last executing test programs: 14.623165775s ago: executing program 0 (id=3031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040017010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r5) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x3010}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0006000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2) 13.634992695s ago: executing program 0 (id=3037): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x27, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x3d}, {0x6, 0x9, 0x7, 0x80000001}]}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 13.048981076s ago: executing program 0 (id=3042): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d805000000000000290000000300000043b6a6b2aa6470440cf5fbb80cf0ed8b009f0ee0d2f9bcbd77341a94eb9b137867dc0018c2beb60753ecbadb15787b9dd2231417c3c69737aa81d63253a0c33dc0766143b9fc47150f7d3a4d06ef892c1ee3f5fa7950fe76848b97eda3a7ffabb77742d15d76eb3ebdc71d453765271c713a8cd60467930969dd45ec07fcbe0094ed6e2345bf991ccb50168d088cda1216c05fdaec64f788e6722e66e05f3256460763696ac643da6b889503566ca73b719a1045fccd8c03cc206b36137dce4e9ba7f3a5e05a2e8ce050366357e710a6b6055475dd82b2bd74c403e4de4155ba454253a4adf5559ab468e2edbea964ec4669fb486d8c5b18472fa072dea946009053b1e15140e82cc5948cf930014a87c4db296dbe76bcf37ce44cb546aad0d7653720f98f3e5aae403545fa01ba63070b8441f86ad2c45e085e0f1f24121c1784d222f9fd41ec92e3d5a7a7e881212cfca3236b2e31855c96cf07b0b51afe3bfa61e7fae1cc7d16d15ecdc0cc80ab9442dd8e7c2ac8e74cd7045899e58f9cdd16ece2469bb37ef8ddc79a766611d067cdfb50cdc6672d707160cde9a1bc20b9c4839c2efc93c289cf58b66c7e45d66ffdab0ad89abfbd5d3781b39fd306a2d1158475aae10156688f0b41e966822dc028afd2d0f3016f967046d1077ac43e5165da2a3454a2a2e67c58f0d2c68e696c81050b7c75418527e64530e4c27ad335fc3c12701f35ae234304813649c986f11839962bbbdce29fb79fe7bce6463a28bf29d32d6db48ef4bfff8effce17d83c1bf31f7a36a1c7ea344fcf2deec357be1dc5a297e99ff0997c313b67b968fe7ecf971a109fb6e7c662ddcce04e98aa65e3a256cdd09e769251928813a1a3a6fedb0841baf49e89f44becf2b85bdff9127174f6503be0cf3b3892df6e12632c6f002b04a60c33eb297ab3f9ee16294e90dd2f3e09ca0d7d3cedabaed4d82be93f9cba7e157ffb0a4715664659147df18de6407c684e85fe7b2454c6ea05fa23140ba15a7a11750bbf45d5f848e62582c2ad96d218908d1e3ae686d3d99355d65411c4b516984b2b8859aabed132f8e5b074e46e7543b81cf1af7b48865169b644cf0c810f3eac387b43ae3b94b3171722980cdf7685e969c3f0ed033fa4f7edf12e149fb0b0207203b8c2e46d4023d21e7e6e98cc6f8c3b7b53163d8ed652b09d27180d0f2444b738c81da4191000698fd280786c5188e3ac5aefd7fce299206e410d1015448c92f3769d48cebe717a0b36fb01d1f94fac90fd665e821b45e70497b36d6123003fd89948b204802e78b141232402e7f9c5cefe215ae26f38564b34009b673a5069130cf45c63efd666e3a184b560e2fc12dca5e22612dabf12336b75bda73035d2d67f7deeab7aa1d73901eee8f62e906de887e04b5e59b68c50bdfe64987fbdfd8f9ab4707596b40e9bd8adf3b2aa5bd5fae10f173c160868e35c7ebc083501155372631b1c8df43accc945b663109414c8878498a216e1d840d26bddd278f47fd909c1f57e03e24852cc5849f3535206ee5ba895aafcaa90532389eb0d0ef5b321c183fbff08aa87acda39892d44d267fa3c4a53ede397f182c868ac334833279b4c42acbd431dc2df97143a7dc9d28151f2059d16e697ae95ff55753873c039e0e0cc944c46720404c9394b56001499bb09d4b06b6d7ead47485c34c4b9cfbf28accb02a97a199e39ee8bce6b0bb1e2bba69508fe0795d541ece33ea9ff6cf15ec9979b82f2d3d284a761c6f88800710b685feb000ca711d8650695f42919bae79b81ce6288a847697ffc072ea6fdfaea3b488849a080f3ab5657c372aeb5a2ea6127692bba08964f23d9e70a8e337c3aa7384e2016b008466e24c0c8d81b535a9e7fcd7ec799a486d6a4836d60972f6660dc9b88d3da365917826fe13f7fdb60991a79c7a2e25b043792ff2ec62ae6639d0a0a4d68bfee56b85b49c8d97d4daaa978de0705fbba8a8fa8df311db2f718894f8150b5300ef0f437c5eb9e3bd53a13d672dd3ab8b52c039722e5c5ae3c8cf71e5a6b9ef6102b1d00000000000000"], 0x5c8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e3702", 0x25}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000980)="99743abf12e4019c96627c56d35aeecd96b5261c7b96f584361dd5bd15c699a4d03c963bc05b2822061bcf7ffb674b96b96996c3bad95a4f6966e0e6e05a4550da679b22b77c8d05e9b7fc15a2975a340a20d3ed7ccfcf73b50a034a10dc4940d76080e6f77b6954530a85a91983f174e4ea6b8ca98d0b3f480b6f16db5cad463a70d0ad1c785b205c75d33df797cf1db6e90d00887c1986325e16dbdaeb1f66ebc7addd2137df13dba886e6f9bfdc93d69fa51b0345bffa850c", 0xba}], 0x1, &(0x7f0000000a80)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaa}}], 0x48}, 0x20008005) r13 = openat$cgroup_devices(r10, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000200)=ANY=[@ANYBLOB='b *', @ANYRESDEC], 0xb) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b70500000000000061108c000000000007000000000000009500000000000000bdd77e459d5ebdd5a23e9985daa1f441a75611ee6d298391824360e634a2738b15d835f0f2bb922ba3a5d0b48245c7d83de0826c8c1bfb8119f9d24d014013380281e95424d45ec0958d13797ea3321a8a5efa0bc0b0ebb77d02428979a6fb05a8faf49c1ea5d85b31a83b8e04996cac1bed362cc3e6941657122990a91965f306acee396ec4c974e73606523e949d2cb753c757ce51be2d0cdf779166cc30a4566d074ecd587f33983c2f4e164fb1ee58a16bc28554d314f5a7ffc9929e222816b1f0bdd377094831816a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x41100, 0x12, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 12.774472001s ago: executing program 0 (id=3044): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0xff04}], 0x1, 0x0, 0x0, 0x12c}, 0x8054) 12.604248805s ago: executing program 0 (id=3046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040017010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r5) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x3010}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0006000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2) 12.017463356s ago: executing program 0 (id=3050): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r1}, 0x18) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) 5.507105903s ago: executing program 1 (id=3107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.439197155s ago: executing program 1 (id=3108): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff06ff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r3], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8408, 0x0, 0xfffffffd, 0x4, 0x4, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5761, 0x0) 5.349481146s ago: executing program 2 (id=3109): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x2}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='consume_skb\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x200000000000020c, &(0x7f0000000cc0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f9, 0xc4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xe, 0x0, 0x7, 0x0, 0x2000000004}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0xa, 0x4af, &(0x7f0000000240)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa2000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 5.334140546s ago: executing program 4 (id=3110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040017010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r5) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x3010}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0006000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2) 5.243103458s ago: executing program 3 (id=3111): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}, 0x4000080) (fail_nth: 5) 4.64059902s ago: executing program 1 (id=3112): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x29, 0x6, 0x478b08cb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a000000000000791048000000000061041c000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x6c) r5 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x28, 0x6, 0x0, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000048b1c0c58410f0485a8d21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 4.64001769s ago: executing program 2 (id=3113): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xf7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x101048, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008f1d3d2cb990026bf6d84000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x4, 0x2, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffc, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.374040885s ago: executing program 3 (id=3114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) 4.265873487s ago: executing program 3 (id=3115): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x27, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x3d}, {0x6, 0x9, 0x7, 0x80000001}]}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 1.469600092s ago: executing program 3 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x8, 0x5, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0)='M', 0x0}, 0x20) 1.460628972s ago: executing program 2 (id=3117): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x5c8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e3702", 0x25}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.345705164s ago: executing program 3 (id=3118): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000142) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x15, 0x5, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.345119254s ago: executing program 4 (id=3119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000340000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 1.293211735s ago: executing program 2 (id=3120): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10182) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x40002103) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x3, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.120471128s ago: executing program 1 (id=3121): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/196, 0xc4}, 0x2043) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000003c0)={r3}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x10000000, &(0x7f0000000180)="5ca44104bacbd4ed9a63193f03d96fcefefd4c56923e051251f71eefebe02d822d2c0d9349613bfa55ccc1", 0x2b, &(0x7f00000001c0), 0x0, &(0x7f0000000300)="1f81eef4ee181e80fb2a2d9e44a2ea6c3bb91cc12e751c9611191b10c80c12a93708fa0f91eafae5c809118816a8710c24cd41ce5529bb42ae7cb04953f3b41bc1da72c434430e0e8b310ccad3ce8da4e43133be39d1073241d151933e51fbf91d95b4e439d6122c5d681eec57cae963327499a16b3fe1") syz_open_procfs$namespace(r4, &(0x7f0000000380)='ns/user\x00') syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/time_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)="dcf699", 0x3}], 0x1}, 0x4004854) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 998.142561ms ago: executing program 4 (id=3122): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r0, &(0x7f0000001a40)={&(0x7f0000000580)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)="6da672c7db58ee659ae24f9ce06c94d468a9055143e16bbb7af8f1b758e93833b9f54439085c360401f4992471d06e63b6f44bfda17f96d507c0fd2262663aafb9b4e02b70a2fd32beb74062481d7eba784870b5992ca796f753017b0e4c27e4fdd72bf7ac591dc4c9e35e17c46af0bcd1e38a1cd0109dfb81c546f74796102cf74cbcbda6f1889a1bd3d6", 0x8b}, {&(0x7f00000006c0)="91971c2c2fa6e9d9917401464eb67e53bb7be8b1b7d767bc591e4be67c0ed90b7b0bd43c28e9cca3569a2c9aafc135b0", 0x30}, {&(0x7f0000000700)="8a528cba818f53c4c4a253ec02fed3", 0xf}, {&(0x7f0000000740)="d8f6f18ae0fd350476310e7239b8c390058442fcebfe8e98226195c1efb4413d1cd18c9212d89459453e03357df7aa12d8eebae1a6c9", 0x36}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000780)="b7786aa7d85ebc54f03822865be149ea2034474eef3ce39de15d5ac6dbe464833a37206580c622f75c067b997402f60776f4f753f320a71dc868a6657b793f1e2e5b9f3513fe671bef7555596e23736a9c9f89e582aab139fd512ff59575d7dff3b4ae2701a54b69919d9cf5fc63846a1fbb292aec6b8525594449cf6286197bcfb672e970af3bedc9dbe0", 0x8b}, {&(0x7f0000001880)="2775dca536d942b6829b30b1feb7e411fb9db47218e949ea43fa7c03e9ea228a6148a3131c734bd42bac2cff194d9e51440d5e0bf0f7c55a9c55", 0x3a}, {&(0x7f00000018c0)="99534e5592468629d0784228", 0xc}], 0x8, &(0x7f0000001980)=[@txtime={{0x18, 0x1, 0x3d, 0xf2bf}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000001b00)={0x5, 0x80, 0x1, 0x1, 0x4, 0xf7, 0x0, 0x8, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000001ac0), 0x8}, 0x0, 0x3, 0x4, 0x0, 0x2, 0xbc, 0x2, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="c87a8000089c42bc72002ae2e76700d63b060000000000ff0300009500000000"], &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0xde, &(0x7f00000004c0)=""/222, 0x40f00, 0x20, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26c0d, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r5, r5], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f40)={r6, 0xe0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[0x0], &(0x7f0000000680), 0x0, 0x8b, &(0x7f0000002f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000740), &(0x7f0000002dc0), 0x8, 0x24041, 0x8, 0x8, &(0x7f0000002e00)}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001a80)=r6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x2b, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0xa, 0x6, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d00)='syzkaller\x00', 0xb, 0x6d, &(0x7f0000001d40)=""/109, 0x41000, 0x31, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001dc0)={0x0, 0x8, 0x81, 0x2}, 0x10, r8, r6, 0x2, &(0x7f0000001e80)=[r9, r5, r2, r2, r10], &(0x7f0000001ec0)=[{0x1, 0x3, 0x4, 0x2}, {0x2, 0x1, 0x10, 0xa}], 0x10, 0xea}, 0x94) setsockopt$sock_attach_bpf(r0, 0x0, 0x22, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001fc0)=""/238, 0xee}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000001c0)=""/132, 0x84}, {&(0x7f0000000280)=""/253, 0xfd}], 0x4, &(0x7f0000000400)=""/54, 0x36}, 0x40010101) 934.030732ms ago: executing program 2 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open$cgroup(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_clone(0x8000, &(0x7f0000000180)="0ad468999b5217d78c581d6f611cbe19b06dc71d95d451ccbb8f1d024e", 0x1d, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) write$cgroup_pid(r1, &(0x7f0000000300)=r3, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000400018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000c80)=r9, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 721.677576ms ago: executing program 4 (id=3124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) 607.004968ms ago: executing program 4 (id=3125): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x27, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x3d}, {0x6, 0x9, 0x7, 0x80000001}]}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 606.559598ms ago: executing program 1 (id=3126): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x40, 0x2, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x70c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12120) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_to_bond\x00', 0x2000}) socketpair(0x1, 0x800, 0x10, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000040)='Y %\x9d\x98\x96\x90\xa2\xb1\x10):0\r\x98\xff\"\xc8\x7f\xc5\xf0\xdf\x16\xd4\x10\xbdQ\xf2\x9f\xe6\x91\xe4a(2l\x81w\x9a\xb9\xbc\xcb\x8bFG=') close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40170, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100010, 0xef36, 0x0, 0x0, 0x3fe, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2027}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001e80)='^\x00') r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="40000000000000000000000000000400000000002678b4a221f4c2e97f5b9f15f67f880360dea4feb61f3e57c6988c900f8fd7ef822185cd6260169d5f21e41f4c3ae19a9ca3f5364ab77e34f7ab172f2425d5a717df223970200aa4c94b15f255f87f0d5cc22a33dd28eb14bd50fe287e8d6fb53940b0129bd794e28c30dc4d1247a6b55a06c44a75", @ANYRES8=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800010000000200062019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 585.791639ms ago: executing program 3 (id=3127): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8200000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 409.317992ms ago: executing program 4 (id=3128): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f43050600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x191}, {&(0x7f0000002400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000001400)="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", 0xbed}], 0x6}, 0x0) 250.983235ms ago: executing program 1 (id=3129): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r2, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="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", 0x1000}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x118}, 0x2001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000340)=r3) close(r5) recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r7], 0xfe33) 0s ago: executing program 2 (id=3130): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x25, &(0x7f0000000ac0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000002fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 5][T10489] ? lockdep_hardirqs_on+0x94/0x140 [ 311.579687][T10489] do_syscall_64+0x4c/0xa0 [ 311.584113][T10489] ? clear_bhb_loop+0x30/0x80 [ 311.588792][T10489] ? clear_bhb_loop+0x30/0x80 [ 311.593477][T10489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.599392][T10489] RIP: 0033:0x7f5d30435ec9 [ 311.603826][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.623440][T10489] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.631865][T10489] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 311.639857][T10489] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 311.647833][T10489] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 311.655813][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.663824][T10489] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 311.671831][T10489] [ 311.693151][T10492] netlink: 'syz.2.2174': attribute type 21 has an invalid length. [ 312.325691][T10523] __nla_validate_parse: 19 callbacks suppressed [ 312.325710][T10523] netlink: 64519 bytes leftover after parsing attributes in process `syz.4.2198'. [ 312.432350][T10517] netlink: 'syz.4.2198': attribute type 21 has an invalid length. [ 312.447362][T10517] netlink: 'syz.4.2198': attribute type 6 has an invalid length. [ 312.455840][T10517] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2198'. [ 313.855475][T10580] delete_channel: no stack [ 314.060004][T10580] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2212'. [ 314.157605][T10587] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2215'. [ 314.282227][T10580] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 315.103185][T10606] netlink: 'syz.1.2221': attribute type 10 has an invalid length. [ 315.395773][T10621] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2228'. [ 315.625536][T10630] netlink: 'syz.1.2230': attribute type 39 has an invalid length. [ 315.859954][T10642] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 316.184883][T10657] raw_sendmsg: syz.3.2242 forgot to set AF_INET. Fix it! [ 316.839836][T10654] netlink: 'syz.3.2242': attribute type 46 has an invalid length. [ 316.850432][T10656] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2241'. [ 316.901876][T10652] delete_channel: no stack [ 317.135907][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142250][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.242265][T10670] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2247'. [ 