last executing test programs: 8m33.641954767s ago: executing program 0 (id=1184): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) 8m33.450063329s ago: executing program 0 (id=1187): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_BIND_MAP(0x21, &(0x7f0000000500), 0xc) 8m30.000486279s ago: executing program 0 (id=1206): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x10}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xd2c}}, @timestamping={{0x14, 0x1, 0x25, 0xe5}}], 0x48}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 8m28.923603091s ago: executing program 0 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x4, 0x3, 0x0, 0x10000000000, 0x8800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 8m28.387711922s ago: executing program 0 (id=1216): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000080)) 8m28.169568365s ago: executing program 0 (id=1217): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x48) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m12.738926541s ago: executing program 32 (id=1217): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x48) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.965013708s ago: executing program 1 (id=4765): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0180000000000000000000000000005af066b42b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000400000000100"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x6, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x101404, 0x400, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000021140000000000000000000000006c403a0a232d9efd1a9f8c09b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000, 0xffffffff}, 0x10}, 0x94) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x83, r5, 0x83}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) 2.897905052s ago: executing program 3 (id=4767): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000005, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 2.685027224s ago: executing program 3 (id=4770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x1000000, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) r4 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x500) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x14f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x4, 0x2, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000006d9e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000600), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa89"], 0xfdef) 2.633583937s ago: executing program 4 (id=4771): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385005bff564cad4a92cbeb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x0, 0xa6, 0x0, 0x0, 0x1b55, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000180), &(0x7f0000000500)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&0\x05\t&&') r3 = socket$kcm(0x10, 0x2, 0x0) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb, 0x79, 0x9, 0x1, 0x0, 0x6d1, 0x80200, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ac6, 0x0, @perf_config_ext={0x1000, 0x9}, 0x103718, 0x800, 0x8739, 0x9, 0x3, 0x16, 0x7, 0x0, 0x5, 0x0, 0x8}, r4, 0x2, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r4, &(0x7f0000000380)='ns/time\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000006c0)) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 2.609817889s ago: executing program 1 (id=4772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x1000000, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) r4 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x500) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x14f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x4, 0x2, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000006d9e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000600), 0x12) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa89"], 0xfdef) 2.487785116s ago: executing program 5 (id=4773): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000075000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 2.23653073s ago: executing program 3 (id=4774): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xe}, 0x2000, 0x4, 0x0, 0x0, 0x7, 0x0, 0x1003, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.216321792s ago: executing program 4 (id=4775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@tail_call]}, &(0x7f0000000480)='GPL\x00', 0x907, 0xe0, &(0x7f00000004c0)=""/224, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, 0x1, r0], &(0x7f0000000600)=[{0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000711277000000000095000000000000005d00195d346dc24953e44e2f4314cd3b89ef7b82ac1840a42745626f649e9332c59b90b1256495f29ffa014e66734168928bd16e6746c614ceb8e648a841ec2fa4c0a96426abc60ed8da2884007815278b5289d90f8b1339b8833311eafa28abafbd37dfd08968c39d618497af3690e3a183ef194e3923c8f8038eb2710dbec0fd02c03cbc56fe7ee66fec3bd5385ba658d3fc7aabe99c13228e454a3bc216286a9f7c6b1798963e0d5ae212d487e982b7d2e3857b47d453d345e2ffc72e9650230e6121d254d6fb21"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0x53, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7d07001175f37538e486dd6317"], 0xfdef) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x90}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) 2.137535846s ago: executing program 5 (id=4776): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x3, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000000000da88800100000000000008001000"]) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) 1.89622676s ago: executing program 5 (id=4779): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2ffc, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x2, 0x3, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x2, 0x1, 0x84) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x8, 0x3, 0x17, 0x0, 0x0, 0x80000001, 0x10, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8b5, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x11210, 0x10001, 0x2, 0x1, 0x8, 0x4, 0x8001, 0x0, 0x6, 0x0, 0x2}, r4, 0xd, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'memory'}, {0x2d, 'io'}, {0x0, 'cpu'}, {0x2b, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2b, 'cpuset'}]}, 0x2f) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.869297102s ago: executing program 3 (id=4780): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0180000000000000000000000000005af066b42b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000400000000100"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x6, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x101404, 0x400, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000021140000000000000000000000006c403a0a232d9efd1a9f8c09b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000, 0xffffffff}, 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r5 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) 1.833689064s ago: executing program 4 (id=4781): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000005, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.662822804s ago: executing program 2 (id=4782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x800}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x30, 0x8, 0x6, 0xfffff038}, {0x6}]}) 1.55594515s ago: executing program 1 (id=4783): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.485352474s ago: executing program 5 (id=4784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x1000000, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) r4 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x500) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x14f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x4, 0x2, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000006d9e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000600), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa89"], 0xfdef) 1.484385084s ago: executing program 4 (id=4785): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385005bff564cad4a92cbeb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x0, 0xa6, 0x0, 0x0, 0x1b55, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000180), &(0x7f0000000500)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&0\x05\t&&') r3 = socket$kcm(0x10, 0x2, 0x0) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb, 0x79, 0x9, 0x1, 0x0, 0x6d1, 0x80200, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ac6, 