last executing test programs: 56.538091878s ago: executing program 3 (id=3900): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x3455d9a4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x51) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x58, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x7, 0x339d, &(0x7f0000000100)="617267050074a5", 0x0, 0xa68, 0x0, 0xd, 0x0, &(0x7f0000000180)="591d77a8d5223d0cd68c633ae6ce5955ea08816c84175ea0b3c535eae4f9d592cbf8d0e9c787721127d0d3f8b1a0ea16e2f0ebe61e348aac2d4a19948d5ba9425ad26bb24497244ef734ac1be50b9bd8637beb4e03c0d1825d7c04000000df79725b379f60d6cde8639c9d3b541921a909696a222d3a60296bd4694d27eead5d78efa66935bf717f8b4f81e3177ee00a1e66ff7c7cca542073ea8a7035c98c574a3c", &(0x7f0000000000), 0x0, 0x0, 0x538f18dd}, 0x50) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 53.415384369s ago: executing program 4 (id=3923): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000380)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000580)=""/72, 0x48}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0x37, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f39}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x599f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x10001, 0x2e, &(0x7f0000000440)=""/46, 0x41000, 0x52, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x73, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r0, r0], &(0x7f0000001740)=[{0x0, 0x3, 0x5, 0x7}, {0x5, 0x4, 0xa, 0x6}, {0x3, 0x1, 0xd, 0x7}, {0x0, 0x4, 0x8, 0x2}, {0x2, 0x4, 0x7, 0x5}, {0x4, 0x5, 0xb, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000acf2e88e6641390000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x400000000000, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000380), 0x0}, 0x20) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200000000e7008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r13}, 0x10) 52.849194334s ago: executing program 4 (id=3925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1202, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0xa, 0x3, 0xff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES32, @ANYRESDEC=r0], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000d200000008000000000000110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000400000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095000000000000006a"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004800)={r3, 0x58, &(0x7f0000004780)}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x12040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r14 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r14, 0xb) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 51.195504245s ago: executing program 4 (id=3932): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400"/31], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0323000000000a00000000ecb117304e8a8c62000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x66, 0x0, 0x0, 0xfd, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff9}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x2103) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10000000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xa}, {0x6, 0x0, 0x0, 0xfffffffc}]}) 50.162176555s ago: executing program 4 (id=3933): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400"/31], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0323000000000a00000000ecb117304e8a8c62000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x66, 0x0, 0x0, 0xfd, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff9}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x2103) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10000000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0xa}, {0x6, 0x0, 0x0, 0xfffffffc}]}) 49.390230654s ago: executing program 4 (id=3937): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe40, 0x480, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0076036d46d4cbb1"], 0x48) syz_clone(0x10028000, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002380)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000300)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x22, 0x4, 0x2}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000044d900000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000014f991eb1aa918a44c3f324abb73000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x4f) r12 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x7}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r12, 0x0) 38.251496441s ago: executing program 1 (id=3969): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x5902}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'lo\x00'}) 36.490800384s ago: executing program 1 (id=3973): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000000344898c894b0563c3ef00f1b00cdd429", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 35.667257699s ago: executing program 1 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1202, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0xa, 0x3, 0xff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x66, 0x0, 0x0, 0xfd, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff9}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x2103) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10000000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000003c0)={0x0, 0x0}) 27.5254613s ago: executing program 1 (id=3979): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 27.069522043s ago: executing program 1 (id=3982): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x3455d9a4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x51) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x58, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x7, 0x339d, &(0x7f0000000100)="617267050074a5", 0x0, 0xa68, 0x0, 0xd, 0x0, &(0x7f0000000180)="591d77a8d5223d0cd68c633ae6ce5955ea08816c84175ea0b3c535eae4f9d592cbf8d0e9c787721127d0d3f8b1a0ea16e2f0ebe61e348aac2d4a19948d5ba9425ad26bb24497244ef734ac1be50b9bd8637beb4e03c0d1825d7c04000000df79725b379f60d6cde8639c9d3b541921a909696a222d3a60296bd4694d27eead5d78efa66935bf717f8b4f81e3177ee00a1e66ff7c7cca542073ea8a7035c98c574a3c", &(0x7f0000000000), 0x0, 0x0, 0x538f18dd}, 0x50) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 13.444227767s ago: executing program 2 (id=4005): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0xdc0, 0x668f11, 0x1b84, 0xffffffffffffffff, 0xd7f3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000001140)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4388, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.050575983s ago: executing program 2 (id=4006): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000f100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 12.763878776s ago: executing program 2 (id=4009): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e14f008004de7f9c764360000002100135433f6e31e17128c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.444593153s ago: executing program 2 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1202, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0xa, 0x3, 0xff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000300)=0x9) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000000344898c894b0563c3ef00f1b00cdd429", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 9.86948654s ago: executing program 2 (id=4014): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0xe40, 0x480, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0076036d46d4cbb1"], 0x48) 8.012524485s ago: executing program 0 (id=4016): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000f100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 7.165079623s ago: executing program 0 (id=4017): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES32, @ANYRESDEC=r0], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000d200000008000000000000110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000400000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095000000000000006a"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004800)={r3, 0x58, &(0x7f0000004780)}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x12040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r14 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r14, 0xb) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 4.370916735s ago: executing program 3 (id=3952): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110014, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x40b942b37d0000) 4.228444812s ago: executing program 0 (id=4018): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffefff}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500), 0x4) 3.499637676s ago: executing program 3 (id=4019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1202, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0xa, 0x3, 0xff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 [ 305.568347][T13207] dump_stack_lvl+0x1e3/0x2d0 [ 305.573027][T13207] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 305.578643][T13207] ? panic+0x860/0x860 [ 305.582704][T13207] ? validate_chain+0x112/0x5930 [ 305.587636][T13207] ? validate_chain+0x112/0x5930 [ 305.592572][T13207] should_fail+0x38a/0x4c0 [ 305.596988][T13207] _copy_from_user+0x2d/0x170 [ 305.601673][T13207] iovec_from_user+0x13b/0x390 [ 305.606447][T13207] __import_iovec+0x72/0x4b0 [ 305.611042][T13207] ? __ia32_sys_shutdown+0x60/0x60 [ 305.616178][T13207] import_iovec+0xe6/0x120 [ 305.620610][T13207] ___sys_sendmsg+0x215/0x2e0 [ 305.625311][T13207] ? __sys_sendmsg+0x260/0x260 [ 305.630213][T13207] ? __fdget+0x191/0x220 [ 305.634465][T13207] __se_sys_sendmsg+0x19a/0x260 [ 305.639330][T13207] ? __x64_sys_sendmsg+0x80/0x80 [ 305.644278][T13207] ? syscall_enter_from_user_mode+0x2e/0x240 [ 305.650257][T13207] ? lockdep_hardirqs_on+0x94/0x130 [ 305.655488][T13207] ? syscall_enter_from_user_mode+0x2e/0x240 [ 305.661464][T13207] do_syscall_64+0x3b/0xb0 [ 305.665863][T13207] ? clear_bhb_loop+0x15/0x70 [ 305.670531][T13207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.676432][T13207] RIP: 0033:0x7f3a127f3ff9 [ 305.680849][T13207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.700442][T13207] RSP: 002b:00007f3a10c4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.708850][T13207] RAX: ffffffffffffffda RBX: 00007f3a129ac058 RCX: 00007f3a127f3ff9 [ 305.716828][T13207] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000009 [ 305.724804][T13207] RBP: 00007f3a10c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 305.732771][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.740746][T13207] R13: 0000000000000000 R14: 00007f3a129ac058 R15: 00007ffd3442fd38 [ 305.748739][T13207] [ 305.853332][T13216] __nla_validate_parse: 11 callbacks suppressed [ 305.853370][T13216] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3393'. [ 305.918924][T13220] tun0: tun_chr_ioctl cmd 1074025673 [ 306.869724][T13260] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3411'. [ 306.952103][T13257] tun0: tun_chr_ioctl cmd 1074025673 [ 307.070705][T13267] FAULT_INJECTION: forcing a failure. [ 307.070705][T13267] name failslab, interval 1, probability 0, space 0, times 0 [ 307.090104][T13267] CPU: 1 PID: 13267 Comm: syz.4.3413 Not tainted 5.15.169-syzkaller #0 [ 307.098367][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.108428][T13267] Call Trace: [ 307.111706][T13267] [ 307.114630][T13267] dump_stack_lvl+0x1e3/0x2d0 [ 307.119310][T13267] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 307.124962][T13267] ? panic+0x860/0x860 [ 307.129031][T13267] ? __might_sleep+0xc0/0xc0 [ 307.133628][T13267] should_fail+0x38a/0x4c0 [ 307.138045][T13267] should_failslab+0x5/0x20 [ 307.142561][T13267] slab_pre_alloc_hook+0x53/0xc0 [ 307.147509][T13267] __kmalloc+0x6e/0x300 [ 307.151662][T13267] ? tomoyo_encode+0x26b/0x530 [ 307.156430][T13267] tomoyo_encode+0x26b/0x530 [ 307.161014][T13267] ? sock_free_inode+0x20/0x20 [ 307.165777][T13267] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 307.171411][T13267] tomoyo_path_number_perm+0x225/0x810 [ 307.176874][T13267] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 307.182363][T13267] ? __fget_files+0x413/0x480 [ 307.187044][T13267] security_file_ioctl+0x6d/0xa0 [ 307.191981][T13267] __se_sys_ioctl+0x47/0x160 [ 307.196565][T13267] do_syscall_64+0x3b/0xb0 [ 307.200978][T13267] ? clear_bhb_loop+0x15/0x70 [ 307.205648][T13267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.211559][T13267] RIP: 0033:0x7ff9ce6b8ff9 [ 307.215981][T13267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.235669][T13267] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.244083][T13267] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 307.252049][T13267] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 000000000000000c [ 307.260010][T13267] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 307.267979][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.275946][T13267] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 307.283926][T13267] [ 307.299422][T13267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.867355][T13303] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3426'. [ 308.123975][T13308] tun0: tun_chr_ioctl cmd 1074025673 [ 308.268013][T13312] FAULT_INJECTION: forcing a failure. [ 308.268013][T13312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 308.368631][T13312] CPU: 0 PID: 13312 Comm: syz.0.3429 Not tainted 5.15.169-syzkaller #0 [ 308.376913][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.386983][T13312] Call Trace: [ 308.390267][T13312] [ 308.393200][T13312] dump_stack_lvl+0x1e3/0x2d0 [ 308.397887][T13312] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 308.403527][T13312] ? panic+0x860/0x860 [ 308.407604][T13312] ? __sys_bpf+0x343/0x670 [ 308.412028][T13312] ? do_syscall_64+0x3b/0xb0 [ 308.416631][T13312] should_fail+0x38a/0x4c0 [ 308.421170][T13312] prepare_alloc_pages+0x1db/0x5b0 [ 308.426293][T13312] __alloc_pages+0x14f/0x700 [ 308.430890][T13312] ? __rmqueue_pcplist+0x2030/0x2030 [ 308.436198][T13312] ? alloc_pages+0x458/0x570 [ 308.440797][T13312] __vmalloc_node_range+0x5ab/0x8c0 [ 308.446016][T13312] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 308.451569][T13312] __vmalloc+0x75/0x80 [ 