317.265473][T10673] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2248'. [ 317.328863][T10670] openvswitch: netlink: Flow key attribute not present in set flow. [ 317.640911][T10688] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2255'. [ 317.687220][T10693] netlink: 'syz.0.2258': attribute type 153 has an invalid length. [ 317.724141][T10692] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 317.737592][T10693] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.2258'. [ 317.760732][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.254865][T10705] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2262'. [ 318.464285][T10710] netlink: 'syz.1.2264': attribute type 15 has an invalid length. [ 318.472199][T10710] netlink: 'syz.1.2264': attribute type 7 has an invalid length. [ 318.524067][T10711] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2263'. [ 318.736070][T10722] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2269'. [ 319.352569][T10739] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2274'. [ 319.467753][T10743] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 319.538392][T10743] device hsr_slave_0 left promiscuous mode [ 319.871849][T10762] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2284'. [ 320.515966][T10775] netlink: 'syz.4.2288': attribute type 15 has an invalid length. [ 320.580594][T10775] netlink: 'syz.4.2288': attribute type 7 has an invalid length. [ 320.642218][T10779] device syzkaller0 entered promiscuous mode [ 320.673576][T10779] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 320.879989][T10793] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2293'. [ 320.909738][T10797] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2296'. [ 321.941960][T10831] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2309'. [ 322.209564][T10841] delete_channel: no stack [ 322.214718][T10841] delete_channel: no stack [ 322.260698][T10840] delete_channel: no stack [ 322.548327][T10855] netlink: 'syz.1.2321': attribute type 28 has an invalid length. [ 323.304798][T10888] netlink: 'syz.4.2331': attribute type 7 has an invalid length. [ 323.334259][T10888] __nla_validate_parse: 3 callbacks suppressed [ 323.334276][T10888] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2331'. [ 323.379629][T10891] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2332'. [ 323.468118][T10893] FAULT_INJECTION: forcing a failure. [ 323.468118][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 323.481154][T10893] CPU: 0 PID: 10893 Comm: syz.3.2333 Not tainted syzkaller #0 [ 323.488660][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.498754][T10893] Call Trace: [ 323.502067][T10893] [ 323.505034][T10893] dump_stack_lvl+0x168/0x230 [ 323.509769][T10893] ? show_regs_print_info+0x20/0x20 [ 323.515017][T10893] ? load_image+0x3b0/0x3b0 [ 323.519552][T10893] ? perf_trace_lock+0xdf/0x370 [ 323.524440][T10893] ? perf_trace_lock+0xdf/0x370 [ 323.529335][T10893] should_fail+0x38c/0x4c0 [ 323.533799][T10893] should_failslab+0x5/0x20 [ 323.538461][T10893] slab_pre_alloc_hook+0x51/0xc0 [ 323.543448][T10893] ? skb_clone+0x1bd/0x350 [ 323.547905][T10893] kmem_cache_alloc+0x3d/0x290 [ 323.552721][T10893] skb_clone+0x1bd/0x350 [ 323.557001][T10893] __netlink_deliver_tap+0x3cd/0x7c0 [ 323.562352][T10893] netlink_deliver_tap+0x16c/0x180 [ 323.567500][T10893] netlink_sendskb+0x64/0x130 [ 323.572217][T10893] netlink_ack+0x888/0xb60 [ 323.576677][T10893] ? mutex_unlock+0x10/0x10 [ 323.581440][T10893] ? netlink_dump+0xcd0/0xcd0 [ 323.586169][T10893] ? rcu_lock_release+0x20/0x20 [ 323.591093][T10893] ? sock_diag_rcv_msg+0x18a/0x3e0 [ 323.596300][T10893] netlink_rcv_skb+0x265/0x430 [ 323.601102][T10893] ? sock_diag_bind+0xa0/0xa0 [ 323.605840][T10893] ? netlink_ack+0xb60/0xb60 [ 323.610473][T10893] ? __lock_acquire+0x7c60/0x7c60 [ 323.615556][T10893] sock_diag_rcv+0x26/0x40 [ 323.620137][T10893] netlink_unicast+0x774/0x920 [ 323.624961][T10893] netlink_sendmsg+0x8ab/0xbc0 [ 323.629782][T10893] ? netlink_getsockopt+0x560/0x560 [ 323.635036][T10893] ? aa_sock_msg_perm+0x94/0x150 [ 323.640038][T10893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.645361][T10893] ? security_socket_sendmsg+0x7c/0xa0 [ 323.650883][T10893] ? netlink_getsockopt+0x560/0x560 [ 323.656128][T10893] ____sys_sendmsg+0x5a2/0x8c0 [ 323.660939][T10893] ? memset+0x1e/0x40 [ 323.664955][T10893] ? __sys_sendmsg_sock+0x30/0x30 [ 323.670029][T10893] ? import_iovec+0x6f/0xa0 [ 323.674585][T10893] ___sys_sendmsg+0x1f0/0x260 [ 323.679426][T10893] ? __sys_sendmsg+0x250/0x250 [ 323.684235][T10893] ? trace_event_raw_event_lock+0x250/0x250 [ 323.690169][T10893] ? vfs_write+0x84d/0xd00 [ 323.694653][T10893] ? __fdget+0x18b/0x210 [ 323.698946][T10893] __se_sys_sendmsg+0x190/0x250 [ 323.703835][T10893] ? __x64_sys_sendmsg+0x80/0x80 [ 323.708808][T10893] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 323.714856][T10893] ? lockdep_hardirqs_on+0x94/0x140 [ 323.720096][T10893] do_syscall_64+0x4c/0xa0 [ 323.724549][T10893] ? clear_bhb_loop+0x30/0x80 [ 323.729276][T10893] ? clear_bhb_loop+0x30/0x80 [ 323.733995][T10893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.739933][T10893] RIP: 0033:0x7f6c01cc3ec9 [ 323.744393][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.764031][T10893] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.772491][T10893] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 323.780500][T10893] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 323.788597][T10893] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 323.796600][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.804607][T10893] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 323.813040][T10893] [ 324.000738][T10902] netlink: 'syz.2.2337': attribute type 21 has an invalid length. [ 324.027683][T10902] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2337'. [ 324.256053][T10916] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2343'. [ 324.859674][T10939] FAULT_INJECTION: forcing a failure. [ 324.859674][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 324.880574][T10939] CPU: 1 PID: 10939 Comm: syz.2.2353 Not tainted syzkaller #0 [ 324.888085][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.898169][T10939] Call Trace: [ 324.901470][T10939] [ 324.904416][T10939] dump_stack_lvl+0x168/0x230 [ 324.909137][T10939] ? show_regs_print_info+0x20/0x20 [ 324.914371][T10939] ? load_image+0x3b0/0x3b0 [ 324.918920][T10939] ? __might_sleep+0xf0/0xf0 [ 324.923552][T10939] ? __lock_acquire+0x7c60/0x7c60 [ 324.929155][T10939] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 324.935534][T10939] should_fail+0x38c/0x4c0 [ 324.940016][T10939] should_failslab+0x5/0x20 [ 324.944563][T10939] slab_pre_alloc_hook+0x51/0xc0 [ 324.949546][T10939] __kmalloc+0x6b/0x330 [ 324.953741][T10939] ? tomoyo_encode+0x27e/0x540 [ 324.958563][T10939] tomoyo_encode+0x27e/0x540 [ 324.963213][T10939] tomoyo_realpath_from_path+0x5cd/0x610 [ 324.963750][T10941] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2354'. [ 324.968910][T10939] tomoyo_path_number_perm+0x1d5/0x5d0 [ 324.968967][T10939] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 324.968990][T10939] ? perf_trace_lock+0xdf/0x370 [ 324.994078][T10939] security_file_ioctl+0x6c/0xa0 [ 324.999074][T10939] __se_sys_ioctl+0x48/0x170 [ 325.003707][T10939] do_syscall_64+0x4c/0xa0 [ 325.008150][T10939] ? clear_bhb_loop+0x30/0x80 [ 325.012860][T10939] ? clear_bhb_loop+0x30/0x80 [ 325.017578][T10939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.023510][T10939] RIP: 0033:0x7f051794dec9 [ 325.027959][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.047599][T10939] RSP: 002b:00007f0515bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.056039][T10939] RAX: ffffffffffffffda RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 325.064212][T10939] RDX: 0000000000000000 RSI: 000000008008743f RDI: 0000000000000003 [ 325.072465][T10939] RBP: 00007f0515bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 325.080465][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.088451][T10939] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 325.096448][T10939] [ 325.108492][T10939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.672095][T10972] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.711107][T10972] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2362'. [ 325.738023][T10974] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2365'. [ 325.859722][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2368'. [ 325.891711][T10983] FAULT_INJECTION: forcing a failure. [ 325.891711][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 325.931379][T10983] CPU: 1 PID: 10983 Comm: syz.4.2369 Not tainted syzkaller #0 [ 325.938903][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.949354][T10983] Call Trace: [ 325.952676][T10983] [ 325.955648][T10983] dump_stack_lvl+0x168/0x230 [ 325.960370][T10983] ? show_regs_print_info+0x20/0x20 [ 325.965613][T10983] ? load_image+0x3b0/0x3b0 [ 325.970161][T10983] ? __lock_acquire+0x7c60/0x7c60 [ 325.975238][T10983] should_fail+0x38c/0x4c0 [ 325.979688][T10983] should_failslab+0x5/0x20 [ 325.984224][T10983] slab_pre_alloc_hook+0x51/0xc0 [ 325.989204][T10983] __kmalloc+0x6b/0x330 [ 325.993391][T10983] ? sk_prot_alloc+0xe7/0x210 [ 325.998110][T10983] sk_prot_alloc+0xe7/0x210 [ 326.002653][T10983] ? sk_alloc+0x1d/0x310 [ 326.006938][T10983] sk_alloc+0x2f/0x310 [ 326.011307][T10983] bpf_prog_test_run_skb+0x240/0x1180 [ 326.016796][T10983] ? __fget_files+0x40f/0x480 [ 326.021517][T10983] ? cpu_online+0x60/0x60 [ 326.025900][T10983] bpf_prog_test_run+0x31e/0x390 [ 326.030966][T10983] __sys_bpf+0x535/0x670 [ 326.035258][T10983] ? bpf_link_show_fdinfo+0x340/0x340 [ 326.041565][T10983] ? vtime_user_exit+0x2dc/0x400 [ 326.046538][T10983] __x64_sys_bpf+0x78/0x90 [ 326.050974][T10983] do_syscall_64+0x4c/0xa0 [ 326.055400][T10983] ? clear_bhb_loop+0x30/0x80 [ 326.060090][T10983] ? clear_bhb_loop+0x30/0x80 [ 326.064776][T10983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.070688][T10983] RIP: 0033:0x7f5d30435ec9 [ 326.075112][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.095171][T10983] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.103613][T10983] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 326.111625][T10983] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 326.119608][T10983] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 326.127598][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.135920][T10983] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 326.143931][T10983] [ 326.248560][T10993] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2370'. [ 326.354420][T11004] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2377'. [ 326.743321][T11026] device wg2 entered promiscuous mode [ 326.856760][T11029] FAULT_INJECTION: forcing a failure. [ 326.856760][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 326.918454][T11029] CPU: 1 PID: 11029 Comm: syz.1.2387 Not tainted syzkaller #0 [ 326.925989][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.936093][T11029] Call Trace: [ 326.939407][T11029] [ 326.942469][T11029] dump_stack_lvl+0x168/0x230 [ 326.947209][T11029] ? show_regs_print_info+0x20/0x20 [ 326.952459][T11029] ? load_image+0x3b0/0x3b0 [ 326.957040][T11029] ? memset+0x1e/0x40 [ 326.961071][T11029] ? memset+0x1e/0x40 [ 326.965108][T11029] should_fail+0x38c/0x4c0 [ 326.969613][T11029] should_failslab+0x5/0x20 [ 326.974163][T11029] slab_pre_alloc_hook+0x51/0xc0 [ 326.979283][T11029] ? __build_skb+0x26/0x2e0 [ 326.983838][T11029] kmem_cache_alloc+0x3d/0x290 [ 326.988673][T11029] __build_skb+0x26/0x2e0 [ 326.993067][T11029] build_skb+0x1e/0x170 [ 326.997370][T11029] bpf_prog_test_run_skb+0x260/0x1180 [ 327.002889][T11029] ? __fget_files+0x40f/0x480 [ 327.007660][T11029] ? cpu_online+0x60/0x60 [ 327.012049][T11029] bpf_prog_test_run+0x31e/0x390 [ 327.017053][T11029] __sys_bpf+0x535/0x670 [ 327.021354][T11029] ? bpf_link_show_fdinfo+0x340/0x340 [ 327.026816][T11029] ? vtime_user_exit+0x2dc/0x400 [ 327.031822][T11029] __x64_sys_bpf+0x78/0x90 [ 327.036287][T11029] do_syscall_64+0x4c/0xa0 [ 327.040743][T11029] ? clear_bhb_loop+0x30/0x80 [ 327.045456][T11029] ? clear_bhb_loop+0x30/0x80 [ 327.050178][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.056165][T11029] RIP: 0033:0x7febaf935ec9 [ 327.060651][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.080301][T11029] RSP: 002b:00007febadb9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.088775][T11029] RAX: ffffffffffffffda RBX: 00007febafb8cfa0 RCX: 00007febaf935ec9 [ 327.096814][T11029] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 327.104830][T11029] RBP: 00007febadb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 327.112846][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.120867][T11029] R13: 00007febafb8d038 R14: 00007febafb8cfa0 R15: 00007ffe2a0731f8 [ 327.128946][T11029] [ 327.820393][T11047] bond_slave_1: mtu less than device minimum [ 328.436373][T11076] __nla_validate_parse: 1 callbacks suppressed [ 328.436406][T11076] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2402'. [ 328.587001][T11085] netlink: 'syz.3.2408': attribute type 16 has an invalid length. [ 328.602703][T11085] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2408'. [ 329.049403][T11104] netlink: 'syz.2.2414': attribute type 29 has an invalid length. [ 329.076541][T11104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2414'. [ 329.199170][T11104] netlink: 'syz.2.2414': attribute type 29 has an invalid length. [ 329.213164][T11104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2414'. [ 330.185273][T11144] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 330.193385][T11144] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2425'. [ 330.229927][T11143] netlink: 'syz.3.2424': attribute type 1 has an invalid length. [ 330.256873][T11145] FAULT_INJECTION: forcing a failure. [ 330.256873][T11145] name failslab, interval 1, probability 0, space 0, times 0 [ 330.304094][T11145] CPU: 0 PID: 11145 Comm: syz.3.2424 Not tainted syzkaller #0 [ 330.311619][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.321706][T11145] Call Trace: [ 330.325015][T11145] [ 330.327991][T11145] dump_stack_lvl+0x168/0x230 [ 330.332712][T11145] ? show_regs_print_info+0x20/0x20 [ 330.337944][T11145] ? load_image+0x3b0/0x3b0 [ 330.342482][T11145] ? __might_sleep+0xf0/0xf0 [ 330.347102][T11145] ? __lock_acquire+0x7c60/0x7c60 [ 330.352163][T11145] should_fail+0x38c/0x4c0 [ 330.356613][T11145] should_failslab+0x5/0x20 [ 330.361143][T11145] slab_pre_alloc_hook+0x51/0xc0 [ 330.366112][T11145] __kmalloc+0x6b/0x330 [ 330.370296][T11145] ? bpf_test_init+0xf8/0x1b0 [ 330.375005][T11145] ? __lock_acquire+0x7c60/0x7c60 [ 330.380065][T11145] bpf_test_init+0xf8/0x1b0 [ 330.384604][T11145] bpf_prog_test_run_skb+0x181/0x1180 [ 330.390016][T11145] ? __fget_files+0x40f/0x480 [ 330.394744][T11145] ? cpu_online+0x60/0x60 [ 330.399105][T11145] bpf_prog_test_run+0x31e/0x390 [ 330.404093][T11145] __sys_bpf+0x535/0x670 [ 330.408380][T11145] ? bpf_link_show_fdinfo+0x340/0x340 [ 330.413926][T11145] __x64_sys_bpf+0x78/0x90 [ 330.418402][T11145] do_syscall_64+0x4c/0xa0 [ 330.422848][T11145] ? clear_bhb_loop+0x30/0x80 [ 330.427557][T11145] ? clear_bhb_loop+0x30/0x80 [ 330.432266][T11145] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.438193][T11145] RIP: 0033:0x7f6c01cc3ec9 [ 330.442638][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.462279][T11145] RSP: 002b:00007f6bfff0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.470744][T11145] RAX: ffffffffffffffda RBX: 00007f6c01f1b090 RCX: 00007f6c01cc3ec9 [ 330.478768][T11145] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 330.486774][T11145] RBP: 00007f6bfff0a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.494807][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.502812][T11145] R13: 00007f6c01f1b128 R14: 00007f6c01f1b090 R15: 00007ffc78461718 [ 330.510847][T11145] [ 330.656300][T11143] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2424'. [ 330.681660][T11157] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2429'. [ 331.245065][T11186] netlink: 'syz.0.2438': attribute type 16 has an invalid length. [ 331.303076][T11186] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2438'. [ 331.570132][T11200] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2443'. [ 331.863077][T11203] delete_channel: no stack [ 332.138156][T11203] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2444'. [ 332.279517][T11203] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 333.186710][T11222] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 333.867509][T11241] netlink: 'syz.2.2456': attribute type 21 has an invalid length. [ 333.884020][T11241] __nla_validate_parse: 2 callbacks suppressed [ 333.884038][T11241] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2456'. [ 333.921109][T11244] netlink: 'syz.0.2459': attribute type 21 has an invalid length. [ 333.940265][T11244] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 334.154886][T11251] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2461'. [ 334.174967][T11251] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2461'. [ 334.195018][T11251] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2461'. [ 334.281476][T11256] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2462'. [ 335.137522][T11285] FAULT_INJECTION: forcing a failure. [ 335.137522][T11285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.204097][T11285] CPU: 1 PID: 11285 Comm: syz.3.2472 Not tainted syzkaller #0 [ 335.211629][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.221713][T11285] Call Trace: [ 335.225011][T11285] [ 335.227948][T11285] dump_stack_lvl+0x168/0x230 [ 335.232643][T11285] ? show_regs_print_info+0x20/0x20 [ 335.237874][T11285] ? load_image+0x3b0/0x3b0 [ 335.242389][T11285] ? __lock_acquire+0x7c60/0x7c60 [ 335.247428][T11285] should_fail+0x38c/0x4c0 [ 335.251879][T11285] _copy_from_user+0x2e/0x170 [ 335.256563][T11285] vmemdup_user+0xa4/0x170 [ 335.260992][T11285] map_delete_elem+0x1f2/0x550 [ 335.265762][T11285] ? bpf_lsm_bpf+0x5/0x10 [ 335.270104][T11285] __sys_bpf+0x428/0x670 [ 335.274628][T11285] ? bpf_link_show_fdinfo+0x340/0x340 [ 335.280005][T11285] ? rcu_nmi_exit+0x6f/0xf0 [ 335.284526][T11285] ? vtime_user_exit+0x2dc/0x400 [ 335.289480][T11285] __x64_sys_bpf+0x78/0x90 [ 335.293904][T11285] do_syscall_64+0x4c/0xa0 [ 335.298324][T11285] ? clear_bhb_loop+0x30/0x80 [ 335.303003][T11285] ? clear_bhb_loop+0x30/0x80 [ 335.307688][T11285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.313587][T11285] RIP: 0033:0x7f6c01cc3ec9 [ 335.318009][T11285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.337618][T11285] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.346038][T11285] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 335.354013][T11285] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000003 [ 335.361983][T11285] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.369953][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.377924][T11285] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 