0x0, @perf_config_ext={0x1000, 0x9}, 0x103718, 0x800, 0x8739, 0x9, 0x3, 0x16, 0x7, 0x0, 0x5, 0x0, 0x8}, r4, 0x2, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r4, &(0x7f0000000380)='ns/time\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000006c0)) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 1.422297758s ago: executing program 2 (id=4786): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000075000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 1.37798988s ago: executing program 1 (id=4796): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000005, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.350522532s ago: executing program 3 (id=4787): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0180000000000000000000000000005af066b42b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000400000000100"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x6, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x101404, 0x400, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000021140000000000000000000000006c403a0a232d9efd1a9f8c09b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000, 0xffffffff}, 0x10}, 0x94) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x83, r5, 0x83}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) 1.148917074s ago: executing program 1 (id=4788): mkdir(&(0x7f0000000000)='./file0\x00', 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000e0080000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000006527b929ce64b376000000f0850000100c000000b700000000000000c891000000000000b70200000100f182e81400008500000084000000b700000007000000000000000000000086403e9363d2846fa8fb723448c7f74ca3d07ffaf6214b08bce4a5d9cf437919f84503b3b3b4609d43f8472cdabc78ab5fff06e199876714fb4ad333d5dbf5d2a411985fe432768d1b822112c74f8fb63e"], &(0x7f0000000180)='syzkaller\x00', 0x8a, 0x10, &(0x7f0000000380)=""/16, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22cb3, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0xc}, {0x4, 0x1, 0xd, 0x5}, {0xfffffffe, 0x1, 0xa, 0x1}, {0x2, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x3, 0x5}], 0x10, 0x4}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2a}, 0x10, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x10001}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x11, 0x2, 0x9, &(0x7f0000000140)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x114}, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 1.136139434s ago: executing program 2 (id=4789): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5, 0x36, 0x7, 0x0, 0x0, 0x9, 0x62, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x1800, 0x7, 0x287, 0x2, 0xff, 0x9, 0x5, 0x0, 0x61a6, 0x0, 0x50cf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000000000da88800100000000000008001000"]) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) 1.027670251s ago: executing program 5 (id=4790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 957.874764ms ago: executing program 2 (id=4791): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 953.228425ms ago: executing program 4 (id=4792): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@tail_call]}, &(0x7f0000000480)='GPL\x00', 0x907, 0xe0, &(0x7f00000004c0)=""/224, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, 0x1, r0], &(0x7f0000000600)=[{0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000711277000000000095000000000000005d00195d346dc24953e44e2f4314cd3b89ef7b82ac1840a42745626f649e9332c59b90b1256495f29ffa014e66734168928bd16e6746c614ceb8e648a841ec2fa4c0a96426abc60ed8da2884007815278b5289d90f8b1339b8833311eafa28abafbd37dfd08968c39d618497af3690e3a183ef194e3923c8f8038eb2710dbec0fd02c03cbc56fe7ee66fec3bd5385ba658d3fc7aabe99c13228e454a3bc216286a9f7c6b1798963e0d5ae212d487e982b7d2e3857b47d453d345e2ffc72e9650230e6121d254d6fb21"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0x53, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7d07001175f37538e486dd6317"], 0xfdef) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) 792.536694ms ago: executing program 2 (id=4793): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1218f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5b}, 0x94) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can={0x1d, r2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="6106dd83e924eb6416684ace4de31a9b25b9ea3343568a3a64b5954a632f89ba62e967c0aefa014b1e9adc81ed29596f7199081d5c63345264728e5a80448f965d", 0x41}], 0x1, &(0x7f0000000280)=[{0x88, 0x1, 0x4, "babe1c8f2077ad62db3a21cf322babe8427e6ed416830b4783d8c2c25ea4f67f3efa181d60162b76e2be5f9235d63d3a26e58abc6dbee4312298d7dc121e1d0e4f65ff3ff0443af161d8c50a19983856f5376c8811c2996df8d91b409e0b338c66f6c79e303a7296b2b31bf6f4a6487f45fdec1238"}, {0xa0, 0x104, 0x200, "51666bbdc7bcebce91df7bdb500565439ced9fa6024c8cffc7ae52a8af971d2dee5d5ce3b43276fcea87d55273878f480fc99eb4e18248fde57f9ce276ea63ebdeec987f2422af726b566ff7db31d94a406f18f6151e47c5c713d5feb8e1809020a4edbfb0439ad72fff4ba82a5d517d7a280a3a3045193915f06a57d8b003e0e34c83683ab345aeb32409d21e22"}], 0x128}, 0x20000814) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 669.341511ms ago: executing program 3 (id=4794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x4}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x1000000, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) r4 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x500) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x14f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x4, 0x2, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000006d9e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000600), 0x12) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa89"], 0xfdef) 593.679116ms ago: executing program 5 (id=4795): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4}, 0x10) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x922000000001, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18230080", @ANYRES32=r6, @ANYBLOB="0000000006000000"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0xfffffffc, 0x3}, 0x10}, 0x94) (async) socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x40) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 32) 580.129067ms ago: executing program 4 (id=4797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@tail_call]}, &(0x7f0000000480)='GPL\x00', 0x907, 0xe0, &(0x7f00000004c0)=""/224, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, 0x1, r0], &(0x7f0000000600)=[{0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000711277000000000095000000000000005d00195d346dc24953e44e2f4314cd3b89ef7b82ac1840a42745626f649e9332c59b90b1256495f29ffa014e66734168928bd16e6746c614ceb8e648a841ec2fa4c0a96426abc60ed8da2884007815278b5289d90f8b1339b8833311eafa28abafbd37dfd08968c39d618497af3690e3a183ef194e3923c8f8038eb2710dbec0fd02c03cbc56fe7ee66fec3bd5385ba658d3fc7aabe99c13228e454a3bc216286a9f7c6b1798963e0d5ae212d487e982b7d2e3857b47d453d345e2ffc72e9650230e6121d254d6fb21"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0x53, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 536.719549ms ago: executing program 2 (id=4798): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x56, &(0x7f0000000180)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x8}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (fail_nth: 3) 0s ago: executing program 1 (id=4799): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0180000000000000000000000000005af066b42b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000400000000100"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x6, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x101404, 0x400, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000021140000000000000000000000006c403a0a232d9efd1a9f8c09b4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000, 0xffffffff}, 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r5 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) kernel console output (not intermixed with test programs): c0 [ 579.224270][T16533] _copy_from_user+0x2e/0x170 [ 579.229090][T16533] __sys_bpf+0x26d/0x6f0 [ 579.233387][T16533] ? bpf_link_show_fdinfo+0x380/0x380 [ 579.238849][T16533] __x64_sys_bpf+0x78/0x90 [ 579.243306][T16533] do_syscall_64+0x4c/0xa0 [ 579.247744][T16533] ? clear_bhb_loop+0x30/0x80 [ 579.252454][T16533] ? clear_bhb_loop+0x30/0x80 [ 579.257195][T16533] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.263109][T16533] RIP: 