attribute type 12 has an invalid length. [ 372.624618][T11875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2069'. [ 372.639604][T11886] netlink: 'syz.0.2073': attribute type 12 has an invalid length. [ 372.647740][T11886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2073'. [ 373.947769][T11918] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 374.241434][T11918] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 374.260356][T11918] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 374.334614][T11918] team0: Port device netdevsim0 added [ 374.392422][T11916] netlink: 'syz.1.2082': attribute type 2 has an invalid length. [ 374.407378][T11916] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2082'. [ 374.452530][T11926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.567050][T11918] syz.2.2081 (11918) used greatest stack depth: 18664 bytes left [ 375.032673][T11951] FAULT_INJECTION: forcing a failure. [ 375.032673][T11951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.048502][T11951] CPU: 1 PID: 11951 Comm: syz.1.2093 Not tainted syzkaller #0 [ 375.056040][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.066145][T11951] Call Trace: [ 375.069474][T11951] [ 375.072447][T11951] dump_stack_lvl+0x16c/0x230 [ 375.077191][T11951] ? show_regs_print_info+0x20/0x20 [ 375.082445][T11951] ? load_image+0x3b0/0x3b0 [ 375.087009][T11951] ? __lock_acquire+0x7c80/0x7c80 [ 375.092089][T11951] ? snprintf+0xdb/0x120 [ 375.096471][T11951] should_fail_ex+0x39d/0x4d0 [ 375.101215][T11951] _copy_to_user+0x2f/0xa0 [ 375.105684][T11951] simple_read_from_buffer+0xe7/0x150 [ 375.111132][T11951] proc_fail_nth_read+0x1e3/0x250 [ 375.116219][T11951] ? proc_fault_inject_write+0x340/0x340 [ 375.121919][T11951] ? fsnotify_perm+0x271/0x5e0 [ 375.126744][T11951] ? proc_fault_inject_write+0x340/0x340 [ 375.132439][T11951] vfs_read+0x27e/0x920 [ 375.136660][T11951] ? kernel_read+0x1e0/0x1e0 [ 375.141316][T11951] ? __fget_files+0x28/0x4d0 [ 375.145961][T11951] ? __fget_files+0x44a/0x4d0 [ 375.150707][T11951] ? __fdget_pos+0x2a3/0x330 [ 375.155405][T11951] ? ksys_read+0x75/0x250 [ 375.159799][T11951] ksys_read+0x147/0x250 [ 375.164112][T11951] ? vfs_write+0x940/0x940 [ 375.168601][T11951] ? trace_sys_enter+0x1f/0x80 [ 375.173445][T11951] do_syscall_64+0x55/0xb0 [ 375.177924][T11951] ? clear_bhb_loop+0x40/0x90 [ 375.182649][T11951] ? clear_bhb_loop+0x40/0x90 [ 375.187382][T11951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.193323][T11951] RIP: 0033:0x7f946f18d8dc [ 375.197792][T11951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 375.217447][T11951] RSP: 002b:00007f946ff6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.225921][T11951] RAX: ffffffffffffffda RBX: 00007f946f3e5fa0 RCX: 00007f946f18d8dc [ 375.233952][T11951] RDX: 000000000000000f RSI: 00007f946ff6f0a0 RDI: 0000000000000004 [ 375.241995][T11951] RBP: 00007f946ff6f090 R08: 0000000000000000 R09: 0000000000000000 [ 375.250105][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.258133][T11951] R13: 00007f946f3e6038 R14: 00007f946f3e5fa0 R15: 00007ffeb0063d58 [ 375.266191][T11951] [ 375.430534][T11955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.605254][T11961] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 375.744065][T11961] team0: Port device ÿÿÿÿÿÿ added [ 376.242300][T11965] netlink: 'syz.2.2098': attribute type 2 has an invalid length. [ 376.273588][T11965] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2098'. [ 376.573408][T11992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.125242][T12009] netlink: 'syz.3.2109': attribute type 10 has an invalid length. [ 378.223731][T12006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 378.248174][T12009] team0: Port device netdevsim0 added [ 378.257356][T12006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 378.274813][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 378.287469][T12010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 378.308208][T12016] bond_slave_1: mtu less than device minimum [ 378.319792][T12006] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 378.463922][T12018] FAULT_INJECTION: forcing a failure. [ 378.463922][T12018] name failslab, interval 1, probability 0, space 0, times 0 [ 378.503216][T12018] CPU: 0 PID: 12018 Comm: syz.0.2112 Not tainted syzkaller #0 [ 378.510977][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.521110][T12018] Call Trace: [ 378.524453][T12018] [ 378.527440][T12018] dump_stack_lvl+0x16c/0x230 [ 378.532370][T12018] ? show_regs_print_info+0x20/0x20 [ 378.537805][T12018] ? load_image+0x3b0/0x3b0 [ 378.542460][T12018] ? __might_sleep+0xe0/0xe0 [ 378.547120][T12018] ? __lock_acquire+0x7c80/0x7c80 [ 378.552214][T12018] should_fail_ex+0x39d/0x4d0 [ 378.557020][T12018] should_failslab+0x9/0x20 [ 378.561587][T12018] slab_pre_alloc_hook+0x59/0x310 [ 378.566689][T12018] ? tomoyo_encode+0x28b/0x540 [ 378.571538][T12018] ? tomoyo_encode+0x28b/0x540 [ 378.576374][T12018] __kmem_cache_alloc_node+0x53/0x260 [ 378.581828][T12018] ? tomoyo_encode+0x28b/0x540 [ 378.586749][T12018] __kmalloc+0xa4/0x240 [ 378.590979][T12018] tomoyo_encode+0x28b/0x540 [ 378.595659][T12018] tomoyo_realpath_from_path+0x592/0x5d0 [ 378.601490][T12018] tomoyo_path_number_perm+0x1ea/0x590 [ 378.607188][T12018] ? tomoyo_path_number_perm+0x1ba/0x590 [ 378.612867][T12018] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 378.618390][T12018] ? ksys_write+0x1c1/0x250 [ 378.623161][T12018] ? __fget_files+0x28/0x4d0 [ 378.627911][T12018] security_file_ioctl+0x70/0xa0 [ 378.632986][T12018] __se_sys_ioctl+0x48/0x170 [ 378.637656][T12018] do_syscall_64+0x55/0xb0 [ 378.642127][T12018] ? clear_bhb_loop+0x40/0x90 [ 378.646881][T12018] ? clear_bhb_loop+0x40/0x90 [ 378.651938][T12018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.657864][T12018] RIP: 0033:0x7fb8f8f8eec9 [ 378.662349][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.682248][T12018] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.690706][T12018] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 378.698794][T12018] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000008 [ 378.706791][T12018] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 378.714817][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.722833][T12018] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 378.731091][T12018] [ 378.770354][T12021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.807189][T12018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.814749][T12018] bond_slave_1: mtu less than device minimum [ 378.970914][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.989485][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.394017][T12045] FAULT_INJECTION: forcing a failure. [ 380.394017][T12045] name fail_futex, interval 1, probability 0, space 0, times 1 [ 380.411408][T12045] CPU: 1 PID: 12045 Comm: syz.1.2119 Not tainted syzkaller #0 [ 380.419132][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.429235][T12045] Call Trace: [ 380.432637][T12045] [ 380.435602][T12045] dump_stack_lvl+0x16c/0x230 [ 380.440338][T12045] ? show_regs_print_info+0x20/0x20 [ 380.445585][T12045] ? load_image+0x3b0/0x3b0 [ 380.450135][T12045] ? __lock_acquire+0x1334/0x7c80 [ 380.455316][T12045] should_fail_ex+0x39d/0x4d0 [ 380.460132][T12045] get_futex_key+0x12b/0x1020 [ 380.464880][T12045] ? verify_lock_unused+0x140/0x140 [ 380.470122][T12045] ? futex_setup_timer+0xc0/0xc0 [ 380.475107][T12045] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 380.480704][T12045] ? trace_call_bpf+0x5ba/0x690 [ 380.485611][T12045] futex_wake+0x10b/0x4b0 [ 380.489983][T12045] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 380.496109][T12045] ? futex_wake_mark+0x150/0x150 [ 380.501110][T12045] do_futex+0x35d/0x3e0 [ 380.505306][T12045] ? __might_fault+0xaa/0x120 [ 380.510033][T12045] ? __ia32_sys_get_robust_list+0x90/0x90 [ 380.515884][T12045] ? __might_fault+0xc6/0x120 [ 380.520612][T12045] mm_release+0x189/0x390 [ 380.524998][T12045] ? exit_mm_release+0x30/0x30 [ 380.529811][T12045] ? lockdep_hardirqs_on+0x98/0x150 [ 380.535085][T12045] exit_mm+0xa8/0x2c0 [ 380.539123][T12045] ? do_exit+0x23c0/0x23c0 [ 380.543593][T12045] ? taskstats_exit+0x35e/0x9e0 [ 380.548517][T12045] do_exit+0x88e/0x23c0 [ 380.552747][T12045] ? put_task_struct+0xc0/0xc0 [ 380.557564][T12045] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 380.563600][T12045] ? get_signal+0x1068/0x1400 [ 380.568425][T12045] ? lock_chain_count+0x20/0x20 [ 380.573417][T12045] ? _raw_spin_lock_irq+0xaf/0xe0 [ 380.578491][T12045] do_group_exit+0x21b/0x2d0 [ 380.583129][T12045] ? lockdep_hardirqs_on+0x98/0x150 [ 380.588385][T12045] get_signal+0x12fc/0x1400 [ 380.592962][T12045] arch_do_signal_or_restart+0x96/0x780 [ 380.598562][T12045] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 380.604421][T12045] ? get_sigframe_size+0x20/0x20 [ 380.609430][T12045] ? exit_to_user_mode_loop+0x3b/0x110 [ 380.614942][T12045] exit_to_user_mode_loop+0x70/0x110 [ 380.620279][T12045] exit_to_user_mode_prepare+0xf6/0x180 [ 380.625893][T12045] syscall_exit_to_user_mode+0x1a/0x50 [ 380.631412][T12045] do_syscall_64+0x61/0xb0 [ 380.635888][T12045] ? clear_bhb_loop+0x40/0x90 [ 380.640607][T12045] ? clear_bhb_loop+0x40/0x90 [ 380.645335][T12045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.651356][T12045] RIP: 0033:0x7f946f18eec9 [ 380.655827][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.675653][T12045] RSP: 002b:00007f946ff4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 380.684207][T12045] RAX: 0000000000000000 RBX: 00007f946f3e6090 RCX: 00007f946f18eec9 [ 380.692224][T12045] RDX: 0000000000010100 RSI: 0000200000000380 RDI: 0000000000000003 [ 380.700244][T12045] RBP: 00007f946ff4e090 R08: 0000000000000000 R09: 0000000000000000 [ 380.708341][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.716526][T12045] R13: 00007f946f3e6128 R14: 00007f946f3e6090 R15: 00007ffeb0063d58 [ 380.724558][T12045] [ 381.843960][T12064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.156281][T12070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2131'. [ 382.958775][T12082] FAULT_INJECTION: forcing a failure. [ 382.958775][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 383.023654][T12082] CPU: 0 PID: 12082 Comm: syz.3.2134 Not tainted syzkaller #0 [ 383.031283][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.041476][T12082] Call Trace: [ 383.044948][T12082] [ 383.047932][T12082] dump_stack_lvl+0x16c/0x230 [ 383.052699][T12082] ? show_regs_print_info+0x20/0x20 [ 383.057972][T12082] ? load_image+0x3b0/0x3b0 [ 383.062542][T12082] ? __might_sleep+0xe0/0xe0 [ 383.067198][T12082] ? __lock_acquire+0x7c80/0x7c80 [ 383.072391][T12082] should_fail_ex+0x39d/0x4d0 [ 383.077165][T12082] should_failslab+0x9/0x20 [ 383.081731][T12082] slab_pre_alloc_hook+0x59/0x310 [ 383.086912][T12082] kmem_cache_alloc_node+0x60/0x330 [ 383.092252][T12082] ? perf_event_alloc+0x15a/0x21b0 [ 383.097453][T12082] perf_event_alloc+0x15a/0x21b0 [ 383.102446][T12082] ? _raw_spin_unlock+0x28/0x40 [ 383.107358][T12082] ? alloc_fd+0x58f/0x630 [ 383.111724][T12082] ? find_lively_task_by_vpid+0x19/0x290 [ 383.117475][T12082] ? find_lively_task_by_vpid+0x19/0x290 [ 383.123143][T12082] __se_sys_perf_event_open+0x70e/0x1c20 [ 383.128821][T12082] ? mutex_unlock+0x10/0x10 [ 383.133358][T12082] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 383.139030][T12082] ? lock_chain_count+0x20/0x20 [ 383.143910][T12082] ? lockdep_hardirqs_on+0x98/0x150 [ 383.149219][T12082] ? __x64_sys_perf_event_open+0x20/0xc0 [ 383.154874][T12082] do_syscall_64+0x55/0xb0 [ 383.159343][T12082] ? clear_bhb_loop+0x40/0x90 [ 383.164057][T12082] ? clear_bhb_loop+0x40/0x90 [ 383.168805][T12082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.174721][T12082] RIP: 0033:0x7f2099f8eec9 [ 383.179250][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.199063][T12082] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 383.207511][T12082] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 383.215517][T12082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 383.223524][T12082] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 383.231535][T12082] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 383.239527][T12082] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 383.247554][T12082] [ 383.443149][T12091] FAULT_INJECTION: forcing a failure. [ 383.443149][T12091] name failslab, interval 1, probability 0, space 0, times 0 [ 383.462723][T12091] CPU: 0 PID: 12091 Comm: syz.0.2145 Not tainted syzkaller #0 [ 383.470270][T12091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.480886][T12091] Call Trace: [ 383.484214][T12091] [ 383.487165][T12091] dump_stack_lvl+0x16c/0x230 [ 383.491913][T12091] ? show_regs_print_info+0x20/0x20 [ 383.497150][T12091] ? load_image+0x3b0/0x3b0 [ 383.501685][T12091] ? __might_sleep+0xe0/0xe0 [ 383.506349][T12091] ? __lock_acquire+0x7c80/0x7c80 [ 383.511440][T12091] should_fail_ex+0x39d/0x4d0 [ 383.516156][T12091] should_failslab+0x9/0x20 [ 383.520810][T12091] slab_pre_alloc_hook+0x59/0x310 [ 383.525868][T12091] ? tomoyo_encode+0x28b/0x540 [ 383.530659][T12091] ? tomoyo_encode+0x28b/0x540 [ 383.535453][T12091] __kmem_cache_alloc_node+0x53/0x260 [ 383.540885][T12091] ? tomoyo_encode+0x28b/0x540 [ 383.545694][T12091] __kmalloc+0xa4/0x240 [ 383.550002][T12091] tomoyo_encode+0x28b/0x540 [ 383.554657][T12091] tomoyo_realpath_from_path+0x592/0x5d0 [ 383.560415][T12091] tomoyo_path_number_perm+0x1ea/0x590 [ 383.565903][T12091] ? tomoyo_path_number_perm+0x1ba/0x590 [ 383.571659][T12091] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 383.577146][T12091] ? ksys_write+0x1c1/0x250 [ 383.581707][T12091] ? __fget_files+0x28/0x4d0 [ 383.586328][T12091] security_file_ioctl+0x70/0xa0 [ 383.591294][T12091] __se_sys_ioctl+0x48/0x170 [ 383.595907][T12091] do_syscall_64+0x55/0xb0 [ 383.600345][T12091] ? clear_bhb_loop+0x40/0x90 [ 383.605053][T12091] ? clear_bhb_loop+0x40/0x90 [ 383.609845][T12091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.615766][T12091] RIP: 0033:0x7fb8f8f8eec9 [ 383.620234][T12091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.639867][T12091] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.648342][T12091] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 383.656360][T12091] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 383.664356][T12091] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.672383][T12091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.680392][T12091] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 383.688397][T12091] [ 383.710673][T12091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.967260][T12102] FAULT_INJECTION: forcing a failure. [ 383.967260][T12102] name failslab, interval 1, probability 0, space 0, times 0 [ 383.987724][T12102] CPU: 0 PID: 12102 Comm: syz.2.2140 Not tainted syzkaller #0 [ 383.995276][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.005488][T12102] Call Trace: [ 384.008815][T12102] [ 384.011802][T12102] dump_stack_lvl+0x16c/0x230 [ 384.016548][T12102] ? show_regs_print_info+0x20/0x20 [ 384.021796][T12102] ? load_image+0x3b0/0x3b0 [ 384.026339][T12102] ? __might_sleep+0xe0/0xe0 [ 384.030957][T12102] ? __lock_acquire+0x7c80/0x7c80 [ 384.036022][T12102] should_fail_ex+0x39d/0x4d0 [ 384.040737][T12102] should_failslab+0x9/0x20 [ 384.045276][T12102] slab_pre_alloc_hook+0x59/0x310 [ 384.050333][T12102] ? tomoyo_encode+0x28b/0x540 [ 384.055152][T12102] ? tomoyo_encode+0x28b/0x540 [ 384.059970][T12102] __kmem_cache_alloc_node+0x53/0x260 [ 384.065407][T12102] ? tomoyo_encode+0x28b/0x540 [ 384.070201][T12102] __kmalloc+0xa4/0x240 [ 384.074384][T12102] tomoyo_encode+0x28b/0x540 [ 384.079017][T12102] tomoyo_realpath_from_path+0x592/0x5d0 [ 384.084697][T12102] tomoyo_path_number_perm+0x1ea/0x590 [ 384.090184][T12102] ? tomoyo_path_number_perm+0x1ba/0x590 [ 384.095843][T12102] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 384.101335][T12102] ? ksys_write+0x1c1/0x250 [ 384.105892][T12102] ? __fget_files+0x28/0x4d0 [ 384.110528][T12102] security_file_ioctl+0x70/0xa0 [ 384.115498][T12102] __se_sys_ioctl+0x48/0x170 [ 384.120115][T12102] do_syscall_64+0x55/0xb0 [ 384.124559][T12102] ? clear_bhb_loop+0x40/0x90 [ 384.129252][T12102] ? clear_bhb_loop+0x40/0x90 [ 384.134038][T12102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.139945][T12102] RIP: 0033:0x7f918558eec9 [ 384.144384][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.164019][T12102] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.172475][T12102] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 384.180494][T12102] RDX: 0000200000000080 RSI: 00000000000089f9 RDI: 0000000000000004 [ 384.188499][T12102] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 384.196663][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.204677][T12102] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 384.212768][T12102] [ 384.217937][T12102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.313899][T12127] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 386.328582][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'. [ 386.598201][T12136] FAULT_INJECTION: forcing a failure. [ 386.598201][T12136] name failslab, interval 1, probability 0, space 0, times 0 [ 386.630895][T12136] CPU: 1 PID: 12136 Comm: syz.2.2152 Not tainted syzkaller #0 [ 386.638527][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.648660][T12136] Call Trace: [ 386.652002][T12136] [ 386.654990][T12136] dump_stack_lvl+0x16c/0x230 [ 386.659742][T12136] ? show_regs_print_info+0x20/0x20 [ 386.665016][T12136] ? load_image+0x3b0/0x3b0 [ 386.669667][T12136] ? __might_sleep+0xe0/0xe0 [ 386.674321][T12136] ? __lock_acquire+0x7c80/0x7c80 [ 386.679415][T12136] should_fail_ex+0x39d/0x4d0 [ 386.684166][T12136] should_failslab+0x9/0x20 [ 386.688790][T12136] slab_pre_alloc_hook+0x59/0x310 [ 386.693864][T12136] ? tomoyo_encode+0x28b/0x540 [ 