335.385914][T11285] [ 336.091380][T11309] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2483'. [ 336.318902][T11315] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 336.348813][T11315] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2486'. [ 337.184846][T11339] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2496'. [ 337.276923][T11339] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2496'. [ 337.291593][T11341] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 337.345713][T11341] device hsr0 entered promiscuous mode [ 337.697902][T11346] delete_channel: no stack [ 338.019131][T11345] delete_channel: no stack [ 338.112941][T11356] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2502'. [ 341.258151][T11394] netlink: 'syz.3.2515': attribute type 7 has an invalid length. [ 341.874250][T11417] __nla_validate_parse: 1 callbacks suppressed [ 341.874270][T11417] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2524'. [ 342.735334][T11447] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.2536'. [ 342.788086][T11460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2539'. [ 342.856660][T11460] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2539'. [ 343.657712][T11486] device wg2 left promiscuous mode [ 343.695065][T11489] netlink: 'syz.4.2550': attribute type 10 has an invalid length. [ 343.710215][T11489] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2550'. [ 343.803467][T11495] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2553'. [ 344.998364][T11537] netlink: 'syz.0.2570': attribute type 4 has an invalid length. [ 345.017355][T11537] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.2570'. [ 345.089292][T11538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2569'. [ 345.979094][T11571] FAULT_INJECTION: forcing a failure. [ 345.979094][T11571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.027490][T11571] CPU: 0 PID: 11571 Comm: syz.2.2583 Not tainted syzkaller #0 [ 346.035005][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.045104][T11571] Call Trace: [ 346.049017][T11571] [ 346.052063][T11571] dump_stack_lvl+0x168/0x230 [ 346.056789][T11571] ? show_regs_print_info+0x20/0x20 [ 346.062028][T11571] ? load_image+0x3b0/0x3b0 [ 346.066586][T11571] ? __lock_acquire+0x7c60/0x7c60 [ 346.071745][T11571] should_fail+0x38c/0x4c0 [ 346.076203][T11571] _copy_from_user+0x2e/0x170 [ 346.080916][T11571] btf_new_fd+0x3c0/0x910 [ 346.085274][T11571] __sys_bpf+0x51c/0x670 [ 346.089883][T11571] ? bpf_link_show_fdinfo+0x340/0x340 [ 346.095283][T11571] ? vtime_user_exit+0x2dc/0x400 [ 346.100244][T11571] __x64_sys_bpf+0x78/0x90 [ 346.104689][T11571] do_syscall_64+0x4c/0xa0 [ 346.109726][T11571] ? clear_bhb_loop+0x30/0x80 [ 346.114425][T11571] ? clear_bhb_loop+0x30/0x80 [ 346.119223][T11571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.125136][T11571] RIP: 0033:0x7f051794dec9 [ 346.129565][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.149259][T11571] RSP: 002b:00007f0515bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.157795][T11571] RAX: ffffffffffffffda RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 346.165872][T11571] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 346.173849][T11571] RBP: 00007f0515bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 346.181930][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.189904][T11571] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 346.197893][T11571] [ 346.366038][T11583] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2588'. [ 346.635456][T11596] FAULT_INJECTION: forcing a failure. [ 346.635456][T11596] name failslab, interval 1, probability 0, space 0, times 0 [ 346.680417][T11596] CPU: 0 PID: 11596 Comm: syz.1.2594 Not tainted syzkaller #0 [ 346.687953][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.698055][T11596] Call Trace: [ 346.701370][T11596] [ 346.704344][T11596] dump_stack_lvl+0x168/0x230 [ 346.709079][T11596] ? show_regs_print_info+0x20/0x20 [ 346.714468][T11596] ? load_image+0x3b0/0x3b0 [ 346.719045][T11596] ? __might_sleep+0xf0/0xf0 [ 346.723691][T11596] ? __lock_acquire+0x7c60/0x7c60 [ 346.728799][T11596] ? netlink_insert+0xe7c/0x11d0 [ 346.733812][T11596] should_fail+0x38c/0x4c0 [ 346.738296][T11596] should_failslab+0x5/0x20 [ 346.742845][T11596] slab_pre_alloc_hook+0x51/0xc0 [ 346.747841][T11596] kmem_cache_alloc_node+0x47/0x2d0 [ 346.753081][T11596] ? __alloc_skb+0xf4/0x750 [ 346.757647][T11596] __alloc_skb+0xf4/0x750 [ 346.762049][T11596] netlink_sendmsg+0x645/0xbc0 [ 346.766893][T11596] ? netlink_getsockopt+0x560/0x560 [ 346.772158][T11596] ? aa_sock_msg_perm+0x94/0x150 [ 346.777166][T11596] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 346.782488][T11596] ? security_socket_sendmsg+0x7c/0xa0 [ 346.787985][T11596] ? netlink_getsockopt+0x560/0x560 [ 346.793428][T11596] ____sys_sendmsg+0x5a2/0x8c0 [ 346.798258][T11596] ? memset+0x1e/0x40 [ 346.802294][T11596] ? __sys_sendmsg_sock+0x30/0x30 [ 346.807395][T11596] ? import_iovec+0x6f/0xa0 [ 346.811972][T11596] ___sys_sendmsg+0x1f0/0x260 [ 346.816855][T11596] ? __sys_sendmsg+0x250/0x250 [ 346.821711][T11596] ? trace_event_raw_event_lock+0x250/0x250 [ 346.827665][T11596] ? vfs_write+0x84d/0xd00 [ 346.832188][T11596] ? __fdget+0x18b/0x210 [ 346.836494][T11596] __se_sys_sendmsg+0x190/0x250 [ 346.841406][T11596] ? __x64_sys_sendmsg+0x80/0x80 [ 346.846397][T11596] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 346.852622][T11596] ? lockdep_hardirqs_on+0x94/0x140 [ 346.857900][T11596] do_syscall_64+0x4c/0xa0 [ 346.862378][T11596] ? clear_bhb_loop+0x30/0x80 [ 346.867107][T11596] ? clear_bhb_loop+0x30/0x80 [ 346.871847][T11596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.877908][T11596] RIP: 0033:0x7febaf935ec9 [ 346.882496][T11596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.902248][T11596] RSP: 002b:00007febadb9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.910722][T11596] RAX: ffffffffffffffda RBX: 00007febafb8cfa0 RCX: 00007febaf935ec9 [ 346.918747][T11596] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000008 [ 346.926795][T11596] RBP: 00007febadb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 346.934813][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.942835][T11596] R13: 00007febafb8d038 R14: 00007febafb8cfa0 R15: 00007ffe2a0731f8 [ 346.950909][T11596] [ 347.299708][T11608] netlink: 'syz.1.2597': attribute type 16 has an invalid length. [ 347.312860][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2597'. [ 347.355845][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.614839][T11618] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 347.623247][T11618] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 347.661096][T11618] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 347.849748][T11622] device syzkaller0 entered promiscuous mode [ 347.999535][T11630] netlink: 'syz.2.2607': attribute type 21 has an invalid length. [ 348.024299][T11630] netlink: 'syz.2.2607': attribute type 6 has an invalid length. [ 348.038476][T11630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2607'. [ 348.069354][T11635] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2608'. [ 348.330010][T11647] netlink: 'syz.4.2613': attribute type 21 has an invalid length. [ 348.377907][T11647] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.411116][T11647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.418468][T11647] IPv6: NLM_F_CREATE should be set when creating new route [ 348.425845][T11647] IPv6: NLM_F_CREATE should be set when creating new route [ 348.433091][T11647] IPv6: NLM_F_CREATE should be set when creating new route [ 348.682793][T11656] device syzkaller0 entered promiscuous mode [ 348.713446][T11660] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2616'. [ 349.373044][T11691] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2629'. [ 350.126338][T11723] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2641'. [ 351.726712][T11787] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2667'. [ 351.774389][T11790] FAULT_INJECTION: forcing a failure. [ 351.774389][T11790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.792526][T11790] CPU: 1 PID: 11790 Comm: syz.0.2668 Not tainted syzkaller #0 [ 351.800047][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.810138][T11790] Call Trace: [ 351.813460][T11790] [ 351.816423][T11790] dump_stack_lvl+0x168/0x230 [ 351.821143][T11790] ? show_regs_print_info+0x20/0x20 [ 351.826383][T11790] ? load_image+0x3b0/0x3b0 [ 351.830931][T11790] ? __lock_acquire+0x7c60/0x7c60 [ 351.835990][T11790] ? __alloc_skb+0x473/0x750 [ 351.840719][T11790] should_fail+0x38c/0x4c0 [ 351.845193][T11790] _copy_from_iter+0x22a/0x1150 [ 351.850088][T11790] ? __lock_acquire+0x7c60/0x7c60 [ 351.855159][T11790] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 351.860595][T11790] ? __virt_addr_valid+0x3c6/0x470 [ 351.866092][T11790] ? __phys_addr+0xb6/0x170 [ 351.870840][T11790] ? __phys_addr_symbol+0x2b/0x70 [ 351.875900][T11790] ? __check_object_size+0x30c/0x410 [ 351.881249][T11790] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 351.887092][T11790] ? skb_put+0x117/0x210 [ 351.891451][T11790] tun_get_user+0x1279/0x38d0 [ 351.896194][T11790] ? tun_ring_recv+0xc30/0xc30 [ 351.901006][T11790] ? rcu_lock_release+0x5/0x20 [ 351.905812][T11790] ? __lock_acquire+0x7c60/0x7c60 [ 351.910889][T11790] tun_chr_write_iter+0x112/0x1e0 [ 351.915966][T11790] vfs_write+0x712/0xd00 [ 351.920255][T11790] ? file_end_write+0x250/0x250 [ 351.925154][T11790] ? __fget_files+0x40f/0x480 [ 351.929874][T11790] ? __fdget_pos+0x1e2/0x370 [ 351.934579][T11790] ? ksys_write+0x71/0x250 [ 351.939138][T11790] ksys_write+0x14d/0x250 [ 351.943658][T11790] ? __ia32_sys_read+0x80/0x80 [ 351.948460][T11790] ? lockdep_hardirqs_on+0x94/0x140 [ 351.953702][T11790] do_syscall_64+0x4c/0xa0 [ 351.958155][T11790] ? clear_bhb_loop+0x30/0x80 [ 351.962873][T11790] ? clear_bhb_loop+0x30/0x80 [ 351.967676][T11790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.973605][T11790] RIP: 0033:0x7f3e69deaec9 [ 351.979214][T11790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.999126][T11790] RSP: 002b:00007f3e68052038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.007590][T11790] RAX: ffffffffffffffda RBX: 00007f3e6a041fa0 RCX: 00007f3e69deaec9 [ 352.015626][T11790] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 352.024217][T11790] RBP: 00007f3e68052090 R08: 0000000000000000 R09: 0000000000000000 [ 352.032192][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.040174][T11790] R13: 00007f3e6a042038 R14: 00007f3e6a041fa0 R15: 00007ffd979ad8c8 [ 352.048164][T11790] [ 352.125702][T11806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.552014][T11831] FAULT_INJECTION: forcing a failure. [ 352.552014][T11831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.566477][T11831] CPU: 0 PID: 11831 Comm: syz.3.2684 Not tainted syzkaller #0 [ 352.574011][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.584111][T11831] Call Trace: [ 352.587422][T11831] [ 352.590376][T11831] dump_stack_lvl+0x168/0x230 [ 352.595097][T11831] ? show_regs_print_info+0x20/0x20 [ 352.600328][T11831] ? load_image+0x3b0/0x3b0 [ 352.604872][T11831] ? __lock_acquire+0x7c60/0x7c60 [ 352.609914][T11831] ? trace_call_bpf+0x509/0x5a0 [ 352.614816][T11831] should_fail+0x38c/0x4c0 [ 352.619279][T11831] _copy_from_user+0x2e/0x170 [ 352.623995][T11831] __copy_msghdr_from_user+0xaf/0x5e0 [ 352.629399][T11831] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 352.635254][T11831] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 352.640614][T11831] ? trace_event_raw_event_lock+0x250/0x250 [ 352.646673][T11831] ___sys_sendmsg+0x156/0x260 [ 352.651430][T11831] ? __sys_sendmsg+0x250/0x250 [ 352.656272][T11831] ? trace_event_raw_event_lock+0x250/0x250 [ 352.662191][T11831] ? vfs_write+0x84d/0xd00 [ 352.666809][T11831] ? __fdget+0x18b/0x210 [ 352.671114][T11831] __se_sys_sendmsg+0x190/0x250 [ 352.676204][T11831] ? __x64_sys_sendmsg+0x80/0x80 [ 352.681202][T11831] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 352.687290][T11831] ? lockdep_hardirqs_on+0x94/0x140 [ 352.692533][T11831] do_syscall_64+0x4c/0xa0 [ 352.696981][T11831] ? clear_bhb_loop+0x30/0x80 [ 352.701682][T11831] ? clear_bhb_loop+0x30/0x80 [ 352.706396][T11831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.712320][T11831] RIP: 0033:0x7f6c01cc3ec9 [ 352.716762][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.736421][T11831] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.744872][T11831] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 352.752882][T11831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 352.761007][T11831] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 352.769105][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.777101][T11831] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 352.785153][T11831] [ 352.861679][T11827] can: request_module (can-proto-0) failed. [ 352.868559][T11832] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2683'. [ 352.886829][T11828] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2683'. [ 352.915423][T11834] netlink: 'syz.4.2683': attribute type 39 has an invalid length. [ 353.121285][T11840] netlink: 'syz.1.2687': attribute type 39 has an invalid length. [ 353.312480][T11845] device syzkaller0 entered promiscuous mode [ 353.798004][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 354.998481][T11917] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2717'. [ 355.362989][T11930] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2723'. [ 355.453305][T11928] netlink: 'syz.4.2721': attribute type 10 has an invalid length. [ 356.448253][T11973] netlink: 'syz.3.2736': attribute type 21 has an invalid length. [ 356.496645][T11973] netlink: 'syz.3.2736': attribute type 1 has an invalid length. [ 356.559023][T11984] netlink: 'syz.0.2738': attribute type 17 has an invalid length. [ 356.593949][T11984] netlink: 'syz.0.2738': attribute type 16 has an invalid length. [ 356.633999][T11984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2738'. [ 359.118936][T12060] FAULT_INJECTION: forcing a failure. [ 359.118936][T12060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.173973][T12060] CPU: 0 PID: 12060 Comm: syz.3.2765 Not tainted syzkaller #0 [ 359.181489][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.191570][T12060] Call Trace: [ 359.194884][T12060] [ 359.197837][T12060] dump_stack_lvl+0x168/0x230 [ 359.202556][T12060] ? show_regs_print_info+0x20/0x20 [ 359.207795][T12060] ? load_image+0x3b0/0x3b0 [ 359.212349][T12060] ? __lock_acquire+0x7c60/0x7c60 [ 359.217406][T12060] should_fail+0x38c/0x4c0 [ 359.221865][T12060] _copy_from_user+0x2e/0x170 [ 359.226573][T12060] iovec_from_user+0x142/0x370 [ 359.231390][T12060] __import_iovec+0x70/0x490 [ 359.236024][T12060] import_iovec+0x6f/0xa0 [ 359.240392][T12060] ___sys_sendmsg+0x1b9/0x260 [ 359.245112][T12060] ? __sys_sendmsg+0x250/0x250 [ 359.249928][T12060] ? trace_event_raw_event_lock+0x250/0x250 [ 359.255878][T12060] ? __fdget+0x18b/0x210 [ 359.260183][T12060] __se_sys_sendmsg+0x190/0x250 [ 359.265167][T12060] ? __x64_sys_sendmsg+0x80/0x80 [ 359.270138][T12060] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 359.276163][T12060] ? lockdep_hardirqs_on+0x94/0x140 [ 359.281484][T12060] do_syscall_64+0x4c/0xa0 [ 359.285921][T12060] ? clear_bhb_loop+0x30/0x80 [ 359.290627][T12060] ? clear_bhb_loop+0x30/0x80 [ 359.295341][T12060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.301268][T12060] RIP: 0033:0x7f6c01cc3ec9 [ 359.305708][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.325346][T12060] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.333795][T12060] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 359.341802][T12060] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 359.349803][T12060] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 359.357801][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.365811][T12060] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 359.373824][T12060] [ 359.604780][T12074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.080624][T12097] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 361.098947][T12097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 361.114616][T12097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 361.191146][T12108] netlink: 'syz.0.2780': attribute type 6 has an invalid length. [ 361.534747][T12123] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2784'. [ 361.572183][T12127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2784'. [ 361.640293][T12123] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 361.661436][T12123] CPU: 0 PID: 12123 Comm: syz.2.2784 Not tainted syzkaller #0 [ 361.669037][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.679125][T12123] Call Trace: [ 361.682431][T12123] [ 361.685392][T12123] dump_stack_lvl+0x168/0x230 [ 361.690108][T12123] ? show_regs_print_info+0x20/0x20 [ 361.695342][T12123] ? load_image+0x3b0/0x3b0 [ 361.699897][T12123] sysfs_warn_dup+0x8a/0xa0 [ 361.704438][T12123] sysfs_do_create_link_sd+0xc0/0x110 [ 361.709896][T12123] device_add+0x7ed/0xfb0 [ 361.714281][T12123] wiphy_register+0x1d67/0x2b20 [ 361.719188][T12123] ? cfg80211_event_work+0x40/0x40 [ 361.724350][T12123] ? minstrel_ht_alloc+0x808/0x980 [ 361.729497][T12123] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 361.735602][T12123] ieee80211_register_hw+0x29b1/0x39d0 [ 361.741131][T12123] ? ieee80211_tasklet_handler+0x20/0x20 [ 361.746809][T12123] ? rcu_is_watching+0x11/0xa0 [ 361.751604][T12123] ? memset+0x1e/0x40 [ 361.755636][T12123] ? hrtimer_init+0x10c/0x220 [ 361.760402][T12123] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 361.766161][T12123] hwsim_new_radio_nl+0xa6f/0xc40 [ 361.771215][T12123] genl_rcv_msg+0xbc6/0xf40 [ 361.775762][T12123] ? genl_bind+0x370/0x370 [ 361.780200][T12123] ? verify_lock_unused+0x140/0x140 [ 361.785415][T12123] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 361.792044][T12123] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 361.797798][T12123] ? perf_trace_preemptirq_template+0x2be/0x380 [ 361.804155][T12123] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 361.810700][T12123] netlink_rcv_skb+0x1e0/0x430 [ 361.815514][T12123] ? genl_bind+0x370/0x370 [ 361.820058][T12123] ? netlink_ack+0xb60/0xb60 [ 361.824686][T12123] ? preempt_count_add+0x8d/0x190 [ 361.829746][T12123] ? down_read+0x1aa/0x2e0 [ 361.834191][T12123] genl_rcv+0x24/0x40 [ 361.838191][T12123] netlink_unicast+0x774/0x920 [ 361.842980][T12123] netlink_sendmsg+0x8ab/0xbc0 [ 361.847761][T12123] ? netlink_getsockopt+0x560/0x560 [ 361.852998][T12123] ? aa_sock_msg_perm+0x94/0x150 [ 361.857953][T12123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.863255][T12123] ? security_socket_sendmsg+0x7c/0xa0 [ 361.868815][T12123] ? netlink_getsockopt+0x560/0x560 [ 361.874028][T12123] ____sys_sendmsg+0x5a2/0x8c0 [ 361.878811][T12123] ? memset+0x1e/0x40 [ 361.882800][T12123] ? __sys_sendmsg_sock+0x30/0x30 [ 361.887858][T12123] ? import_iovec+0x6f/0xa0 [ 