0033:0x7efe53fb9eb9 [ 579.267553][T16533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.287176][T16533] RSP: 002b:00007efe52215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.295617][T16533] RAX: ffffffffffffffda RBX: 00007efe54234fa0 RCX: 00007efe53fb9eb9 [ 579.303605][T16533] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000001d [ 579.311601][T16533] RBP: 00007efe52215090 R08: 0000000000000000 R09: 0000000000000000 [ 579.319608][T16533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.327859][T16533] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 579.335899][T16533] [ 579.836056][T16547] validate_nla: 1 callbacks suppressed [ 579.860679][T16547] netlink: 'syz.1.4063': attribute type 1 has an invalid length. [ 579.878752][T16547] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.4063'. [ 580.028426][T16552] netlink: 'syz.3.4064': attribute type 10 has an invalid length. [ 580.076425][T16552] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 580.136321][T16552] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 580.189381][T16552] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 580.226409][T16552] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 580.446397][T16566] FAULT_INJECTION: forcing a failure. [ 580.446397][T16566] name failslab, interval 1, probability 0, space 0, times 0 [ 580.537214][T16566] CPU: 1 PID: 16566 Comm: syz.3.4069 Not tainted syzkaller #0 [ 580.544720][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.554795][T16566] Call Trace: [ 580.558103][T16566] [ 580.561048][T16566] dump_stack_lvl+0x188/0x250 [ 580.565834][T16566] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 580.572171][T16566] ? show_regs_print_info+0x20/0x20 [ 580.577518][T16566] ? load_image+0x400/0x400 [ 580.582175][T16566] should_fail+0x38c/0x4c0 [ 580.586619][T16566] should_failslab+0x5/0x20 [ 580.591141][T16566] slab_pre_alloc_hook+0x51/0xc0 [ 580.596096][T16566] kmem_cache_alloc_node+0x47/0x2d0 [ 580.601304][T16566] ? dup_task_struct+0x57/0xb30 [ 580.606186][T16566] dup_task_struct+0x57/0xb30 [ 580.610944][T16566] copy_process+0x5f0/0x3e20 [ 580.615569][T16566] ? __lock_acquire+0x13bc/0x7d10 [ 580.620903][T16566] ? __pidfd_prepare+0x140/0x140 [ 580.625954][T16566] ? rcu_nmi_exit+0x6f/0xf0 [ 580.630503][T16566] kernel_clone+0x23f/0x990 [ 580.635043][T16566] ? create_io_thread+0x180/0x180 [ 580.640192][T16566] ? lockdep_hardirqs_on+0x94/0x140 [ 580.645556][T16566] __x64_sys_clone+0x19a/0x210 [ 580.650473][T16566] ? __ia32_sys_vfork+0x130/0x130 [ 580.655892][T16566] ? syscall_enter_from_user_mode+0x2a/0x70 [ 580.662079][T16566] do_syscall_64+0x4c/0xa0 [ 580.666713][T16566] ? clear_bhb_loop+0x30/0x80 [ 580.671415][T16566] ? clear_bhb_loop+0x30/0x80 [ 580.676207][T16566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.682557][T16566] RIP: 0033:0x7efe53fb9eb9 [ 580.686989][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.706941][T16566] RSP: 002b:00007efe52214fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 580.715551][T16566] RAX: ffffffffffffffda RBX: 00007efe54234fa0 RCX: 00007efe53fb9eb9 [ 580.723556][T16566] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00000000000c0000 [ 580.731666][T16566] RBP: 00007efe52215090 R08: 0000200000000200 R09: 0000200000000200 [ 580.739739][T16566] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000000000000001 [ 580.747730][T16566] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 580.755823][T16566] [ 581.157244][T16569] netlink: 'syz.1.4070': attribute type 10 has an invalid length. [ 581.993182][T16604] netlink: 'syz.1.4079': attribute type 10 has an invalid length. [ 582.122619][T16604] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 582.202215][T16604] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 582.374591][T16604] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 582.455408][T16604] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 582.882048][T16621] netlink: 'syz.2.4087': attribute type 10 has an invalid length. [ 583.137189][T16632] netlink: 'syz.4.4089': attribute type 4 has an invalid length. [ 583.187279][T16632] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4089'. [ 583.244453][T16634] FAULT_INJECTION: forcing a failure. [ 583.244453][T16634] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 583.288681][T16634] CPU: 1 PID: 16634 Comm: syz.2.4091 Not tainted syzkaller #0 [ 583.296200][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.306307][T16634] Call Trace: [ 583.309611][T16634] [ 583.312564][T16634] dump_stack_lvl+0x188/0x250 [ 583.317282][T16634] ? show_regs_print_info+0x20/0x20 [ 583.322510][T16634] ? load_image+0x400/0x400 [ 583.327060][T16634] ? __lock_acquire+0x7d10/0x7d10 [ 583.332164][T16634] should_fail+0x38c/0x4c0 [ 583.336621][T16634] prepare_alloc_pages+0x1e4/0x5f0 [ 583.341782][T16634] __alloc_pages+0x11b/0x480 [ 583.346422][T16634] ? zone_statistics+0x170/0x170 [ 583.351430][T16634] ? count_memcg_event_mm+0x324/0x370 [ 583.356864][T16634] get_zeroed_page+0x13/0x30 [ 583.361486][T16634] __pud_alloc+0x31/0x140 [ 583.365835][T16634] ? handle_mm_fault+0x4c0/0x4410 [ 583.370895][T16634] handle_mm_fault+0x2c0f/0x4410 [ 583.375909][T16634] ? get_page+0xe0/0xe0 [ 583.380128][T16634] ? vmacache_find+0x4f0/0x590 [ 583.384915][T16634] ? vmacache_update+0xa0/0x100 [ 583.389803][T16634] ? find_vma+0x1df/0x230 [ 583.394169][T16634] do_user_addr_fault+0x489/0xc80 [ 583.399256][T16634] exc_page_fault+0x60/0x100 [ 583.403882][T16634] asm_exc_page_fault+0x22/0x30 [ 583.408769][T16634] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 583.414516][T16634] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 583.434227][T16634] RSP: 0018:ffffc90002f8fe80 EFLAGS: 00050293 [ 583.440328][T16634] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000200000000140 [ 583.448330][T16634] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780 [ 583.456330][T16634] RBP: 0000000000000004 R08: ffffffff8d89d8af R09: 1ffffffff1b13b15 [ 583.464322][T16634] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: 0000000000000000 [ 583.472324][T16634] R13: 0000200000000140 R14: 0000000000000011 R15: 0000000000000002 [ 583.480335][T16634] __sys_socketpair+0xb4/0x540 [ 583.485216][T16634] __x64_sys_socketpair+0x97/0xb0 [ 583.490264][T16634] do_syscall_64+0x4c/0xa0 [ 583.494709][T16634] ? clear_bhb_loop+0x30/0x80 [ 583.499403][T16634] ? clear_bhb_loop+0x30/0x80 [ 583.504098][T16634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 583.510007][T16634] RIP: 0033:0x7f943b29eeb9 [ 583.514446][T16634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.534061][T16634] RSP: 002b:00007f94394fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 583.542497][T16634] RAX: ffffffffffffffda RBX: 00007f943b519fa0 RCX: 00007f943b29eeb9 [ 583.550480][T16634] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000011 [ 583.558462][T16634] RBP: 00007f94394fa090 R08: 0000000000000000 R09: 0000000000000000 [ 583.566448][T16634] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 583.574445][T16634] R13: 00007f943b51a038 R14: 00007f943b519fa0 R15: 00007ffeec5d9d18 [ 583.582451][T16634] [ 583.660743][T16632] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 584.135049][T16649] FAULT_INJECTION: forcing a failure. [ 584.135049][T16649] name failslab, interval 1, probability 0, space 0, times 0 [ 584.168978][T16651] netlink: 'syz.3.4095': attribute type 21 has an invalid length. [ 584.189063][T16649] CPU: 1 PID: 16649 Comm: syz.1.4098 Not tainted syzkaller #0 [ 584.196660][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.206814][T16649] Call Trace: [ 584.210118][T16649] [ 584.213070][T16649] dump_stack_lvl+0x188/0x250 [ 584.217941][T16649] ? show_regs_print_info+0x20/0x20 [ 584.219813][T16651] netlink: 'syz.3.4095': attribute type 6 has an invalid length. [ 584.223151][T16649] ? load_image+0x400/0x400 [ 584.235384][T16649] ? __might_sleep+0xf0/0xf0 [ 584.239989][T16649] ? __lock_acquire+0x7d10/0x7d10 [ 584.245030][T16649] ? mark_lock+0x94/0x320 [ 584.249378][T16649] should_fail+0x38c/0x4c0 [ 584.253826][T16649] should_failslab+0x5/0x20 [ 584.258347][T16649] slab_pre_alloc_hook+0x51/0xc0 [ 584.263299][T16649] __kmalloc+0x6b/0x330 [ 584.267465][T16649] ? tomoyo_realpath_from_path+0x118/0x610 [ 584.273312][T16649] tomoyo_realpath_from_path+0x118/0x610 [ 