308.455644][T13312] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 308.461195][T13312] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 308.466578][T13312] bpf_prog_alloc+0x18/0x1d0 [ 308.471181][T13312] bpf_prog_load+0x800/0x1b60 [ 308.475876][T13312] ? map_freeze+0x360/0x360 [ 308.480380][T13312] ? __might_fault+0xb8/0x110 [ 308.485080][T13312] ? __might_fault+0xb4/0x110 [ 308.489767][T13312] ? bpf_lsm_bpf+0x5/0x10 [ 308.494095][T13312] ? security_bpf+0x7d/0xa0 [ 308.498602][T13312] __sys_bpf+0x343/0x670 [ 308.502854][T13312] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 308.508248][T13312] ? syscall_enter_from_user_mode+0x2e/0x240 [ 308.514235][T13312] ? lockdep_hardirqs_on+0x94/0x130 [ 308.519445][T13312] __x64_sys_bpf+0x78/0x90 [ 308.523870][T13312] do_syscall_64+0x3b/0xb0 [ 308.528284][T13312] ? clear_bhb_loop+0x15/0x70 [ 308.532968][T13312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.538864][T13312] RIP: 0033:0x7fb4d9ec4ff9 [ 308.543283][T13312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.562890][T13312] RSP: 002b:00007fb4d833d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.571317][T13312] RAX: ffffffffffffffda RBX: 00007fb4da07cf80 RCX: 00007fb4d9ec4ff9 [ 308.579295][T13312] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 308.587274][T13312] RBP: 00007fb4d833d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.595253][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.603231][T13312] R13: 0000000000000001 R14: 00007fb4da07cf80 R15: 00007ffcd23c02d8 [ 308.611224][T13312] [ 308.721394][T13319] FAULT_INJECTION: forcing a failure. [ 308.721394][T13319] name failslab, interval 1, probability 0, space 0, times 0 [ 308.773651][T13319] CPU: 1 PID: 13319 Comm: syz.0.3433 Not tainted 5.15.169-syzkaller #0 [ 308.781926][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.791988][T13319] Call Trace: [ 308.795271][T13319] [ 308.798204][T13319] dump_stack_lvl+0x1e3/0x2d0 [ 308.802892][T13319] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 308.808527][T13319] ? panic+0x860/0x860 [ 308.812610][T13319] ? __might_sleep+0xc0/0xc0 [ 308.817218][T13319] should_fail+0x38a/0x4c0 [ 308.821644][T13319] should_failslab+0x5/0x20 [ 308.826159][T13319] slab_pre_alloc_hook+0x53/0xc0 [ 308.831103][T13319] __kmalloc+0x6e/0x300 [ 308.835257][T13319] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 308.840992][T13319] tomoyo_realpath_from_path+0xd8/0x5e0 [ 308.846577][T13319] tomoyo_path_number_perm+0x225/0x810 [ 308.852052][T13319] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 308.857562][T13319] ? __fget_files+0x413/0x480 [ 308.862253][T13319] security_file_ioctl+0x6d/0xa0 [ 308.867209][T13319] __se_sys_ioctl+0x47/0x160 [ 308.871807][T13319] do_syscall_64+0x3b/0xb0 [ 308.876224][T13319] ? clear_bhb_loop+0x15/0x70 [ 308.880896][T13319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.886789][T13319] RIP: 0033:0x7fb4d9ec4ff9 [ 308.891213][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.910820][T13319] RSP: 002b:00007fb4d833d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.919248][T13319] RAX: ffffffffffffffda RBX: 00007fb4da07cf80 RCX: 00007fb4d9ec4ff9 [ 308.927227][T13319] RDX: 0000000020000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 308.935203][T13319] RBP: 00007fb4d833d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.943182][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.951166][T13319] R13: 0000000000000000 R14: 00007fb4da07cf80 R15: 00007ffcd23c02d8 [ 308.959168][T13319] [ 309.231109][T13319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.380202][T13336] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3439'. [ 309.572606][T13345] netlink: 'syz.4.3442': attribute type 21 has an invalid length. [ 309.589683][T13345] netlink: 'syz.4.3442': attribute type 4 has an invalid length. [ 309.636909][T13340] tun0: tun_chr_ioctl cmd 1074025673 [ 309.904622][T13364] FAULT_INJECTION: forcing a failure. [ 309.904622][T13364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.962295][T13364] CPU: 1 PID: 13364 Comm: syz.1.3447 Not tainted 5.15.169-syzkaller #0 [ 309.970578][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.980640][T13364] Call Trace: [ 309.983924][T13364] [ 309.986875][T13364] dump_stack_lvl+0x1e3/0x2d0 [ 309.991565][T13364] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 309.997202][T13364] ? panic+0x860/0x860 [ 310.001280][T13364] ? __sys_bpf+0x343/0x670 [ 310.005702][T13364] ? do_syscall_64+0x3b/0xb0 [ 310.010303][T13364] should_fail+0x38a/0x4c0 [ 310.014732][T13364] prepare_alloc_pages+0x1db/0x5b0 [ 310.019859][T13364] __alloc_pages+0x14f/0x700 [ 310.024464][T13364] ? __rmqueue_pcplist+0x2030/0x2030 [ 310.029760][T13364] ? alloc_pages+0x458/0x570 [ 310.034343][T13364] __vmalloc_node_range+0x5ab/0x8c0 [ 310.039548][T13364] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 310.045078][T13364] __vmalloc+0x75/0x80 [ 310.049133][T13364] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 310.054658][T13364] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 310.060011][T13364] bpf_prog_alloc+0x18/0x1d0 [ 310.064584][T13364] bpf_prog_load+0x800/0x1b60 [ 310.069257][T13364] ? map_freeze+0x360/0x360 [ 310.073743][T13364] ? __might_fault+0xb8/0x110 [ 310.078411][T13364] ? __might_fault+0xb4/0x110 [ 310.083072][T13364] ? bpf_lsm_bpf+0x5/0x10 [ 310.087384][T13364] ? security_bpf+0x7d/0xa0 [ 310.091873][T13364] __sys_bpf+0x343/0x670 [ 310.096101][T13364] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 310.101467][T13364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 310.107431][T13364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 310.113391][T13364] ? lockdep_hardirqs_on+0x94/0x130 [ 310.118575][T13364] __x64_sys_bpf+0x78/0x90 [ 310.122980][T13364] do_syscall_64+0x3b/0xb0 [ 310.127380][T13364] ? clear_bhb_loop+0x15/0x70 [ 310.132036][T13364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.137910][T13364] RIP: 0033:0x7f1986dfaff9 [ 310.142309][T13364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.161907][T13364] RSP: 002b:00007f1985273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.170304][T13364] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986dfaff9 [ 310.178255][T13364] RDX: 000000000000003c RSI: 000000002000e000 RDI: 0000000000000005 [ 310.186208][T13364] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 310.194159][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.202109][T13364] R13: 0000000000000001 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 310.210072][T13364] [ 310.407851][T13380] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3453'. [ 310.424632][T13381] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3454'. [ 310.613534][T13387] tun0: tun_chr_ioctl cmd 1074025673 [ 311.015653][T13415] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3467'. [ 311.155321][T13423] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3470'. [ 311.261541][T13430] FAULT_INJECTION: forcing a failure. [ 311.261541][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 311.275453][T13430] CPU: 0 PID: 13430 Comm: syz.4.3474 Not tainted 5.15.169-syzkaller #0 [ 311.283709][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.293750][T13430] Call Trace: [ 311.297018][T13430] [ 311.299932][T13430] dump_stack_lvl+0x1e3/0x2d0 [ 311.304600][T13430] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 311.310214][T13430] ? panic+0x860/0x860 [ 311.314282][T13430] ? memset+0x1f/0x40 [ 311.318249][T13430] should_fail+0x38a/0x4c0 [ 311.322654][T13430] should_failslab+0x5/0x20 [ 311.327141][T13430] slab_pre_alloc_hook+0x53/0xc0 [ 311.332069][T13430] ? __build_skb+0x25/0x2f0 [ 311.336555][T13430] kmem_cache_alloc+0x3f/0x280 [ 311.341306][T13430] __build_skb+0x25/0x2f0 [ 311.345617][T13430] build_skb+0x1f/0x180 [ 311.349752][T13430] bpf_prog_test_run_skb+0x38e/0x1420 [ 311.355120][T13430] ? cpu_online+0x70/0x70 [ 311.359432][T13430] ? cpu_online+0x70/0x70 [ 311.363740][T13430] bpf_prog_test_run+0x32f/0x3a0 [ 311.368659][T13430] __sys_bpf+0x3ac/0x670 [ 311.372885][T13430] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 311.378250][T13430] ? syscall_enter_from_user_mode+0x2e/0x240 [ 311.384234][T13430] ? lockdep_hardirqs_on+0x94/0x130 [ 311.389434][T13430] __x64_sys_bpf+0x78/0x90 [ 311.393847][T13430] do_syscall_64+0x3b/0xb0 [ 311.398252][T13430] ? clear_bhb_loop+0x15/0x70 [ 311.402920][T13430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.408803][T13430] RIP: 0033:0x7ff9ce6b8ff9 [ 311.413206][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.432797][T13430] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.441191][T13430] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 311.449145][T13430] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 311.457097][T13430] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 311.465051][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.473004][T13430] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 311.480967][T13430] [ 311.674278][T13439] tun0: tun_chr_ioctl cmd 1074025673 [ 311.699752][T13444] netlink: 'syz.4.3477': attribute type 10 has an invalid length. [ 311.723684][T13444] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.733115][T13444] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.743410][T13444] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.753003][T13444] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.385084][T13462] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3485'. [ 312.417435][T13464] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3484'. [ 312.634146][T13470] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 312.677197][T13470] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3488'. [ 312.711808][T13476] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3490'. [ 313.007951][T13496] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3498'. [ 313.102852][T13489] tun0: tun_chr_ioctl cmd 1074025673 [ 313.382394][T13502] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 313.396365][T13502] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3500'. [ 313.488042][T13511] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3512'. [ 313.685590][T13516] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 313.714091][T13516] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3504'. [ 314.048860][T13531] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 314.102698][T13528] netlink: 'syz.1.3506': attribute type 1 has an invalid length. [ 314.858739][T13551] tun0: tun_chr_ioctl cmd 1074025673 [ 315.139814][T13560] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 315.502886][T13572] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 315.735897][T13575] tun0: tun_chr_ioctl cmd 1074025673 [ 315.810617][T13586] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 316.230799][T13596] tun0: tun_chr_ioctl cmd 1074025673 [ 316.310050][T13605] __nla_validate_parse: 11 callbacks suppressed [ 316.310085][T13605] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3533'. [ 316.389120][T13607] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3535'. [ 316.746303][T13623] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 316.757286][T13625] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3549'. [ 316.785271][T13623] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3540'. [ 316.867769][T13627] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 316.896188][T13627] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3541'. [ 316.919476][T13633] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3553'. [ 317.052217][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058742][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.213720][T13642] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3544'. [ 317.442541][T13646] tun0: tun_chr_ioctl cmd 1074025673 [ 318.186728][T13656] tun0: tun_chr_ioctl cmd 1074025673 [ 318.288370][T13669] FAULT_INJECTION: forcing a failure. [ 318.288370][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 318.320412][T13669] CPU: 1 PID: 13669 Comm: syz.2.3552 Not tainted 5.15.169-syzkaller #0 [ 318.328692][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.338759][T13669] Call Trace: [ 318.342031][T13669] [ 318.345037][T13669] dump_stack_lvl+0x1e3/0x2d0 [ 318.349705][T13669] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 318.355322][T13669] ? panic+0x860/0x860 [ 318.359384][T13669] ? __might_sleep+0xc0/0xc0 [ 318.363961][T13669] should_fail+0x38a/0x4c0 [ 318.368370][T13669] should_failslab+0x5/0x20 [ 318.372854][T13669] slab_pre_alloc_hook+0x53/0xc0 [ 318.377773][T13669] ? security_file_alloc+0x24/0x120 [ 318.382956][T13669] kmem_cache_alloc+0x3f/0x280 [ 318.387706][T13669] security_file_alloc+0x24/0x120 [ 318.392718][T13669] __alloc_file+0xc3/0x240 [ 318.397130][T13669] alloc_empty_file+0x92/0x180 [ 318.401884][T13669] alloc_file+0x5b/0x4f0 [ 318.406114][T13669] alloc_file_pseudo+0x259/0x2f0 [ 318.411037][T13669] ? alloc_empty_file_noaccount+0x80/0x80 [ 318.416749][T13669] ? perf_event_alloc+0x2180/0x2180 [ 318.421946][T13669] anon_inode_getfile+0xc4/0x180 [ 318.426980][T13669] __se_sys_perf_event_open+0x11a0/0x4510 [ 318.432716][T13669] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 318.438351][T13669] ? syscall_enter_from_user_mode+0x2e/0x240 [ 318.444324][T13669] ? lockdep_hardirqs_on+0x94/0x130 [ 318.449518][T13669] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 318.455223][T13669] do_syscall_64+0x3b/0xb0 [ 318.459622][T13669] ? clear_bhb_loop+0x15/0x70 [ 318.464283][T13669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.470157][T13669] RIP: 0033:0x7f3a127f3ff9 [ 318.474556][T13669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.494154][T13669] RSP: 002b:00007f3a10c6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 318.502569][T13669] RAX: ffffffffffffffda RBX: 00007f3a129abf80 RCX: 00007f3a127f3ff9 [ 318.510710][T13669] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000900 [ 318.518666][T13669] RBP: 00007f3a10c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.526623][T13669] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 318.534580][T13669] R13: 0000000000000001 R14: 00007f3a129abf80 R15: 00007ffd3442fd38 [ 318.542547][T13669] [ 319.048592][T13684] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3557'. [ 319.560628][T13702] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3563'. [ 320.057012][T13710] tun0: tun_chr_ioctl cmd 1074025673 [ 320.274828][T13725] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3571'. [ 320.409999][T13737] netlink: 'syz.1.3577': attribute type 21 has an invalid length. [ 320.418540][T13737] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 321.410059][T13763] tun0: tun_chr_ioctl cmd 1074025673 [ 321.481818][T13775] __nla_validate_parse: 1 callbacks suppressed [ 321.481857][T13775] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3589'. [ 322.193161][T13784] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3592'. [ 322.943658][T13803] FAULT_INJECTION: forcing a failure. [ 322.943658][T13803] name failslab, interval 1, probability 0, space 0, times 0 [ 322.992653][T13803] CPU: 0 PID: 13803 Comm: syz.3.3597 Not tainted 5.15.169-syzkaller #0 [ 323.000965][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 323.011453][T13803] Call Trace: [ 323.014723][T13803] [ 323.017640][T13803] dump_stack_lvl+0x1e3/0x2d0 [ 323.022313][T13803] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 323.027941][T13803] ? panic+0x860/0x860 [ 323.032006][T13803] ? __lock_acquire+0x1295/0x1ff0 [ 323.037028][T13803] should_fail+0x38a/0x4c0 [ 323.041444][T13803] should_failslab+0x5/0x20 [ 323.045931][T13803] slab_pre_alloc_hook+0x53/0xc0 [ 323.050993][T13803] ? skb_clone+0x1bb/0x350 [ 323.055404][T13803] kmem_cache_alloc+0x3f/0x280 [ 323.060159][T13803] skb_clone+0x1bb/0x350 [ 323.064392][T13803] __netlink_deliver_tap+0x375/0x760 [ 323.069676][T13803] netlink_deliver_tap+0x16c/0x180 [ 323.074779][T13803] netlink_unicast+0x788/0x980 [ 323.079536][T13803] ? netlink_detachskb+0x90/0x90 [ 323.084458][T13803] ? __virt_addr_valid+0x3bb/0x460 [ 323.089554][T13803] ? 