386.698682][T12136] ? tomoyo_encode+0x28b/0x540 [ 386.703480][T12136] __kmem_cache_alloc_node+0x53/0x260 [ 386.708894][T12136] ? tomoyo_encode+0x28b/0x540 [ 386.713691][T12136] __kmalloc+0xa4/0x240 [ 386.718235][T12136] tomoyo_encode+0x28b/0x540 [ 386.722977][T12136] tomoyo_realpath_from_path+0x592/0x5d0 [ 386.728766][T12136] tomoyo_path_number_perm+0x1ea/0x590 [ 386.734344][T12136] ? tomoyo_path_number_perm+0x1ba/0x590 [ 386.740015][T12136] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 386.745517][T12136] ? ksys_write+0x1c1/0x250 [ 386.750144][T12136] ? __fget_files+0x28/0x4d0 [ 386.754787][T12136] security_file_ioctl+0x70/0xa0 [ 386.759766][T12136] __se_sys_ioctl+0x48/0x170 [ 386.764422][T12136] do_syscall_64+0x55/0xb0 [ 386.768869][T12136] ? clear_bhb_loop+0x40/0x90 [ 386.773581][T12136] ? clear_bhb_loop+0x40/0x90 [ 386.778294][T12136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.784213][T12136] RIP: 0033:0x7f918558eec9 [ 386.788657][T12136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.808639][T12136] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.817095][T12136] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 386.825127][T12136] RDX: 0000200000000080 RSI: 00000000000089f9 RDI: 0000000000000007 [ 386.833212][T12136] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 386.841232][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.849225][T12136] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 386.857348][T12136] [ 386.871276][T12136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.484829][T12156] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2159'. [ 387.669945][T12154] syzkaller0: entered promiscuous mode [ 387.675790][T12154] syzkaller0: entered allmulticast mode [ 388.570758][T12169] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2163'. [ 391.225118][T12194] netlink: 'syz.0.2171': attribute type 3 has an invalid length. [ 391.239680][T12194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2171'. [ 391.889835][T12210] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2178'. [ 392.938982][T12235] FAULT_INJECTION: forcing a failure. [ 392.938982][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 392.953778][T12235] CPU: 1 PID: 12235 Comm: syz.1.2182 Not tainted syzkaller #0 [ 392.961332][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.971443][T12235] Call Trace: [ 392.974795][T12235] [ 392.977776][T12235] dump_stack_lvl+0x16c/0x230 [ 392.982524][T12235] ? show_regs_print_info+0x20/0x20 [ 392.987810][T12235] ? load_image+0x3b0/0x3b0 [ 392.992411][T12235] ? __might_sleep+0xe0/0xe0 [ 392.997058][T12235] ? __lock_acquire+0x7c80/0x7c80 [ 393.002124][T12235] ? __asan_memset+0x22/0x40 [ 393.006810][T12235] should_fail_ex+0x39d/0x4d0 [ 393.011596][T12235] should_failslab+0x9/0x20 [ 393.016181][T12235] slab_pre_alloc_hook+0x59/0x310 [ 393.021274][T12235] ? __kthread_create_on_node+0xf0/0x3e0 [ 393.026994][T12235] __kmem_cache_alloc_node+0x53/0x260 [ 393.032523][T12235] ? __kthread_create_on_node+0xf0/0x3e0 [ 393.038238][T12235] kmalloc_trace+0x2a/0xe0 [ 393.042792][T12235] ? rxrpc_direct_abort+0x330/0x330 [ 393.048050][T12235] __kthread_create_on_node+0xf0/0x3e0 [ 393.053610][T12235] ? kthread_create_on_node+0x120/0x120 [ 393.059244][T12235] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 393.065274][T12235] ? rxrpc_direct_abort+0x330/0x330 [ 393.070522][T12235] ? rxrpc_direct_abort+0x330/0x330 [ 393.075771][T12235] kthread_create_on_node+0xde/0x120 [ 393.081143][T12235] ? __local_bh_enable_ip+0x12e/0x1c0 [ 393.086572][T12235] ? tsk_fork_get_node+0x70/0x70 [ 393.091562][T12235] ? __local_bh_enable_ip+0x12e/0x1c0 [ 393.097033][T12235] rxrpc_lookup_local+0xf59/0x1550 [ 393.102238][T12235] ? rxrpc_local_dont_fragment+0x70/0x70 [ 393.107952][T12235] ? none_clear+0x10/0x10 [ 393.112351][T12235] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 393.118501][T12235] ? lockdep_hardirqs_on+0x98/0x150 [ 393.123974][T12235] ? _local_bh_enable+0xa0/0xa0 [ 393.128942][T12235] rxrpc_sendmsg+0x30a/0x5b0 [ 393.133691][T12235] ? rxrpc_getsockopt+0x150/0x150 [ 393.138785][T12235] ____sys_sendmsg+0x5bf/0x950 [ 393.143655][T12235] ? __sys_sendmsg_sock+0x30/0x30 [ 393.148751][T12235] ? __import_iovec+0x3fa/0x860 [ 393.153725][T12235] ? import_iovec+0x73/0xa0 [ 393.158391][T12235] ___sys_sendmsg+0x220/0x290 [ 393.163178][T12235] ? __sys_sendmsg+0x270/0x270 [ 393.168081][T12235] ? __lock_acquire+0x7c80/0x7c80 [ 393.173231][T12235] __se_sys_sendmsg+0x1a5/0x270 [ 393.178144][T12235] ? __x64_sys_sendmsg+0x80/0x80 [ 393.183310][T12235] ? lockdep_hardirqs_on+0x98/0x150 [ 393.188600][T12235] do_syscall_64+0x55/0xb0 [ 393.193078][T12235] ? clear_bhb_loop+0x40/0x90 [ 393.197796][T12235] ? clear_bhb_loop+0x40/0x90 [ 393.202543][T12235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.208522][T12235] RIP: 0033:0x7f946f18eec9 [ 393.213099][T12235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.232882][T12235] RSP: 002b:00007f946ff6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.241380][T12235] RAX: ffffffffffffffda RBX: 00007f946f3e5fa0 RCX: 00007f946f18eec9 [ 393.249425][T12235] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 393.257643][T12235] RBP: 00007f946ff6f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.265689][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.273718][T12235] R13: 00007f946f3e6038 R14: 00007f946f3e5fa0 R15: 00007ffeb0063d58 [ 393.281876][T12235] [ 393.452479][T12238] FAULT_INJECTION: forcing a failure. [ 393.452479][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 393.476354][T12238] CPU: 1 PID: 12238 Comm: syz.2.2184 Not tainted syzkaller #0 [ 393.483975][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.494106][T12238] Call Trace: [ 393.497438][T12238] [ 393.500434][T12238] dump_stack_lvl+0x16c/0x230 [ 393.505203][T12238] ? show_regs_print_info+0x20/0x20 [ 393.510490][T12238] ? load_image+0x3b0/0x3b0 [ 393.515182][T12238] ? __might_sleep+0xe0/0xe0 [ 393.519856][T12238] ? __lock_acquire+0x7c80/0x7c80 [ 393.525061][T12238] ? __might_sleep+0xe0/0xe0 [ 393.529754][T12238] should_fail_ex+0x39d/0x4d0 [ 393.534518][T12238] should_failslab+0x9/0x20 [ 393.539093][T12238] slab_pre_alloc_hook+0x59/0x310 [ 393.544200][T12238] kmem_cache_alloc_lru+0x4d/0x2e0 [ 393.549566][T12238] ? sock_alloc_inode+0x28/0xc0 [ 393.554501][T12238] sock_alloc_inode+0x28/0xc0 [ 393.559243][T12238] ? sockfs_init_fs_context+0xb0/0xb0 [ 393.564677][T12238] new_inode_pseudo+0x63/0x1d0 [ 393.569530][T12238] __sock_create+0x12d/0x940 [ 393.574202][T12238] ? __might_fault+0xaa/0x120 [ 393.578946][T12238] ? __might_fault+0xc6/0x120 [ 393.583889][T12238] __sys_socketpair+0x1c1/0x550 [ 393.588849][T12238] __x64_sys_socketpair+0x9b/0xb0 [ 393.593955][T12238] do_syscall_64+0x55/0xb0 [ 393.598434][T12238] ? clear_bhb_loop+0x40/0x90 [ 393.603184][T12238] ? clear_bhb_loop+0x40/0x90 [ 393.607931][T12238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.613919][T12238] RIP: 0033:0x7f918558eec9 [ 393.618406][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.638185][T12238] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 393.646700][T12238] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 393.654915][T12238] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 393.662955][T12238] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 393.670983][T12238] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 393.679021][T12238] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 393.687120][T12238] [ 393.705336][T12238] socket: no more sockets [ 393.835388][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2185'. [ 393.845060][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2185'. [ 393.856135][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2185'. [ 393.903777][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2185'. [ 395.429204][T12279] netlink: 'syz.0.2198': attribute type 21 has an invalid length. [ 395.458812][T12279] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2198'. [ 395.795130][T12284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2200'. [ 395.868621][T12286] netlink: 'syz.2.2200': attribute type 6 has an invalid length. [ 395.884630][T12287] FAULT_INJECTION: forcing a failure. [ 395.884630][T12287] name failslab, interval 1, probability 0, space 0, times 0 [ 395.939892][T12287] CPU: 0 PID: 12287 Comm: syz.0.2202 Not tainted syzkaller #0 [ 395.947475][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.957596][T12287] Call Trace: [ 395.960937][T12287] [ 395.963938][T12287] dump_stack_lvl+0x16c/0x230 [ 395.968877][T12287] ? show_regs_print_info+0x20/0x20 [ 395.974238][T12287] ? load_image+0x3b0/0x3b0 [ 395.978828][T12287] ? __might_sleep+0xe0/0xe0 [ 395.983498][T12287] ? __lock_acquire+0x7c80/0x7c80 [ 395.988617][T12287] should_fail_ex+0x39d/0x4d0 [ 395.993416][T12287] should_failslab+0x9/0x20 [ 395.997995][T12287] slab_pre_alloc_hook+0x59/0x310 [ 396.003107][T12287] ? __request_module+0x2c2/0x5b0 [ 