584.278979][T16649] tomoyo_path_number_perm+0x242/0x660 [ 584.284472][T16649] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 584.289947][T16649] ? perf_trace_lock+0xe4/0x390 [ 584.294824][T16649] ? perf_trace_lock+0xe4/0x390 [ 584.299749][T16649] security_file_ioctl+0x6c/0xa0 [ 584.304654][T16651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4095'. [ 584.313714][T16649] __se_sys_ioctl+0x48/0x170 [ 584.318345][T16649] do_syscall_64+0x4c/0xa0 [ 584.322803][T16649] ? clear_bhb_loop+0x30/0x80 [ 584.327501][T16649] ? clear_bhb_loop+0x30/0x80 [ 584.332190][T16649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.338112][T16649] RIP: 0033:0x7f92f52aaeb9 [ 584.342543][T16649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.362159][T16649] RSP: 002b:00007f92f3506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.370588][T16649] RAX: ffffffffffffffda RBX: 00007f92f5525fa0 RCX: 00007f92f52aaeb9 [ 584.378574][T16649] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 584.386560][T16649] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 584.394541][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.402533][T16649] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 584.410535][T16649] [ 584.422035][T16649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.665479][T16667] FAULT_INJECTION: forcing a failure. [ 584.665479][T16667] name failslab, interval 1, probability 0, space 0, times 0 [ 584.684793][T16665] netlink: 'syz.1.4101': attribute type 10 has an invalid length. [ 584.730362][T16670] FAULT_INJECTION: forcing a failure. [ 584.730362][T16670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.776223][T16667] CPU: 0 PID: 16667 Comm: syz.4.4102 Not tainted syzkaller #0 [ 584.783726][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.793798][T16667] Call Trace: [ 584.797085][T16667] [ 584.800020][T16667] dump_stack_lvl+0x188/0x250 [ 584.804718][T16667] ? show_regs_print_info+0x20/0x20 [ 584.809947][T16667] ? load_image+0x400/0x400 [ 584.814472][T16667] ? __lock_acquire+0x7d10/0x7d10 [ 584.819520][T16667] ? rcu_is_watching+0x11/0xa0 [ 584.824305][T16667] should_fail+0x38c/0x4c0 [ 584.828742][T16667] should_failslab+0x5/0x20 [ 584.833267][T16667] slab_pre_alloc_hook+0x51/0xc0 [ 584.838217][T16667] ? sockfs_init_fs_context+0xa0/0xa0 [ 584.843595][T16667] ? sock_alloc_inode+0x17/0xb0 [ 584.848501][T16667] kmem_cache_alloc+0x3d/0x290 [ 584.853292][T16667] ? sockfs_init_fs_context+0xa0/0xa0 [ 584.858683][T16667] sock_alloc_inode+0x17/0xb0 [ 584.863372][T16667] ? sockfs_init_fs_context+0xa0/0xa0 [ 584.868764][T16667] new_inode_pseudo+0x5f/0x210 [ 584.873654][T16667] __sock_create+0x129/0x900 [ 584.878269][T16667] __sys_socketpair+0x1bd/0x540 [ 584.883140][T16667] __x64_sys_socketpair+0x97/0xb0 [ 584.888183][T16667] do_syscall_64+0x4c/0xa0 [ 584.892609][T16667] ? clear_bhb_loop+0x30/0x80 [ 584.897392][T16667] ? clear_bhb_loop+0x30/0x80 [ 584.902084][T16667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 584.907993][T16667] RIP: 0033:0x7f513ba08eb9 [ 584.912428][T16667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.932046][T16667] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 584.940478][T16667] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 584.948463][T16667] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001a [ 584.956450][T16667] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 584.964430][T16667] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.972417][T16667] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 584.980415][T16667] [ 584.983449][T16670] CPU: 1 PID: 16670 Comm: syz.2.4105 Not tainted syzkaller #0 [ 584.991043][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.001101][T16670] Call Trace: [ 585.004388][T16670] [ 585.007328][T16670] dump_stack_lvl+0x188/0x250 [ 585.012016][T16670] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 585.018171][T16670] ? show_regs_print_info+0x20/0x20 [ 585.023543][T16670] ? load_image+0x400/0x400 [ 585.028152][T16670] should_fail+0x38c/0x4c0 [ 585.032586][T16670] _copy_from_user+0x2e/0x170 [ 585.037284][T16670] __sys_bpf+0x26d/0x6f0 [ 585.041545][T16670] ? bpf_link_show_fdinfo+0x380/0x380 [ 585.046945][T16670] ? vtime_user_exit+0x2c8/0x3e0 [ 585.051917][T16670] __x64_sys_bpf+0x78/0x90 [ 585.056354][T16670] do_syscall_64+0x4c/0xa0 [ 585.060783][T16670] ? clear_bhb_loop+0x30/0x80 [ 585.065477][T16670] ? clear_bhb_loop+0x30/0x80 [ 585.070167][T16670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.076071][T16670] RIP: 0033:0x7f943b29eeb9 [ 585.080495][T16670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.100113][T16670] RSP: 002b:00007f94394fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.108552][T16670] RAX: ffffffffffffffda RBX: 00007f943b519fa0 RCX: 00007f943b29eeb9 [ 585.116541][T16670] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 585.124529][T16670] RBP: 00007f94394fa090 R08: 0000000000000000 R09: 0000000000000000 [ 585.132598][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.140580][T16670] R13: 00007f943b51a038 R14: 00007f943b519fa0 R15: 00007ffeec5d9d18 [ 585.148582][T16670] [ 585.516189][T16667] socket: no more sockets [ 585.670723][T16681] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4109'. [ 585.769769][T16689] FAULT_INJECTION: forcing a failure. [ 585.769769][T16689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.916244][T16689] CPU: 0 PID: 16689 Comm: syz.4.4110 Not tainted syzkaller #0 [ 585.923762][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.933828][T16689] Call Trace: [ 585.937115][T16689] [ 585.940050][T16689] dump_stack_lvl+0x188/0x250 [ 585.944740][T16689] ? show_regs_print_info+0x20/0x20 [ 585.950039][T16689] ? load_image+0x400/0x400 [ 585.954557][T16689] ? __lock_acquire+0x7d10/0x7d10 [ 585.959589][T16689] ? vfs_write+0x8b2/0xd60 [ 585.964027][T16689] should_fail+0x38c/0x4c0 [ 585.968455][T16689] _copy_from_user+0x2e/0x170 [ 585.973233][T16689] __sys_bpf+0x26d/0x6f0 [ 585.977493][T16689] ? bpf_link_show_fdinfo+0x380/0x380 [ 585.982897][T16689] ? vtime_user_exit+0x2c8/0x3e0 [ 585.987862][T16689] __x64_sys_bpf+0x78/0x90 [ 585.992306][T16689] do_syscall_64+0x4c/0xa0 [ 585.996732][T16689] ? clear_bhb_loop+0x30/0x80 [ 586.001421][T16689] ? clear_bhb_loop+0x30/0x80 [ 586.006105][T16689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.012015][T16689] RIP: 0033:0x7f513ba08eb9 [ 586.016534][T16689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.036155][T16689] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.044584][T16689] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 586.052578][T16689] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 586.060624][T16689] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 586.068609][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.076591][T16689] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 586.084589][T16689] [ 586.460915][T16706] FAULT_INJECTION: forcing a failure. [ 586.460915][T16706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.523053][T16706] CPU: 0 PID: 16706 Comm: syz.3.4115 Not tainted syzkaller #0 [ 586.529444][T16712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4119'. [ 586.530542][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.549598][T16706] Call Trace: [ 586.552880][T16706] [ 586.555814][T16706] dump_stack_lvl+0x188/0x250 [ 586.560503][T16706] ? show_regs_print_info+0x20/0x20 [ 586.565709][T16706] ? load_image+0x400/0x400 [ 586.570213][T16706] ? __lock_acquire+0x7d10/0x7d10 [ 586.575233][T16706] ? lockdep_hardirqs_on+0x94/0x140 [ 586.580429][T16706] should_fail+0x38c/0x4c0 [ 586.584855][T16706] _copy_from_user+0x2e/0x170 [ 586.589543][T16706] __sys_bpf+0x26d/0x6f0 [ 586.593803][T16706] ? bpf_link_show_fdinfo+0x380/0x380 [ 586.599180][T16706] ? vtime_user_exit+0x2c8/0x3e0 [ 586.604136][T16706] __x64_sys_bpf+0x78/0x90 [ 586.608595][T16706] do_syscall_64+0x4c/0xa0 [ 586.613012][T16706] ? clear_bhb_loop+0x30/0x80 [ 586.617687][T16706] ? clear_bhb_loop+0x30/0x80 [ 586.622362][T16706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 586.628252][T16706] RIP: 0033:0x7efe53fb9eb9 [ 586.632672][T16706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.652285][T16706] RSP: 002b:00007efe52215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.660689][T16706] RAX: ffffffffffffffda RBX: 00007efe54234fa0 RCX: 00007efe53fb9eb9 [ 586.668662][T16706] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 