0xffffffff81000000 [ 323.093690][T13803] ? __check_object_size+0x300/0x410 [ 323.098975][T13803] ? bpf_lsm_netlink_send+0x5/0x10 [ 323.104090][T13803] netlink_sendmsg+0xa30/0xd60 [ 323.108875][T13803] ? netlink_getsockopt+0x5b0/0x5b0 [ 323.114082][T13803] ? aa_sock_msg_perm+0x91/0x150 [ 323.119019][T13803] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.124293][T13803] ? security_socket_sendmsg+0x7d/0xa0 [ 323.129735][T13803] ? netlink_getsockopt+0x5b0/0x5b0 [ 323.134921][T13803] ____sys_sendmsg+0x59e/0x8f0 [ 323.139671][T13803] ? iovec_from_user+0x300/0x390 [ 323.144608][T13803] ? __sys_sendmsg_sock+0x30/0x30 [ 323.149634][T13803] ___sys_sendmsg+0x252/0x2e0 [ 323.154303][T13803] ? __sys_sendmsg+0x260/0x260 [ 323.159106][T13803] ? __fdget+0x191/0x220 [ 323.163445][T13803] __se_sys_sendmsg+0x19a/0x260 [ 323.168286][T13803] ? __x64_sys_sendmsg+0x80/0x80 [ 323.173218][T13803] ? syscall_enter_from_user_mode+0x2e/0x240 [ 323.179184][T13803] ? lockdep_hardirqs_on+0x94/0x130 [ 323.184370][T13803] ? syscall_enter_from_user_mode+0x2e/0x240 [ 323.190338][T13803] do_syscall_64+0x3b/0xb0 [ 323.194739][T13803] ? clear_bhb_loop+0x15/0x70 [ 323.199403][T13803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.205281][T13803] RIP: 0033:0x7efd7b6a1ff9 [ 323.209684][T13803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.229279][T13803] RSP: 002b:00007efd79b1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.237691][T13803] RAX: ffffffffffffffda RBX: 00007efd7b859f80 RCX: 00007efd7b6a1ff9 [ 323.245650][T13803] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 323.253612][T13803] RBP: 00007efd79b1a090 R08: 0000000000000000 R09: 0000000000000000 [ 323.261656][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.269609][T13803] R13: 0000000000000000 R14: 00007efd7b859f80 R15: 00007fff54f33ea8 [ 323.277586][T13803] [ 323.331095][T13803] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3597'. [ 323.516538][T13822] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3603'. [ 323.742940][T13824] tun0: tun_chr_ioctl cmd 1074025673 [ 323.901053][T13832] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3608'. [ 324.331329][T13858] FAULT_INJECTION: forcing a failure. [ 324.331329][T13858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.381699][T13858] CPU: 0 PID: 13858 Comm: syz.2.3619 Not tainted 5.15.169-syzkaller #0 [ 324.389976][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.400054][T13858] Call Trace: [ 324.403345][T13858] [ 324.406290][T13858] dump_stack_lvl+0x1e3/0x2d0 [ 324.410985][T13858] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 324.416733][T13858] ? panic+0x860/0x860 [ 324.420822][T13858] ? bpf_cgroup_storage_free+0x8b/0xb0 [ 324.426309][T13858] ? bpf_test_run+0x7e5/0x8a0 [ 324.431025][T13858] should_fail+0x38a/0x4c0 [ 324.435476][T13858] _copy_to_user+0x2d/0x130 [ 324.440013][T13858] bpf_test_finish+0x2b9/0x4c0 [ 324.444891][T13858] ? convert_skb_to___skb+0x350/0x350 [ 324.450488][T13858] ? bpf_test_init+0x16e/0x1b0 [ 324.455275][T13858] bpf_prog_test_run_xdp+0x7e2/0xbc0 [ 324.460589][T13858] ? dev_put+0x70/0x70 [ 324.464678][T13858] ? dev_put+0x70/0x70 [ 324.468752][T13858] bpf_prog_test_run+0x32f/0x3a0 [ 324.473799][T13858] __sys_bpf+0x3ac/0x670 [ 324.478068][T13858] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 324.480721][T13860] can: request_module (can-proto-4) failed. [ 324.483570][T13858] ? syscall_enter_from_user_mode+0x2e/0x240 [ 324.483605][T13858] ? lockdep_hardirqs_on+0x94/0x130 [ 324.483627][T13858] __x64_sys_bpf+0x78/0x90 [ 324.505131][T13858] do_syscall_64+0x3b/0xb0 [ 324.509659][T13858] ? clear_bhb_loop+0x15/0x70 [ 324.514357][T13858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 324.520272][T13858] RIP: 0033:0x7f3a127f3ff9 [ 324.524753][T13858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.544455][T13858] RSP: 002b:00007f3a10c6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.552897][T13858] RAX: ffffffffffffffda RBX: 00007f3a129abf80 RCX: 00007f3a127f3ff9 [ 324.560886][T13858] RDX: 0000000000000050 RSI: 0000000020000740 RDI: 000000000000000a [ 324.568875][T13858] RBP: 00007f3a10c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 324.576865][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.584941][T13858] R13: 0000000000000000 R14: 00007f3a129abf80 R15: 00007ffd3442fd38 [ 324.592952][T13858] [ 324.644713][T13862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3621'. [ 324.986922][T13875] tap0: tun_chr_ioctl cmd 1074025681 [ 324.992610][T13876] netlink: 'syz.1.3623': attribute type 10 has an invalid length. [ 325.481991][T13903] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3635'. [ 325.712366][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.719951][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.853790][T13924] FAULT_INJECTION: forcing a failure. [ 325.853790][T13924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.936208][T13924] CPU: 1 PID: 13924 Comm: syz.1.3644 Not tainted 5.15.169-syzkaller #0 [ 325.944579][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.954648][T13924] Call Trace: [ 325.957944][T13924] [ 325.960889][T13924] dump_stack_lvl+0x1e3/0x2d0 [ 325.965630][T13924] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 325.971278][T13924] ? panic+0x860/0x860 [ 325.975385][T13924] should_fail+0x38a/0x4c0 [ 325.979827][T13924] _copy_from_user+0x2d/0x170 [ 325.984533][T13924] __sys_bpf+0x1d5/0x670 [ 325.988798][T13924] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 325.994215][T13924] ? syscall_enter_from_user_mode+0x2e/0x240 [ 326.000230][T13924] ? syscall_enter_from_user_mode+0x2e/0x240 [ 326.006227][T13924] ? lockdep_hardirqs_on+0x94/0x130 [ 326.011450][T13924] __x64_sys_bpf+0x78/0x90 [ 326.015888][T13924] do_syscall_64+0x3b/0xb0 [ 326.020329][T13924] ? clear_bhb_loop+0x15/0x70 [ 326.025024][T13924] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.030934][T13924] RIP: 0033:0x7f1986dfaff9 [ 326.035364][T13924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.055073][T13924] RSP: 002b:00007f1985273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.063507][T13924] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986dfaff9 [ 326.071503][T13924] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000004 [ 326.079505][T13924] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 326.087487][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.095467][T13924] R13: 0000000000000000 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 326.103481][T13924] [ 326.124957][T13923] netlink: 'syz.2.3643': attribute type 10 has an invalid length. [ 326.173000][T13927] tun0: tun_chr_ioctl cmd 1074025673 [ 326.291836][T13933] netlink: 'syz.1.3646': attribute type 21 has an invalid length. [ 326.305728][T13933] netlink: 'syz.1.3646': attribute type 15 has an invalid length. [ 326.321817][T13933] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3646'. [ 326.334064][T13933] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.342903][T13933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.350985][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 326.358319][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 326.365554][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 326.543586][T13945] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3652'. [ 326.715239][T13944] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 326.744437][T13944] device veth0_macvtap left promiscuous mode [ 326.776131][T13944] device veth0_macvtap entered promiscuous mode [ 326.784052][T13944] team0: Device macvtap0 failed to register rx_handler [ 326.802308][T13944] device veth0_macvtap left promiscuous mode [ 326.816368][T13961] FAULT_INJECTION: forcing a failure. [ 326.816368][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 326.829431][T13961] CPU: 1 PID: 13961 Comm: syz.0.3657 Not tainted 5.15.169-syzkaller #0 [ 326.837692][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.847840][T13961] Call Trace: [ 326.851125][T13961] [ 326.854147][T13961] dump_stack_lvl+0x1e3/0x2d0 [ 326.858834][T13961] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 326.864475][T13961] ? panic+0x860/0x860 [ 326.868565][T13961] should_fail+0x38a/0x4c0 [ 326.873079][T13961] should_failslab+0x5/0x20 [ 326.877566][T13961] slab_pre_alloc_hook+0x53/0xc0 [ 326.882491][T13961] kmem_cache_alloc_node+0x49/0x2c0 [ 326.887790][T13961] ? alloc_vmap_area+0x1ba/0x19a0 [ 326.892802][T13961] alloc_vmap_area+0x1ba/0x19a0 [ 326.897648][T13961] ? vm_map_ram+0xb80/0xb80 [ 326.902131][T13961] ? kmem_cache_alloc_node_trace+0x171/0x2e0 [ 326.908102][T13961] ? __get_vm_area_node+0x11f/0x2f0 [ 326.913297][T13961] __get_vm_area_node+0x16e/0x2f0 [ 326.918324][T13961] __vmalloc_node_range+0xe3/0x8c0 [ 326.923459][T13961] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 326.929012][T13961] ? end_current_label_crit_section+0x170/0x170 [ 326.935251][T13961] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 326.940790][T13961] __vmalloc+0x75/0x80 [ 326.944859][T13961] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 326.950516][T13961] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 326.956056][T13961] bpf_prog_alloc+0x18/0x1d0 [ 326.960662][T13961] bpf_prog_load+0x800/0x1b60 [ 326.965441][T13961] ? map_freeze+0x360/0x360 [ 326.970054][T13961] ? __might_fault+0xb8/0x110 [ 326.974767][T13961] ? __might_fault+0xb4/0x110 [ 326.979478][T13961] ? bpf_lsm_bpf+0x5/0x10 [ 326.983821][T13961] ? security_bpf+0x7d/0xa0 [ 326.988342][T13961] __sys_bpf+0x343/0x670 [ 326.992598][T13961] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 326.998003][T13961] ? syscall_enter_from_user_mode+0x2e/0x240 [ 327.004130][T13961] ? lockdep_hardirqs_on+0x94/0x130 [ 327.009355][T13961] __x64_sys_bpf+0x78/0x90 [ 327.013791][T13961] do_syscall_64+0x3b/0xb0 [ 327.018227][T13961] ? clear_bhb_loop+0x15/0x70 [ 327.022907][T13961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.028799][T13961] RIP: 0033:0x7fb4d9ec4ff9 [ 327.033215][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.052913][T13961] RSP: 002b:00007fb4d833d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.061330][T13961] RAX: ffffffffffffffda RBX: 00007fb4da07cf80 RCX: 00007fb4d9ec4ff9 [ 327.069420][T13961] RDX: 0000000000000021 RSI: 000000002000e000 RDI: 0000000000000005 [ 327.077471][T13961] RBP: 00007fb4d833d090 R08: 0000000000000000 R09: 0000000000000000 [ 327.085606][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.093577][T13961] R13: 0000000000000001 R14: 00007fb4da07cf80 R15: 00007ffcd23c02d8 [ 327.101555][T13961] [ 327.105680][T13961] syz.0.3657: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 327.122777][T13961] CPU: 1 PID: 13961 Comm: syz.0.3657 Not tainted 5.15.169-syzkaller #0 [ 327.131033][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.141102][T13961] Call Trace: [ 327.144386][T13961] [ 327.147314][T13961] dump_stack_lvl+0x1e3/0x2d0 [ 327.151984][T13961] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 327.157604][T13961] ? panic+0x860/0x860 [ 327.161679][T13961] warn_alloc+0x278/0x3f0 [ 327.165998][T13961] ? trace_hardirqs_on+0x30/0x80 [ 327.170922][T13961] ? zone_watermark_ok_safe+0x280/0x280 [ 327.176444][T13961] ? kfree+0xf1/0x270 [ 327.180419][T13961] ? __get_vm_area_node+0x183/0x2f0 [ 327.185616][T13961] __vmalloc_node_range+0x2b9/0x8c0 [ 327.190800][T13961] ? end_current_label_crit_section+0x170/0x170 [ 327.197033][T13961] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 327.202564][T13961] __vmalloc+0x75/0x80 [ 327.206619][T13961] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 327.212146][T13961] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 327.217507][T13961] bpf_prog_alloc+0x18/0x1d0 [ 327.222083][T13961] bpf_prog_load+0x800/0x1b60 [ 327.226752][T13961] ? map_freeze+0x360/0x360 [ 327.231242][T13961] ? __might_fault+0xb8/0x110 [ 327.236000][T13961] ? __might_fault+0xb4/0x110 [ 327.240672][T13961] ? bpf_lsm_bpf+0x5/0x10 [ 327.244989][T13961] ? security_bpf+0x7d/0xa0 [ 327.249478][T13961] __sys_bpf+0x343/0x670 [ 327.253893][T13961] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 327.259271][T13961] ? syscall_enter_from_user_mode+0x2e/0x240 [ 327.265244][T13961] ? lockdep_hardirqs_on+0x94/0x130 [ 327.270459][T13961] __x64_sys_bpf+0x78/0x90 [ 327.274869][T13961] do_syscall_64+0x3b/0xb0 [ 327.279269][T13961] ? clear_bhb_loop+0x15/0x70 [ 327.283935][T13961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.289824][T13961] RIP: 0033:0x7fb4d9ec4ff9 [ 