396.008202][T12287] ? __request_module+0x2c2/0x5b0 [ 396.013295][T12287] __kmem_cache_alloc_node+0x53/0x260 [ 396.018897][T12287] ? __request_module+0x2c2/0x5b0 [ 396.024003][T12287] __kmalloc_node_track_caller+0xa2/0x230 [ 396.029850][T12287] kstrdup+0x3b/0x80 [ 396.033846][T12287] __request_module+0x2c2/0x5b0 [ 396.038809][T12287] ? module_enforce_rwx_sections+0x150/0x150 [ 396.044882][T12287] ? dev_load+0x21/0x1f0 [ 396.049235][T12287] ? bpf_lsm_capable+0x9/0x10 [ 396.054029][T12287] ? dev_load+0x21/0x1f0 [ 396.058346][T12287] dev_load+0x18b/0x1f0 [ 396.062586][T12287] dev_ioctl+0x865/0x1170 [ 396.067027][T12287] sock_ioctl+0x726/0x7a0 [ 396.071551][T12287] ? sock_poll+0x3d0/0x3d0 [ 396.076235][T12287] ? bpf_lsm_file_ioctl+0x9/0x10 [ 396.081249][T12287] ? security_file_ioctl+0x80/0xa0 [ 396.086570][T12287] ? sock_poll+0x3d0/0x3d0 [ 396.091141][T12287] __se_sys_ioctl+0xfd/0x170 [ 396.095846][T12287] do_syscall_64+0x55/0xb0 [ 396.100365][T12287] ? clear_bhb_loop+0x40/0x90 [ 396.105121][T12287] ? clear_bhb_loop+0x40/0x90 [ 396.109875][T12287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.115847][T12287] RIP: 0033:0x7fb8f8f8eec9 [ 396.120388][T12287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.140085][T12287] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.148585][T12287] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 396.156645][T12287] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 396.164685][T12287] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 396.172738][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.180778][T12287] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 396.189002][T12287] [ 397.057293][T12307] netlink: 'syz.0.2214': attribute type 3 has an invalid length. [ 397.065814][T12307] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 397.075604][T12307] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2214'. [ 400.414792][T12372] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2229'. [ 400.820680][T12384] FAULT_INJECTION: forcing a failure. [ 400.820680][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 400.839213][T12384] CPU: 0 PID: 12384 Comm: syz.0.2233 Not tainted syzkaller #0 [ 400.846751][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.856852][T12384] Call Trace: [ 400.860181][T12384] [ 400.863226][T12384] dump_stack_lvl+0x16c/0x230 [ 400.867971][T12384] ? show_regs_print_info+0x20/0x20 [ 400.873242][T12384] ? load_image+0x3b0/0x3b0 [ 400.877809][T12384] ? __might_sleep+0xe0/0xe0 [ 400.882451][T12384] ? __lock_acquire+0x7c80/0x7c80 [ 400.887524][T12384] ? rcu_is_watching+0x15/0xb0 [ 400.892360][T12384] should_fail_ex+0x39d/0x4d0 [ 400.897122][T12384] should_failslab+0x9/0x20 [ 400.901693][T12384] slab_pre_alloc_hook+0x59/0x310 [ 400.906785][T12384] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 400.912734][T12384] __kmem_cache_alloc_node+0x53/0x260 [ 400.918214][T12384] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 400.924177][T12384] kmalloc_trace+0x2a/0xe0 [ 400.928670][T12384] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 400.934472][T12384] sctp_association_new+0x15d3/0x25c0 [ 400.939929][T12384] sctp_connect_new_asoc+0x2bf/0x690 [ 400.945285][T12384] ? __sctp_connect+0xd20/0xd20 [ 400.950199][T12384] ? __local_bh_enable_ip+0x12e/0x1c0 [ 400.955644][T12384] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 400.961238][T12384] ? security_sctp_bind_connect+0x89/0xb0 [ 400.967021][T12384] sctp_sendmsg+0x155c/0x27e0 [ 400.971742][T12384] ? sctp_getsockopt+0xb60/0xb60 [ 400.976707][T12384] ? perf_trace_lock+0xf7/0x380 [ 400.981588][T12384] ? aa_sk_perm+0x7fc/0x930 [ 400.986169][T12384] ? aa_af_perm+0x2b0/0x2b0 [ 400.990694][T12384] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 400.997237][T12384] ? sock_rps_record_flow+0x19/0x400 [ 401.002659][T12384] ? inet_send_prepare+0x260/0x260 [ 401.007795][T12384] ? inet_sendmsg+0xe9/0x2f0 [ 401.012431][T12384] ? inet_send_prepare+0x260/0x260 [ 401.017588][T12384] ____sys_sendmsg+0x5bf/0x950 [ 401.022404][T12384] ? __asan_memset+0x22/0x40 [ 401.027024][T12384] ? __sys_sendmsg_sock+0x30/0x30 [ 401.032077][T12384] ? __import_iovec+0x5f2/0x860 [ 401.036966][T12384] ? import_iovec+0x73/0xa0 [ 401.041504][T12384] ___sys_sendmsg+0x220/0x290 [ 401.046221][T12384] ? __sys_sendmsg+0x270/0x270 [ 401.051030][T12384] ? __lock_acquire+0x7c80/0x7c80 [ 401.056135][T12384] __se_sys_sendmsg+0x1a5/0x270 [ 401.061038][T12384] ? __x64_sys_sendmsg+0x80/0x80 [ 401.066018][T12384] ? lockdep_hardirqs_on+0x98/0x150 [ 401.071285][T12384] do_syscall_64+0x55/0xb0 [ 401.075743][T12384] ? clear_bhb_loop+0x40/0x90 [ 401.080461][T12384] ? clear_bhb_loop+0x40/0x90 [ 401.085172][T12384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.091097][T12384] RIP: 0033:0x7fb8f8f8eec9 [ 401.095546][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.115178][T12384] RSP: 002b:00007fb8f9e7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.123641][T12384] RAX: ffffffffffffffda RBX: 00007fb8f91e5fa0 RCX: 00007fb8f8f8eec9 [ 401.131629][T12384] RDX: 0000000020000054 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 401.139797][T12384] RBP: 00007fb8f9e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.147787][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.155774][T12384] R13: 00007fb8f91e6038 R14: 00007fb8f91e5fa0 R15: 00007ffeb2bc00e8 [ 401.163868][T12384] [ 401.462179][T12390] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 401.478629][T12390] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2234'. [ 402.483506][T12408] netlink: 'syz.0.2240': attribute type 2 has an invalid length. [ 404.333287][T12445] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2252'. [ 406.651757][T12482] netlink: 'syz.0.2263': attribute type 39 has an invalid length. [ 406.680994][T12482] netlink: 'syz.0.2263': attribute type 10 has an invalid length. [ 406.699581][T12482] netlink: 'syz.0.2263': attribute type 10 has an invalid length. [ 406.848243][T12488] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2263'. [ 407.111869][T12482] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2263'. [ 407.652382][T12503] team0: mtu greater than device maximum [ 410.364869][T12562] FAULT_INJECTION: forcing a failure. [ 410.364869][T12562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.394912][T12562] CPU: 1 PID: 12562 Comm: syz.2.2292 Not tainted syzkaller #0 [ 410.402477][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.412585][T12562] Call Trace: [ 410.415916][T12562] [ 410.418892][T12562] dump_stack_lvl+0x16c/0x230 [ 410.423628][T12562] ? show_regs_print_info+0x20/0x20 [ 410.428880][T12562] ? load_image+0x3b0/0x3b0 [ 410.433429][T12562] ? __might_fault+0xaa/0x120 [ 410.438164][T12562] ? __lock_acquire+0x7c80/0x7c80 [ 410.443315][T12562] should_fail_ex+0x39d/0x4d0 [ 410.448064][T12562] _copy_from_user+0x2f/0xe0 [ 410.452714][T12562] csum_and_copy_from_iter+0x476/0x1450 [ 410.458337][T12562] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 410.464046][T12562] ? mark_lock+0x94/0x320 [ 410.468430][T12562] ? __lock_acquire+0x1334/0x7c80 [ 410.473510][T12562] ip_generic_getfrag+0x145/0x2d0 [ 410.478592][T12562] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 410.483501][T12562] ? skb_put+0x11b/0x210 [ 410.487799][T12562] __ip_append_data+0x1740/0x3bd0 [ 410.492940][T12562] ? __lock_acquire+0x1260/0x7c80 [ 410.498039][T12562] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 410.502966][T12562] ? ip_setup_cork+0x860/0x860 [ 410.507805][T12562] ? __local_bh_enable_ip+0x12e/0x1c0 [ 410.513222][T12562] ? lockdep_hardirqs_on+0x98/0x150 [ 410.518459][T12562] ip_append_data+0x10d/0x180 [ 410.523170][T12562] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 410.528068][T12562] udp_sendmsg+0x565/0x2380 [ 410.532604][T12562] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 410.537484][T12562] ? udp_cmsg_send+0x350/0x350 [ 410.542269][T12562] ? __lock_acquire+0x1260/0x7c80 [ 410.547343][T12562] ? aa_af_perm+0x2b0/0x2b0 [ 410.551868][T12562] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 410.558404][T12562] ? sock_rps_record_flow+0x19/0x400 [ 410.563713][T12562] ? inet_send_prepare+0x260/0x260 [ 410.568847][T12562] ? inet_sendmsg+0x7c/0x2f0 [ 410.573543][T12562] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.578848][T12562] ? security_socket_sendmsg+0x80/0xa0 [ 410.584322][T12562] ? inet_send_prepare+0x260/0x260 [ 410.589447][T12562] ____sys_sendmsg+0x5bf/0x950 [ 410.594241][T12562] ? __asan_memset+0x22/0x40 [ 410.598853][T12562] ? __sys_sendmsg_sock+0x30/0x30 [ 410.603898][T12562] ? __import_iovec+0x3fa/0x860 [ 410.608782][T12562] ? import_iovec+0x73/0xa0 [ 410.613316][T12562] ___sys_sendmsg+0x220/0x290 [ 410.618029][T12562] ? __sys_sendmsg+0x270/0x270 [ 410.622839][T12562] ? __lock_acquire+0x7c80/0x7c80 [ 410.627909][T12562] __se_sys_sendmsg+0x1a5/0x270 [ 410.632789][T12562] ? __x64_sys_sendmsg+0x80/0x80 [ 410.637761][T12562] ? lockdep_hardirqs_on+0x98/0x150 [ 