361.892391][T12123] ___sys_sendmsg+0x1f0/0x260 [ 361.897092][T12123] ? __sys_sendmsg+0x250/0x250 [ 361.901897][T12123] ? __fdget+0x18b/0x210 [ 361.906236][T12123] __se_sys_sendmsg+0x190/0x250 [ 361.911095][T12123] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 361.917262][T12123] ? __x64_sys_sendmsg+0x80/0x80 [ 361.922224][T12123] ? syscall_enter_from_user_mode+0x2a/0x70 [ 361.928153][T12123] do_syscall_64+0x4c/0xa0 [ 361.932576][T12123] ? clear_bhb_loop+0x30/0x80 [ 361.937262][T12123] ? clear_bhb_loop+0x30/0x80 [ 361.941957][T12123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.947858][T12123] RIP: 0033:0x7f051794dec9 [ 361.952285][T12123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.971916][T12123] RSP: 002b:00007f0515bb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.980463][T12123] RAX: ffffffffffffffda RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 361.988444][T12123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 361.996510][T12123] RBP: 00007f05179d0f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.004487][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.012461][T12123] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 362.020457][T12123] [ 362.255838][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.296011][T12138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.383957][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.410258][T12138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.076661][T12153] device syzkaller0 entered promiscuous mode [ 363.128624][T12159] netlink: 'syz.2.2797': attribute type 21 has an invalid length. [ 363.144063][T12159] netlink: 'syz.2.2797': attribute type 6 has an invalid length. [ 363.152925][T12159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2797'. [ 363.381452][T12179] FAULT_INJECTION: forcing a failure. [ 363.381452][T12179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.418364][T12179] CPU: 0 PID: 12179 Comm: syz.4.2805 Not tainted syzkaller #0 [ 363.425899][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.435991][T12179] Call Trace: [ 363.439299][T12179] [ 363.442261][T12179] dump_stack_lvl+0x168/0x230 [ 363.446992][T12179] ? show_regs_print_info+0x20/0x20 [ 363.452242][T12179] ? load_image+0x3b0/0x3b0 [ 363.456806][T12179] ? __lock_acquire+0x7c60/0x7c60 [ 363.461868][T12179] should_fail+0x38c/0x4c0 [ 363.466317][T12179] _copy_to_user+0x2e/0x130 [ 363.470875][T12179] simple_read_from_buffer+0xe3/0x150 [ 363.476281][T12179] proc_fail_nth_read+0x19a/0x210 [ 363.481332][T12179] ? proc_fault_inject_write+0x2f0/0x2f0 [ 363.486990][T12179] ? fsnotify_perm+0x254/0x560 [ 363.491786][T12179] ? proc_fault_inject_write+0x2f0/0x2f0 [ 363.497434][T12179] vfs_read+0x2f6/0xcf0 [ 363.501628][T12179] ? kernel_read+0x1e0/0x1e0 [ 363.506239][T12179] ? __fget_files+0x40f/0x480 [ 363.510942][T12179] ? mutex_lock_nested+0x17/0x20 [ 363.515892][T12179] ? __fdget_pos+0x2bf/0x370 [ 363.520491][T12179] ? ksys_read+0x71/0x250 [ 363.524856][T12179] ksys_read+0x14d/0x250 [ 363.529114][T12179] ? vfs_write+0xd00/0xd00 [ 363.533546][T12179] ? lockdep_hardirqs_on+0x94/0x140 [ 363.538761][T12179] do_syscall_64+0x4c/0xa0 [ 363.543198][T12179] ? clear_bhb_loop+0x30/0x80 [ 363.547896][T12179] ? clear_bhb_loop+0x30/0x80 [ 363.552721][T12179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.558632][T12179] RIP: 0033:0x7f5d304348dc [ 363.563061][T12179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.582678][T12179] RSP: 002b:00007f5d2e69d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.591108][T12179] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d304348dc [ 363.599093][T12179] RDX: 000000000000000f RSI: 00007f5d2e69d0a0 RDI: 0000000000000006 [ 363.607081][T12179] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 363.615063][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.623046][T12179] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 363.631169][T12179] [ 363.935054][T12188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.942617][T12188] IPv6: NLM_F_CREATE should be set when creating new route [ 363.950344][T12188] IPv6: NLM_F_CREATE should be set when creating new route [ 363.957909][T12188] IPv6: NLM_F_CREATE should be set when creating new route [ 364.113141][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2810'. [ 364.229512][T12178] delete_channel: no stack [ 364.500482][T12224] netlink: 'syz.1.2822': attribute type 29 has an invalid length. [ 364.509171][T12224] netlink: 'syz.1.2822': attribute type 29 has an invalid length. [ 364.520507][T12224] netlink: 'syz.1.2822': attribute type 29 has an invalid length. [ 364.722360][T12232] FAULT_INJECTION: forcing a failure. [ 364.722360][T12232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.754482][T12232] CPU: 1 PID: 12232 Comm: syz.2.2826 Not tainted syzkaller #0 [ 364.761999][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.772085][T12232] Call Trace: [ 364.775395][T12232] [ 364.778351][T12232] dump_stack_lvl+0x168/0x230 [ 364.783069][T12232] ? show_regs_print_info+0x20/0x20 [ 364.788305][T12232] ? load_image+0x3b0/0x3b0 [ 364.792851][T12232] ? __lock_acquire+0x7c60/0x7c60 [ 364.797931][T12232] ? mark_lock+0x94/0x320 [ 364.802302][T12232] should_fail+0x38c/0x4c0 [ 364.806743][T12232] prepare_alloc_pages+0x1e4/0x5f0 [ 364.811883][T12232] __alloc_pages+0x10e/0x470 [ 364.816494][T12232] ? zone_statistics+0x170/0x170 [ 364.821458][T12232] ? alloc_pages+0x438/0x550 [ 364.826073][T12232] kmalloc_order+0x40/0x150 [ 364.830837][T12232] kmalloc_order_trace+0x14/0xf0 [ 364.835806][T12232] ipv6_set_mcast_msfilter+0x98/0x2c0 [ 364.841292][T12232] ipv6_setsockopt+0xc61/0x3890 [ 364.846164][T12232] ? ipv6_setsockopt+0x371/0x3890 [ 364.851220][T12232] ? ipv6_update_options+0x400/0x400 [ 364.856522][T12232] ? mark_lock+0x94/0x320 [ 364.860874][T12232] ? __lock_acquire+0x12d9/0x7c60 [ 364.866017][T12232] ? __lock_acquire+0x13ad/0x7c60 [ 364.871244][T12232] ? __lock_acquire+0x13ad/0x7c60 [ 364.876462][T12232] ? verify_lock_unused+0x140/0x140 [ 364.881677][T12232] ? aa_label_sk_perm+0x37e/0x490 [ 364.886718][T12232] ? aa_sk_perm+0x8f0/0x8f0 [ 364.891371][T12232] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 364.897435][T12232] ? lock_chain_count+0x20/0x20 [ 364.902297][T12232] ? rcu_is_watching+0x11/0xa0 [ 364.907068][T12232] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.913230][T12232] ? lockdep_hardirqs_on+0x94/0x140 [ 364.918446][T12232] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.924617][T12232] ? sock_common_setsockopt+0x6d/0xb0 [ 364.930001][T12232] ? udpv6_setsockopt+0x7a/0xa0 [ 364.934857][T12232] ? sock_common_recvmsg+0x1b0/0x1b0 [ 364.940157][T12232] __sys_setsockopt+0x2bf/0x3d0 [ 364.945031][T12232] __x64_sys_setsockopt+0xb1/0xc0 [ 364.950065][T12232] do_syscall_64+0x4c/0xa0 [ 364.954488][T12232] ? clear_bhb_loop+0x30/0x80 [ 364.959169][T12232] ? clear_bhb_loop+0x30/0x80 [ 364.964286][T12232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.970185][T12232] RIP: 0033:0x7f051794dec9 [ 364.974617][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.994242][T12232] RSP: 002b:00007f0515bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.002663][T12232] RAX: ffffffffffffffda RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 365.010643][T12232] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000008 [ 365.018620][T12232] RBP: 00007f0515bb5090 R08: 0000000000005000 R09: 0000000000000000 [ 365.026598][T12232] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 365.034578][T12232] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 365.042569][T12232] [ 365.066241][T12236] netlink: 'syz.0.2828': attribute type 39 has an invalid length. [ 365.338595][T12252] netlink: 'syz.2.2834': attribute type 39 has an invalid length. [ 365.470298][T12266] FAULT_INJECTION: forcing a failure. [ 365.470298][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 365.493347][T12266] CPU: 0 PID: 12266 Comm: syz.3.2836 Not tainted syzkaller #0 [ 365.500958][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.511049][T12266] Call Trace: [ 365.514354][T12266] [ 365.517315][T12266] dump_stack_lvl+0x168/0x230 [ 365.522215][T12266] ? show_regs_print_info+0x20/0x20 [ 365.527474][T12266] ? load_image+0x3b0/0x3b0 [ 365.532032][T12266] ? __might_sleep+0xf0/0xf0 [ 365.536694][T12266] ? __lock_acquire+0x7c60/0x7c60 [ 365.541760][T12266] should_fail+0x38c/0x4c0 [ 365.546211][T12266] should_failslab+0x5/0x20 [ 365.550987][T12266] slab_pre_alloc_hook+0x51/0xc0 [ 365.555958][T12266] __kmalloc+0x6b/0x330 [ 365.560123][T12266] ? tomoyo_encode+0x27e/0x540 [ 365.564993][T12266] tomoyo_encode+0x27e/0x540 [ 365.569602][T12266] tomoyo_realpath_from_path+0x5cd/0x610 [ 365.575267][T12266] tomoyo_path_number_perm+0x1d5/0x5d0 [ 365.580745][T12266] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 365.586209][T12266] ? perf_trace_lock+0xdf/0x370 [ 365.591134][T12266] security_file_ioctl+0x6c/0xa0 [ 365.596360][T12266] __se_sys_ioctl+0x48/0x170 [ 365.600985][T12266] do_syscall_64+0x4c/0xa0 [ 365.605413][T12266] ? clear_bhb_loop+0x30/0x80 [ 365.610098][T12266] ? clear_bhb_loop+0x30/0x80 [ 365.614782][T12266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.620716][T12266] RIP: 0033:0x7f6c01cc3ec9 [ 365.625149][T12266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.644764][T12266] RSP: 002b:00007f6bfff0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.653191][T12266] RAX: ffffffffffffffda RBX: 00007f6c01f1b090 RCX: 00007f6c01cc3ec9 [ 365.661312][T12266] RDX: 0000200000000200 RSI: 00000000000089e1 RDI: 0000000000000007 [ 365.669322][T12266] RBP: 00007f6bfff0a090 R08: 0000000000000000 R09: 0000000000000000 [ 365.677310][T12266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.685309][T12266] R13: 00007f6c01f1b128 R14: 00007f6c01f1b090 R15: 00007ffc78461718 [ 365.693350][T12266] [ 365.698954][T12266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 365.931506][T12281] netlink: 'syz.0.2846': attribute type 21 has an invalid length. [ 365.941517][T12281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2846'. [ 365.951427][T12281] FAULT_INJECTION: forcing a failure. [ 365.951427][T12281] name failslab, interval 1, probability 0, space 0, times 0 [ 365.965885][T12281] CPU: 1 PID: 12281 Comm: syz.0.2846 Not tainted syzkaller #0 [ 365.973489][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.983609][T12281] Call Trace: [ 365.986916][T12281] [ 365.989874][T12281] dump_stack_lvl+0x168/0x230 [ 365.994601][T12281] ? show_regs_print_info+0x20/0x20 [ 365.999830][T12281] ? load_image+0x3b0/0x3b0 [ 366.004373][T12281] ? __might_sleep+0xf0/0xf0 [ 366.008991][T12281] ? __lock_acquire+0x7c60/0x7c60 [ 366.014041][T12281] should_fail+0x38c/0x4c0 [ 366.018481][T12281] should_failslab+0x5/0x20 [ 366.023009][T12281] slab_pre_alloc_hook+0x51/0xc0 [ 366.027959][T12281] __kmalloc_node_track_caller+0x68/0x3a0 [ 366.033687][T12281] ? netlink_ack+0x3a6/0xb60 [ 366.038286][T12281] ? kmem_cache_alloc_node+0x162/0x2d0 [ 366.043873][T12281] ? __alloc_skb+0xf4/0x750 [ 366.048689][T12281] ? netlink_ack+0x3a6/0xb60 [ 366.053296][T12281] __alloc_skb+0x22c/0x750 [ 366.057727][T12281] netlink_ack+0x3a6/0xb60 [ 366.062555][T12281] ? __copy_skb_header+0x417/0x5a0 [ 366.067928][T12281] ? netlink_dump+0xcd0/0xcd0 [ 366.072839][T12281] ? __skb_clone+0x480/0x790 [ 366.077454][T12281] netlink_rcv_skb+0x265/0x430 [ 366.082244][T12281] ? rtnetlink_bind+0x80/0x80 [ 366.086936][T12281] ? netlink_ack+0xb60/0xb60 [ 366.091554][T12281] netlink_unicast+0x774/0x920 [ 366.096337][T12281] netlink_sendmsg+0x8ab/0xbc0 [ 366.101120][T12281] ? netlink_getsockopt+0x560/0x560 [ 366.106329][T12281] ? aa_sock_msg_perm+0x94/0x150 [ 366.111273][T12281] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 366.116584][T12281] ? security_socket_sendmsg+0x7c/0xa0 [ 366.122053][T12281] ? netlink_getsockopt+0x560/0x560 [ 366.127352][T12281] ____sys_sendmsg+0x5a2/0x8c0 [ 366.132134][T12281] ? memset+0x1e/0x40 [ 366.136126][T12281] ? __sys_sendmsg_sock+0x30/0x30 [ 366.141167][T12281] ? import_iovec+0x6f/0xa0 [ 366.145690][T12281] ___sys_sendmsg+0x1f0/0x260 [ 366.150390][T12281] ? __sys_sendmsg+0x250/0x250 [ 366.155177][T12281] ? vfs_write+0x84d/0xd00 [ 366.159618][T12281] ? __fdget+0x18b/0x210 [ 366.163878][T12281] __se_sys_sendmsg+0x190/0x250 [ 366.168738][T12281] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.175541][T12281] ? __x64_sys_sendmsg+0x80/0x80 [ 366.180506][T12281] ? syscall_enter_from_user_mode+0x2a/0x70 [ 366.186410][T12281] do_syscall_64+0x4c/0xa0 [ 366.190946][T12281] ? clear_bhb_loop+0x30/0x80 [ 366.195640][T12281] ? clear_bhb_loop+0x30/0x80 [ 366.200324][T12281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.206222][T12281] RIP: 0033:0x7f3e69deaec9 [ 366.210644][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.230344][T12281] RSP: 002b:00007f3e68052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.238767][T12281] RAX: ffffffffffffffda RBX: 00007f3e6a041fa0 RCX: 00007f3e69deaec9 [ 366.246745][T12281] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000007 [ 366.254726][T12281] RBP: 00007f3e68052090 R08: 0000000000000000 R09: 0000000000000000 [ 366.262701][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.270676][T12281] R13: 00007f3e6a042038 R14: 00007f3e6a041fa0 R15: 00007ffd979ad8c8 [ 366.278669][T12281] [ 366.548334][T12298] tun0: tun_chr_ioctl cmd 1074025677 [ 366.576973][T12298] tun0: linktype set to 825 [ 366.690180][T12296] netlink: 'syz.0.2848': attribute type 21 has an invalid length. [ 366.710214][T12296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2848'. [ 366.776248][T12308] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2858'. [ 366.804193][T12308] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 366.812493][T12308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.265443][T12329] FAULT_INJECTION: forcing a failure. [ 367.265443][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.336574][T12329] CPU: 0 PID: 12329 Comm: syz.4.2868 Not tainted syzkaller #0 [ 367.344186][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.354306][T12329] Call Trace: [ 367.357611][T12329] [ 367.360575][T12329] dump_stack_lvl+0x168/0x230 [ 367.365292][T12329] ? show_regs_print_info+0x20/0x20 [ 367.370521][T12329] ? load_image+0x3b0/0x3b0 [ 367.375057][T12329] ? __lock_acquire+0x7c60/0x7c60 [ 367.380129][T12329] ? __lock_acquire+0x13ad/0x7c60 [ 367.385227][T12329] should_fail+0x38c/0x4c0 [ 367.389771][T12329] strncpy_from_user+0x32/0x360 [ 367.394655][T12329] bpf_prog_load+0x1a8/0x1550 [ 367.399460][T12329] ? map_freeze+0x350/0x350 [ 367.403996][T12329] ? __might_fault+0xb7/0x110 [ 367.408712][T12329] ? __might_fault+0xb3/0x110 [ 367.413427][T12329] ? bpf_lsm_bpf+0x5/0x10 [ 367.417792][T12329] ? security_bpf+0x7a/0xa0 [ 367.422321][T12329] __sys_bpf+0x4c2/0x670 [ 367.426592][T12329] ? bpf_link_show_fdinfo+0x340/0x340 [ 367.432008][T12329] ? vtime_user_exit+0x2dc/0x400 [ 367.436982][T12329] __x64_sys_bpf+0x78/0x90 [ 367.441433][T12329] do_syscall_64+0x4c/0xa0 [ 367.445875][T12329] ? clear_bhb_loop+0x30/0x80 [ 367.450576][T12329] ? clear_bhb_loop+0x30/0x80 [ 367.455284][T12329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.461205][T12329] RIP: 0033:0x7f5d30435ec9 [ 367.465647][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.485385][T12329] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.493842][T12329] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 367.501840][T12329] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 367.509838][T12329] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 367.517892][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.526206][T12329] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 367.534328][T12329] [ 367.693355][T12348] FAULT_INJECTION: forcing a failure. [ 367.693355][T12348] name failslab, interval 1, probability 0, space 0, times 0 [ 367.706436][T12348] CPU: 1 PID: 12348 Comm: syz.3.2875 Not tainted syzkaller #0 [ 367.713935][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.724022][T12348] Call Trace: [ 367.727334][T12348] [ 367.730285][T12348] dump_stack_lvl+0x168/0x230 [ 367.735025][T12348] ? show_regs_print_info+0x20/0x20 [ 367.740253][T12348] ? load_image+0x3b0/0x3b0 [ 367.744805][T12348] ? rcu_lock_release+0x5/0x20 [ 367.749607][T12348] should_fail+0x38c/0x4c0 [ 367.754170][T12348] should_failslab+0x5/0x20 [ 367.758701][T12348] slab_pre_alloc_hook+0x51/0xc0 [ 367.763657][T12348] ? __nf_conntrack_alloc+0x99/0x380 [ 367.768969][T12348] kmem_cache_alloc+0x3d/0x290 [ 367.773773][T12348] __nf_conntrack_alloc+0x99/0x380 [ 367.778927][T12348] init_conntrack+0x240/0x14b0 [ 367.783725][T12348] ? __nf_conntrack_find_get+0x54c/0x620 [ 367.789392][T12348] ? early_drop+0x810/0x810 [ 367.793934][T12348] ? nf_conntrack_find_get+0x600/0x600 [ 367.799433][T12348] ? __siphash_unaligned+0x25c/0x3a0 [ 367.804760][T12348] nf_conntrack_in+0xce9/0x16f0 [ 367.809669][T12348] ? nf_ct_pernet+0x240/0x240 [ 367.814398][T12348] ? ip6t_alloc_initial_table+0x640/0x640 [ 367.820158][T12348] ? ipv6_defrag+0x2d2/0x3a0 [ 367.824771][T12348] ? ipv4_confirm+0x220/0x220 [ 367.829564][T12348] nf_hook_slow+0xb9/0x200 [ 367.834012][T12348] ? refcount_add+0x80/0x80 [ 367.838645][T12348] NF_HOOK+0x1cb/0x360 [ 367.842756][T12348] ? refcount_add+0x80/0x80 [ 367.847352][T12348] ? ip6_rcv_core+0x1620/0x1620 [ 367.852239][T12348] ? refcount_add+0x80/0x80 [ 367.856783][T12348] ? ip6_rcv_finish_core+0x420/0x420 [ 367.862099][T12348] __netif_receive_skb+0xcc/0x290 [ 367.867251][T12348] ? ktime_get_with_offset+0x2d7/0x320 [ 367.872737][T12348] netif_receive_skb+0x19e/0x6c0 [ 367.877703][T12348] ? rcu_nmi_exit+0x6f/0xf0 [ 367.882219][T12348] ? netif_receive_skb_core+0x210/0x210 [ 367.887784][T12348] tun_rx_batched+0x5a1/0x6d0 [ 367.892481][T12348] ? local_bh_enable+0x20/0x20 [ 367.897255][T12348] ? __local_bh_enable_ip+0x12a/0x1b0 [ 367.902641][T12348] ? read_lock_is_recursive+0x10/0x10 [ 367.908023][T12348] ? __local_bh_enable_ip+0x12a/0x1b0 [ 367.913404][T12348] ? _local_bh_enable+0xa0/0xa0 [ 367.918281][T12348] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 367.924286][T12348] tun_get_user+0x23f0/0x38d0 [ 367.928995][T12348] ? tun_ring_recv+0xc30/0xc30 [ 367.933779][T12348] ? rcu_lock_release+0x5/0x20 [ 367.938561][T12348] ? __lock_acquire+0x7c60/0x7c60 [ 367.943616][T12348] tun_chr_write_iter+0x112/0x1e0 [ 367.948651][T12348] vfs_write+0x712/0xd00 [ 367.952902][T12348] ? file_end_write+0x250/0x250 [ 367.957764][T12348] ? __fget_files+0x40f/0x480 [ 367.962459][T12348] ? __fdget_pos+0x1e2/0x370 [ 367.967062][T12348] ? ksys_write+0x71/0x250 [ 367.971578][T12348] ksys_write+0x14d/0x250 [ 367.975917][T12348] ? __ia32_sys_read+0x80/0x80 [ 367.980691][T12348] ? lockdep_hardirqs_on+0x94/0x140 [ 367.985898][T12348] do_syscall_64+0x4c/0xa0 [ 367.990317][T12348] ? clear_bhb_loop+0x30/0x80 [ 367.995001][T12348] ? clear_bhb_loop+0x30/0x80 [ 367.999697][T12348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.005592][T12348] RIP: 0033:0x7f6c01cc3ec9 [ 368.010024][T12348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.029910][T12348] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.038340][T12348] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 