327.294240][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.313834][T13961] RSP: 002b:00007fb4d833d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.322601][T13961] RAX: ffffffffffffffda RBX: 00007fb4da07cf80 RCX: 00007fb4d9ec4ff9 [ 327.330749][T13961] RDX: 0000000000000021 RSI: 000000002000e000 RDI: 0000000000000005 [ 327.338794][T13961] RBP: 00007fb4d833d090 R08: 0000000000000000 R09: 0000000000000000 [ 327.346756][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.354711][T13961] R13: 0000000000000001 R14: 00007fb4da07cf80 R15: 00007ffcd23c02d8 [ 327.362680][T13961] [ 327.376001][T13961] Mem-Info: [ 327.379140][T13961] active_anon:260 inactive_anon:4282 isolated_anon:0 [ 327.379140][T13961] active_file:23392 inactive_file:36368 isolated_file:0 [ 327.379140][T13961] unevictable:768 dirty:279 writeback:0 [ 327.379140][T13961] slab_reclaimable:19259 slab_unreclaimable:90431 [ 327.379140][T13961] mapped:21397 shmem:1510 pagetables:574 bounce:0 [ 327.379140][T13961] kernel_misc_reclaimable:0 [ 327.379140][T13961] free:1398535 free_pcp:12166 free_cma:0 [ 327.437229][T13961] Node 0 active_anon:1032kB inactive_anon:16612kB active_file:93492kB inactive_file:145472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85588kB dirty:1116kB writeback:0kB shmem:3980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9560kB pagetables:2296kB all_unreclaimable? no [ 327.482370][T13956] netlink: 'syz.2.3655': attribute type 21 has an invalid length. [ 327.497917][T13956] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.616105][T13961] Node 1 active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 327.672019][T13961] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.717255][T13961] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 327.723199][T13961] Node 0 DMA32 free:1636696kB min:34736kB low:43420kB high:52104kB reserved_highatomic:0KB active_anon:1032kB inactive_anon:16212kB active_file:93492kB inactive_file:145472kB unevictable:1536kB writepending:968kB present:3129332kB managed:2600788kB mlocked:0kB bounce:0kB free_pcp:40592kB local_pcp:20420kB free_cma:0kB [ 327.826319][T13961] lowmem_reserve[]: 0 0 0 0 0 [ 327.834705][T13961] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.096195][T13961] lowmem_reserve[]: 0 0 0 0 0 [ 328.101026][T13961] Node 1 Normal free:3942460kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:7316kB local_pcp:432kB free_cma:0kB [ 328.196127][T13961] lowmem_reserve[]: 0 0 0 0 0 [ 328.201428][T13961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.408164][T13990] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3666'. [ 328.542779][T13961] Node 0 DMA32: 943*4kB (UM) 348*8kB (UM) 255*16kB (UME) 1004*32kB (UME) 686*64kB (UME) 272*128kB (UME) 80*256kB (UME) 43*512kB (UM) 18*1024kB (UME) 6*2048kB (UME) 352*4096kB (M) = 1636492kB [ 329.433507][T13961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.566380][T13961] Node 1 Normal: 87*4kB (UE) 28*8kB (UME) 22*16kB (UE) 131*32kB (UME) 59*64kB (UME) 19*128kB (UE) 6*256kB (U) 3*512kB (UM) 2*1024kB (UE) 3*2048kB (UME) 957*4096kB (M) = 3942460kB [ 333.099163][T13961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.156343][T13961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.430732][T13961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.496172][T13961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.648609][T13961] 61340 total pagecache pages [ 334.656559][T13984] netlink: 'syz.3.3663': attribute type 10 has an invalid length. [ 334.685792][T13961] 0 pages in swap cache [ 334.690232][T13961] Swap cache stats: add 0, delete 0, find 0/0 [ 334.697307][T13961] Free swap = 124996kB [ 334.701624][T13961] Total swap = 124996kB [ 334.715719][T13961] 2097051 pages RAM [ 334.730961][T13961] 0 pages HighMem/MovableOnly [ 334.777887][T13961] 413096 pages reserved [ 334.782088][T13961] 0 pages cma reserved [ 335.487356][T14003] netlink: 'syz.0.3669': attribute type 27 has an invalid length. [ 335.573805][T14003] bond0: (slave bond_slave_0): Releasing backup interface [ 335.695550][T14009] netlink: 'syz.4.3670': attribute type 21 has an invalid length. [ 335.729405][T14009] netlink: 'syz.4.3670': attribute type 4 has an invalid length. [ 335.748011][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3670'. [ 335.812881][T14006] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 335.835629][T14006] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3671'. [ 335.871431][T14006] team0: Port device virt_wifi0 added [ 335.964830][T14019] can: request_module (can-proto-4) failed. [ 335.990571][T14011] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3670'. [ 336.010722][T14015] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 336.031937][T14015] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3671'. [ 336.302331][T14038] syz.3.3678[14038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.302534][T14038] syz.3.3678[14038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.504163][T14044] netlink: 'syz.3.3680': attribute type 11 has an invalid length. [ 336.528593][T14046] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3682'. [ 336.539779][T14044] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3680'. [ 336.598233][T14052] netlink: 'syz.3.3680': attribute type 10 has an invalid length. [ 336.718022][T14052] team0: Port device wlan1 added [ 336.802997][T14041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.893531][T14057] can: request_module (can-proto-4) failed. [ 337.928370][T14067] netlink: 'syz.3.3686': attribute type 21 has an invalid length. [ 337.957206][T14067] netlink: 'syz.3.3686': attribute type 4 has an invalid length. [ 338.081861][T14067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3686'. [ 338.335053][T14067] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3686'. [ 338.543697][T14070] syz.4.3690[14070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.546250][T14070] syz.4.3690[14070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.564474][T14078] FAULT_INJECTION: forcing a failure. [ 338.564474][T14078] name failslab, interval 1, probability 0, space 0, times 0 [ 338.643251][T14078] CPU: 0 PID: 14078 Comm: syz.1.3691 Not tainted 5.15.169-syzkaller #0 [ 338.651531][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.661601][T14078] Call Trace: [ 338.664873][T14078] [ 338.667792][T14078] dump_stack_lvl+0x1e3/0x2d0 [ 338.672469][T14078] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 338.678090][T14078] ? panic+0x860/0x860 [ 338.682157][T14078] ? __might_sleep+0xc0/0xc0 [ 338.686743][T14078] should_fail+0x38a/0x4c0 [ 338.691601][T14078] should_failslab+0x5/0x20 [ 338.696087][T14078] slab_pre_alloc_hook+0x53/0xc0 [ 338.701016][T14078] __kmalloc_node_track_caller+0x6b/0x390 [ 338.706832][T14078] ? netlink_sendmsg+0x6f8/0xd60 [ 338.711758][T14078] ? kmem_cache_alloc_node+0x154/0x2c0 [ 338.717201][T14078] ? __alloc_skb+0xdd/0x590 [ 338.721695][T14078] ? netlink_sendmsg+0x6f8/0xd60 [ 338.726622][T14078] __alloc_skb+0x12c/0x590 [ 338.731023][T14078] netlink_sendmsg+0x6f8/0xd60 [ 338.735785][T14078] ? netlink_getsockopt+0x5b0/0x5b0 [ 338.740969][T14078] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 338.747372][T14078] ? aa_sock_msg_perm+0x91/0x150 [ 338.752298][T14078] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 338.757568][T14078] ? security_socket_sendmsg+0x7d/0xa0 [ 338.763009][T14078] ? netlink_getsockopt+0x5b0/0x5b0 [ 338.768198][T14078] ____sys_sendmsg+0x59e/0x8f0 [ 338.772952][T14078] ? iovec_from_user+0x300/0x390 [ 338.777887][T14078] ? __sys_sendmsg_sock+0x30/0x30 [ 338.782909][T14078] ___sys_sendmsg+0x252/0x2e0 [ 338.787576][T14078] ? __sys_sendmsg+0x260/0x260 [ 338.792330][T14078] ? rcu_nmi_exit+0x70/0xf0 [ 338.796851][T14078] __se_sys_sendmsg+0x19a/0x260 [ 338.801691][T14078] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 338.807834][T14078] ? __x64_sys_sendmsg+0x80/0x80 [ 338.812765][T14078] ? syscall_enter_from_user_mode+0x37/0x240 [ 338.818731][T14078] ? syscall_enter_from_user_mode+0x2e/0x240 [ 338.824783][T14078] do_syscall_64+0x3b/0xb0 [ 338.829184][T14078] ? clear_bhb_loop+0x15/0x70 [ 338.833841][T14078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.839717][T14078] RIP: 0033:0x7f1986dfaff9 [ 338.844119][T14078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.863710][T14078] RSP: 002b:00007f1985273038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.872110][T14078] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986dfaff9 [ 338.880065][T14078] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 338.888019][T14078] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 338.895972][T14078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.903924][T14078] R13: 0000000000000000 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 338.911899][T14078] [ 339.188945][T14090] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3695'. [ 339.295660][T14095] netlink: 'syz.0.3697': attribute type 10 has an invalid length. [ 339.332343][T14095] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3697'. [ 339.418533][T14095] team0: Port device virt_wifi0 added [ 339.503915][T14099] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.511486][T14099] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.950513][T14118] validate_nla: 1 callbacks suppressed [ 339.950529][T14118] netlink: 'syz.1.3703': attribute type 21 has an invalid length. [ 340.017549][T14118] netlink: 'syz.1.3703': attribute type 4 has an invalid length. [ 340.055431][T14115] netlink: 'syz.3.3704': attribute type 10 has an invalid length. [ 340.092300][T14127] tun0: tun_chr_ioctl cmd 1074025673 [ 340.213689][T14132] netlink: 'syz.2.3709': attribute type 11 has an invalid length. [ 340.272457][T14132] netlink: 'syz.2.3709': attribute type 10 has an invalid length. [ 340.319820][T14132] team0: Port device wlan1 added [ 340.336979][T14131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.495240][T14148] FAULT_INJECTION: forcing a failure. [ 340.495240][T14148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.543380][T14148] CPU: 1 PID: 14148 Comm: syz.4.3715 Not tainted 5.15.169-syzkaller #0 [ 340.551660][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.561723][T14148] Call Trace: [ 340.565011][T14148] [ 340.567951][T14148] dump_stack_lvl+0x1e3/0x2d0 [ 340.572641][T14148] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 340.578348][T14148] ? panic+0x860/0x860 [ 340.582426][T14148] ? __kasan_kmalloc_large+0x8d/0xb0 [ 340.587721][T14148] ? rcu_is_watching+0x11/0xa0 [ 340.592500][T14148] ? kmalloc_order_trace+0x4e/0xe0 [ 340.597637][T14148] should_fail+0x38a/0x4c0 [ 340.602079][T14148] _copy_from_user+0x2d/0x170 [ 340.606767][T14148] ____sys_sendmsg+0x2f9/0x8f0 [ 340.611548][T14148] ? iovec_from_user+0x300/0x390 [ 340.616496][T14148] ? __sys_sendmsg_sock+0x30/0x30 [ 340.621552][T14148] ___sys_sendmsg+0x252/0x2e0 [ 340.626234][T14148] ? __sys_sendmsg+0x260/0x260 [ 340.631045][T14148] ? __fdget+0x191/0x220 [ 340.635293][T14148] __se_sys_sendmsg+0x19a/0x260 [ 340.640162][T14148] ? __x64_sys_sendmsg+0x80/0x80 [ 340.645125][T14148] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.651121][T14148] ? lockdep_hardirqs_on+0x94/0x130 [ 340.656417][T14148] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.662578][T14148] do_syscall_64+0x3b/0xb0 [ 340.666997][T14148] ? clear_bhb_loop+0x15/0x70 [ 340.671673][T14148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.677567][T14148] RIP: 0033:0x7ff9ce6b8ff9 [ 340.681985][T14148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.701589][T14148] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.710013][T14148] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 340.717982][T14148] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 340.725949][T14148] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 340.733915][T14148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.741878][T14148] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 340.750051][T14148] [ 341.203379][T14169] netlink: 'syz.1.3723': attribute type 11 has an invalid length. [ 341.223972][T14172] netlink: 'syz.2.3721': attribute type 10 has an invalid length. [ 341.236160][T14169] __nla_validate_parse: 6 callbacks suppressed [ 341.236175][T14169] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3723'. [ 341.284736][T14169] netlink: 'syz.1.3723': attribute type 10 has an invalid length. [ 341.361479][T14169] team0: Port device wlan1 added [ 341.385510][T14164] tun0: tun_chr_ioctl cmd 1074025673 [ 341.419782][T14166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.901507][T14185] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3728'. [ 342.517615][T14192] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3730'. [ 342.642571][T14209] netlink: 'syz.4.3737': attribute type 21 has an invalid length. [ 342.687098][T14209] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3737'. [ 342.702896][T14215] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3740'. [ 342.709941][T14213] FAULT_INJECTION: forcing a failure. [ 342.709941][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 342.748049][T14209] netlink: 'syz.4.3737': attribute type 4 has an invalid length. [ 342.762533][T14213] CPU: 1 PID: 14213 Comm: syz.4.3737 Not tainted 5.15.169-syzkaller #0 [ 342.770808][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.780856][T14213] Call Trace: [ 342.784133][T14213] [ 342.786115][T14209] netlink: 'syz.4.3737': attribute type 5 has an invalid length. [ 342.787065][T14213] dump_stack_lvl+0x1e3/0x2d0 [ 342.787094][T14213] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 342.795301][T14209] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3737'. [ 342.799454][T14213] ? panic+0x860/0x860 [ 342.799475][T14213] ? __lock_acquire+0x1295/0x1ff0 [ 342.799504][T14213] should_fail+0x38a/0x4c0 [ 342.799528][T14213] should_failslab+0x5/0x20 [ 342.799546][T14213] slab_pre_alloc_hook+0x53/0xc0 [ 342.799564][T14213] ? skb_clone+0x1bb/0x350 [ 342.799581][T14213] kmem_cache_alloc+0x3f/0x280 [ 342.846309][T14213] skb_clone+0x1bb/0x350 [ 342.850560][T14213] __netlink_deliver_tap+0x375/0x760 [ 342.855844][T14213] netlink_deliver_tap+0x16c/0x180 [ 342.860940][T14213] netlink_unicast+0x788/0x980 [ 342.865693][T14213] ? netlink_detachskb+0x90/0x90 [ 342.870612][T14213] ? __virt_addr_valid+0x3bb/0x460 [ 342.875707][T14213] ? 