410.643074][T12562] do_syscall_64+0x55/0xb0 [ 410.647509][T12562] ? clear_bhb_loop+0x40/0x90 [ 410.652200][T12562] ? clear_bhb_loop+0x40/0x90 [ 410.656904][T12562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.662817][T12562] RIP: 0033:0x7f918558eec9 [ 410.667250][T12562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.686876][T12562] RSP: 002b:00007f9186391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.695398][T12562] RAX: ffffffffffffffda RBX: 00007f91857e5fa0 RCX: 00007f918558eec9 [ 410.703474][T12562] RDX: 00000000040e4804 RSI: 0000200000000300 RDI: 0000000000000003 [ 410.711464][T12562] RBP: 00007f9186391090 R08: 0000000000000000 R09: 0000000000000000 [ 410.719453][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.727444][T12562] R13: 00007f91857e6038 R14: 00007f91857e5fa0 R15: 00007ffda6179288 [ 410.735450][T12562] [ 410.917556][T12567] netlink: 'syz.1.2295': attribute type 3 has an invalid length. [ 410.930509][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2295'. [ 411.077092][T12570] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2296'. [ 411.107156][T12570] netlink: 'syz.3.2296': attribute type 10 has an invalid length. [ 411.125603][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2296'. [ 411.157308][T12570] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 411.278336][T12577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2299'. [ 411.732376][T12585] netlink: 'syz.0.2302': attribute type 4 has an invalid length. [ 411.848187][T12585] netlink: 'syz.0.2302': attribute type 3 has an invalid length. [ 411.883126][T12585] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.2302'. [ 412.841202][T12607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2308'. [ 412.894279][T12607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2308'. [ 412.924756][T12605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2308'. [ 412.944026][T12610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2308'. [ 413.148781][T12619] FAULT_INJECTION: forcing a failure. [ 413.148781][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.184543][T12619] CPU: 1 PID: 12619 Comm: syz.3.2312 Not tainted syzkaller #0 [ 413.192133][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.202237][T12619] Call Trace: [ 413.205554][T12619] [ 413.208508][T12619] dump_stack_lvl+0x16c/0x230 [ 413.213269][T12619] ? show_regs_print_info+0x20/0x20 [ 413.218506][T12619] ? load_image+0x3b0/0x3b0 [ 413.223060][T12619] ? __might_fault+0xaa/0x120 [ 413.227820][T12619] ? __lock_acquire+0x7c80/0x7c80 [ 413.232998][T12619] should_fail_ex+0x39d/0x4d0 [ 413.237744][T12619] _copy_from_user+0x2f/0xe0 [ 413.242367][T12619] __sys_bpf+0x1e9/0x800 [ 413.246657][T12619] ? bpf_link_show_fdinfo+0x350/0x350 [ 413.252100][T12619] ? lock_chain_count+0x20/0x20 [ 413.256996][T12619] __x64_sys_bpf+0x7c/0x90 [ 413.261470][T12619] do_syscall_64+0x55/0xb0 [ 413.265935][T12619] ? clear_bhb_loop+0x40/0x90 [ 413.270641][T12619] ? clear_bhb_loop+0x40/0x90 [ 413.275353][T12619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.281274][T12619] RIP: 0033:0x7f2099f8eec9 [ 413.285738][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.305491][T12619] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.314202][T12619] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 413.322197][T12619] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 413.330282][T12619] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 413.338480][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.346931][T12619] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 413.355055][T12619] [ 415.278413][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.291595][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.307240][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.320128][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.330205][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.341047][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.501157][T12669] FAULT_INJECTION: forcing a failure. [ 415.501157][T12669] name failslab, interval 1, probability 0, space 0, times 0 [ 415.521368][T12669] CPU: 0 PID: 12669 Comm: syz.3.2329 Not tainted syzkaller #0 [ 415.528925][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.539003][T12669] Call Trace: [ 415.542429][T12669] [ 415.545424][T12669] dump_stack_lvl+0x16c/0x230 [ 415.550134][T12669] ? show_regs_print_info+0x20/0x20 [ 415.555372][T12669] ? load_image+0x3b0/0x3b0 [ 415.559934][T12669] ? __lock_acquire+0x7c80/0x7c80 [ 415.564983][T12669] ? __mutex_trylock_common+0x153/0x250 [ 415.570606][T12669] should_fail_ex+0x39d/0x4d0 [ 415.575409][T12669] should_failslab+0x9/0x20 [ 415.579944][T12669] slab_pre_alloc_hook+0x59/0x310 [ 415.584993][T12669] ? __mutex_lock+0x304/0xcc0 [ 415.589707][T12669] ? tracepoint_add_func+0x307/0x9a0 [ 415.595034][T12669] ? tracepoint_add_func+0x307/0x9a0 [ 415.600342][T12669] __kmem_cache_alloc_node+0x53/0x260 [ 415.605758][T12669] ? tracepoint_add_func+0x307/0x9a0 [ 415.611075][T12669] __kmalloc+0xa4/0x240 [ 415.615259][T12669] ? perf_trace_tlb_flush+0x350/0x350 [ 415.620672][T12669] tracepoint_add_func+0x307/0x9a0 [ 415.625849][T12669] ? perf_trace_tlb_flush+0x350/0x350 [ 415.631272][T12669] tracepoint_probe_register_prio_may_exist+0x60/0xa0 [ 415.638140][T12669] ? perf_trace_tlb_flush+0x350/0x350 [ 415.643814][T12669] bpf_raw_tp_link_attach+0x3e9/0x560 [ 415.649229][T12669] ? bpf_insn_prepare_dump+0x840/0x840 [ 415.654761][T12669] bpf_raw_tracepoint_open+0x197/0x210 [ 415.660246][T12669] __sys_bpf+0x364/0x800 [ 415.664520][T12669] ? bpf_link_show_fdinfo+0x350/0x350 [ 415.669950][T12669] ? lock_chain_count+0x20/0x20 [ 415.674859][T12669] __x64_sys_bpf+0x7c/0x90 [ 415.679493][T12669] do_syscall_64+0x55/0xb0 [ 415.683963][T12669] ? clear_bhb_loop+0x40/0x90 [ 415.688683][T12669] ? clear_bhb_loop+0x40/0x90 [ 415.693488][T12669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.699398][T12669] RIP: 0033:0x7f2099f8eec9 [ 415.703833][T12669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.723548][T12669] RSP: 002b:00007f209aeb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.732001][T12669] RAX: ffffffffffffffda RBX: 00007f209a1e5fa0 RCX: 00007f2099f8eec9 [ 415.740088][T12669] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 415.748147][T12669] RBP: 00007f209aeb9090 R08: 0000000000000000 R09: 0000000000000000 [ 415.756157][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.764165][T12669] R13: 00007f209a1e6038 R14: 00007f209a1e5fa0 R15: 00007ffdb722ccc8 [ 415.772281][T12669] [ 416.059177][T12662] chnl_net:caif_netlink_parms(): no params data found [ 416.254629][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.261916][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.284694][T12662] bridge_slave_0: entered allmulticast mode [ 416.308357][T12662] bridge_slave_0: entered promiscuous mode [ 416.320372][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.328451][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.336047][T12662] bridge_slave_1: entered allmulticast mode [ 416.343916][T12662] bridge_slave_1: entered promiscuous mode [ 416.561585][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.616099][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.754694][T12662] team0: Port device team_slave_0 added [ 416.787525][T12662] team0: Port device team_slave_1 added [ 416.897874][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.913529][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.963124][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.028810][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.043216][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.103038][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.210562][T12662] hsr_slave_0: entered promiscuous mode [ 417.222396][T12662] hsr_slave_1: entered promiscuous mode [ 417.327337][T12701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.383345][ T5790] Bluetooth: hci0: command tx timeout [ 417.729369][T12662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.978306][T12662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.162220][T12662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.618579][T12662] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 418.633075][T12662] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 418.652124][T12662] team0: Port device netdevsim0 removed [ 418.661240][T12662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.181504][T12730] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 419.244028][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.463184][ T5790] Bluetooth: hci0: command tx timeout [ 420.968984][T12662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.998340][T12662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.014846][T12662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.080240][T12662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.462070][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.501566][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.531140][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.538515][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.549097][ T5790] Bluetooth: hci0: command tx timeout [ 421.593724][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.600967][T11619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.956976][T12779] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 422.095950][T12779] bond0: (slave wlan1): Releasing backup interface [ 422.232682][T12779] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 422.253110][T12779] team0: Port device wlan1 added [ 422.314866][T12777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.337323][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.598430][T12662] veth0_vlan: entered promiscuous mode [ 422.957663][T12662] veth1_vlan: entered promiscuous mode [ 423.147851][T12662] veth0_macvtap: entered promiscuous mode [ 423.182265][T12662] veth1_macvtap: entered promiscuous mode [ 423.271301][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.310330][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.337757][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.348841][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.363031][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.379327][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.400245][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.449353][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.493493][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.545007][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.586290][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.601005][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.613026][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.623508][ T5790] Bluetooth: hci0: command tx timeout [ 423.639863][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.933938][T12662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.942837][T12662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.954805][T12662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.964659][T12662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.164013][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.174416][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.261720][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.277113][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.639039][T12816] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 425.166060][T12816] team0: Port device wlan1 added [ 425.308770][T12815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.671528][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.683881][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.692869][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.703347][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.724083][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 425.731948][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.013656][T12840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.099625][T12844] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 426.137145][T12844] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 426.161356][T12845] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 426.202241][T12847] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 426.231099][T12844] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 426.560307][T12829] chnl_net:caif_netlink_parms(): no params data found [ 426.861110][T12867] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 427.028088][T12867] team0: Port device wlan1 added [ 427.109416][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.118560][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.127228][T12829] bridge_slave_0: entered allmulticast mode [ 427.139434][T12829] bridge_slave_0: entered promiscuous mode [ 427.166878][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.175008][T12863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.186106][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.195733][T12829] bridge_slave_1: entered allmulticast mode [ 427.204021][T12829] bridge_slave_1: entered promiscuous mode [ 427.276450][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.296995][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.354139][T12878] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 427.361961][T12878] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2393'. [ 427.421345][T12829] team0: Port device team_slave_0 added [ 427.447644][T12829] team0: Port device team_slave_1 added [ 427.539595][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.555981][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.594125][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.644448][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.651487][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.687218][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.783290][ T5794] Bluetooth: hci3: command tx timeout [ 427.891439][T12829] hsr_slave_0: entered promiscuous mode [ 427.899311][T12829] hsr_slave_1: entered promiscuous mode [ 427.906420][T12829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.915180][T12829] Cannot create hsr debugfs directory [ 428.040883][T12890] vxcan1: entered allmulticast mode [ 428.433150][T12829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.571229][T12829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.709978][T12829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.848955][T12829] team0: Port device ÿÿÿÿÿÿ removed [ 428.872067][T12829] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.195721][T12916] FAULT_INJECTION: forcing a failure. [ 429.195721][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 429.209583][T12916] CPU: 0 PID: 12916 Comm: syz.1.2405 Not tainted syzkaller #0 [ 429.217113][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.227220][T12916] Call Trace: [ 429.230537][T12916] [ 429.233514][T12916] dump_stack_lvl+0x16c/0x230 [ 429.238246][T12916] ? show_regs_print_info+0x20/0x20 [ 429.243499][T12916] ? load_image+0x3b0/0x3b0 [ 429.248047][T12916] ? __might_sleep+0xe0/0xe0 [ 429.252678][T12916] ? __lock_acquire+0x7c80/0x7c80 [ 429.257762][T12916] ? perf_trace_lock+0xf7/0x380 [ 429.262687][T12916] should_fail_ex+0x39d/0x4d0 [ 429.267433][T12916] should_failslab+0x9/0x20 [ 429.271997][T12916] slab_pre_alloc_hook+0x59/0x310 [ 429.277095][T12916] ? __get_vm_area_node+0x125/0x370 [ 429.282356][T12916] __kmem_cache_alloc_node+0x53/0x260 [ 429.287794][T12916] ? __get_vm_area_node+0x125/0x370 [ 429.293052][T12916] kmalloc_node_trace+0x26/0xe0 [ 429.298065][T12916] __get_vm_area_node+0x125/0x370 [ 429.303167][T12916] __vmalloc_node_range+0x36e/0x1320 [ 429.308504][T12916] ? netlink_sendmsg+0x5f3/0xbe0 [ 429.313492][T12916] ? netlink_insert+0x106a/0x1370 [ 429.318598][T12916] ? netlink_insert+0x2b3/0x1370 [ 429.323604][T12916] ? netlink_data_ready+0x10/0x10 [ 429.328761][T12916] ? free_vm_area+0x50/0x50 [ 429.333320][T12916] ? netlink_sendmsg+0x5f3/0xbe0 [ 429.338298][T12916] vmalloc+0x79/0x90 [ 429.342218][T12916] ? netlink_sendmsg+0x5f3/0xbe0 [ 429.347181][T12916] netlink_sendmsg+0x5f3/0xbe0 [ 429.351978][T12916] ? netlink_getsockopt+0x580/0x580 [ 429.357202][T12916] ? aa_sock_msg_perm+0x94/0x150 [ 429.362175][T12916] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.367660][T12916] ? security_socket_sendmsg+0x80/0xa0 [ 429.373168][T12916] sock_write_iter+0x2bb/0x3f0 [ 429.377966][T12916] ? sock_read_iter+0x3b0/0x3b0 [ 429.382932][T12916] ? perf_trace_lock+0xf7/0x380 [ 429.387826][T12916] ? common_file_perm+0x198/0x1f0 [ 429.392918][T12916] vfs_write+0x43b/0x940 [ 429.397196][T12916] ? file_end_write+0x250/0x250 [ 429.402079][T12916] ? __fget_files+0x44a/0x4d0 [ 429.406785][T12916] ? __fdget_pos+0x1d8/0x330 [ 429.411397][T12916] ? ksys_write+0x75/0x250 [ 429.415840][T12916] ksys_write+0x147/0x250 [ 429.420202][T12916] ? __ia32_sys_read+0x90/0x90 [ 429.424995][T12916] ? trace_sys_enter+0x1f/0x80 [ 429.429786][T12916] do_syscall_64+0x55/0xb0 [ 429.434232][T12916] ? clear_bhb_loop+0x40/0x90 [ 429.438983][T12916] ? clear_bhb_loop+0x40/0x90 [ 429.443771][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.449697][T12916] RIP: 0033:0x7f946f18eec9 [ 429.454137][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.474045][T12916] RSP: 002b:00007f946ff6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.482486][T12916] RAX: ffffffffffffffda RBX: 00007f946f3e5fa0 RCX: 00007f946f18eec9 [ 429.490482][T12916] RDX: 000000000000fe33 RSI: 0000200000000100 RDI: 0000000000000007 [ 429.498476][T12916] RBP: 00007f946ff6f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.506468][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.514568][T12916] R13: 00007f946f3e6038 R14: 00007f946f3e5fa0 R15: 00007ffeb0063d58 [ 429.522573][T12916] [ 