586.676616][T16706] RBP: 00007efe52215090 R08: 0000000000000000 R09: 0000000000000000 [ 586.684596][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.692570][T16706] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 586.700539][T16706] [ 586.809315][T16717] netlink: 'syz.1.4117': attribute type 10 has an invalid length. [ 587.480005][T16724] FAULT_INJECTION: forcing a failure. [ 587.480005][T16724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.596488][T16724] CPU: 1 PID: 16724 Comm: syz.4.4123 Not tainted syzkaller #0 [ 587.603992][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.614055][T16724] Call Trace: [ 587.617343][T16724] [ 587.620282][T16724] dump_stack_lvl+0x188/0x250 [ 587.624973][T16724] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 587.631140][T16724] ? show_regs_print_info+0x20/0x20 [ 587.636354][T16724] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 587.642565][T16724] should_fail+0x38c/0x4c0 [ 587.647138][T16724] _copy_from_user+0x2e/0x170 [ 587.651829][T16724] __sys_bpf+0x26d/0x6f0 [ 587.656095][T16724] ? bpf_link_show_fdinfo+0x380/0x380 [ 587.661509][T16724] ? vtime_user_exit+0x2c8/0x3e0 [ 587.666491][T16724] __x64_sys_bpf+0x78/0x90 [ 587.670930][T16724] do_syscall_64+0x4c/0xa0 [ 587.675365][T16724] ? clear_bhb_loop+0x30/0x80 [ 587.680051][T16724] ? clear_bhb_loop+0x30/0x80 [ 587.684753][T16724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.690655][T16724] RIP: 0033:0x7f513ba08eb9 [ 587.695079][T16724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.714784][T16724] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.723384][T16724] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 587.731455][T16724] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 587.739441][T16724] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 587.747429][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.755413][T16724] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 587.763415][T16724] [ 588.174702][T16741] FAULT_INJECTION: forcing a failure. [ 588.174702][T16741] name failslab, interval 1, probability 0, space 0, times 0 [ 588.222615][T16741] CPU: 0 PID: 16741 Comm: syz.1.4128 Not tainted syzkaller #0 [ 588.230300][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.240358][T16741] Call Trace: [ 588.243627][T16741] [ 588.246549][T16741] dump_stack_lvl+0x188/0x250 [ 588.251232][T16741] ? show_regs_print_info+0x20/0x20 [ 588.256419][T16741] ? load_image+0x400/0x400 [ 588.260910][T16741] ? __might_sleep+0xf0/0xf0 [ 588.265492][T16741] ? __lock_acquire+0x7d10/0x7d10 [ 588.270514][T16741] ? perf_trace_lock+0xe4/0x390 [ 588.275352][T16741] should_fail+0x38c/0x4c0 [ 588.279758][T16741] should_failslab+0x5/0x20 [ 588.284243][T16741] slab_pre_alloc_hook+0x51/0xc0 [ 588.289172][T16741] ? getname_flags+0xb5/0x500 [ 588.293833][T16741] kmem_cache_alloc+0x3d/0x290 [ 588.298586][T16741] getname_flags+0xb5/0x500 [ 588.303076][T16741] do_sys_openat2+0xdd/0x4b0 [ 588.307656][T16741] ? __lock_acquire+0x7d10/0x7d10 [ 588.312675][T16741] ? do_sys_open+0xe0/0xe0 [ 588.317075][T16741] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 588.323041][T16741] ? lock_chain_count+0x20/0x20 [ 588.327875][T16741] ? vtime_user_exit+0x2c8/0x3e0 [ 588.332830][T16741] __x64_sys_openat+0x135/0x160 [ 588.337688][T16741] do_syscall_64+0x4c/0xa0 [ 588.342102][T16741] ? clear_bhb_loop+0x30/0x80 [ 588.346762][T16741] ? clear_bhb_loop+0x30/0x80 [ 588.351602][T16741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.357652][T16741] RIP: 0033:0x7f92f526b78e [ 588.362060][T16741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.381650][T16741] RSP: 002b:00007f92f3505ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.390057][T16741] RAX: ffffffffffffffda RBX: 00007f92f35066c0 RCX: 00007f92f526b78e [ 588.398024][T16741] RDX: 0000000000000002 RSI: 00007f92f3505f90 RDI: ffffffffffffff9c [ 588.405982][T16741] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 588.413938][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.421891][T16741] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 588.429871][T16741] [ 589.089098][T16758] netlink: 'syz.1.4132': attribute type 3 has an invalid length. [ 589.125654][T16758] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4132'. [ 589.201108][T16760] netlink: 'syz.3.4134': attribute type 10 has an invalid length. [ 589.273841][T16767] FAULT_INJECTION: forcing a failure. [ 589.273841][T16767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.288654][T16767] CPU: 0 PID: 16767 Comm: syz.4.4136 Not tainted syzkaller #0 [ 589.296145][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.306208][T16767] Call Trace: [ 589.309514][T16767] [ 589.312453][T16767] dump_stack_lvl+0x188/0x250 [ 589.317150][T16767] ? show_regs_print_info+0x20/0x20 [ 589.322365][T16767] ? load_image+0x400/0x400 [ 589.326884][T16767] ? __lock_acquire+0x7d10/0x7d10 [ 589.332093][T16767] ? perf_trace_lock+0xe4/0x390 [ 589.337509][T16767] should_fail+0x38c/0x4c0 [ 589.341953][T16767] _copy_from_user+0x2e/0x170 [ 589.346638][T16767] ___sys_recvmsg+0x173/0x5c0 [ 589.351332][T16767] ? __sys_recvmsg+0x280/0x280 [ 589.356103][T16767] ? trace_event_raw_event_lock+0x270/0x270 [ 589.362033][T16767] __x64_sys_recvmsg+0x1f9/0x2c0 [ 589.366992][T16767] ? ___sys_recvmsg+0x5c0/0x5c0 [ 589.371856][T16767] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 589.377949][T16767] ? lockdep_hardirqs_on+0x94/0x140 [ 589.383248][T16767] do_syscall_64+0x4c/0xa0 [ 589.387681][T16767] ? clear_bhb_loop+0x30/0x80 [ 589.389271][T16766] netlink: 'syz.2.4137': attribute type 21 has an invalid length. [ 589.392365][T16767] ? clear_bhb_loop+0x30/0x80 [ 589.392395][T16767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.392413][T16767] RIP: 0033:0x7f513ba08eb9 [ 589.392431][T16767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.435135][T16767] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 589.443568][T16767] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 589.451559][T16767] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 589.459546][T16767] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 589.467534][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.475509][T16767] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 589.483517][T16767] [ 589.502175][T16768] netlink: 'syz.2.4137': attribute type 1 has an invalid length. [ 589.563186][T16766] netlink: 'syz.2.4137': attribute type 6 has an invalid length. [ 589.593513][T16768] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4137'. [ 589.704942][T16766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4137'. [ 589.837598][T16779] netlink: 'syz.1.4142': attribute type 10 has an invalid length. [ 589.850332][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4142'. [ 589.941452][T16788] netlink: 'syz.4.4143': attribute type 21 has an invalid length. [ 589.990151][T16788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4143'. [ 590.026364][T16779] netlink: 'syz.1.4142': attribute type 10 has an invalid length. [ 590.048425][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4142'. [ 590.509280][T16810] netlink: 'syz.1.4150': attribute type 10 has an invalid length. [ 590.749090][T16820] FAULT_INJECTION: forcing a failure. [ 590.749090][T16820] name failslab, interval 1, probability 0, space 0, times 0 [ 590.791835][T16820] CPU: 1 PID: 16820 Comm: syz.1.4154 Not tainted syzkaller #0 [ 590.799334][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.809404][T16820] Call Trace: [ 590.812700][T16820] [ 590.815720][T16820] dump_stack_lvl+0x188/0x250 [ 590.820418][T16820] ? show_regs_print_info+0x20/0x20 [ 590.825717][T16820] ? load_image+0x400/0x400 [ 590.830226][T16820] ? __might_sleep+0xf0/0xf0 [ 590.834826][T16820] ? __lock_acquire+0x7d10/0x7d10 [ 590.839871][T16820] should_fail+0x38c/0x4c0 [ 590.844400][T16820] should_failslab+0x5/0x20 [ 590.848912][T16820] slab_pre_alloc_hook+0x51/0xc0 [ 590.853861][T16820] __kmalloc+0x6b/0x330 [ 590.858022][T16820] ? tomoyo_encode+0x27e/0x540 [ 590.862794][T16820] tomoyo_encode+0x27e/0x540 [ 590.867392][T16820] tomoyo_realpath_from_path+0x5cd/0x610 [ 590.873048][T16820] tomoyo_path_number_perm+0x242/0x660 [ 590.878521][T16820] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 590.883992][T16820] ? perf_trace_lock+0xe4/0x390 [ 590.888922][T16820] security_file_ioctl+0x6c/0xa0 [ 