0xffffffff81000000 [ 342.879840][T14213] ? __check_object_size+0x300/0x410 [ 342.885114][T14213] ? bpf_lsm_netlink_send+0x5/0x10 [ 342.890221][T14213] netlink_sendmsg+0xa30/0xd60 [ 342.894988][T14213] ? netlink_getsockopt+0x5b0/0x5b0 [ 342.900185][T14213] ? aa_sock_msg_perm+0x91/0x150 [ 342.905116][T14213] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 342.910386][T14213] ? security_socket_sendmsg+0x7d/0xa0 [ 342.915917][T14213] ? netlink_getsockopt+0x5b0/0x5b0 [ 342.921111][T14213] ____sys_sendmsg+0x59e/0x8f0 [ 342.925861][T14213] ? iovec_from_user+0x300/0x390 [ 342.930784][T14213] ? __sys_sendmsg_sock+0x30/0x30 [ 342.935802][T14213] ___sys_sendmsg+0x252/0x2e0 [ 342.940465][T14213] ? __sys_sendmsg+0x260/0x260 [ 342.945244][T14213] ? __fdget+0x191/0x220 [ 342.949483][T14213] __se_sys_sendmsg+0x19a/0x260 [ 342.954321][T14213] ? __x64_sys_sendmsg+0x80/0x80 [ 342.959252][T14213] ? syscall_enter_from_user_mode+0x2e/0x240 [ 342.965230][T14213] ? lockdep_hardirqs_on+0x94/0x130 [ 342.970413][T14213] ? syscall_enter_from_user_mode+0x2e/0x240 [ 342.976383][T14213] do_syscall_64+0x3b/0xb0 [ 342.980798][T14213] ? clear_bhb_loop+0x15/0x70 [ 342.985464][T14213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.991344][T14213] RIP: 0033:0x7ff9ce6b8ff9 [ 342.995751][T14213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.015600][T14213] RSP: 002b:00007ff9ccb10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.023998][T14213] RAX: ffffffffffffffda RBX: 00007ff9ce871058 RCX: 00007ff9ce6b8ff9 [ 343.031957][T14213] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 343.039910][T14213] RBP: 00007ff9ccb10090 R08: 0000000000000000 R09: 0000000000000000 [ 343.047863][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.055812][T14213] R13: 0000000000000000 R14: 00007ff9ce871058 R15: 00007ffcd1ddc7b8 [ 343.063777][T14213] [ 343.077756][T14213] netlink: 'syz.4.3737': attribute type 21 has an invalid length. [ 343.089176][T14213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3737'. [ 343.107209][T14213] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3737'. [ 343.223336][T14225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.267528][T14228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.331363][T14223] tun0: tun_chr_ioctl cmd 1074025673 [ 343.459557][T14245] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3750'. [ 343.622756][T14251] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3753'. [ 343.724558][T14260] FAULT_INJECTION: forcing a failure. [ 343.724558][T14260] name failslab, interval 1, probability 0, space 0, times 0 [ 343.748640][T14260] CPU: 0 PID: 14260 Comm: syz.4.3756 Not tainted 5.15.169-syzkaller #0 [ 343.756915][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.766978][T14260] Call Trace: [ 343.770249][T14260] [ 343.773165][T14260] dump_stack_lvl+0x1e3/0x2d0 [ 343.777852][T14260] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 343.783472][T14260] ? panic+0x860/0x860 [ 343.787527][T14260] ? __might_sleep+0xc0/0xc0 [ 343.792103][T14260] should_fail+0x38a/0x4c0 [ 343.796504][T14260] should_failslab+0x5/0x20 [ 343.800996][T14260] slab_pre_alloc_hook+0x53/0xc0 [ 343.805931][T14260] kmem_cache_alloc_trace+0x49/0x290 [ 343.811204][T14260] ? call_usermodehelper_setup+0x8a/0x260 [ 343.816911][T14260] call_usermodehelper_setup+0x8a/0x260 [ 343.822441][T14260] ? __request_module+0x9b0/0x9b0 [ 343.827450][T14260] __request_module+0x3fb/0x9b0 [ 343.832286][T14260] ? capable+0x74/0xe0 [ 343.836353][T14260] ? umd_cleanup+0x110/0x110 [ 343.840922][T14260] ? aa_get_newest_label+0xf9/0x6c0 [ 343.846109][T14260] ? end_current_label_crit_section+0x170/0x170 [ 343.852336][T14260] ? apparmor_capable+0x12e/0x190 [ 343.857342][T14260] ? bpf_lsm_capable+0x5/0x10 [ 343.862042][T14260] ? security_capable+0x86/0xb0 [ 343.866885][T14260] dev_load+0x156/0x1b0 [ 343.871124][T14260] dev_ioctl+0x4ec/0xf60 [ 343.875362][T14260] sock_do_ioctl+0x34f/0x5a0 [ 343.880381][T14260] ? sock_show_fdinfo+0xb0/0xb0 [ 343.885226][T14260] sock_ioctl+0x47f/0x770 [ 343.889538][T14260] ? sock_poll+0x410/0x410 [ 343.893939][T14260] ? __fget_files+0x413/0x480 [ 343.898607][T14260] ? bpf_lsm_file_ioctl+0x5/0x10 [ 343.903528][T14260] ? security_file_ioctl+0x7d/0xa0 [ 343.908622][T14260] ? sock_poll+0x410/0x410 [ 343.913025][T14260] __se_sys_ioctl+0xf1/0x160 [ 343.917605][T14260] do_syscall_64+0x3b/0xb0 [ 343.922025][T14260] ? clear_bhb_loop+0x15/0x70 [ 343.926684][T14260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.932559][T14260] RIP: 0033:0x7ff9ce6b8ff9 [ 343.936959][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.956550][T14260] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.964949][T14260] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 343.972904][T14260] RDX: 0000000020000080 RSI: 0000000000008914 RDI: 0000000000000004 [ 343.980858][T14260] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 343.988810][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.996870][T14260] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 344.004841][T14260] [ 344.334245][T14280] FAULT_INJECTION: forcing a failure. [ 344.334245][T14280] name failslab, interval 1, probability 0, space 0, times 0 [ 344.406360][T14280] CPU: 0 PID: 14280 Comm: syz.4.3764 Not tainted 5.15.169-syzkaller #0 [ 344.414749][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.425012][T14280] Call Trace: [ 344.428315][T14280] [ 344.431264][T14280] dump_stack_lvl+0x1e3/0x2d0 [ 344.435972][T14280] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 344.441631][T14280] ? panic+0x860/0x860 [ 344.445697][T14280] ? __kmalloc_node+0x199/0x390 [ 344.450550][T14280] ? alloc_netdev_mqs+0x85/0xc10 [ 344.455513][T14280] ? ip6_tnl_locate+0x603/0x7a0 [ 344.460387][T14280] ? ip6_tnl_siocdevprivate+0x9b6/0x17c0 [ 344.466046][T14280] ? dev_ioctl+0x5ab/0xf60 [ 344.470485][T14280] ? sock_ioctl+0x68f/0x770 [ 344.475005][T14280] ? __se_sys_ioctl+0xf1/0x160 [ 344.479781][T14280] ? do_syscall_64+0x3b/0xb0 [ 344.484385][T14280] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.490483][T14280] should_fail+0x38a/0x4c0 [ 344.494941][T14280] should_failslab+0x5/0x20 [ 344.499626][T14280] slab_pre_alloc_hook+0x53/0xc0 [ 344.504596][T14280] kmem_cache_alloc_trace+0x49/0x290 [ 344.509898][T14280] ? __hw_addr_add_ex+0x206/0x770 [ 344.514963][T14280] __hw_addr_add_ex+0x206/0x770 [ 344.519866][T14280] dev_addr_init+0x13f/0x220 [ 344.524496][T14280] ? dev_addr_flush+0x200/0x200 [ 344.529412][T14280] alloc_netdev_mqs+0x116/0xc10 [ 344.534291][T14280] ? rcu_lock_release+0x20/0x20 [ 344.539192][T14280] ip6_tnl_locate+0x603/0x7a0 [ 344.543930][T14280] ? ip6_tnl_unlink+0x2e0/0x2e0 [ 344.548806][T14280] ? __might_fault+0xb4/0x110 [ 344.553506][T14280] ? ip6_tnl_siocdevprivate+0x990/0x17c0 [ 344.559175][T14280] ip6_tnl_siocdevprivate+0x9b6/0x17c0 [ 344.564722][T14280] ? ip6_tnl_start_xmit+0x1470/0x1470 [ 344.570262][T14280] ? trace_event_raw_event_lock+0x250/0x250 [ 344.576202][T14280] ? __mutex_lock_common+0x444/0x25a0 [ 344.581594][T14280] ? full_name_hash+0x8f/0xe0 [ 344.586315][T14280] dev_ifsioc+0xc75/0x10c0 [ 344.590751][T14280] ? dev_ioctl+0x598/0xf60 [ 344.595207][T14280] ? dev_ioctl+0xf60/0xf60 [ 344.599661][T14280] ? full_name_hash+0x8f/0xe0 [ 344.604411][T14280] dev_ioctl+0x5ab/0xf60 [ 344.608703][T14280] sock_ioctl+0x68f/0x770 [ 344.613061][T14280] ? sock_poll+0x410/0x410 [ 344.617620][T14280] ? bpf_lsm_file_ioctl+0x5/0x10 [ 344.622576][T14280] ? security_file_ioctl+0x7d/0xa0 [ 344.627797][T14280] ? sock_poll+0x410/0x410 [ 344.632253][T14280] __se_sys_ioctl+0xf1/0x160 [ 344.636957][T14280] do_syscall_64+0x3b/0xb0 [ 344.641383][T14280] ? clear_bhb_loop+0x15/0x70 [ 344.646076][T14280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.651975][T14280] RIP: 0033:0x7ff9ce6b8ff9 [ 344.656392][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.675997][T14280] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.684415][T14280] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 344.692380][T14280] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 344.700375][T14280] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 344.708428][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.716406][T14280] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 344.724411][T14280] [ 344.764916][T14278] tun0: tun_chr_ioctl cmd 1074025673 [ 346.338173][T14319] validate_nla: 5 callbacks suppressed [ 346.338190][T14319] netlink: 'syz.1.3775': attribute type 21 has an invalid length. [ 346.408910][T14319] __nla_validate_parse: 1 callbacks suppressed [ 346.408930][T14319] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3775'. [ 346.426587][T14319] netlink: 'syz.1.3775': attribute type 4 has an invalid length. [ 346.441155][T14319] netlink: 'syz.1.3775': attribute type 5 has an invalid length. [ 346.449799][T14319] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3775'. [ 346.504736][T14323] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 346.534272][T14323] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3776'. [ 347.091733][T14330] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 347.277159][T14332] device wg2 entered promiscuous mode [ 350.168663][T14369] netlink: 'syz.0.3789': attribute type 21 has an invalid length. [ 350.206782][T14369] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3789'. [ 350.247563][T14369] netlink: 'syz.0.3789': attribute type 4 has an invalid length. [ 350.348634][T14375] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 350.359251][T14369] netlink: 'syz.0.3789': attribute type 5 has an invalid length. [ 350.406172][T14375] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3790'. [ 350.416541][T14369] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3789'. [ 350.515585][T14376] netlink: 'syz.3.3788': attribute type 10 has an invalid length. [ 350.714249][T14388] FAULT_INJECTION: forcing a failure. [ 350.714249][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 350.754131][T14389] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3792'. [ 350.772628][T14388] CPU: 0 PID: 14388 Comm: syz.4.3793 Not tainted 5.15.169-syzkaller #0 [ 350.781103][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.791178][T14388] Call Trace: [ 350.794475][T14388] [ 350.797426][T14388] dump_stack_lvl+0x1e3/0x2d0 [ 350.802149][T14388] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 350.808023][T14388] ? panic+0x860/0x860 [ 350.812135][T14388] ? __might_sleep+0xc0/0xc0 [ 350.817178][T14388] should_fail+0x38a/0x4c0 [ 350.821816][T14388] ? __request_module+0x32b/0x9b0 [ 350.827066][T14388] should_failslab+0x5/0x20 [ 350.832471][T14388] slab_pre_alloc_hook+0x53/0xc0 [ 350.837551][T14388] ? __request_module+0x32b/0x9b0 [ 350.842610][T14388] __kmalloc_track_caller+0x6c/0x300 [ 350.847929][T14388] ? __request_module+0x32b/0x9b0 [ 350.853010][T14388] kstrdup+0x31/0x70 [ 350.856944][T14388] __request_module+0x32b/0x9b0 [ 350.861853][T14388] ? capable+0x74/0xe0 [ 350.865956][T14388] ? umd_cleanup+0x110/0x110 [ 350.870650][T14388] ? aa_get_newest_label+0xf9/0x6c0 [ 350.875892][T14388] ? end_current_label_crit_section+0x170/0x170 [ 350.882200][T14388] ? apparmor_capable+0x12e/0x190 [ 350.887262][T14388] ? bpf_lsm_capable+0x5/0x10 [ 350.892089][T14388] ? security_capable+0x86/0xb0 [ 350.897030][T14388] dev_load+0x156/0x1b0 [ 350.901323][T14388] dev_ioctl+0x593/0xf60 [ 350.905625][T14388] sock_ioctl+0x68f/0x770 [ 350.909986][T14388] ? sock_poll+0x410/0x410 [ 350.914459][T14388] ? bpf_lsm_file_ioctl+0x5/0x10 [ 350.919412][T14388] ? security_file_ioctl+0x7d/0xa0 [ 350.924539][T14388] ? sock_poll+0x410/0x410 [ 350.929076][T14388] __se_sys_ioctl+0xf1/0x160 [ 350.933802][T14388] do_syscall_64+0x3b/0xb0 [ 350.938238][T14388] ? clear_bhb_loop+0x15/0x70 [ 350.942932][T14388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.948842][T14388] RIP: 0033:0x7ff9ce6b8ff9 [ 350.953285][T14388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.973094][T14388] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.981539][T14388] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 350.989808][T14388] RDX: 0000000020000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 350.997802][T14388] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 351.006048][T14388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.014126][T14388] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 351.022171][T14388] [ 352.243909][T14399] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 352.585806][T14414] FAULT_INJECTION: forcing a failure. [ 352.585806][T14414] name failslab, interval 1, probability 0, space 0, times 0 [ 352.603569][T14415] device lo entered promiscuous mode [ 352.632861][T14414] CPU: 1 PID: 14414 Comm: syz.4.3799 Not tainted 5.15.169-syzkaller #0 [ 352.641153][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.651273][T14414] Call Trace: [ 352.654630][T14414] [ 352.657576][T14414] dump_stack_lvl+0x1e3/0x2d0 [ 352.662284][T14414] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 352.667952][T14414] ? panic+0x860/0x860 [ 352.672052][T14414] ? __might_sleep+0xc0/0xc0 [ 352.676690][T14414] should_fail+0x38a/0x4c0 [ 352.681147][T14414] should_failslab+0x5/0x20 [ 352.685671][T14414] slab_pre_alloc_hook+0x53/0xc0 [ 352.690644][T14414] __kmalloc+0x6e/0x300 [ 352.694817][T14414] ? tomoyo_encode+0x26b/0x530 [ 352.699626][T14414] tomoyo_encode+0x26b/0x530 [ 352.704252][T14414] ? sock_free_inode+0x20/0x20 [ 352.709049][T14414] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 352.714742][T14414] tomoyo_path_number_perm+0x225/0x810 [ 352.720254][T14414] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 352.725867][T14414] ? __fget_files+0x413/0x480 [ 352.730607][T14414] security_file_ioctl+0x6d/0xa0 [ 352.735590][T14414] __se_sys_ioctl+0x47/0x160 [ 352.740212][T14414] do_syscall_64+0x3b/0xb0 [ 352.744735][T14414] ? clear_bhb_loop+0x15/0x70 [ 352.749441][T14414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.755375][T14414] RIP: 0033:0x7ff9ce6b8ff9 [ 352.759823][T14414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.779623][T14414] RSP: 002b:00007ff9ccb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.788110][T14414] RAX: ffffffffffffffda RBX: 00007ff9ce870f80 RCX: 