368.046328][T12348] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 368.054304][T12348] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 368.062284][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.070371][T12348] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 368.078366][T12348] [ 368.193510][T12357] FAULT_INJECTION: forcing a failure. [ 368.193510][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 368.212630][T12357] CPU: 1 PID: 12357 Comm: syz.3.2878 Not tainted syzkaller #0 [ 368.220153][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.230335][T12357] Call Trace: [ 368.233640][T12357] [ 368.236602][T12357] dump_stack_lvl+0x168/0x230 [ 368.241334][T12357] ? show_regs_print_info+0x20/0x20 [ 368.246568][T12357] ? load_image+0x3b0/0x3b0 [ 368.251382][T12357] ? __might_sleep+0xf0/0xf0 [ 368.256008][T12357] ? __lock_acquire+0x7c60/0x7c60 [ 368.261070][T12357] ? __lock_acquire+0x13ad/0x7c60 [ 368.266138][T12357] should_fail+0x38c/0x4c0 [ 368.270605][T12357] should_failslab+0x5/0x20 [ 368.275140][T12357] slab_pre_alloc_hook+0x51/0xc0 [ 368.280130][T12357] __kmalloc+0x6b/0x330 [ 368.284317][T12357] ? bpf_test_init+0xf8/0x1b0 [ 368.289029][T12357] bpf_test_init+0xf8/0x1b0 [ 368.293565][T12357] bpf_prog_test_run_skb+0x181/0x1180 [ 368.298974][T12357] ? lockdep_hardirqs_on+0x94/0x140 [ 368.304209][T12357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 368.310408][T12357] ? cpu_online+0x60/0x60 [ 368.314765][T12357] bpf_prog_test_run+0x31e/0x390 [ 368.319734][T12357] __sys_bpf+0x535/0x670 [ 368.324020][T12357] ? bpf_link_show_fdinfo+0x340/0x340 [ 368.329441][T12357] __x64_sys_bpf+0x78/0x90 [ 368.333887][T12357] do_syscall_64+0x4c/0xa0 [ 368.338331][T12357] ? clear_bhb_loop+0x30/0x80 [ 368.343034][T12357] ? clear_bhb_loop+0x30/0x80 [ 368.347737][T12357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.353655][T12357] RIP: 0033:0x7f6c01cc3ec9 [ 368.358094][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.377725][T12357] RSP: 002b:00007f6bfff2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.386175][T12357] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc3ec9 [ 368.394182][T12357] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 368.402178][T12357] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 368.410177][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.418200][T12357] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 368.426218][T12357] [ 368.463016][T12355] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 368.494431][T12355] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2877'. [ 368.863675][T12376] device syzkaller0 entered promiscuous mode [ 369.043125][T12391] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2892'. [ 369.637188][T12403] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2895'. [ 370.031864][T12411] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2899'. [ 370.054243][T12412] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2899'. [ 370.231484][T12406] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 370.265987][T12406] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 370.299701][T12406] device veth0_to_bridge entered promiscuous mode [ 370.570573][T12432] FAULT_INJECTION: forcing a failure. [ 370.570573][T12432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.649139][T12436] FAULT_INJECTION: forcing a failure. [ 370.649139][T12436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.694349][T12432] CPU: 1 PID: 12432 Comm: syz.3.2908 Not tainted syzkaller #0 [ 370.701933][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.712147][T12432] Call Trace: [ 370.715514][T12432] [ 370.718526][T12432] dump_stack_lvl+0x168/0x230 [ 370.723332][T12432] ? show_regs_print_info+0x20/0x20 [ 370.728646][T12432] ? load_image+0x3b0/0x3b0 [ 370.733349][T12432] ? __lock_acquire+0x7c60/0x7c60 [ 370.738534][T12432] should_fail+0x38c/0x4c0 [ 370.743154][T12432] _copy_to_user+0x2e/0x130 [ 370.747754][T12432] simple_read_from_buffer+0xe3/0x150 [ 370.753240][T12432] proc_fail_nth_read+0x19a/0x210 [ 370.758376][T12432] ? proc_fault_inject_write+0x2f0/0x2f0 [ 370.764126][T12432] ? fsnotify_perm+0x254/0x560 [ 370.769137][T12432] ? proc_fault_inject_write+0x2f0/0x2f0 [ 370.774892][T12432] vfs_read+0x2f6/0xcf0 [ 370.779193][T12432] ? kernel_read+0x1e0/0x1e0 [ 370.784082][T12432] ? __fget_files+0x40f/0x480 [ 370.788901][T12432] ? mutex_lock_nested+0x17/0x20 [ 370.793992][T12432] ? __fdget_pos+0x2bf/0x370 [ 370.798639][T12432] ? ksys_read+0x71/0x250 [ 370.803058][T12432] ksys_read+0x14d/0x250 [ 370.807390][T12432] ? vfs_write+0xd00/0xd00 [ 370.811915][T12432] ? lockdep_hardirqs_on+0x94/0x140 [ 370.817304][T12432] do_syscall_64+0x4c/0xa0 [ 370.821810][T12432] ? clear_bhb_loop+0x30/0x80 [ 370.826538][T12432] ? clear_bhb_loop+0x30/0x80 [ 370.831299][T12432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.837360][T12432] RIP: 0033:0x7f6c01cc28dc [ 370.841835][T12432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.861584][T12432] RSP: 002b:00007f6bfff2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.870420][T12432] RAX: ffffffffffffffda RBX: 00007f6c01f1afa0 RCX: 00007f6c01cc28dc [ 370.878445][T12432] RDX: 000000000000000f RSI: 00007f6bfff2b0a0 RDI: 0000000000000008 [ 370.886465][T12432] RBP: 00007f6bfff2b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.894486][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.902512][T12432] R13: 00007f6c01f1b038 R14: 00007f6c01f1afa0 R15: 00007ffc78461718 [ 370.910667][T12432] [ 370.914974][T12436] CPU: 0 PID: 12436 Comm: syz.4.2909 Not tainted syzkaller #0 [ 370.922478][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.932556][T12436] Call Trace: [ 370.935866][T12436] [ 370.938818][T12436] dump_stack_lvl+0x168/0x230 [ 370.943603][T12436] ? show_regs_print_info+0x20/0x20 [ 370.949263][T12436] ? lockdep_hardirqs_on+0x94/0x140 [ 370.954482][T12436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 370.960658][T12436] should_fail+0x38c/0x4c0 [ 370.965202][T12436] _copy_to_user+0x2e/0x130 [ 370.969841][T12436] simple_read_from_buffer+0xe3/0x150 [ 370.975325][T12436] proc_fail_nth_read+0x19a/0x210 [ 370.980362][T12436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 370.986523][T12436] ? proc_fault_inject_write+0x2f0/0x2f0 [ 370.992164][T12436] ? vfs_read+0x2df/0xcf0 [ 370.996511][T12436] ? proc_fault_inject_write+0x2f0/0x2f0 [ 371.002432][T12436] vfs_read+0x2f6/0xcf0 [ 371.006600][T12436] ? lock_chain_count+0x20/0x20 [ 371.011461][T12436] ? kernel_read+0x1e0/0x1e0 [ 371.016059][T12436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.022221][T12436] ? lockdep_hardirqs_on+0x94/0x140 [ 371.027426][T12436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.033589][T12436] ? ksys_read+0x89/0x250 [ 371.037931][T12436] ksys_read+0x14d/0x250 [ 371.042193][T12436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.048356][T12436] ? vfs_write+0xd00/0xd00 [ 371.052788][T12436] do_syscall_64+0x4c/0xa0 [ 371.057217][T12436] ? clear_bhb_loop+0x30/0x80 [ 371.061906][T12436] ? clear_bhb_loop+0x30/0x80 [ 371.066601][T12436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.072501][T12436] RIP: 0033:0x7f5d304348dc [ 371.076923][T12436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.096885][T12436] RSP: 002b:00007f5d2e69d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.105313][T12436] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d304348dc [ 371.113287][T12436] RDX: 000000000000000f RSI: 00007f5d2e69d0a0 RDI: 0000000000000006 [ 371.121345][T12436] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 371.129338][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.137315][T12436] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 371.145310][T12436] [ 371.619267][T12468] netlink: 'syz.2.2923': attribute type 12 has an invalid length. [ 371.663190][T12468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2923'. [ 371.711661][T12471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2923'. [ 371.721251][T12475] FAULT_INJECTION: forcing a failure. [ 371.721251][T12475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.739761][T12475] CPU: 0 PID: 12475 Comm: syz.0.2924 Not tainted syzkaller #0 [ 371.747271][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.757364][T12475] Call Trace: [ 371.760673][T12475] [ 371.763642][T12475] dump_stack_lvl+0x168/0x230 [ 371.768365][T12475] ? show_regs_print_info+0x20/0x20 [ 371.773595][T12475] ? load_image+0x3b0/0x3b0 [ 371.778150][T12475] ? __lock_acquire+0x7c60/0x7c60 [ 371.783210][T12475] should_fail+0x38c/0x4c0 [ 371.787675][T12475] _copy_to_user+0x2e/0x130 [ 371.792208][T12475] simple_read_from_buffer+0xe3/0x150 [ 371.797712][T12475] proc_fail_nth_read+0x19a/0x210 [ 371.802756][T12475] ? proc_fault_inject_write+0x2f0/0x2f0 [ 371.808416][T12475] ? fsnotify_perm+0x254/0x560 [ 371.813207][T12475] ? proc_fault_inject_write+0x2f0/0x2f0 [ 371.818919][T12475] vfs_read+0x2f6/0xcf0 [ 371.823190][T12475] ? kernel_read+0x1e0/0x1e0 [ 371.827808][T12475] ? __fget_files+0x40f/0x480 [ 371.832502][T12475] ? mutex_lock_nested+0x17/0x20 [ 371.837451][T12475] ? __fdget_pos+0x2bf/0x370 [ 371.842045][T12475] ? ksys_read+0x71/0x250 [ 371.846383][T12475] ksys_read+0x14d/0x250 [ 371.850662][T12475] ? vfs_write+0xd00/0xd00 [ 371.855100][T12475] ? lockdep_hardirqs_on+0x94/0x140 [ 371.860320][T12475] do_syscall_64+0x4c/0xa0 [ 371.864741][T12475] ? clear_bhb_loop+0x30/0x80 [ 371.869422][T12475] ? clear_bhb_loop+0x30/0x80 [ 371.874107][T12475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.880014][T12475] RIP: 0033:0x7f3e69de98dc [ 371.884433][T12475] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.904051][T12475] RSP: 002b:00007f3e68052030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.912483][T12475] RAX: ffffffffffffffda RBX: 00007f3e6a041fa0 RCX: 00007f3e69de98dc [ 371.920478][T12475] RDX: 000000000000000f RSI: 00007f3e680520a0 RDI: 0000000000000004 [ 371.928563][T12475] RBP: 00007f3e68052090 R08: 0000000000000000 R09: 0000000000000000 [ 371.936544][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.944675][T12475] R13: 00007f3e6a042038 R14: 00007f3e6a041fa0 R15: 00007ffd979ad8c8 [ 371.952773][T12475] [ 372.118728][T12473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2925'. [ 373.080238][T12506] netlink: 'syz.3.2936': attribute type 12 has an invalid length. [ 373.139231][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2936'. [ 373.435869][T12508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2936'. [ 373.818954][T12522] device  entered promiscuous mode [ 373.938590][T12522] FAULT_INJECTION: forcing a failure. [ 373.938590][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 373.963526][T12522] CPU: 0 PID: 12522 Comm: syz.1.2940 Not tainted syzkaller #0 [ 373.971503][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.981698][T12522] Call Trace: [ 373.985029][T12522] [ 373.988007][T12522] dump_stack_lvl+0x168/0x230 [ 373.992837][T12522] ? show_regs_print_info+0x20/0x20 [ 373.998093][T12522] ? load_image+0x3b0/0x3b0 [ 374.002751][T12522] ? __might_sleep+0xf0/0xf0 [ 374.007404][T12522] ? __lock_acquire+0x7c60/0x7c60 [ 374.012503][T12522] should_fail+0x38c/0x4c0 [ 374.017172][T12522] should_failslab+0x5/0x20 [ 374.021722][T12522] slab_pre_alloc_hook+0x51/0xc0 [ 374.026721][T12522] kmem_cache_alloc_trace+0x47/0x2a0 [ 374.032047][T12522] ? netdevice_event+0x324/0x900 [ 374.037060][T12522] netdevice_event+0x324/0x900 [ 374.041896][T12522] ? netdev_upper_walk+0x1f0/0x1f0 [ 374.047057][T12522] ? add_default_gids+0xe0/0xe0 [ 374.051974][T12522] ? is_ndev_for_default_gid_filter+0x2e0/0x2e0 [ 374.058265][T12522] ? enum_all_gids_of_dev_cb+0x260/0x260 [ 374.063949][T12522] ? del_netdev_ips+0x30/0x30 [ 374.068675][T12522] ? del_netdev_default_ips_join+0x650/0x650 [ 374.074710][T12522] ? netlbl_unlhsh_netdev_handler+0x187/0x260 [ 374.080846][T12522] raw_notifier_call_chain+0xcb/0x160 [ 374.086308][T12522] __dev_notify_flags+0x178/0x2d0 [ 374.091493][T12522] ? __dev_change_flags+0x6a0/0x6a0 [ 374.096739][T12522] ? __dev_change_flags+0x510/0x6a0 [ 374.102009][T12522] ? dev_get_flags+0x1c0/0x1c0 [ 374.106830][T12522] ? do_raw_spin_unlock+0x11d/0x230 [ 374.112124][T12522] dev_change_flags+0xe3/0x1a0 [ 374.116965][T12522] dev_ifsioc+0x147/0xe70 [ 374.121446][T12522] ? dev_ioctl+0x54e/0xe50 [ 374.125935][T12522] ? dev_ioctl+0xe50/0xe50 [ 374.130469][T12522] ? apparmor_capable+0x12c/0x190 [ 374.135553][T12522] ? full_name_hash+0x8e/0xe0 [ 374.140335][T12522] dev_ioctl+0x55f/0xe50 [ 374.144641][T12522] ? _copy_from_user+0x111/0x170 [ 374.149671][T12522] sock_do_ioctl+0x222/0x2f0 [ 374.154331][T12522] ? sock_show_fdinfo+0xb0/0xb0 [ 374.159299][T12522] sock_ioctl+0x4ed/0x6e0 [ 374.164311][T12522] ? sock_poll+0x3f0/0x3f0 [ 374.168827][T12522] ? bpf_lsm_file_ioctl+0x5/0x10 [ 374.173909][T12522] ? security_file_ioctl+0x7c/0xa0 [ 374.179077][T12522] ? sock_poll+0x3f0/0x3f0 [ 374.183550][T12522] __se_sys_ioctl+0xfa/0x170 [ 374.188210][T12522] do_syscall_64+0x4c/0xa0 [ 374.192681][T12522] ? clear_bhb_loop+0x30/0x80 [ 374.199609][T12522] ? clear_bhb_loop+0x30/0x80 [ 374.204339][T12522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.210269][T12522] RIP: 0033:0x7febaf935ec9 [ 374.214749][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.235019][T12522] RSP: 002b:00007febadb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.243471][T12522] RAX: ffffffffffffffda RBX: 00007febafb8d090 RCX: 00007febaf935ec9 [ 374.251525][T12522] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 374.259538][T12522] RBP: 00007febadb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 374.267540][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.275533][T12522] R13: 00007febafb8d128 R14: 00007febafb8d090 R15: 00007ffe2a0731f8 [ 374.283573][T12522] [ 374.382980][T12512] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 374.403607][T12521] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2942'. [ 374.422075][T12512] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 374.491525][T12512] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 374.750313][T12519] netlink: 'syz.4.2941': attribute type 10 has an invalid length. [ 375.002409][T12534] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2945'. [ 375.063161][T12540] netlink: 'syz.1.2948': attribute type 12 has an invalid length. [ 375.097145][T12540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2948'. [ 375.107674][T12543] FAULT_INJECTION: forcing a failure. [ 375.107674][T12543] name failslab, interval 1, probability 0, space 0, times 0 [ 375.190856][T12543] CPU: 0 PID: 12543 Comm: syz.0.2947 Not tainted syzkaller #0 [ 375.198394][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.208678][T12543] Call Trace: [ 375.212008][T12543] [ 375.214985][T12543] dump_stack_lvl+0x168/0x230 [ 375.219732][T12543] ? show_regs_print_info+0x20/0x20 [ 375.224988][T12543] ? load_image+0x3b0/0x3b0 [ 375.229559][T12543] ? __might_sleep+0xf0/0xf0 [ 375.234204][T12543] ? __lock_acquire+0x7c60/0x7c60 [ 375.239309][T12543] should_fail+0x38c/0x4c0 [ 375.243805][T12543] should_failslab+0x5/0x20 [ 375.248433][T12543] slab_pre_alloc_hook+0x51/0xc0 [ 375.253452][T12543] kmem_cache_alloc_trace+0x47/0x2a0 [ 375.258796][T12543] ? __request_module+0x2d4/0x910 [ 375.263894][T12543] __request_module+0x2d4/0x910 [ 375.268928][T12543] ? umd_cleanup+0x110/0x110 [ 375.273595][T12543] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 375.279518][T12543] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 375.286206][T12543] inet_diag_cmd_exact+0x320/0x540 [ 375.291405][T12543] ? inet_diag_dump_done+0x80/0x80 [ 375.296598][T12543] ? __mutex_trylock_common+0x14f/0x250 [ 375.302215][T12543] ? rcu_lock_release+0x20/0x20 [ 375.307127][T12543] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 375.313955][T12543] ? __local_bh_enable_ip+0x12a/0x1b0 [ 375.319379][T12543] ? lockdep_hardirqs_on+0x94/0x140 [ 375.324626][T12543] ? sock_diag_rcv_msg+0x14a/0x3e0 [ 375.329776][T12543] ? sock_diag_rcv_msg+0x14a/0x3e0 [ 375.334937][T12543] ? sock_diag_rcv_msg+0x14a/0x3e0 [ 375.340096][T12543] ? __mutex_lock_common+0x431/0x2390 [ 375.345552][T12543] inet_diag_rcv_msg_compat+0x2ce/0x3c0 [ 375.351173][T12543] ? inet_diag_unregister+0xb0/0xb0 [ 375.356474][T12543] ? perf_trace_lock+0xdf/0x370 [ 375.361811][T12543] ? memcpy+0x3c/0x60 [ 375.365841][T12543] ? sock_diag_rcv+0x17/0x40 [ 375.370498][T12543] ? sock_diag_rcv+0x17/0x40 [ 375.375156][T12543] ? inet_diag_unregister+0xb0/0xb0 [ 375.380399][T12543] sock_diag_rcv_msg+0x164/0x3e0 [ 375.385402][T12543] netlink_rcv_skb+0x1e0/0x430 [ 375.390237][T12543] ? sock_diag_bind+0xa0/0xa0 [ 375.395064][T12543] ? netlink_ack+0xb60/0xb60 [ 375.399716][T12543] ? __lock_acquire+0x7c60/0x7c60 [ 375.404829][T12543] sock_diag_rcv+0x26/0x40 [ 375.409292][T12543] netlink_unicast+0x774/0x920 [ 375.414161][T12543] netlink_sendmsg+0x8ab/0xbc0 [ 375.419011][T12543] ? netlink_getsockopt+0x560/0x560 [ 375.424269][T12543] ? aa_sock_msg_perm+0x94/0x150 [ 375.429269][T12543] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 375.434625][T12543] ? security_socket_sendmsg+0x7c/0xa0 [ 375.440127][T12543] ? netlink_getsockopt+0x560/0x560 [ 375.445387][T12543] ____sys_sendmsg+0x5a2/0x8c0 [ 375.450234][T12543] ? memset+0x1e/0x40 [ 375.454291][T12543] ? __sys_sendmsg_sock+0x30/0x30 [ 375.459404][T12543] ? import_iovec+0x6f/0xa0 [ 375.463986][T12543] ___sys_sendmsg+0x1f0/0x260 [ 375.468757][T12543] ? __sys_sendmsg+0x250/0x250 [ 375.473623][T12543] ? trace_event_raw_event_lock+0x250/0x250 [ 375.479562][T12543] ? vfs_write+0x84d/0xd00 [ 375.484101][T12543] ? __fdget+0x18b/0x210 [ 375.488407][T12543] __se_sys_sendmsg+0x190/0x250 [ 375.493326][T12543] ? __x64_sys_sendmsg+0x80/0x80 [ 375.498310][T12543] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 375.504391][T12543] ? lockdep_hardirqs_on+0x94/0x140 [ 375.509661][T12543] do_syscall_64+0x4c/0xa0 [ 375.514122][T12543] ? clear_bhb_loop+0x30/0x80 [ 375.518839][T12543] ? clear_bhb_loop+0x30/0x80 [ 375.523581][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.529517][T12543] RIP: 0033:0x7f3e69deaec9 [ 375.533978][T12543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.553735][T12543] RSP: 002b:00007f3e68052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.562218][T12543] RAX: ffffffffffffffda RBX: 00007f3e6a041fa0 RCX: 00007f3e69deaec9 [ 375.570248][T12543] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 375.578270][T12543] RBP: 00007f3e68052090 R08: 0000000000000000 R09: 0000000000000000 [ 375.586295][T12543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.594402][T12543] R13: 00007f3e6a042038 R14: 00007f3e6a041fa0 R15: 00007ffd979ad8c8 [ 375.602531][T12543] [ 375.752808][T12552] netlink: 'syz.1.2952': attribute type 12 has an invalid length. [ 375.805742][T12552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2952'. [ 375.850793][T12553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2952'. [ 375.881718][T12549] device  entered promiscuous mode [ 377.292664][T12577] FAULT_INJECTION: forcing a failure. [ 