590.893870][T16820] __se_sys_ioctl+0x48/0x170 [ 590.898467][T16820] do_syscall_64+0x4c/0xa0 [ 590.902889][T16820] ? clear_bhb_loop+0x30/0x80 [ 590.905783][T16821] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 590.907567][T16820] ? clear_bhb_loop+0x30/0x80 [ 590.907592][T16820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.907610][T16820] RIP: 0033:0x7f92f52aaeb9 [ 590.934788][T16820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.954401][T16820] RSP: 002b:00007f92f3506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.962835][T16820] RAX: ffffffffffffffda RBX: 00007f92f5525fa0 RCX: 00007f92f52aaeb9 [ 590.970822][T16820] RDX: 00002000000001c0 RSI: 000000004008240b RDI: 0000000000000003 [ 590.978807][T16820] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 590.986792][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.993830][T16821] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 590.994850][T16820] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 590.994884][T16820] [ 591.157705][T16821] bond0: (slave hsr0): Error -95 calling set_mac_address [ 591.383129][T16831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4158'. [ 591.477078][T16820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 591.845946][T16851] validate_nla: 2 callbacks suppressed [ 591.845967][T16851] netlink: 'syz.3.4164': attribute type 10 has an invalid length. [ 592.307798][T16863] FAULT_INJECTION: forcing a failure. [ 592.307798][T16863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.356340][T16863] CPU: 1 PID: 16863 Comm: syz.5.4166 Not tainted syzkaller #0 [ 592.363853][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.373927][T16863] Call Trace: [ 592.377229][T16863] [ 592.380228][T16863] dump_stack_lvl+0x188/0x250 [ 592.384949][T16863] ? show_regs_print_info+0x20/0x20 [ 592.390206][T16863] ? load_image+0x400/0x400 [ 592.394767][T16863] ? __lock_acquire+0x7d10/0x7d10 [ 592.399860][T16863] should_fail+0x38c/0x4c0 [ 592.404329][T16863] _copy_to_user+0x2e/0x130 [ 592.408875][T16863] simple_read_from_buffer+0xe3/0x150 [ 592.414292][T16863] proc_fail_nth_read+0x1a6/0x220 [ 592.419373][T16863] ? proc_fault_inject_write+0x310/0x310 [ 592.425046][T16863] ? fsnotify_perm+0x254/0x560 [ 592.429834][T16863] ? proc_fault_inject_write+0x310/0x310 [ 592.435498][T16863] vfs_read+0x301/0xd60 [ 592.439709][T16863] ? kernel_read+0x1e0/0x1e0 [ 592.444347][T16863] ? __fget_files+0x40f/0x480 [ 592.449083][T16863] ? mutex_lock_nested+0x17/0x20 [ 592.454053][T16863] ? __fdget_pos+0x2bf/0x370 [ 592.458605][T16865] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4165'. [ 592.458665][T16863] ? ksys_read+0x71/0x260 [ 592.472367][T16863] ksys_read+0x152/0x260 [ 592.476729][T16863] ? vfs_write+0xd60/0xd60 [ 592.481273][T16863] ? lockdep_hardirqs_on+0x94/0x140 [ 592.481681][T16860] netlink: 'syz.2.4175': attribute type 10 has an invalid length. [ 592.486509][T16863] do_syscall_64+0x4c/0xa0 [ 592.486536][T16863] ? clear_bhb_loop+0x30/0x80 [ 592.486555][T16863] ? clear_bhb_loop+0x30/0x80 [ 592.486579][T16863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.514016][T16863] RIP: 0033:0x7f05790f378e [ 592.518463][T16863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.538097][T16863] RSP: 002b:00007f057738dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.546628][T16863] RAX: ffffffffffffffda RBX: 00007f057738e6c0 RCX: 00007f05790f378e [ 592.554634][T16863] RDX: 000000000000000f RSI: 00007f057738e0a0 RDI: 0000000000000004 [ 592.562628][T16863] RBP: 00007f057738e090 R08: 0000000000000000 R09: 0000000000000000 [ 592.570616][T16863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.578609][T16863] R13: 00007f05793ae038 R14: 00007f05793adfa0 R15: 00007ffed4632778 [ 592.586674][T16863] [ 592.877639][T16872] netlink: 'syz.1.4169': attribute type 10 has an invalid length. [ 592.906793][T16872] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.927878][T16872] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 592.956884][T16872] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 592.992781][T16872] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 593.026659][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.061109][T16877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.453853][T16879] netlink: 'syz.2.4170': attribute type 21 has an invalid length. [ 593.521548][T16879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4170'. [ 593.637569][T16890] netlink: 'syz.5.4173': attribute type 7 has an invalid length. [ 593.686639][T16890] netlink: 'syz.5.4173': attribute type 6 has an invalid length. [ 593.950662][T16904] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 594.036476][T16899] netlink: 'syz.1.4178': attribute type 21 has an invalid length. [ 594.045228][T16899] netlink: 'syz.1.4178': attribute type 6 has an invalid length. [ 594.138219][T16904] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4178'. [ 594.183113][T16899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4178'. [ 594.311267][T16903] netlink: 'syz.5.4181': attribute type 7 has an invalid length. [ 594.964220][T16926] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 595.028980][T16924] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 595.046444][T16924] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 595.145472][T16924] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 595.222885][T16936] FAULT_INJECTION: forcing a failure. [ 595.222885][T16936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.249945][T16924] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 595.319003][T16936] CPU: 1 PID: 16936 Comm: syz.5.4191 Not tainted syzkaller #0 [ 595.326505][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.336576][T16936] Call Trace: [ 595.339923][T16936] [ 595.342906][T16936] dump_stack_lvl+0x188/0x250 [ 595.347598][T16936] ? show_regs_print_info+0x20/0x20 [ 595.352898][T16936] ? load_image+0x400/0x400 [ 595.357436][T16936] ? __lock_acquire+0x7d10/0x7d10 [ 595.362482][T16936] should_fail+0x38c/0x4c0 [ 595.366918][T16936] _copy_from_user+0x2e/0x170 [ 595.371615][T16936] iovec_from_user+0x142/0x370 [ 595.376486][T16936] __import_iovec+0x70/0x490 [ 595.381100][T16936] import_iovec+0x6f/0xa0 [ 595.385441][T16936] ___sys_sendmsg+0x1fd/0x2e0 [ 595.390153][T16936] ? __sys_sendmsg+0x2a0/0x2a0 [ 595.395159][T16936] __se_sys_sendmsg+0x1af/0x290 [ 595.400143][T16936] ? __x64_sys_sendmsg+0x80/0x80 [ 595.405083][T16936] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.411090][T16936] ? lockdep_hardirqs_on+0x94/0x140 [ 595.416311][T16936] do_syscall_64+0x4c/0xa0 [ 595.420738][T16936] ? clear_bhb_loop+0x30/0x80 [ 595.425430][T16936] ? clear_bhb_loop+0x30/0x80 [ 595.430120][T16936] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.436030][T16936] RIP: 0033:0x7f0579132eb9 [ 595.440455][T16936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.460071][T16936] RSP: 002b:00007f057738e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.468496][T16936] RAX: ffffffffffffffda RBX: 00007f05793adfa0 RCX: 00007f0579132eb9 [ 595.476560][T16936] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 595.484547][T16936] RBP: 00007f057738e090 R08: 0000000000000000 R09: 0000000000000000 [ 595.492525][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.500507][T16936] R13: 00007f05793ae038 R14: 00007f05793adfa0 R15: 00007ffed4632778 [ 595.508509][T16936] [ 595.605720][T16944] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4194'. [ 595.887280][T16952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4196'. [ 595.966923][T16955] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4196'. [ 596.292482][T16964] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4200'. [ 596.620933][T16970] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 597.167526][T16988] FAULT_INJECTION: forcing a failure. [ 597.167526][T16988] name failslab, interval 1, probability 0, space 0, times 0 [ 597.205659][T16988] CPU: 1 PID: 16988 Comm: syz.4.4209 Not tainted syzkaller #0 [ 597.213168][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.223235][T16988] Call Trace: [ 597.226529][T16988] [ 597.229470][T16988] dump_stack_lvl+0x188/0x250 [ 597.234171][T16988] ? show_regs_print_info+0x20/0x20 [ 597.239391][T16988] ? load_image+0x400/0x400 [ 597.243917][T16988] ? __might_sleep+0xf0/0xf0 [ 597.248524][T16988] ? __lock_acquire+0x7d10/0x7d10 [ 