00007ff9ce6b8ff9 [ 352.796087][T14414] RDX: 0000000020001000 RSI: 0000000000008914 RDI: 0000000000000007 [ 352.804063][T14414] RBP: 00007ff9ccb31090 R08: 0000000000000000 R09: 0000000000000000 [ 352.812030][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.820086][T14414] R13: 0000000000000000 R14: 00007ff9ce870f80 R15: 00007ffcd1ddc7b8 [ 352.828093][T14414] [ 352.951994][T14414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.966495][T14414] device lo entered promiscuous mode [ 353.531072][T14432] FAULT_INJECTION: forcing a failure. [ 353.531072][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 353.544315][T14432] CPU: 1 PID: 14432 Comm: syz.1.3807 Not tainted 5.15.169-syzkaller #0 [ 353.552670][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.562746][T14432] Call Trace: [ 353.566064][T14432] [ 353.569055][T14432] dump_stack_lvl+0x1e3/0x2d0 [ 353.573766][T14432] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 353.579426][T14432] ? panic+0x860/0x860 [ 353.583526][T14432] ? switchdev_handle_fdb_del_to_device+0x4c/0x60 [ 353.589978][T14432] ? atomic_notifier_call_chain+0x268/0x290 [ 353.595910][T14432] should_fail+0x38a/0x4c0 [ 353.600380][T14432] should_failslab+0x5/0x20 [ 353.604901][T14432] slab_pre_alloc_hook+0x53/0xc0 [ 353.609877][T14432] kmem_cache_alloc_node+0x49/0x2c0 [ 353.615102][T14432] ? __alloc_skb+0xdd/0x590 [ 353.619623][T14432] ? __lock_acquire+0x1ff0/0x1ff0 [ 353.624804][T14432] __alloc_skb+0xdd/0x590 [ 353.629170][T14432] fdb_notify+0xa3/0x160 [ 353.633448][T14432] fdb_delete+0xb76/0xe80 [ 353.637921][T14432] br_fdb_change_mac_address+0x171/0x550 [ 353.643684][T14432] ? br_stp_change_bridge_id+0x23/0x3b0 [ 353.649270][T14432] br_stp_change_bridge_id+0x62/0x3b0 [ 353.654700][T14432] br_set_mac_address+0x187/0x2a0 [ 353.659863][T14432] dev_set_mac_address+0x1f2/0x470 [ 353.665055][T14432] ? dev_pre_changeaddr_notify+0x220/0x220 [ 353.670893][T14432] ? __mutex_lock_common+0x444/0x25a0 [ 353.676313][T14432] dev_set_mac_address_user+0x2d/0x50 [ 353.681710][T14432] dev_ifsioc+0x7ef/0x10c0 [ 353.686157][T14432] ? dev_ioctl+0x4f1/0xf60 [ 353.690616][T14432] ? dev_ioctl+0xf60/0xf60 [ 353.695057][T14432] ? full_name_hash+0x8f/0xe0 [ 353.699880][T14432] dev_ioctl+0x504/0xf60 [ 353.704157][T14432] sock_do_ioctl+0x34f/0x5a0 [ 353.708799][T14432] ? sock_show_fdinfo+0xb0/0xb0 [ 353.713729][T14432] sock_ioctl+0x47f/0x770 [ 353.718089][T14432] ? sock_poll+0x410/0x410 [ 353.722535][T14432] ? __fget_files+0x413/0x480 [ 353.727276][T14432] ? bpf_lsm_file_ioctl+0x5/0x10 [ 353.732229][T14432] ? security_file_ioctl+0x7d/0xa0 [ 353.737357][T14432] ? sock_poll+0x410/0x410 [ 353.741812][T14432] __se_sys_ioctl+0xf1/0x160 [ 353.746438][T14432] do_syscall_64+0x3b/0xb0 [ 353.750871][T14432] ? clear_bhb_loop+0x15/0x70 [ 353.755566][T14432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.761482][T14432] RIP: 0033:0x7f1986dfaff9 [ 353.765921][T14432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.785541][T14432] RSP: 002b:00007f1985273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.793986][T14432] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986dfaff9 [ 353.801975][T14432] RDX: 0000000020000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 353.809964][T14432] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 353.818473][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.826464][T14432] R13: 0000000000000000 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 353.834511][T14432] [ 353.986354][T14429] netlink: 'syz.4.3806': attribute type 12 has an invalid length. [ 354.005191][T14429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3806'. [ 354.027288][T14429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3806'. [ 354.410054][T14439] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3810'. [ 354.568219][T14451] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3814'. [ 354.688342][ T3584] Bluetooth: hci2: ACL packet for unknown connection handle 3072 [ 355.105325][T14455] netlink: 'syz.0.3817': attribute type 21 has an invalid length. [ 355.146451][T14455] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3817'. [ 355.155569][T14455] netlink: 'syz.0.3817': attribute type 4 has an invalid length. [ 355.228594][T14455] netlink: 'syz.0.3817': attribute type 5 has an invalid length. [ 355.295405][T14455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3817'. [ 357.199304][T14475] netlink: 'syz.1.3822': attribute type 10 has an invalid length. [ 357.679881][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 357.691391][T14491] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3828'. [ 358.055272][T14464] chnl_net:caif_netlink_parms(): no params data found [ 358.453002][T14510] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 358.773941][T14510] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3833'. [ 360.246966][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 360.568308][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.590968][T14464] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.603588][T14464] device bridge_slave_0 entered promiscuous mode [ 360.631470][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.641719][T14464] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.658920][T14464] device bridge_slave_1 entered promiscuous mode [ 360.792903][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.867217][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.068774][T14464] team0: Port device team_slave_0 added [ 361.149779][T14464] team0: Port device team_slave_1 added [ 361.165432][T14542] FAULT_INJECTION: forcing a failure. [ 361.165432][T14542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.213766][T14542] CPU: 1 PID: 14542 Comm: syz.1.3841 Not tainted 5.15.169-syzkaller #0 [ 361.222056][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.232314][T14542] Call Trace: [ 361.235786][T14542] [ 361.238746][T14542] dump_stack_lvl+0x1e3/0x2d0 [ 361.243473][T14542] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 361.249147][T14542] ? panic+0x860/0x860 [ 361.253304][T14542] should_fail+0x38a/0x4c0 [ 361.257777][T14542] _copy_from_user+0x2d/0x170 [ 361.262498][T14542] ppp_set_compress+0x118/0x980 [ 361.267447][T14542] ? ppp_bridge_channels+0x4b0/0x4b0 [ 361.272870][T14542] ? __might_fault+0xb4/0x110 [ 361.277638][T14542] ppp_ioctl+0x1730/0x1cd0 [ 361.282107][T14542] ? ppp_poll+0x240/0x240 [ 361.286566][T14542] ? __fget_files+0x413/0x480 [ 361.291322][T14542] ? bpf_lsm_file_ioctl+0x5/0x10 [ 361.296382][T14542] ? security_file_ioctl+0x7d/0xa0 [ 361.301520][T14542] ? ppp_poll+0x240/0x240 [ 361.306257][T14542] __se_sys_ioctl+0xf1/0x160 [ 361.311046][T14542] do_syscall_64+0x3b/0xb0 [ 361.315502][T14542] ? clear_bhb_loop+0x15/0x70 [ 361.320219][T14542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.326331][T14542] RIP: 0033:0x7f1986dfaff9 [ 361.330780][T14542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.350712][T14542] RSP: 002b:00007f1985273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.359264][T14542] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986dfaff9 [ 361.367274][T14542] RDX: 0000000020000000 RSI: 000000004010744d RDI: 000000000000000f [ 361.375487][T14542] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 361.383499][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.391514][T14542] R13: 0000000000000000 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 361.399578][T14542] [ 361.517766][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.554668][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.591077][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.607130][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.614107][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.666051][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.811300][T14464] device hsr_slave_0 entered promiscuous mode [ 361.827514][T14464] device hsr_slave_1 entered promiscuous mode [ 361.870434][T14557] syz.3.3846 (14557) used obsolete PPPIOCDETACH ioctl [ 362.316231][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 362.332639][T14464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.580600][T14464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.642989][T14575] netlink: 'syz.0.3851': attribute type 1 has an invalid length. [ 362.690007][T14570] netlink: 'syz.4.3852': attribute type 21 has an invalid length. [ 362.690593][T14575] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3851'. [ 362.721775][T14570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3852'. [ 363.122072][T14464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.231005][T14464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.266611][T14587] netlink: 'syz.4.3856': attribute type 21 has an invalid length. [ 363.312559][T14587] netlink: 'syz.4.3856': attribute type 1 has an invalid length. [ 363.346839][T14587] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3856'. [ 363.541238][T14594] raw_sendmsg: syz.3.3859 forgot to set AF_INET. Fix it! [ 363.730421][T14464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.808573][T14464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.859653][T14464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.892458][T14464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.055754][T14602] netlink: 'syz.3.3870': attribute type 8 has an invalid length. [ 364.096388][T14602] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3870'. [ 364.112625][T14464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.189913][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.202441][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.228594][T14464] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.257775][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.273235][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.284635][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.291840][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.329147][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.347653][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.360112][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.377960][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.385203][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.396321][ T3580] Bluetooth: hci4: command 0x0419 tx timeout [ 364.422745][T14611] netlink: 'syz.3.3864': attribute type 21 has an invalid length. [ 364.436380][T14611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3864'. [ 364.457471][T14611] netlink: 'syz.3.3864': attribute type 4 has an invalid length. [ 364.476740][T14611] netlink: 'syz.3.3864': attribute type 5 has an invalid length. [ 364.484678][T14611] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3864'. [ 364.499852][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.551063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.596794][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.625744][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.660319][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.740119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.755005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.815384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.847214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.877821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.887905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.903859][T14464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.184961][T14633] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3872'. [ 365.410837][T14639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.444521][T14639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.501805][T14639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.557388][T14639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.821562][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.831251][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.853643][T14464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.899752][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.928059][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.997970][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.017322][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.034885][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.057521][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.087843][T14464] device veth0_vlan entered promiscuous mode [ 366.108926][T14464] device veth1_vlan entered promiscuous mode [ 366.163140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.173580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.184171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.194709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.209892][T14464] device veth0_macvtap entered promiscuous mode [ 366.233217][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.253721][T14464] device veth1_macvtap entered promiscuous mode [ 366.283355][T14644] netlink: 'syz.4.3877': attribute type 21 has an invalid length. [ 366.307823][T14644] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3877'. [ 366.327867][T14644] netlink: 'syz.4.3877': attribute type 4 has an invalid length. [ 366.356731][T14644] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 366.369096][T14644] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3877'. [ 