377.292664][T12577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.320728][T12577] CPU: 0 PID: 12577 Comm: syz.4.2962 Not tainted syzkaller #0 [ 377.328263][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.338369][T12577] Call Trace: [ 377.341696][T12577] [ 377.344761][T12577] dump_stack_lvl+0x168/0x230 [ 377.349487][T12577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.355700][T12577] ? show_regs_print_info+0x20/0x20 [ 377.360958][T12577] ? load_image+0x3b0/0x3b0 [ 377.365567][T12577] should_fail+0x38c/0x4c0 [ 377.370061][T12577] _copy_from_user+0x2e/0x170 [ 377.374800][T12577] __copy_msghdr_from_user+0x448/0x5e0 [ 377.380306][T12577] ? verify_lock_unused+0x140/0x140 [ 377.385563][T12577] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 377.390938][T12577] ? trace_event_raw_event_lock+0x250/0x250 [ 377.396920][T12577] ___sys_sendmsg+0x156/0x260 [ 377.401725][T12577] ? __sys_sendmsg+0x250/0x250 [ 377.406670][T12577] ? __fdget+0x18b/0x210 [ 377.410978][T12577] __se_sys_sendmsg+0x190/0x250 [ 377.415875][T12577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.422086][T12577] ? __x64_sys_sendmsg+0x80/0x80 [ 377.427131][T12577] ? syscall_enter_from_user_mode+0x2a/0x70 [ 377.433130][T12577] do_syscall_64+0x4c/0xa0 [ 377.437590][T12577] ? clear_bhb_loop+0x30/0x80 [ 377.442319][T12577] ? clear_bhb_loop+0x30/0x80 [ 377.447058][T12577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.453000][T12577] RIP: 0033:0x7f5d30435ec9 [ 377.457464][T12577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.477199][T12577] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.485716][T12577] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 377.493853][T12577] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 377.501869][T12577] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.509887][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.517906][T12577] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 377.525981][T12577] [ 377.838231][T12589] netlink: 'syz.4.2966': attribute type 8 has an invalid length. [ 377.855523][T12589] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2966'. [ 378.219433][ T4288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.407610][ T4288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.699972][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.706737][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.849551][T12610] netlink: 'syz.1.2971': attribute type 29 has an invalid length. [ 379.005255][ T4288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.090536][T12610] netlink: 'syz.1.2971': attribute type 29 has an invalid length. [ 379.124456][T12611] netlink: 'syz.1.2971': attribute type 29 has an invalid length. [ 379.199434][ T4288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.374190][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 379.975600][T12578] chnl_net:caif_netlink_parms(): no params data found [ 380.264646][T12636] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2976'. [ 381.079857][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.131737][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.204462][T12578] device bridge_slave_0 entered promiscuous mode [ 381.323943][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.334748][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.372055][T12578] device bridge_slave_1 entered promiscuous mode [ 381.444880][ T5911] Bluetooth: hci5: command 0x041b tx timeout [ 381.709122][T12578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.763695][T12578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.992269][T12676] FAULT_INJECTION: forcing a failure. [ 381.992269][T12676] name failslab, interval 1, probability 0, space 0, times 0 [ 382.044378][T12676] CPU: 1 PID: 12676 Comm: syz.4.2986 Not tainted syzkaller #0 [ 382.051917][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.062109][T12676] Call Trace: [ 382.065436][T12676] [ 382.068435][T12676] dump_stack_lvl+0x168/0x230 [ 382.073182][T12676] ? show_regs_print_info+0x20/0x20 [ 382.078531][T12676] ? load_image+0x3b0/0x3b0 [ 382.083145][T12676] should_fail+0x38c/0x4c0 [ 382.087650][T12676] should_failslab+0x5/0x20 [ 382.092198][T12676] slab_pre_alloc_hook+0x51/0xc0 [ 382.097197][T12676] kmem_cache_alloc_trace+0x47/0x2a0 [ 382.102531][T12676] ? sctp_add_bind_addr+0x89/0x350 [ 382.107837][T12676] sctp_add_bind_addr+0x89/0x350 [ 382.112919][T12676] sctp_copy_local_addr_list+0x2d4/0x490 [ 382.118640][T12676] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 382.124789][T12676] ? sctp_v4_is_any+0x31/0x50 [ 382.129533][T12676] ? sctp_copy_one_addr+0x93/0x660 [ 382.134729][T12676] sctp_bind_addr_copy+0xaf/0x3c0 [ 382.139819][T12676] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 382.146262][T12676] sctp_connect_new_asoc+0x2d6/0x690 [ 382.151625][T12676] ? __sctp_connect+0xd20/0xd20 [ 382.156602][T12676] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 382.162196][T12676] ? security_sctp_bind_connect+0x85/0xb0 [ 382.167972][T12676] sctp_sendmsg+0x15e0/0x2950 [ 382.172758][T12676] ? lockdep_hardirqs_on+0x94/0x140 [ 382.178007][T12676] ? sctp_getsockopt+0x8a0/0x8a0 [ 382.183085][T12676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.189426][T12676] ? inet_sendmsg+0x66/0x2f0 [ 382.194098][T12676] ? inet_sendmsg+0x78/0x2f0 [ 382.198998][T12676] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.204345][T12676] ? security_socket_sendmsg+0x7c/0xa0 [ 382.209865][T12676] ? inet_send_prepare+0x260/0x260 [ 382.215144][T12676] ____sys_sendmsg+0x5a2/0x8c0 [ 382.219995][T12676] ? memset+0x1e/0x40 [ 382.224069][T12676] ? __sys_sendmsg_sock+0x30/0x30 [ 382.229190][T12676] ? import_iovec+0x6f/0xa0 [ 382.233778][T12676] ___sys_sendmsg+0x1f0/0x260 [ 382.238547][T12676] ? __sys_sendmsg+0x250/0x250 [ 382.243498][T12676] ? __fdget+0x18b/0x210 [ 382.247802][T12676] __se_sys_sendmsg+0x190/0x250 [ 382.252705][T12676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 382.258921][T12676] ? __x64_sys_sendmsg+0x80/0x80 [ 382.264321][T12676] ? syscall_enter_from_user_mode+0x2a/0x70 [ 382.270286][T12676] do_syscall_64+0x4c/0xa0 [ 382.274751][T12676] ? clear_bhb_loop+0x30/0x80 [ 382.279496][T12676] ? clear_bhb_loop+0x30/0x80 [ 382.284232][T12676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.290179][T12676] RIP: 0033:0x7f5d30435ec9 [ 382.294666][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.314354][T12676] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.322830][T12676] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 382.330858][T12676] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 382.338889][T12676] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 382.347014][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.355044][T12676] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 382.363129][T12676] [ 382.590603][T12684] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2988'. [ 382.691084][T12578] team0: Port device team_slave_0 added [ 382.748987][T12578] team0: Port device team_slave_1 added [ 382.987974][T12578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.005856][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.216052][T12578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.364396][T12578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.375616][T12693] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2990'. [ 383.408114][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.524594][T12578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.526527][ T5911] Bluetooth: hci5: command 0x040f tx timeout [ 383.841958][T12692] IPv6: Can't replace route, no match found [ 384.176580][T12578] device hsr_slave_0 entered promiscuous mode [ 384.284722][T12578] device hsr_slave_1 entered promiscuous mode [ 384.347382][T12578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.378009][T12578] Cannot create hsr debugfs directory [ 385.578560][ T4288] device veth0_to_bridge left promiscuous mode [ 385.595449][ T4288] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 385.611393][ T4288] device veth0_to_team left promiscuous mode [ 385.612038][ T5917] Bluetooth: hci5: command 0x0419 tx timeout [ 385.628310][ T4288] Ÿë: port 1(veth0_to_team) entered disabled state [ 385.739396][ T4288] device hsr_slave_0 left promiscuous mode [ 385.796095][ T4288] device hsr_slave_1 left promiscuous mode [ 385.817288][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.849748][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.879299][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.908758][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.026404][ T4288] device bridge_slave_1 left promiscuous mode [ 386.032715][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.100808][ T4288] device bridge_slave_0 left promiscuous mode [ 386.112067][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.114105][T12750] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3002'. [ 386.209735][ T4288] device veth1_macvtap left promiscuous mode [ 386.243946][ T4288] device veth1_vlan left promiscuous mode [ 386.264605][ T4288] device veth0_vlan left promiscuous mode [ 387.092043][T12736] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 387.102968][T12736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 387.117769][T12736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 387.156208][T12756] IPv6: Can't replace route, no match found [ 388.010601][T12578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.044015][T12578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.064465][T12794] netlink: 'syz.4.3013': attribute type 10 has an invalid length. [ 388.131471][T12578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.299105][T12578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.587383][T12825] netlink: 'syz.2.3021': attribute type 21 has an invalid length. [ 388.646168][T12828] netlink: 'syz.4.3023': attribute type 9 has an invalid length. [ 388.673102][T12825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3021'. [ 388.683667][T12828] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3023'. [ 388.829532][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.931102][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.944644][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.993687][T12578] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.080745][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.111011][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.179455][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.186814][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.294105][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.326787][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.356619][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.363920][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.417149][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 389.496419][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 389.523466][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 389.538046][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.611500][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.681958][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.720868][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.774362][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.809965][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.858840][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.902842][T12578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.957162][T12578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.023584][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.072921][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.143017][T12874] FAULT_INJECTION: forcing a failure. [ 390.143017][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 390.167613][T12874] CPU: 1 PID: 12874 Comm: syz.2.3034 Not tainted syzkaller #0 [ 390.175137][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.185307][T12874] Call Trace: [ 390.188605][T12874] [ 390.191566][T12874] dump_stack_lvl+0x168/0x230 [ 390.196305][T12874] ? show_regs_print_info+0x20/0x20 [ 390.201799][T12874] ? load_image+0x3b0/0x3b0 [ 390.206337][T12874] ? __might_sleep+0xf0/0xf0 [ 390.210961][T12874] ? __lock_acquire+0x7c60/0x7c60 [ 390.216025][T12874] should_fail+0x38c/0x4c0 [ 390.220479][T12874] should_failslab+0x5/0x20 [ 390.225067][T12874] slab_pre_alloc_hook+0x51/0xc0 [ 390.230034][T12874] kmem_cache_alloc_trace+0x47/0x2a0 [ 390.235342][T12874] ? apparmor_sk_alloc_security+0x74/0x100 [ 390.241536][T12874] apparmor_sk_alloc_security+0x74/0x100 [ 390.247316][T12874] security_sk_alloc+0x6a/0xa0 [ 390.252117][T12874] sk_prot_alloc+0x101/0x210 [ 390.256759][T12874] ? sk_alloc+0x1d/0x310 [ 390.261032][T12874] sk_alloc+0x2f/0x310 [ 390.265137][T12874] bpf_prog_test_run_skb+0x240/0x1180 [ 390.270552][T12874] ? __fget_files+0x40f/0x480 [ 390.275271][T12874] ? cpu_online+0x60/0x60 [ 390.279645][T12874] bpf_prog_test_run+0x31e/0x390 [ 390.284634][T12874] __sys_bpf+0x535/0x670 [ 390.289040][T12874] ? bpf_link_show_fdinfo+0x340/0x340 [ 390.294470][T12874] ? vtime_user_exit+0x2dc/0x400 [ 390.299450][T12874] __x64_sys_bpf+0x78/0x90 [ 390.303915][T12874] do_syscall_64+0x4c/0xa0 [ 390.308358][T12874] ? clear_bhb_loop+0x30/0x80 [ 390.313069][T12874] ? clear_bhb_loop+0x30/0x80 [ 390.318717][T12874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.324644][T12874] RIP: 0033:0x7f051794dec9 [ 390.329107][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.348736][T12874] RSP: 002b:00007f0515bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.357184][T12874] RAX: ffffffffffffffda RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 390.365185][T12874] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 390.373193][T12874] RBP: 00007f0515bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 390.381197][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.389407][T12874] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 390.397431][T12874] [ 390.713708][T12894] IPv6: Can't replace route, no match found [ 390.801347][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.824207][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.847995][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.896869][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.906655][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.957557][T12904] netlink: 'syz.1.3040': attribute type 29 has an invalid length. [ 390.988387][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.020021][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.058790][T12578] device veth0_vlan entered promiscuous mode [ 391.073673][T12904] netlink: 'syz.1.3040': attribute type 29 has an invalid length. [ 391.094547][T12906] netlink: 'syz.1.3040': attribute type 29 has an invalid length. [ 391.153321][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.178562][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.236297][T12578] device veth1_vlan entered promiscuous mode [ 391.351513][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.394781][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.442079][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.473585][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.523297][T12578] device veth0_macvtap entered promiscuous mode [ 391.562546][T12578] device veth1_macvtap entered promiscuous mode [ 391.656310][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.696534][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.719598][T12578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.750081][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.765079][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.801990][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.833451][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.856009][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.868962][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.879277][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.890975][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.903094][T12578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.922120][T12930] tun0: tun_chr_ioctl cmd 1074025675 [ 391.940564][T12930] tun0: persist disabled [ 391.949114][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.965968][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.004265][T12578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.013033][T12578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.054449][T12578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.079330][T12578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.288841][ T5693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.338943][ T5693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.382268][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.522126][ T5706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.540752][T12961] netlink: 143108 bytes leftover after parsing attributes in process `syz.1.3052'. [ 392.564451][ T5706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.581177][ T5706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 392.594370][T12961] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 393.250418][T12979] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3055'. [ 393.810753][T12995] device syzkaller0 entered promiscuous mode [ 394.240713][T13016] netlink: 'syz.2.3064': attribute type 10 has an invalid length. [ 394.644483][T13022] netlink: 'syz.4.3067': attribute type 39 has an invalid length. [ 394.739034][T12991] chnl_net:caif_netlink_parms(): no params data found [ 395.080381][T12991] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.090705][T12991] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.102970][T12991] device bridge_slave_0 entered promiscuous mode [ 395.134146][T12991] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.141642][T12991] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.160210][T12991] device bridge_slave_1 entered promiscuous mode [ 395.327767][T12991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.360846][T12991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.479281][T12991] team0: Port device team_slave_0 added [ 395.507260][T12991] team0: Port device team_slave_1 added [ 395.525256][T13064] FAULT_INJECTION: forcing a failure. [ 395.525256][T13064] name failslab, interval 1, probability 0, space 0, times 0 [ 395.588764][T13064] CPU: 1 PID: 13064 Comm: syz.4.3081 Not tainted syzkaller #0 [ 395.596288][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.606369][T13064] Call Trace: [ 395.609680][T13064] [ 395.612631][T13064] dump_stack_lvl+0x168/0x230 [ 395.617343][T13064] ? show_regs_print_info+0x20/0x20 [ 395.622574][T13064] ? load_image+0x3b0/0x3b0 [ 395.627109][T13064] ? __might_sleep+0xf0/0xf0 [ 395.631809][T13064] ? __lock_acquire+0x7c60/0x7c60 [ 395.636867][T13064] should_fail+0x38c/0x4c0 [ 395.641332][T13064] should_failslab+0x5/0x20 [ 395.645863][T13064] slab_pre_alloc_hook+0x51/0xc0 [ 395.650825][T13064] kmem_cache_alloc_trace+0x47/0x2a0 [ 