597.253600][T16988] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 597.259952][T16988] should_fail+0x38c/0x4c0 [ 597.264395][T16988] should_failslab+0x5/0x20 [ 597.268912][T16988] slab_pre_alloc_hook+0x51/0xc0 [ 597.273884][T16988] __kmalloc+0x6b/0x330 [ 597.278054][T16988] ? tomoyo_encode+0x27e/0x540 [ 597.282843][T16988] tomoyo_encode+0x27e/0x540 [ 597.287456][T16988] tomoyo_realpath_from_path+0x5cd/0x610 [ 597.293119][T16988] tomoyo_path_number_perm+0x242/0x660 [ 597.298607][T16988] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 597.304090][T16988] ? perf_trace_lock+0xe4/0x390 [ 597.308949][T16988] ? perf_trace_lock+0xe4/0x390 [ 597.313849][T16988] security_file_ioctl+0x6c/0xa0 [ 597.318795][T16988] __se_sys_ioctl+0x48/0x170 [ 597.323381][T16988] do_syscall_64+0x4c/0xa0 [ 597.327789][T16988] ? clear_bhb_loop+0x30/0x80 [ 597.332449][T16988] ? clear_bhb_loop+0x30/0x80 [ 597.337118][T16988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 597.342996][T16988] RIP: 0033:0x7f513ba08eb9 [ 597.347399][T16988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.366988][T16988] RSP: 002b:00007f5139c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.375476][T16988] RAX: ffffffffffffffda RBX: 00007f513bc84090 RCX: 00007f513ba08eb9 [ 597.383433][T16988] RDX: 0000200000000200 RSI: 00000000401054d5 RDI: 0000000000000003 [ 597.391389][T16988] RBP: 00007f5139c43090 R08: 0000000000000000 R09: 0000000000000000 [ 597.399345][T16988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.407302][T16988] R13: 00007f513bc84128 R14: 00007f513bc84090 R15: 00007ffd41948298 [ 597.415620][T16988] [ 597.450926][T16984] validate_nla: 8 callbacks suppressed [ 597.450943][T16984] netlink: 'syz.3.4207': attribute type 10 has an invalid length. [ 597.516671][T16984] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.581689][T16984] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 597.649341][T16984] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 597.758793][T16984] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 597.862279][T16986] Â: renamed from pim6reg1 [ 598.006862][T16988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.335294][T17005] netlink: 'syz.5.4212': attribute type 10 has an invalid length. [ 598.784146][T17017] netlink: 'syz.4.4217': attribute type 21 has an invalid length. [ 598.817460][T17017] netlink: 'syz.4.4217': attribute type 6 has an invalid length. [ 598.825377][T17017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4217'. [ 598.879363][T17024] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 598.902383][T17024] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4217'. [ 599.069877][T17022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.111492][T17022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.017796][T17040] Â: renamed from pim6reg1 [ 600.126256][T17033] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4220'. [ 600.442894][T17050] netlink: 'syz.4.4227': attribute type 10 has an invalid length. [ 600.489279][T17057] netlink: 'syz.3.4228': attribute type 9 has an invalid length. [ 600.529388][T17057] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4228'. [ 600.626744][T17050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 601.032688][T17070] netlink: 'syz.4.4234': attribute type 21 has an invalid length. [ 601.068403][T17070] netlink: 'syz.4.4234': attribute type 6 has an invalid length. [ 601.101887][T17070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4234'. [ 601.131106][T17075] netlink: 'syz.4.4234': attribute type 1 has an invalid length. [ 601.149419][T17073] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 601.173706][T17075] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4234'. [ 601.184277][T17073] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 601.210785][T17073] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 601.239420][T17073] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 602.003937][T17104] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4240'. [ 602.196490][T17094] Â: renamed from pim6reg1 [ 602.311857][T17110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.354084][T17110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.854852][T17124] validate_nla: 2 callbacks suppressed [ 602.854871][T17124] netlink: 'syz.2.4249': attribute type 10 has an invalid length. [ 602.957441][T17124] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.040723][T17124] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 603.127534][T17124] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 603.186414][T17124] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 603.551168][T17142] netlink: 'syz.1.4256': attribute type 21 has an invalid length. [ 603.594372][T17142] netlink: 'syz.1.4256': attribute type 6 has an invalid length. [ 603.613257][T17142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4256'. [ 603.631280][T17151] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 603.653697][T17151] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4256'. [ 603.697843][T17149] netlink: 'syz.2.4258': attribute type 10 has an invalid length. [ 603.985813][T17149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 604.558369][T17169] netlink: 'syz.1.4274': attribute type 21 has an invalid length. [ 604.579664][T17169] netlink: 'syz.1.4274': attribute type 6 has an invalid length. [ 604.602927][T17169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4274'. [ 604.635627][T17176] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 604.681333][T17176] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4274'. [ 604.992496][T17188] netlink: 'syz.2.4265': attribute type 10 has an invalid length. [ 605.070528][T17191] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4267'. [ 605.142182][T17186] Â: renamed from pim6reg1 [ 605.332223][T17200] netlink: 'syz.2.4269': attribute type 10 has an invalid length. [ 605.351220][T17200] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 605.404979][T17200] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 605.448020][T17200] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 605.488374][T17200] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 605.559182][T17204] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 606.090970][T17240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4287'. [ 606.097518][T17241] FAULT_INJECTION: forcing a failure. [ 606.097518][T17241] name failslab, interval 1, probability 0, space 0, times 0 [ 606.129317][T17240] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4287'. [ 606.163942][T17244] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4290'. [ 606.168406][T17241] CPU: 0 PID: 17241 Comm: syz.4.4289 Not tainted syzkaller #0 [ 606.180912][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.190976][T17241] Call Trace: [ 606.194266][T17241] [ 606.197207][T17241] dump_stack_lvl+0x188/0x250 [ 606.201907][T17241] ? show_regs_print_info+0x20/0x20 [ 606.207296][T17241] ? load_image+0x400/0x400 [ 606.211825][T17241] ? __might_sleep+0xf0/0xf0 [ 606.216517][T17241] ? __lock_acquire+0x7d10/0x7d10 [ 606.221558][T17241] should_fail+0x38c/0x4c0 [ 606.225992][T17241] should_failslab+0x5/0x20 [ 606.230504][T17241] slab_pre_alloc_hook+0x51/0xc0 [ 606.235469][T17241] __kmalloc+0x6b/0x330 [ 606.239639][T17241] ? tomoyo_encode+0x27e/0x540 [ 606.244422][T17241] tomoyo_encode+0x27e/0x540 [ 606.249035][T17241] tomoyo_realpath_from_path+0x5cd/0x610 [ 606.254703][T17241] tomoyo_path_number_perm+0x242/0x660 [ 606.260179][T17241] ? verify_lock_unused+0x140/0x140 [ 606.265396][T17241] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 606.270875][T17241] ? ksys_write+0x1c6/0x260 [ 606.275442][T17241] security_file_ioctl+0x6c/0xa0 [ 606.280398][T17241] __se_sys_ioctl+0x48/0x170 [ 606.285005][T17241] do_syscall_64+0x4c/0xa0 [ 606.289432][T17241] ? clear_bhb_loop+0x30/0x80 [ 606.294128][T17241] ? clear_bhb_loop+0x30/0x80 [ 606.298825][T17241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 606.304739][T17241] RIP: 0033:0x7f513ba08eb9 [ 606.309171][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.328823][T17241] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.337351][T17241] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 606.345427][T17241] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 606.353498][T17241] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 