366.457940][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.483869][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.509792][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.534217][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.570563][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.602331][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.627248][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.647404][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.679911][T14464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.697997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.717629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.801560][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.886110][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.916084][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.944395][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.985529][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.014519][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.046433][T14464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.076324][T14464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.110797][T14464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.186648][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.194544][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.291391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.323721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.362046][T14464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.386239][T14464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.415808][T14464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.437641][T14464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.830596][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.859986][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.944994][T14674] netlink: 'syz.1.3884': attribute type 1 has an invalid length. [ 368.016512][T14674] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3884'. [ 368.135702][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.208294][T14685] netlink: 'syz.4.3888': attribute type 21 has an invalid length. [ 368.230543][T14685] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3888'. [ 368.276084][T14685] netlink: 'syz.4.3888': attribute type 4 has an invalid length. [ 368.284149][T14685] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3888'. [ 368.400547][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.413176][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.459050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.913691][T14704] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3894'. [ 369.252056][T14713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.292090][T14713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.344727][T14720] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3902'. [ 369.347998][T14713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.382540][T14723] validate_nla: 1 callbacks suppressed [ 369.382560][T14723] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 369.393395][T14713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.530750][T14723] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3901'. [ 370.379226][T14735] FAULT_INJECTION: forcing a failure. [ 370.379226][T14735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.444919][T14735] CPU: 1 PID: 14735 Comm: syz.1.3907 Not tainted 5.15.169-syzkaller #0 [ 370.453213][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.463306][T14735] Call Trace: [ 370.466591][T14735] [ 370.469619][T14735] dump_stack_lvl+0x1e3/0x2d0 [ 370.474331][T14735] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 370.480142][T14735] ? panic+0x860/0x860 [ 370.484257][T14735] ? snprintf+0xd6/0x120 [ 370.488546][T14735] should_fail+0x38a/0x4c0 [ 370.492977][T14735] _copy_to_user+0x2d/0x130 [ 370.497487][T14735] simple_read_from_buffer+0xc6/0x150 [ 370.502893][T14735] proc_fail_nth_read+0x1a3/0x210 [ 370.507940][T14735] ? proc_fault_inject_write+0x390/0x390 [ 370.513933][T14735] ? fsnotify_perm+0x442/0x590 [ 370.518703][T14735] ? proc_fault_inject_write+0x390/0x390 [ 370.524426][T14735] vfs_read+0x2fc/0xe10 [ 370.528605][T14735] ? kernel_read+0x1f0/0x1f0 [ 370.533239][T14735] ? __fget_files+0x413/0x480 [ 370.537948][T14735] ? mutex_lock_nested+0x17/0x20 [ 370.542904][T14735] ? __fdget_pos+0x2cb/0x380 [ 370.547503][T14735] ? ksys_read+0x77/0x2c0 [ 370.551877][T14735] ksys_read+0x1a2/0x2c0 [ 370.556129][T14735] ? print_irqtrace_events+0x210/0x210 [ 370.561616][T14735] ? vfs_write+0xe50/0xe50 [ 370.566051][T14735] ? syscall_enter_from_user_mode+0x2e/0x240 [ 370.572076][T14735] ? lockdep_hardirqs_on+0x94/0x130 [ 370.577313][T14735] ? syscall_enter_from_user_mode+0x2e/0x240 [ 370.583409][T14735] do_syscall_64+0x3b/0xb0 [ 370.587832][T14735] ? clear_bhb_loop+0x15/0x70 [ 370.592516][T14735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.598431][T14735] RIP: 0033:0x7f1986df9a3c [ 370.602849][T14735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 370.622503][T14735] RSP: 002b:00007f1985273030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.630950][T14735] RAX: ffffffffffffffda RBX: 00007f1986fb2f80 RCX: 00007f1986df9a3c [ 370.638944][T14735] RDX: 000000000000000f RSI: 00007f19852730a0 RDI: 0000000000000006 [ 370.646916][T14735] RBP: 00007f1985273090 R08: 0000000000000000 R09: 0000000000000000 [ 370.654898][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.662894][T14735] R13: 0000000000000000 R14: 00007f1986fb2f80 R15: 00007ffec99c78d8 [ 370.670911][T14735] [ 371.463321][T14757] netlink: 'syz.0.3914': attribute type 21 has an invalid length. [ 371.516450][T14757] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3914'. [ 371.525582][T14757] netlink: 'syz.0.3914': attribute type 4 has an invalid length. [ 371.583658][T14757] netlink: 'syz.0.3914': attribute type 5 has an invalid length. [ 371.617864][T14757] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3914'. [ 371.630940][T14763] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 371.653663][T14763] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3916'. [ 371.788177][T14765] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 371.817571][T14765] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3917'. [ 371.971993][T14767] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 372.295708][T14781] netlink: 'syz.1.3922': attribute type 29 has an invalid length. [ 372.330525][T14781] netlink: 'syz.1.3922': attribute type 29 has an invalid length. [ 374.044356][T14797] __nla_validate_parse: 1 callbacks suppressed [ 374.044451][T14797] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3928'. [ 374.152487][T14800] netlink: 'syz.2.3929': attribute type 21 has an invalid length. [ 374.196216][T14800] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3929'. [ 374.218175][T14800] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3929'. [ 375.832898][T14815] validate_nla: 2 callbacks suppressed [ 375.832920][T14815] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 375.983749][T14815] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3943'. [ 377.118378][T14836] netlink: 'syz.1.3940': attribute type 29 has an invalid length. [ 377.217793][T14836] netlink: 'syz.1.3940': attribute type 29 has an invalid length. [ 377.236586][T14839] netlink: 'syz.2.3941': attribute type 21 has an invalid length. [ 377.244812][T14839] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3941'. [ 377.290734][T14839] netlink: 'syz.2.3941': attribute type 4 has an invalid length. [ 377.326227][T14839] netlink: 'syz.2.3941': attribute type 5 has an invalid length. [ 377.334185][T14839] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3941'. [ 378.374826][T14857] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.382671][T14857] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.486799][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.493198][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.869635][T14866] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 378.914132][T14866] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3949'. [ 381.042541][T14887] netlink: 'syz.1.3956': attribute type 21 has an invalid length. [ 381.056332][T14887] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3956'. [ 381.065481][T14887] netlink: 'syz.1.3956': attribute type 4 has an invalid length. [ 381.094826][T14887] netlink: 'syz.1.3956': attribute type 5 has an invalid length. [ 381.129822][T14887] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3956'. [ 381.642955][T14895] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3959'. [ 382.509335][T14881] chnl_net:caif_netlink_parms(): no params data found [ 382.729762][ T3614] Bluetooth: hci5: command 0x0409 tx timeout [ 383.838136][T14881] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.859868][T14881] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.922913][T14881] device bridge_slave_0 entered promiscuous mode [ 384.028179][T14881] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.035312][T14881] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.136215][T14881] device bridge_slave_1 entered promiscuous mode [ 384.469781][T14881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.672465][T14881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.266172][ T3614] Bluetooth: hci5: command 0x041b tx timeout [ 385.909222][T14918] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 385.926557][T14918] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3964'. [ 385.992539][T14881] team0: Port device team_slave_0 added [ 386.229318][T14924] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3966'. [ 386.254780][T14881] team0: Port device team_slave_1 added [ 387.286191][ T3617] Bluetooth: hci5: command 0x040f tx timeout [ 387.419689][T14881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.477324][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.663719][T14881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.721935][T14928] netlink: 'syz.2.3968': attribute type 21 has an invalid length. [ 387.768939][T14928] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3968'. [ 387.866727][T14928] netlink: 'syz.2.3968': attribute type 4 has an invalid length. [ 387.931906][T14928] netlink: 'syz.2.3968': attribute type 5 has an invalid length. [ 387.975525][T14928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3968'. [ 388.077764][T14881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.084746][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.296209][T14881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.514036][T14941] netlink: 'syz.0.3971': attribute type 29 has an invalid length. [ 389.030353][T14941] netlink: 'syz.0.3971': attribute type 29 has an invalid length. [ 389.145895][T14881] device hsr_slave_0 entered promiscuous mode [ 389.315323][T14881] device hsr_slave_1 entered promiscuous mode [ 389.336688][T14881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.368097][ T3614] Bluetooth: hci5: command 0x0419 tx timeout [ 389.413516][T14881] Cannot create hsr debugfs directory [ 390.799012][ T3580] Bluetooth: hci3: command 0x0406 tx timeout [ 390.876385][ T3614] Bluetooth: hci6: command 0x0409 tx timeout [ 391.075047][T14881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.513563][T14939] chnl_net:caif_netlink_parms(): no params data found [ 391.999907][T14967] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3978'. [ 393.049700][ T3617] Bluetooth: hci6: command 0x041b tx timeout [ 395.177893][ T3614] Bluetooth: hci6: command 0x040f tx timeout [ 397.819581][ T3614] Bluetooth: hci1: command 0x0406 tx timeout [ 397.831559][T14881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.833844][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 398.409950][T14881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.556101][T14976] netlink: 'syz.0.3980': attribute type 21 has an invalid length. [ 398.563959][T14976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3980'. [ 398.650179][T14976] netlink: 'syz.0.3980': attribute type 4 has an invalid length. [ 398.658107][T14976] netlink: 'syz.0.3980': attribute type 5 has an invalid length. [ 398.665840][T14976] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3980'. [ 398.749255][T14881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.163832][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.198733][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.208450][T14939] device bridge_slave_0 entered promiscuous mode [ 399.281174][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.315227][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.338559][T14939] device bridge_slave_1 entered promiscuous mode [ 399.833296][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.907252][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.034263][T14881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.094188][T14881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.132076][T14939] team0: Port device team_slave_0 added [ 400.158480][T14881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.205108][T14939] team0: Port device team_slave_1 added [ 400.222807][T14881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.444603][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.482746][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.580727][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.693942][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.721607][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.874936][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.277782][T14939] device hsr_slave_0 entered promiscuous mode [ 401.361667][T14939] device hsr_slave_1 entered promiscuous mode [ 401.374719][T14939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.413695][T14939] Cannot create hsr debugfs directory [ 401.421938][T14998] netlink: 'syz.0.3989': attribute type 29 has an invalid length. [ 401.681859][T14998] netlink: 'syz.0.3989': attribute type 29 has an invalid length. [ 401.905390][T14881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.064697][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.121474][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.176633][T14881] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.292028][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.347239][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.366311][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.373435][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.448866][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.487462][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.518048][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.547161][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.554327][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.925667][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.033031][T15009] netlink: 'syz.2.3992': attribute type 21 has an invalid length. [ 404.067683][T15009] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3992'. [ 404.116240][T15009] netlink: 