395.656133][T13064] ? apparmor_sk_alloc_security+0x74/0x100 [ 395.661968][T13064] apparmor_sk_alloc_security+0x74/0x100 [ 395.667626][T13064] security_sk_alloc+0x6a/0xa0 [ 395.672414][T13064] sk_prot_alloc+0x101/0x210 [ 395.677039][T13064] ? sk_alloc+0x1d/0x310 [ 395.681309][T13064] sk_alloc+0x2f/0x310 [ 395.685419][T13064] bpf_prog_test_run_skb+0x240/0x1180 [ 395.690823][T13064] ? __fget_files+0x40f/0x480 [ 395.695549][T13064] ? cpu_online+0x60/0x60 [ 395.699913][T13064] bpf_prog_test_run+0x31e/0x390 [ 395.704892][T13064] __sys_bpf+0x535/0x670 [ 395.709167][T13064] ? bpf_link_show_fdinfo+0x340/0x340 [ 395.714588][T13064] ? vtime_user_exit+0x2dc/0x400 [ 395.719569][T13064] __x64_sys_bpf+0x78/0x90 [ 395.724018][T13064] do_syscall_64+0x4c/0xa0 [ 395.728453][T13064] ? clear_bhb_loop+0x30/0x80 [ 395.733162][T13064] ? clear_bhb_loop+0x30/0x80 [ 395.737881][T13064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.743813][T13064] RIP: 0033:0x7f5d30435ec9 [ 395.748291][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.767940][T13064] RSP: 002b:00007f5d2e69d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.776480][T13064] RAX: ffffffffffffffda RBX: 00007f5d3068cfa0 RCX: 00007f5d30435ec9 [ 395.784485][T13064] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 395.792579][T13064] RBP: 00007f5d2e69d090 R08: 0000000000000000 R09: 0000000000000000 [ 395.800693][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.809105][T13064] R13: 00007f5d3068d038 R14: 00007f5d3068cfa0 R15: 00007ffd60a1caa8 [ 395.817143][T13064] [ 395.832615][ T5913] Bluetooth: hci0: command 0x0409 tx timeout [ 395.961652][T13066] netlink: 'syz.3.3080': attribute type 39 has an invalid length. [ 396.136884][T12991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.175806][T12991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.283243][T12991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.336945][T12991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.381297][T12991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.506526][T12991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.746894][T12991] device hsr_slave_0 entered promiscuous mode [ 396.798200][T12991] device hsr_slave_1 entered promiscuous mode [ 396.841560][T12991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.853158][T12991] Cannot create hsr debugfs directory [ 397.366696][T12991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.507915][T13097] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.3092'. [ 397.517970][T13097] netlink: 'syz.3.3092': attribute type 1 has an invalid length. [ 397.638815][T12991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.887276][T13108] netlink: 'syz.2.3093': attribute type 39 has an invalid length. [ 397.924538][ T5913] Bluetooth: hci0: command 0x041b tx timeout [ 398.061891][T12991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.203734][T12991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.530146][T12991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.578086][T12991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.605843][T12991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.673951][T12991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.722599][T13139] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.760715][T13141] netlink: 'syz.2.3106': attribute type 16 has an invalid length. [ 398.784701][T13141] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3106'. [ 399.020810][T13159] FAULT_INJECTION: forcing a failure. [ 399.020810][T13159] name failslab, interval 1, probability 0, space 0, times 0 [ 399.049897][T13159] CPU: 1 PID: 13159 Comm: syz.3.3111 Not tainted syzkaller #0 [ 399.057423][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.067511][T13159] Call Trace: [ 399.070815][T13159] [ 399.073774][T13159] dump_stack_lvl+0x168/0x230 [ 399.078479][T13159] ? show_regs_print_info+0x20/0x20 [ 399.083757][T13159] ? load_image+0x3b0/0x3b0 [ 399.088288][T13159] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.094300][T13159] ? lock_chain_count+0x20/0x20 [ 399.099188][T13159] should_fail+0x38c/0x4c0 [ 399.103634][T13159] should_failslab+0x5/0x20 [ 399.108155][T13159] slab_pre_alloc_hook+0x51/0xc0 [ 399.113123][T13159] ? __debug_object_init+0x613/0xa40 [ 399.118449][T13159] kmem_cache_alloc+0x3d/0x290 [ 399.123326][T13159] __debug_object_init+0x613/0xa40 [ 399.128471][T13159] ? debug_object_init+0x10/0x10 [ 399.133425][T13159] ? memset+0x1e/0x40 [ 399.137437][T13159] ? sctp_endpoint_hold+0x13f/0x1c0 [ 399.142654][T13159] ? sctp_endpoint_put+0x1b0/0x1b0 [ 399.147802][T13159] init_timer_key+0x3d/0x2a0 [ 399.152416][T13159] sctp_association_new+0xb89/0x24a0 [ 399.157760][T13159] sctp_connect_new_asoc+0x2bb/0x690 [ 399.163087][T13159] ? __sctp_connect+0xd20/0xd20 [ 399.167961][T13159] ? __local_bh_enable_ip+0x12a/0x1b0 [ 399.173364][T13159] ? _local_bh_enable+0xa0/0xa0 [ 399.178239][T13159] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 399.183802][T13159] ? security_sctp_bind_connect+0x85/0xb0 [ 399.189546][T13159] sctp_sendmsg+0x15e0/0x2950 [ 399.194258][T13159] ? aa_sk_perm+0x7b4/0x8f0 [ 399.198794][T13159] ? sctp_getsockopt+0x8a0/0x8a0 [ 399.203871][T13159] ? aa_af_perm+0x2b0/0x2b0 [ 399.208406][T13159] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 399.215090][T13159] ? sock_rps_record_flow+0x17/0x3b0 [ 399.220415][T13159] ? inet_send_prepare+0x260/0x260 [ 399.225566][T13159] ? inet_sendmsg+0x78/0x2f0 [ 399.230202][T13159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 399.235521][T13159] ? security_socket_sendmsg+0x7c/0xa0 [ 399.241011][T13159] ? inet_send_prepare+0x260/0x260 [ 399.246247][T13159] ____sys_sendmsg+0x5a2/0x8c0 [ 399.251063][T13159] ? memset+0x1e/0x40 [ 399.255545][T13159] ? __sys_sendmsg_sock+0x30/0x30 [ 399.260610][T13159] ? import_iovec+0x6f/0xa0 [ 399.264839][T12991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.265139][T13159] ___sys_sendmsg+0x1f0/0x260 [ 399.276419][T13159] ? __sys_sendmsg+0x250/0x250 [ 399.281216][T13159] ? vfs_write+0x84d/0xd00 [ 399.285688][T13159] ? __fdget+0x18b/0x210 [ 399.289962][T13159] __se_sys_sendmsg+0x190/0x250 [ 399.294848][T13159] ? __x64_sys_sendmsg+0x80/0x80 [ 399.299815][T13159] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.305850][T13159] ? lockdep_hardirqs_on+0x94/0x140 [ 399.311079][T13159] do_syscall_64+0x4c/0xa0 [ 399.315146][T12991] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.315515][T13159] ? clear_bhb_loop+0x30/0x80 [ 399.326788][T13159] ? clear_bhb_loop+0x30/0x80 [ 399.331494][T13159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.337409][T13159] RIP: 0033:0x7f54575f3ec9 [ 399.341853][T13159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.361637][T13159] RSP: 002b:00007f545585b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.370086][T13159] RAX: ffffffffffffffda RBX: 00007f545784afa0 RCX: 00007f54575f3ec9 [ 399.378093][T13159] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 399.386099][T13159] RBP: 00007f545585b090 R08: 0000000000000000 R09: 0000000000000000 [ 399.394104][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.402088][T12991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.402109][T13159] R13: 00007f545784b038 R14: 00007f545784afa0 R15: 00007ffd16798ec8 [ 399.414483][T12991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.420521][T13159] [ 399.442548][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.451463][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.459647][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.468938][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.477859][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.485052][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.493097][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.502205][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.518768][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.526087][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.543624][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.561624][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.601375][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.642013][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.698272][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.726770][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.736719][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.746287][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.755731][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.767130][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.776006][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.784997][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.793302][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.004125][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 402.084091][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 402.617847][T13164] netlink: 'syz.1.3112': attribute type 39 has an invalid length. [ 403.071661][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.091800][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.205329][T12991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.416140][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.456424][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.509563][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.574459][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.587020][T12991] device veth0_vlan entered promiscuous mode [ 403.625650][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.696594][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.721383][T13196] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3123'. [ 403.792093][T12991] device veth1_vlan entered promiscuous mode [ 403.858685][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 403.874789][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 403.917694][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.937898][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.959911][T12991] device veth0_macvtap entered promiscuous mode [ 403.985698][T12991] device veth1_macvtap entered promiscuous mode [ 404.037560][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.052311][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.069939][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.090775][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.115337][T12991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.129355][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.138543][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.147988][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.157408][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.183354][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.205817][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.220674][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.241998][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.261096][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.273411][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.291907][T12991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.302837][T12991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.324898][T12991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.336946][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.355552][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.418619][T12991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.430857][T12991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.439753][T12991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.449133][T12991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.598814][ T5689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.611387][ T5689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.626396][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 404.662330][ T5689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.672636][ T5689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.688802][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 405.472543][ T4288] device veth0_to_team left promiscuous mode [ 405.479318][ T4288] Ÿë: port 1(veth0_to_team) entered disabled state [ 405.491118][ T4288] device hsr_slave_0 left promiscuous mode [ 405.497874][ T4288] device hsr_slave_1 left promiscuous mode [ 405.504685][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.512143][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.520934][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.529128][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.541309][ T4288] device bridge_slave_1 left promiscuous mode [ 405.548654][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.558950][ T4288] device bridge_slave_0 left promiscuous mode [ 405.565322][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.581006][ T4288] device veth1_macvtap left promiscuous mode [ 405.587449][ T4288] device veth1_vlan left promiscuous mode [ 405.593330][ T4288] device veth0_vlan left promiscuous mode [ 440.016293][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.022733][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.457743][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464124][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.523973][T13208] Bluetooth: hci5: command 0x0406 tx timeout [ 518.883928][ T5915] Bluetooth: hci0: command 0x0406 tx timeout [ 556.484171][ T27] INFO: task napi/wg2-0:4252 blocked for more than 143 seconds. [ 556.491872][ T27] Not tainted syzkaller #0 [ 556.497045][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.505885][ T27] task:napi/wg2-0 state:D stack:28832 pid: 4252 ppid: 2 flags:0x00004000 [ 556.515208][ T27] Call Trace: [ 556.518507][ T27] [ 556.521444][ T27] __schedule+0x11bb/0x4390 [ 556.526082][ T27] ? release_firmware_map_entry+0x190/0x190 [ 556.532100][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.538177][ T27] ? lock_chain_count+0x20/0x20 [ 556.543059][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.548378][ T27] schedule+0x11b/0x1e0 [ 556.552576][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 556.557721][ T27] ? __percpu_down_read+0x100/0x100 [ 556.562942][ T27] ? percpu_up_write+0x90/0x90 [ 556.568184][ T27] __percpu_down_read+0xc9/0x100 [ 556.573186][ T27] exit_signals+0x3e5/0x510 [ 556.579046][ T27] do_exit+0x256/0x20a0 [ 556.583261][ T27] ? __local_bh_enable_ip+0x12a/0x1b0 [ 556.588916][ T27] ? put_task_struct+0x80/0x80 [ 556.593897][ T27] ? kthread_should_stop+0xa7/0xe0 [ 556.599027][ T27] ? napi_thread_wait+0x116/0x1e0 [ 556.604161][ T27] ? napi_threaded_poll+0x2b8/0x2e0 [ 556.609400][ T27] kthread_exit+0x11/0x20 [ 556.613832][ T27] kthread+0x454/0x520 [ 556.617962][ T27] ? nf_reset_ct+0xf0/0xf0 [ 556.622393][ T27] ? kthread_blkcg+0xd0/0xd0 [ 556.627101][ T27] ret_from_fork+0x1f/0x30 [ 556.631588][ T27] [ 556.634724][ T27] INFO: task kworker/u4:6:4288 blocked for more than 143 seconds. [ 556.642994][ T27] Not tainted syzkaller #0 [ 556.648197][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.656943][ T27] task:kworker/u4:6 state:D stack:21280 pid: 4288 ppid: 2 flags:0x00004000 [ 556.666279][ T27] Workqueue: netns cleanup_net [ 556.671098][ T27] Call Trace: [ 556.675128][ T27] [ 556.678098][ T27] __schedule+0x11bb/0x4390 [ 556.682609][ T27] ? verify_lock_unused+0x140/0x140 [ 556.689327][ T27] ? __lock_acquire+0x13ad/0x7c60 [ 556.694498][ T27] ? release_firmware_map_entry+0x190/0x190 [ 556.700434][ T27] ? kthread_data+0x4b/0xc0 [ 556.705065][ T27] schedule+0x11b/0x1e0 [ 556.709248][ T27] schedule_timeout+0x97/0x280 [ 556.714171][ T27] ? console_conditional_schedule+0x40/0x40 [ 556.720091][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.726213][ T27] ? lock_chain_count+0x20/0x20 [ 556.731096][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.736388][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.741612][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 556.746913][ T27] do_wait_for_common+0x29a/0x440 [ 556.751964][ T27] ? console_conditional_schedule+0x40/0x40 [ 556.757943][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 556.765053][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 556.770106][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 556.775124][ T27] wait_for_completion+0x48/0x60 [ 556.780086][ T27] kthread_stop+0x16e/0x540 [ 556.784913][ T27] __netif_napi_del+0x685/0x7a0 [ 556.790385][ T27] peer_remove_after_dead+0xe1/0x1a0 [ 556.795940][ T27] wg_peer_remove_all+0x447/0x4e0 [ 556.801028][ T27] ? peer_remove_after_dead+0x1a0/0x1a0 [ 556.806834][ T27] ? wg_socket_reinit+0x306/0x350 [ 556.812023][ T27] wg_destruct+0x176/0x300 [ 556.816569][ T27] ? wg_xmit+0xee0/0xee0 [ 556.820852][ T27] netdev_run_todo+0x82d/0xa40 [ 556.825691][ T27] ? netdev_refcnt_read+0x50/0x50 [ 556.830754][ T27] ? unregister_netdevice_queue+0x1aa/0x360 [ 556.837681][ T27] ? list_netdevice+0x450/0x450 [ 556.842706][ T27] ? br_dev_delete+0xd6/0x100 [ 556.847606][ T27] default_device_exit_batch+0x33b/0x390 [ 556.853279][ T27] ? default_device_exit+0x360/0x360 [ 556.859581][ T27] ? wait_woken+0x1b0/0x1b0 [ 556.864248][ T27] ? mutex_lock_nested+0x17/0x20 [ 556.869220][ T27] ? default_device_exit+0x360/0x360 [ 556.874662][ T27] cleanup_net+0x77b/0xb80 [ 556.879117][ T27] ? ops_free_list+0x330/0x330 [ 556.884444][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 556.890375][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.896354][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.901604][ T27] process_one_work+0x863/0x1000 [ 556.906732][ T27] ? worker_detach_from_pool+0x240/0x240 [ 556.912410][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 556.917855][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 556.922914][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 556.928419][ T27] ? wq_worker_running+0x97/0x170 [ 556.933566][ T27] worker_thread+0xaa8/0x12a0 [ 556.938382][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 556.945178][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 556.950422][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 556.956112][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 556.962072][ T27] kthread+0x436/0x520 [ 556.966584][ T27] ? rcu_lock_release+0x20/0x20 [ 556.971553][ T27] ? kthread_blkcg+0xd0/0xd0 [ 556.976608][ T27] ret_from_fork+0x1f/0x30 [ 556.981088][ T27] [ 556.984579][ T27] INFO: task syz-executor:12991 blocked for more than 143 seconds. [ 556.992508][ T27] Not tainted syzkaller #0 [ 556.998785][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.007763][ T27] task:syz-executor state:D stack:20232 pid:12991 ppid: 12973 flags:0x00004000 [ 557.017386][ T27] Call Trace: [ 557.020703][ T27] [ 557.023661][ T27] __schedule+0x11bb/0x4390 [ 557.028338][ T27] ? release_firmware_map_entry+0x190/0x190 [ 557.034301][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.040315][ T27] ? lock_chain_count+0x20/0x20 [ 557.045711][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 557.050792][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.056449][ T27] schedule+0x11b/0x1e0 [ 557.060659][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 