429.554267][T12916] syz.1.2405: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 429.604790][T12916] CPU: 1 PID: 12916 Comm: syz.1.2405 Not tainted syzkaller #0 [ 429.612390][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.622516][T12916] Call Trace: [ 429.625842][T12916] [ 429.628828][T12916] dump_stack_lvl+0x16c/0x230 [ 429.633573][T12916] ? show_regs_print_info+0x20/0x20 [ 429.638829][T12916] ? load_image+0x3b0/0x3b0 [ 429.643407][T12916] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 429.649903][T12916] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 429.656466][T12916] warn_alloc+0x210/0x300 [ 429.660888][T12916] ? __get_vm_area_node+0x125/0x370 [ 429.666158][T12916] ? zone_watermark_ok_safe+0x230/0x230 [ 429.671766][T12916] ? rcu_is_watching+0x15/0xb0 [ 429.676613][T12916] ? __get_vm_area_node+0x356/0x370 [ 429.681889][T12916] __vmalloc_node_range+0x393/0x1320 [ 429.687231][T12916] ? netlink_insert+0x106a/0x1370 [ 429.692345][T12916] ? netlink_insert+0x2b3/0x1370 [ 429.697343][T12916] ? netlink_data_ready+0x10/0x10 [ 429.702428][T12916] ? free_vm_area+0x50/0x50 [ 429.707015][T12916] ? netlink_sendmsg+0x5f3/0xbe0 [ 429.712026][T12916] vmalloc+0x79/0x90 [ 429.715991][T12916] ? netlink_sendmsg+0x5f3/0xbe0 [ 429.720998][T12916] netlink_sendmsg+0x5f3/0xbe0 [ 429.725835][T12916] ? netlink_getsockopt+0x580/0x580 [ 429.731105][T12916] ? aa_sock_msg_perm+0x94/0x150 [ 429.736112][T12916] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.741455][T12916] ? security_socket_sendmsg+0x80/0xa0 [ 429.746976][T12916] sock_write_iter+0x2bb/0x3f0 [ 429.751814][T12916] ? sock_read_iter+0x3b0/0x3b0 [ 429.756726][T12916] ? perf_trace_lock+0xf7/0x380 [ 429.761666][T12916] ? common_file_perm+0x198/0x1f0 [ 429.766762][T12916] vfs_write+0x43b/0x940 [ 429.771120][T12916] ? file_end_write+0x250/0x250 [ 429.776136][T12916] ? __fget_files+0x44a/0x4d0 [ 429.781326][T12916] ? __fdget_pos+0x1d8/0x330 [ 429.785967][T12916] ? ksys_write+0x75/0x250 [ 429.790452][T12916] ksys_write+0x147/0x250 [ 429.795030][T12916] ? __ia32_sys_read+0x90/0x90 [ 429.799960][T12916] ? trace_sys_enter+0x1f/0x80 [ 429.804788][T12916] do_syscall_64+0x55/0xb0 [ 429.809255][T12916] ? clear_bhb_loop+0x40/0x90 [ 429.813984][T12916] ? clear_bhb_loop+0x40/0x90 [ 429.818712][T12916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.824656][T12916] RIP: 0033:0x7f946f18eec9 [ 429.829211][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.848874][T12916] RSP: 002b:00007f946ff6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.857348][T12916] RAX: ffffffffffffffda RBX: 00007f946f3e5fa0 RCX: 00007f946f18eec9 [ 429.865365][T12916] RDX: 000000000000fe33 RSI: 0000200000000100 RDI: 0000000000000007 [ 429.873387][T12916] RBP: 00007f946ff6f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.881406][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.889417][T12916] R13: 00007f946f3e6038 R14: 00007f946f3e5fa0 R15: 00007ffeb0063d58 [ 429.897470][T12916] [ 429.925583][T12916] Mem-Info: [ 429.928787][T12916] active_anon:10202 inactive_anon:0 isolated_anon:0 [ 429.928787][T12916] active_file:17603 inactive_file:40013 isolated_file:0 [ 429.928787][T12916] unevictable:768 dirty:151 writeback:0 [ 429.928787][T12916] slab_reclaimable:10549 slab_unreclaimable:95219 [ 429.928787][T12916] mapped:24868 shmem:1361 pagetables:514 [ 429.928787][T12916] sec_pagetables:0 bounce:0 [ 429.928787][T12916] kernel_misc_reclaimable:0 [ 429.928787][T12916] free:1343174 free_pcp:7242 free_cma:0 [ 429.951330][ T5794] Bluetooth: hci3: command tx timeout [ 429.986325][T12916] Node 0 active_anon:40808kB inactive_anon:0kB active_file:70412kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99472kB dirty:600kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2056kB sec_pagetables:0kB all_unreclaimable? no [ 430.019611][T12916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 430.053175][T12916] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.081064][T12916] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 430.088638][T12916] Node 0 DMA32 free:1460188kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:40760kB inactive_anon:0kB active_file:70412kB inactive_file:158536kB unevictable:1536kB writepending:596kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:11196kB local_pcp:4592kB free_cma:0kB [ 430.123917][T12916] lowmem_reserve[]: 0 0 1 1 1 [ 430.128753][T12916] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 430.161476][T12916] lowmem_reserve[]: 0 0 0 0 0 [ 430.167215][T12916] Node 1 Normal free:3897140kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:5184kB free_cma:0kB [ 430.242823][T12916] lowmem_reserve[]: 0 0 0 0 0 [ 430.247846][T12916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 430.272846][T12916] Node 0 DMA32: 3*4kB (ME) 2*8kB (ME) 478*16kB (UME) 525*32kB (M) 291*64kB (UM) 129*128kB (UME) 33*256kB (UME) 19*512kB (UME) 12*1024kB (UME) 11*2048kB (UM) 329*4096kB (UM) = 1460188kB [ 430.298733][T12916] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 430.331411][T12916] Node 1 Normal: 253*4kB (UME) 68*8kB (UME) 30*16kB (UME) 128*32kB (UME) 35*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3897140kB [ 430.379146][T12916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.390412][T12916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.415828][T12916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.440300][T12916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.483119][T12916] 58977 total pagecache pages [ 430.506149][T12916] 0 pages in swap cache [ 430.523256][T12916] Free swap = 124996kB [ 430.532678][T12916] Total swap = 124996kB [ 430.540756][T12916] 2097051 pages RAM [ 430.550948][T12916] 0 pages HighMem/MovableOnly [ 430.559691][T12916] 416136 pages reserved [ 430.593243][T12916] 0 pages cma reserved [ 430.644718][T12928] bridge_slave_0: left allmulticast mode [ 430.699397][T12929] bridge_slave_0: entered promiscuous mode [ 430.706621][T12929] bridge_slave_0: entered allmulticast mode [ 430.906184][T12829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.006993][T12829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.091422][T12829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.119910][T12829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.739097][ T3473] [ 431.741500][ T3473] ====================================================== [ 431.748549][ T3473] WARNING: possible circular locking dependency detected [ 431.755611][ T3473] syzkaller #0 Not tainted [ 431.760061][ T3473] ------------------------------------------------------ [ 431.767164][ T3473] kworker/u4:9/3473 is trying to acquire lock: [ 431.773357][ T3473] ffff888061f04d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 431.782998][ T3473] [ 431.782998][ T3473] but task is already holding lock: [ 431.790382][ T3473] ffff88807d228768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 431.800837][ T3473] [ 431.800837][ T3473] which lock already depends on the new lock. [ 431.800837][ T3473] [ 431.811301][ T3473] [ 431.811301][ T3473] the existing dependency chain (in reverse order) is: [ 431.820320][ T3473] [ 431.820320][ T3473] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 431.828154][ T3473] __mutex_lock+0x129/0xcc0 [ 431.833307][ T3473] ieee80211_open+0x144/0x200 [ 431.838540][ T3473] __dev_open+0x2bc/0x430 [ 431.843406][ T3473] dev_open+0xab/0x170 [ 431.848039][ T3473] team_add_slave+0xae7/0x2660 [ 431.853355][ T3473] do_setlink+0xe14/0x3fb0 [ 431.858310][ T3473] rtnl_newlink+0x175b/0x2020 [ 431.863554][ T3473] rtnetlink_rcv_msg+0x7c7/0xf10 [ 431.869040][ T3473] netlink_rcv_skb+0x216/0x480 [ 431.874352][ T3473] netlink_unicast+0x751/0x8d0 [ 431.879683][ T3473] netlink_sendmsg+0x8c1/0xbe0 [ 431.885013][ T3473] ____sys_sendmsg+0x5bf/0x950 [ 431.890319][ T3473] ___sys_sendmsg+0x220/0x290 [ 431.895546][ T3473] __se_sys_sendmsg+0x1a5/0x270 [ 431.900974][ T3473] do_syscall_64+0x55/0xb0 [ 431.906055][ T3473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.912506][ T3473] [ 431.912506][ T3473] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 431.920702][ T3473] __lock_acquire+0x2ddb/0x7c80 [ 431.926099][ T3473] lock_acquire+0x197/0x410 [ 431.931172][ T3473] __mutex_lock+0x129/0xcc0 [ 431.936234][ T3473] team_del_slave+0x32/0x1c0 [ 431.941358][ T3473] team_device_event+0x28d/0xa20 [ 431.946849][ T3473] notifier_call_chain+0x197/0x390 [ 431.952520][ T3473] unregister_netdevice_many_notify+0xf36/0x1810 [ 431.959417][ T3473] unregister_netdevice_queue+0x324/0x360 [ 431.965679][ T3473] _cfg80211_unregister_wdev+0x16b/0x580 [ 431.971858][ T3473] ieee80211_remove_interfaces+0x496/0x680 [ 431.978237][ T3473] ieee80211_unregister_hw+0x5d/0x2a0 [ 431.984262][ T3473] mac80211_hwsim_del_radio+0x274/0x450 [ 431.990554][ T3473] hwsim_exit_net+0x585/0x640 [ 431.995789][ T3473] cleanup_net+0x6f4/0xb90 [ 432.000797][ T3473] process_scheduled_works+0xa45/0x15b0 [ 432.006905][ T3473] worker_thread+0xa55/0xfc0 [ 432.012046][ T3473] kthread+0x2fa/0x390 [ 432.016673][ T3473] ret_from_fork+0x48/0x80 [ 432.021672][ T3473] ret_from_fork_asm+0x11/0x20 [ 432.026973][ T3473] [ 432.026973][ T3473] other info that might help us debug this: [ 432.026973][ T3473] [ 432.037211][ T3473] Possible unsafe locking scenario: [ 432.037211][ T3473] [ 432.043516][ T5794] Bluetooth: hci3: command tx timeout [ 432.044657][ T3473] CPU0 CPU1 [ 432.044664][ T3473] ---- ---- [ 432.044670][ T3473] lock(&rdev->wiphy.mtx); [ 432.065381][ T3473] lock(team->team_lock_key#3); [ 432.072865][ T3473] lock(&rdev->wiphy.mtx); [ 432.079946][ T3473] lock(team->team_lock_key#3); [ 432.085015][ T3473] [ 432.085015][ T3473] *** DEADLOCK *** [ 432.085015][ T3473] [ 432.093268][ T3473] 5 locks held by kworker/u4:9/3473: [ 432.098557][ T3473] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 432.109466][ T3473] #1: ffffc9000c997d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 432.120041][ T3473] #2: ffffffff8dfae710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 432.129459][ T3473] #3: ffffffff8dfbb548 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 432.139341][ T3473] #4: ffff88807d228768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 432.150154][ T3473] [ 432.150154][ T3473] stack backtrace: [ 432.156052][ T3473] CPU: 0 PID: 3473 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 432.163601][ T3473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.173668][ T3473] Workqueue: netns cleanup_net [ 432.178472][ T3473] Call Trace: [ 432.181769][ T3473] [ 432.184724][ T3473] dump_stack_lvl+0x16c/0x230 [ 432.189427][ T3473] ? load_image+0x3b0/0x3b0 [ 432.193975][ T3473] ? show_regs_print_info+0x20/0x20 [ 432.199195][ T3473] ? print_circular_bug+0x12b/0x1a0 [ 432.204410][ T3473] check_noncircular+0x2bd/0x3c0 [ 432.209362][ T3473] ? check_path+0x40/0x40 [ 432.213706][ T3473] ? print_deadlock_bug+0x5d0/0x5d0 [ 432.218916][ T3473] ? lockdep_lock+0xe0/0x220 [ 432.223525][ T3473] ? _find_first_zero_bit+0xd3/0x100 [ 432.228834][ T3473] __lock_acquire+0x2ddb/0x7c80 [ 432.233715][ T3473] ? verify_lock_unused+0x140/0x140 [ 432.238934][ T3473] ? verify_lock_unused+0x140/0x140 [ 432.244150][ T3473] lock_acquire+0x197/0x410 [ 432.248930][ T3473] ? team_del_slave+0x32/0x1c0 [ 432.253708][ T3473] ? __might_sleep+0xe0/0xe0 [ 432.258336][ T3473] ? read_lock_is_recursive+0x20/0x20 [ 432.263740][ T3473] __mutex_lock+0x129/0xcc0 [ 432.268274][ T3473] ? team_del_slave+0x32/0x1c0 [ 432.273085][ T3473] ? __lock_acquire+0x7c80/0x7c80 [ 432.278124][ T3473] ? rcu_is_watching+0x15/0xb0 [ 432.282910][ T3473] ? trace_contention_end+0x39/0xe0 [ 432.288315][ T3473] ? __mutex_lock+0x304/0xcc0 [ 432.293015][ T3473] ? team_del_slave+0x32/0x1c0 [ 432.297833][ T3473] ? mutex_lock_nested+0x20/0x20 [ 432.302788][ T3473] ? bond_netdev_event+0xe1/0xef0 [ 432.307856][ T3473] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 432.313640][ T3473] ? bond_ipsec_offload_ok+0x410/0x410 [ 432.319128][ T3473] team_del_slave+0x32/0x1c0 [ 432.323748][ T3473] team_device_event+0x28d/0xa20 [ 432.328713][ T3473] notifier_call_chain+0x197/0x390 [ 432.333850][ T3473] unregister_netdevice_many_notify+0xf36/0x1810 [ 432.340222][ T3473] ? lock_chain_count+0x20/0x20 [ 432.345097][ T3473] ? unregister_netdevice_many+0x20/0x20 [ 432.350848][ T3473] ? kernfs_remove_by_name_ns+0x117/0x150 [ 432.356584][ T3473] ? __lock_acquire+0x7c80/0x7c80 [ 432.361822][ T3473] unregister_netdevice_queue+0x324/0x360 [ 432.367564][ T3473] ? list_netdevice+0x730/0x730 [ 432.372434][ T3473] ? kernfs_remove_by_name_ns+0x117/0x150 [ 432.378173][ T3473] _cfg80211_unregister_wdev+0x16b/0x580 [ 432.383851][ T3473] ieee80211_remove_interfaces+0x496/0x680 [ 432.389678][ T3473] ? ieee80211_do_stop+0x1db0/0x1db0 [ 432.395074][ T3473] ? rcu_is_watching+0x15/0xb0 [ 432.399864][ T3473] ieee80211_unregister_hw+0x5d/0x2a0 [ 432.405260][ T3473] mac80211_hwsim_del_radio+0x274/0x450 [ 432.410841][ T3473] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 432.416577][ T3473] hwsim_exit_net+0x585/0x640 [ 432.421286][ T3473] ? hwsim_init_net+0x90/0x90 [ 432.425995][ T3473] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 432.431821][ T3473] cleanup_net+0x6f4/0xb90 [ 432.436280][ T3473] ? ops_free_list+0x3b0/0x3b0 [ 432.441066][ T3473] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.446277][ T3473] ? process_scheduled_works+0x957/0x15b0 [ 432.452012][ T3473] ? process_scheduled_works+0x957/0x15b0 [ 432.457747][ T3473] process_scheduled_works+0xa45/0x15b0 [ 432.463327][ T3473] ? assign_work+0x400/0x400 [ 432.468034][ T3473] ? assign_work+0x39e/0x400 [ 432.472650][ T3473] worker_thread+0xa55/0xfc0 [ 432.477276][ T3473] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 432.483205][ T3473] ? _raw_spin_unlock+0x40/0x40 [ 432.488065][ T3473] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 432.494006][ T3473] kthread+0x2fa/0x390 [ 432.498096][ T3473] ? pr_cont_work+0x560/0x560 [ 432.502787][ T3473] ? kthread_blkcg+0xd0/0xd0 [ 432.507446][ T3473] ret_from_fork+0x48/0x80 [ 432.511903][ T3473] ? kthread_blkcg+0xd0/0xd0 [ 432.516501][ T3473] ret_from_fork_asm+0x11/0x20 [ 432.521292][ T3473] [ 432.538517][ T3473] team0: Port device wlan1 removed [ 432.608471][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.639366][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.654576][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.661749][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.676694][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.683921][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.839459][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.881719][T12829] veth0_vlan: entered promiscuous mode [ 432.894288][T12829] veth1_vlan: entered promiscuous mode [ 432.922225][T12829] veth0_macvtap: entered promiscuous mode [ 432.932345][T12829] veth1_macvtap: entered promiscuous mode [ 432.949965][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.960502][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.972073][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.982746][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.993663][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.004241][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.014517][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.025123][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.036570][T12829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.050350][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.061321][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.071256][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.082194][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.092172][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.102690][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.113697][T12829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.124369][T12829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.136314][T12829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.150634][T12829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.160025][T12829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.169297][T12829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.178131][T12829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.212452][T12829] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 433.241879][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.246572][T12829] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 433.261409][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.287177][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.295359][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.113219][ T5794] Bluetooth: hci3: command tx timeout [ 434.191653][ T3473] batman_adv: batadv0: Removing interface: team0 [ 434.199583][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.207111][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.215114][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.222736][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.232026][ T3473] veth0_macvtap: left promiscuous mode [ 434.238753][ T3473] veth1_vlan: left promiscuous mode [ 434.244120][ T3473] veth0_vlan: left promiscuous mode [ 434.581507][ T3473] team0 (unregistering): Port device team_slave_1 removed [ 434.642710][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.651551][ T3473] bond_slave_1 (unregistering): left promiscuous mode [ 434.667123][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.677759][ T3473] bond_slave_0 (unregistering): left promiscuous mode [ 434.766709][ T3473] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 434.775963][ T3473] batadv0 (unregistering): left promiscuous mode [ 434.803469][ T3473] team0 (unregistering): Port device dummy0 removed [ 435.072642][ T3473] bond0 (unregistering): Released all slaves [ 440.346911][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.353751][ T1288] ieee802154 phy1 wpan1: encryption failed: -22