'syz.2.3992': attribute type 4 has an invalid length. [ 404.145826][T15009] netlink: 'syz.2.3992': attribute type 5 has an invalid length. [ 404.177268][T15009] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3992'. [ 404.419831][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.435501][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.515791][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.581579][T15013] netlink: 'syz.2.3993': attribute type 1 has an invalid length. [ 404.626374][T15013] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3993'. [ 404.769295][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.807243][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.877706][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.907220][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.958553][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.119820][T14881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.156774][T14881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.253707][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.277424][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.040441][T14939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.163267][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 406.198410][ T1206] team0: Port device wlan1 removed [ 406.319379][T14939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.370370][T14939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.509768][T14939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.939590][ T1206] device hsr_slave_0 left promiscuous mode [ 406.996894][ T1206] device hsr_slave_1 left promiscuous mode [ 407.049172][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.088778][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.221818][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.256069][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.296970][ T1206] device bridge_slave_1 left promiscuous mode [ 407.318285][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.358575][ T1206] device bridge_slave_0 left promiscuous mode [ 407.364858][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.566716][ T1206] device veth1_macvtap left promiscuous mode [ 407.572826][ T1206] device veth0_macvtap left promiscuous mode [ 407.624969][ T1206] device veth1_vlan left promiscuous mode [ 407.733521][ T1206] device veth0_vlan left promiscuous mode [ 408.789805][T15046] netlink: 'syz.0.4001': attribute type 29 has an invalid length. [ 409.890905][ T1206] team0 (unregistering): Port device geneve1 removed [ 410.495164][ T1206] team0 (unregistering): Port device team_slave_1 removed [ 410.567972][ T1206] team0 (unregistering): Port device team_slave_0 removed [ 410.637955][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.708062][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.123726][ T1206] bond0 (unregistering): Released all slaves [ 411.385482][T15046] netlink: 'syz.0.4001': attribute type 29 has an invalid length. [ 411.492471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.536317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.582459][T14881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.613267][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 411.843418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.892179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.993641][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.058097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.087039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.157055][T14881] device veth0_vlan entered promiscuous mode [ 412.195394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.229398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.263764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.301342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.344115][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.397522][T14881] device veth1_vlan entered promiscuous mode [ 412.465334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.532707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.568074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.607644][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.614755][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.677101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.734009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.761701][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.768949][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.926233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.934586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.997809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 413.036180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 413.107102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.204156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 413.215529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.267137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.307320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 413.347572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.387477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 413.416728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.599280][T14881] device veth0_macvtap entered promiscuous mode [ 413.688485][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 413.860575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.887705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.962894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.080084][T14881] device veth1_macvtap entered promiscuous mode [ 414.152880][T14939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.295807][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.409154][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.419310][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.429939][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.439922][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.450601][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.464694][T14881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.475642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.526782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.565428][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.612572][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.667836][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.746514][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.815882][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.853380][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.945784][T14881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.266681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 415.275752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.300793][T15077] netlink: 'syz.2.4012': attribute type 29 has an invalid length. [ 415.342871][T15048] chnl_net:caif_netlink_parms(): no params data found [ 415.360880][T15077] netlink: 'syz.2.4012': attribute type 29 has an invalid length. [ 415.383940][T14881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.426919][T14881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.456872][T14881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.482714][T14881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.772550][T15000] Bluetooth: hci2: command 0x040f tx timeout [ 416.002443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.158842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.900965][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.313586][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.389387][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.529793][T15048] device bridge_slave_0 entered promiscuous mode [ 417.608450][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.610690][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.626462][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.675888][T15048] device bridge_slave_1 entered promiscuous mode [ 417.716493][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.884306][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 418.386080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.733817][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.863374][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.242572][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.287383][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.611662][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.106949][T15048] team0: Port device team_slave_0 added [ 421.158381][T15048] team0: Port device team_slave_1 added [ 421.510753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.541437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.598446][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.605435][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.748659][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.077096][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.084073][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.246147][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.416466][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.425816][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.467624][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.599426][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.654163][T14939] device veth0_vlan entered promiscuous mode [ 424.638100][T14939] device veth1_vlan entered promiscuous mode [ 425.616967][T15048] device hsr_slave_0 entered promiscuous mode [ 425.726370][T15048] device hsr_slave_1 entered promiscuous mode [ 425.757601][T15048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.826183][T15048] Cannot create hsr debugfs directory [ 430.549069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.711373][ T3580] Bluetooth: hci3: command 0x0409 tx timeout [ 430.818963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.680112][T14939] device veth0_macvtap entered promiscuous mode [ 434.419895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.720306][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 435.630560][T14939] device veth1_macvtap entered promiscuous mode [ 437.196186][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 439.649886][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 440.030331][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036744][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.753549][ T3613] Bluetooth: hci7: command 0x0409 tx timeout [ 444.924759][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.915293][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.486196][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.765985][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.775863][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.012073][T15000] Bluetooth: hci7: command 0x041b tx timeout [ 447.101947][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.908718][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.986142][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.276617][ T23] Bluetooth: hci7: command 0x040f tx timeout [ 449.307573][T14939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.631238][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.976574][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.247465][ T1074] Bluetooth: hci8: command 0x0409 tx timeout [ 451.666687][T15000] Bluetooth: hci7: command 0x0419 tx timeout [ 453.355307][ T23] Bluetooth: hci8: command 0x041b tx timeout [ 455.437698][ T3614] Bluetooth: hci8: command 0x040f tx timeout [ 457.526280][T15000] Bluetooth: hci8: command 0x0419 tx timeout [ 459.464631][ T3613] Bluetooth: hci9: command 0x0409 tx timeout [ 461.597136][ T3613] Bluetooth: hci9: command 0x041b tx timeout [ 462.262031][T15048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.759228][ T21] Bluetooth: hci9: command 0x040f tx timeout [ 465.836219][ T3614] Bluetooth: hci9: command 0x0419 tx timeout [ 470.239631][T15048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.410481][T15048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.977649][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 480.861619][T15048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.807341][ T3617] Bluetooth: hci6: command 0x0409 tx timeout [ 486.437608][T15137] chnl_net:caif_netlink_parms(): no params data found [ 486.886410][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 487.286329][T15143] chnl_net:caif_netlink_parms(): no params data found [ 489.176532][T15000] Bluetooth: hci6: command 0x040f tx timeout [ 489.836291][ T27] INFO: task syz.2.3763:14277 blocked for more than 143 seconds. [ 489.844141][ T27] Not tainted 5.15.169-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 490.805966][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.814684][ T27] task:syz.2.3763 state:D stack:23360 pid:14277 ppid: 11305 flags:0x00004002 [ 491.623758][T15000] Bluetooth: hci6: command 0x0419 tx timeout [ 492.036570][ T27] Call Trace: [ 492.039898][ T27] [ 492.042862][ T27] __schedule+0x12c4/0x45b0 [ 492.916120][ T27] ? perf_event_release_kernel+0x5f4/0x900 [ 493.076991][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 493.082104][ T27] ? release_firmware_map_entry+0x190/0x190 [ 493.784315][ T27] ? __mutex_unlock_slowpath+0x218/0x750 [ 494.049246][ T27] schedule+0x11b/0x1f0 [ 494.053485][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 494.288569][ T27] _free_event+0x34/0xe60 [ 494.292997][ T27] perf_event_release_kernel+0x873/0x900 [ 495.328459][ T27] ? __might_sleep+0xc0/0xc0 [ 495.333129][ T27] ? calc_timer_values+0x420/0x420 [ 495.839102][ T27] ? rcu_nmi_exit+0x70/0xf0 [ 495.843687][ T27] ? ima_file_free+0xeb/0x3c0 [ 496.480286][ T27] perf_release+0x37/0x40 [ 496.978068][ T27] ? perf_mmap+0x13f0/0x13f0 [ 496.982721][ T27] __fput+0x3fe/0x8e0 [ 497.546087][ T27] task_work_run+0x129/0x1a0 [ 497.550766][ T27] do_exit+0x6a3/0x2480 [ 497.554960][ T27] ? perf_trace_preemptirq_template+0x31d/0x430 [ 498.525731][ T27] ? rcu_nmi_exit+0x70/0xf0 [ 499.349430][ T27] ? put_task_struct+0x80/0x80 [ 499.529637][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 499.535713][ T27] do_group_exit+0x144/0x310