557.066816][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 557.072180][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 557.078986][ T27] ? __rwlock_init+0x140/0x140 [ 557.084906][ T27] mpol_rebind_mm+0x33/0x2c0 [ 557.089532][ T27] ? _raw_spin_unlock+0x24/0x40 [ 557.094785][ T27] cpuset_attach+0x330/0x5f0 [ 557.099883][ T27] ? cpuset_cancel_attach+0x290/0x290 [ 557.105344][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.110580][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.115978][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 557.121308][ T27] cgroup_migrate_execute+0x7eb/0x1010 [ 557.127028][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 557.132281][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 557.137598][ T27] cgroup_attach_task+0x562/0x7e0 [ 557.142830][ T27] ? cgroup_migrate_execute+0x1010/0x1010 [ 557.148632][ T27] ? get_task_cred+0x2b6/0x330 [ 557.153434][ T27] __cgroup1_procs_write+0x2e5/0x3f0 [ 557.158815][ T27] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 557.165131][ T27] ? cgroup_pidlist_stop+0xf0/0xf0 [ 557.170275][ T27] cgroup_file_write+0x2f7/0x630 [ 557.176086][ T27] ? read_lock_is_recursive+0x10/0x10 [ 557.181768][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 557.187134][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 557.192508][ T27] kernfs_fop_write_iter+0x379/0x4c0 [ 557.199020][ T27] vfs_write+0x712/0xd00 [ 557.203805][ T27] ? file_end_write+0x250/0x250 [ 557.208828][ T27] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 557.214713][ T27] ? perf_trace_preemptirq_template+0x2be/0x380 [ 557.220992][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 557.225566][ T27] ? __fdget_pos+0x2c6/0x370 [ 557.230192][ T27] ksys_write+0x14d/0x250 [ 557.234623][ T27] ? __ia32_sys_read+0x80/0x80 [ 557.239419][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 557.244703][ T27] do_syscall_64+0x4c/0xa0 [ 557.249154][ T27] ? clear_bhb_loop+0x30/0x80 [ 557.253892][ T27] ? clear_bhb_loop+0x30/0x80 [ 557.258706][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.264681][ T27] RIP: 0033:0x7f0cd60e897f [ 557.269120][ T27] RSP: 002b:00007fff8c59f720 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 557.277874][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0cd60e897f [ 557.286551][ T27] RDX: 0000000000000001 RSI: 00007fff8c59f770 RDI: 0000000000000003 [ 557.294596][ T27] RBP: 00007fff8c59fce0 R08: 0000000000000000 R09: 00007fff8c59f577 [ 557.303005][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 557.311348][ T27] R13: 00007fff8c59f770 R14: 00007fff8c59fca0 R15: 00007fff8c59fce0 [ 557.319731][ T27] [ 557.322829][ T27] INFO: task syz.2.3123:13199 blocked for more than 144 seconds. [ 557.330732][ T27] Not tainted syzkaller #0 [ 557.335749][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.344522][ T27] task:syz.2.3123 state:D stack:20560 pid:13199 ppid: 4191 flags:0x00004002 [ 557.353795][ T27] Call Trace: [ 557.357101][ T27] [ 557.360054][ T27] __schedule+0x11bb/0x4390 [ 557.364642][ T27] ? perf_trace_preemptirq_template+0x2d0/0x380 [ 557.370920][ T27] ? release_firmware_map_entry+0x190/0x190 [ 557.376967][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.382981][ T27] ? lock_chain_count+0x20/0x20 [ 557.387901][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.393129][ T27] schedule+0x11b/0x1e0 [ 557.397960][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 557.402940][ T27] ? __percpu_down_read+0x100/0x100 [ 557.408508][ T27] ? percpu_up_write+0x90/0x90 [ 557.413347][ T27] __percpu_down_read+0xc9/0x100 [ 557.418427][ T27] exit_signals+0x3e5/0x510 [ 557.422996][ T27] do_exit+0x256/0x20a0 [ 557.427279][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 557.431805][ T27] ? put_task_struct+0x80/0x80 [ 557.436676][ T27] ? lock_chain_count+0x20/0x20 [ 557.441555][ T27] do_group_exit+0x12e/0x300 [ 557.448446][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 557.453985][ T27] get_signal+0x6ca/0x12c0 [ 557.458466][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 557.464233][ T27] ? get_sigframe_size+0x10/0x10 [ 557.469194][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 557.473762][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.479782][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 557.485357][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 557.490668][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 557.496274][ T27] irqentry_exit_to_user_mode+0x5/0x30 [ 557.501851][ T27] exc_general_protection+0x1e4/0x270 [ 557.507456][ T27] ? exc_page_fault+0x88/0x100 [ 557.512259][ T27] asm_exc_general_protection+0x22/0x30 [ 557.517888][ T27] RIP: 0033:0x7f051794ded1 [ 557.522344][ T27] RSP: 002b:0000200000000190 EFLAGS: 00010217 [ 557.528520][ T27] RAX: 0000000000000000 RBX: 00007f0517ba4fa0 RCX: 00007f051794dec9 [ 557.536596][ T27] RDX: 00002000000001c0 RSI: 0000200000000190 RDI: 0000000000008000 [ 557.544685][ T27] RBP: 00007f05179d0f91 R08: 0000200000000240 R09: 0000200000000240 [ 557.552685][ T27] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 557.560988][ T27] R13: 00007f0517ba5038 R14: 00007f0517ba4fa0 R15: 00007ffcd4931a98 [ 557.569379][ T27] [ 557.572448][ T27] INFO: task syz.3.3127:13206 blocked for more than 144 seconds. [ 557.580263][ T27] Not tainted syzkaller #0 [ 557.585271][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.594028][ T27] task:syz.3.3127 state:D stack:25224 pid:13206 ppid: 12578 flags:0x00004004 [ 557.603768][ T27] Call Trace: [ 557.607069][ T27] [ 557.610169][ T27] __schedule+0x11bb/0x4390 [ 557.614771][ T27] ? perf_trace_preemptirq_template+0x2d0/0x380 [ 557.621047][ T27] ? release_firmware_map_entry+0x190/0x190 [ 557.627040][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.633075][ T27] ? lock_chain_count+0x20/0x20 [ 557.637986][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.643224][ T27] schedule+0x11b/0x1e0 [ 557.647490][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 557.652465][ T27] ? __percpu_down_read+0x100/0x100 [ 557.657804][ T27] ? percpu_up_write+0x90/0x90 [ 557.662604][ T27] __percpu_down_read+0xc9/0x100 [ 557.667928][ T27] exit_signals+0x3e5/0x510 [ 557.672477][ T27] do_exit+0x256/0x20a0 [ 557.677419][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 557.682073][ T27] ? put_task_struct+0x80/0x80 [ 557.686969][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.693091][ T27] ? lock_chain_count+0x20/0x20 [ 557.698131][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 557.703195][ T27] do_group_exit+0x12e/0x300 [ 557.707906][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 557.713303][ T27] get_signal+0x6ca/0x12c0 [ 557.717844][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 557.723510][ T27] ? vm_mmap_pgoff+0x15d/0x2b0 [ 557.728356][ T27] ? down_write_killable+0x80/0x90 [ 557.733984][ T27] ? vm_mmap_pgoff+0x17e/0x2b0 [ 557.738795][ T27] ? get_sigframe_size+0x10/0x10 [ 557.744006][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 557.748543][ T27] ? ksys_mmap_pgoff+0x140/0x780 [ 557.753499][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 557.759052][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 557.765489][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 557.771184][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 557.777795][ T27] do_syscall_64+0x58/0xa0 [ 557.782268][ T27] ? clear_bhb_loop+0x30/0x80 [ 557.787343][ T27] ? clear_bhb_loop+0x30/0x80 [ 557.792062][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.798067][ T27] RIP: 0033:0x7f54575f3f03 [ 557.802515][ T27] RSP: 002b:00007ffd16798e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 557.811106][ T27] RAX: fffffffffffffffc RBX: 00007f545605c6c0 RCX: 00007f54575f3f03 [ 557.819557][ T27] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 557.827675][ T27] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 557.835935][ T27] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd16798fc0 [ 557.844126][ T27] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 557.852138][ T27] [ 557.855281][ T27] [ 557.855281][ T27] Showing all locks held in the system: [ 557.863041][ T27] 1 lock held by kworker/dying/9: [ 557.868167][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.878289][ T27] 1 lock held by kworker/dying/21: [ 557.883430][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.895732][ T27] 1 lock held by kworker/dying/23: [ 557.900885][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.910894][ T27] 1 lock held by khungtaskd/27: [ 557.915812][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 557.925665][ T27] 1 lock held by kworker/dying/154: [ 557.930902][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.940932][ T27] 1 lock held by kworker/dying/155: [ 557.946202][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.956135][ T27] 1 lock held by kworker/dying/1111: [ 557.961463][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.971499][ T27] 1 lock held by kworker/dying/1988: [ 557.976831][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 557.986823][ T27] 1 lock held by dhcpcd/3853: [ 557.991518][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2290/0x3e00 [ 558.001974][ T27] 2 locks held by getty/3951: [ 558.008238][ T27] #0: ffff88814cec2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 558.018104][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 558.028611][ T27] 1 lock held by syz-executor/4178: [ 558.033909][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.043870][ T27] 2 locks held by syz-executor/4182: [ 558.049182][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 558.058037][ T27] #1: ffff888076efab28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 558.067136][ T27] 2 locks held by syz-executor/4191: [ 558.072426][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 558.081284][ T27] #1: ffff888076efc028 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 558.090569][ T27] 2 locks held by syz-executor/4195: [ 558.095918][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 558.104956][ T27] #1: ffff88807b454728 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 558.114309][ T27] 1 lock held by kworker/dying/4224: [ 558.119642][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.130784][ T27] 1 lock held by napi/wg2-0/4252: [ 558.135963][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.146016][ T27] 1 lock held by kworker/dying/4259: [ 558.151330][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.161443][ T27] 1 lock held by kworker/dying/4267: [ 558.167027][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.177269][ T27] 4 locks held by kworker/u4:6/4288: [ 558.182931][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 558.193683][ T27] #1: ffffc9000387fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 558.204966][ T27] #2: ffffffff8d22c3d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 558.214550][ T27] #3: ffff888061f2d3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x112/0x300 [ 558.225351][ T27] 1 lock held by kworker/dying/5644: [ 558.230703][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.240799][ T27] 1 lock held by kworker/dying/5645: [ 558.246159][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.256339][ T27] 1 lock held by kworker/dying/5656: [ 558.261644][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.271719][ T27] 1 lock held by kworker/dying/5671: [ 558.277253][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.287526][ T27] 1 lock held by kworker/dying/5673: [ 558.292899][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.303385][ T27] 1 lock held by kworker/dying/5675: [ 558.309461][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.319635][ T27] 1 lock held by kworker/dying/5677: [ 558.325137][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.335383][ T27] 1 lock held by kworker/dying/5679: [ 558.340732][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.350836][ T27] 1 lock held by kworker/dying/5681: [ 558.356177][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.366115][ T27] 1 lock held by kworker/dying/5683: [ 558.371422][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.381440][ T27] 1 lock held by kworker/dying/5686: [ 558.386775][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.397584][ T27] 1 lock held by kworker/dying/5691: [ 558.402892][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.412993][ T27] 1 lock held by kworker/dying/5696: [ 558.419300][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.429947][ T27] 1 lock held by kworker/dying/5701: [ 558.435367][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.445302][ T27] 1 lock held by kworker/dying/5709: [ 558.450608][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.460508][ T27] 1 lock held by kworker/dying/5710: [ 558.465925][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.475839][ T27] 1 lock held by kworker/dying/5886: [ 558.481137][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.491134][ T27] 1 lock held by kworker/dying/5888: [ 558.496551][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.507329][ T27] 1 lock held by kworker/dying/5889: [ 558.512637][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.522537][ T27] 1 lock held by kworker/dying/5892: [ 558.528444][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.539315][ T27] 1 lock held by kworker/dying/5893: [ 558.544922][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.557331][ T27] 1 lock held by kworker/dying/5895: [ 558.562660][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.572685][ T27] 1 lock held by kworker/dying/5896: [ 558.578096][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.588285][ T27] 1 lock held by kworker/dying/5897: [ 558.593831][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.593925][ T27] 1 lock held by kworker/dying/5898: [ 558.593939][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.619423][ T27] 1 lock held by kworker/dying/5899: [ 558.624799][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.635166][ T27] 1 lock held by kworker/dying/5900: [ 558.640565][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.650551][ T27] 1 lock held by kworker/dying/5901: [ 558.656046][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.668263][ T27] 1 lock held by kworker/dying/5902: [ 558.673572][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.683535][ T27] 1 lock held by kworker/dying/5903: [ 558.688903][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.698831][ T27] 1 lock held by kworker/dying/5904: [ 558.704262][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.714294][ T27] 1 lock held by kworker/dying/5905: [ 558.719596][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.729528][ T27] 1 lock held by kworker/dying/5906: [ 558.734941][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.745135][ T27] 1 lock held by kworker/dying/5907: [ 558.750448][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.760400][ T27] 1 lock held by kworker/dying/5908: [ 558.765832][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.777995][ T27] 1 lock held by kworker/dying/5909: [ 558.783312][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.793273][ T27] 1 lock held by kworker/dying/5910: [ 558.799226][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.809267][ T27] 1 lock held by kworker/dying/5914: [ 558.814655][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.824696][ T27] 1 lock held by kworker/dying/5916: [ 558.830000][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.840052][ T27] 1 lock held by kworker/dying/5918: [ 558.846091][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.856181][ T27] 7 locks held by syz-executor/12991: [ 558.861573][ T27] #0: ffff88807a1da460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 558.870649][ T27] #1: ffff888060c8b888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 558.880490][ T27] #2: ffffffff8c141f08 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xee/0x230 [ 558.891946][ T27] #3: ffffffff8bfbadd0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x17c/0x580 [ 558.903337][ T27] #4: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x192/0x580 [ 558.914886][ T27] #5: ffffffff8c14f948 (cpuset_mutex){+.+.}-{3:3}, at: cpuset_attach+0xac/0x5f0 [ 558.924153][ T27] #6: ffff88807d804028 (&mm->mmap_lock){++++}-{3:3}, at: mpol_rebind_mm+0x33/0x2c0 [ 558.933619][ T27] 1 lock held by udevd/13177: [ 558.938389][ T27] #0: ffff88801e540128 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0xf3/0x230 [ 558.947826][ T27] 1 lock held by syz.2.3123/13199: [ 558.952969][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.963082][ T27] 1 lock held by syz.3.3127/13206: [ 558.968239][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 558.978263][ T27] [ 558.980612][ T27] ============================================= [ 558.980612][ T27] [ 558.989405][ T27] NMI backtrace for cpu 1 [ 558.993755][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 559.000964][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.011016][ T27] Call Trace: [ 559.014296][ T27] [ 559.017224][ T27] dump_stack_lvl+0x168/0x230 [ 559.021913][ T27] ? show_regs_print_info+0x20/0x20 [ 559.027129][ T27] ? load_image+0x3b0/0x3b0 [ 559.031641][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 559.037013][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 559.042125][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 559.047070][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 559.053246][ T27] ? _printk+0xcc/0x110 [ 559.057429][ T27] ? load_image+0x3b0/0x3b0 [ 559.061936][ T27] ? load_image+0x3b0/0x3b0 [ 559.066438][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 559.072523][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 559.078502][ T27] watchdog+0xe0f/0xe50 [ 559.082663][ T27] kthread+0x436/0x520 [ 559.086748][ T27] ? hungtask_pm_notify+0x40/0x40 [ 559.091787][ T27] ? kthread_blkcg+0xd0/0xd0 [ 559.096417][ T27] ret_from_fork+0x1f/0x30 [ 559.100897][ T27] [ 559.104348][ T27] Sending NMI from CPU 1 to CPUs 0: [ 559.109634][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 559.110965][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 559.125795][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 559.133012][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.143066][ T27] Call Trace: [ 559.146371][ T27] [ 559.149306][ T27] dump_stack_lvl+0x168/0x230 [ 559.153987][ T27] ? show_regs_print_info+0x20/0x20 [ 559.159191][ T27] ? load_image+0x3b0/0x3b0 [ 559.163705][ T27] panic+0x2c9/0x7f0 [ 559.167731][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 559.173480][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 559.177984][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 559.184145][ T27] watchdog+0xe4e/0xe50 [ 559.188306][ T27] kthread+0x436/0x520 [ 559.192501][ T27] ? hungtask_pm_notify+0x40/0x40 [ 559.197531][ T27] ? kthread_blkcg+0xd0/0xd0 [ 559.202129][ T27] ret_from_fork+0x1f/0x30 [ 559.206572][ T27] [ 559.209847][ T27] Kernel Offset: disabled [ 559.214192][ T27] Rebooting in 86400 seconds..