606.361570][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.369564][T17241] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 606.378016][T17241] [ 606.522518][T17253] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4294'. [ 606.617942][T17256] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 606.653532][T17241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.687907][T17256] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 606.718889][T17256] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 606.749065][T17256] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 606.899640][T17267] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4307'. [ 607.291237][T17279] device syzkaller0 entered promiscuous mode [ 607.534535][T17292] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4304'. [ 607.589605][T17296] FAULT_INJECTION: forcing a failure. [ 607.589605][T17296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.610311][T17297] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4304'. [ 607.634476][T17296] CPU: 1 PID: 17296 Comm: syz.1.4308 Not tainted syzkaller #0 [ 607.641982][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.652045][T17296] Call Trace: [ 607.655335][T17296] [ 607.658275][T17296] dump_stack_lvl+0x188/0x250 [ 607.662973][T17296] ? show_regs_print_info+0x20/0x20 [ 607.668187][T17296] ? load_image+0x400/0x400 [ 607.672707][T17296] ? __lock_acquire+0x7d10/0x7d10 [ 607.677737][T17296] should_fail+0x38c/0x4c0 [ 607.682161][T17296] _copy_from_user+0x2e/0x170 [ 607.686849][T17296] iovec_from_user+0x142/0x370 [ 607.691623][T17296] __import_iovec+0x70/0x490 [ 607.696237][T17296] import_iovec+0x6f/0xa0 [ 607.700578][T17296] ___sys_sendmsg+0x1fd/0x2e0 [ 607.705326][T17296] ? __sys_sendmsg+0x2a0/0x2a0 [ 607.710107][T17296] ? trace_event_raw_event_lock+0x270/0x270 [ 607.716008][T17296] ? vfs_write+0x8b2/0xd60 [ 607.720559][T17296] __se_sys_sendmsg+0x1af/0x290 [ 607.725423][T17296] ? __x64_sys_sendmsg+0x80/0x80 [ 607.730372][T17296] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 607.736375][T17296] ? lockdep_hardirqs_on+0x94/0x140 [ 607.741587][T17296] do_syscall_64+0x4c/0xa0 [ 607.746008][T17296] ? clear_bhb_loop+0x30/0x80 [ 607.750721][T17296] ? clear_bhb_loop+0x30/0x80 [ 607.755400][T17296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.761299][T17296] RIP: 0033:0x7f92f52aaeb9 [ 607.765819][T17296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.785520][T17296] RSP: 002b:00007f92f3506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.793952][T17296] RAX: ffffffffffffffda RBX: 00007f92f5525fa0 RCX: 00007f92f52aaeb9 [ 607.801940][T17296] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 607.809935][T17296] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 607.817917][T17296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.825889][T17296] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 607.833885][T17296] [ 607.993095][T17304] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.4310'. [ 608.995025][T17324] validate_nla: 13 callbacks suppressed [ 608.995077][T17324] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 609.115691][T17324] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.4318'. [ 609.138452][T17337] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 609.174875][T17339] FAULT_INJECTION: forcing a failure. [ 609.174875][T17339] name failslab, interval 1, probability 0, space 0, times 0 [ 609.197918][T17334] netlink: 'syz.3.4322': attribute type 21 has an invalid length. [ 609.210110][T17337] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4322'. [ 609.228683][T17334] netlink: 'syz.3.4322': attribute type 6 has an invalid length. [ 609.231601][T17339] CPU: 0 PID: 17339 Comm: syz.1.4325 Not tainted syzkaller #0 [ 609.243994][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.254158][T17339] Call Trace: [ 609.257083][T17334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4322'. [ 609.257493][T17339] [ 609.257503][T17339] dump_stack_lvl+0x188/0x250 [ 609.257531][T17339] ? show_regs_print_info+0x20/0x20 [ 609.279413][T17339] ? load_image+0x400/0x400 [ 609.283940][T17339] ? __lock_acquire+0x7d10/0x7d10 [ 609.288986][T17339] ? aa_get_newest_label+0xf5/0x5a0 [ 609.294206][T17339] should_fail+0x38c/0x4c0 [ 609.298732][T17339] should_failslab+0x5/0x20 [ 609.303258][T17339] slab_pre_alloc_hook+0x51/0xc0 [ 609.308211][T17339] kmem_cache_alloc_trace+0x47/0x2a0 [ 609.313514][T17339] ? btf_new_fd+0x110/0x910 [ 609.318039][T17339] btf_new_fd+0x110/0x910 [ 609.322393][T17339] ? capable+0x84/0xe0 [ 609.326481][T17339] __sys_bpf+0x58c/0x6f0 [ 609.330748][T17339] ? bpf_link_show_fdinfo+0x380/0x380 [ 609.336153][T17339] __x64_sys_bpf+0x78/0x90 [ 609.340590][T17339] do_syscall_64+0x4c/0xa0 [ 609.345117][T17339] ? clear_bhb_loop+0x30/0x80 [ 609.349805][T17339] ? clear_bhb_loop+0x30/0x80 [ 609.354508][T17339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 609.360506][T17339] RIP: 0033:0x7f92f52aaeb9 [ 609.364927][T17339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.384620][T17339] RSP: 002b:00007f92f3506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.393031][T17339] RAX: ffffffffffffffda RBX: 00007f92f5525fa0 RCX: 00007f92f52aaeb9 [ 609.400989][T17339] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012 [ 609.408949][T17339] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 609.416906][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.424949][T17339] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 609.432919][T17339] [ 609.591972][T17341] netlink: 'syz.5.4324': attribute type 9 has an invalid length. [ 611.307748][T17353] netlink: 'syz.5.4328': attribute type 21 has an invalid length. [ 611.312956][T17351] FAULT_INJECTION: forcing a failure. [ 611.312956][T17351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.316618][T17353] netlink: 'syz.5.4328': attribute type 6 has an invalid length. [ 611.333589][T17351] CPU: 1 PID: 17351 Comm: syz.2.4329 Not tainted syzkaller #0 [ 611.345366][T17355] FAULT_INJECTION: forcing a failure. [ 611.345366][T17355] name failslab, interval 1, probability 0, space 0, times 0 [ 611.346093][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.346106][T17351] Call Trace: [ 611.346112][T17351] [ 611.346118][T17351] dump_stack_lvl+0x188/0x250 [ 611.346145][T17351] ? show_regs_print_info+0x20/0x20 [ 611.346178][T17351] ? load_image+0x400/0x400 [ 611.360579][T17353] __nla_validate_parse: 1 callbacks suppressed [ 611.360625][T17353] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4328'. [ 611.368804][T17351] ? __lock_acquire+0x7d10/0x7d10 [ 611.368838][T17351] should_fail+0x38c/0x4c0 [ 611.368859][T17351] strncpy_from_user+0x32/0x360 [ 611.368879][T17351] getname_flags+0xef/0x500 [ 611.368900][T17351] do_sys_openat2+0xdd/0x4b0 [ 611.368917][T17351] ? rcu_nmi_exit+0x6f/0xf0 [ 611.432979][T17351] ? do_sys_open+0xe0/0xe0 [ 611.437449][T17351] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 611.443631][T17351] ? lock_chain_count+0x20/0x20 [ 611.448582][T17351] ? vtime_user_exit+0x2c8/0x3e0 [ 611.453534][T17351] __x64_sys_openat+0x135/0x160 [ 611.458488][T17351] do_syscall_64+0x4c/0xa0 [ 611.462924][T17351] ? clear_bhb_loop+0x30/0x80 [ 611.467699][T17351] ? clear_bhb_loop+0x30/0x80 [ 611.472392][T17351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 611.478401][T17351] RIP: 0033:0x7f943b29eeb9 [ 611.482920][T17351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.502622][T17351] RSP: 002b:00007f94394fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.511042][T17351] RAX: ffffffffffffffda RBX: 00007f943b519fa0 RCX: 00007f943b29eeb9 [ 611.519043][T17351] RDX: 00000000001c1842 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 611.527016][T17351] RBP: 00007f94394fa090 R08: 0000000000000000 R09: 0000000000000000 [ 611.534993][T17351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.542974][T17351] R13: 00007f943b51a038 R14: 00007f943b519fa0 R15: 00007ffeec5d9d18 [ 611.550975][T17351] [ 611.554113][T17355] CPU: 0 PID: 17355 Comm: syz.3.4330 Not tainted syzkaller #0 [ 611.561584][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.571745][T17355] Call Trace: [ 611.575035][T17355] [ 611.577977][T17355] dump_stack_lvl+0x188/0x250 [ 611.582666][T17355] ? show_regs_print_info+0x20/0x20 [ 611.587876][T17355] ? load_image+0x400/0x400 [ 611.592396][T17355] ? __lock_acquire+0x7d10/0x7d10 [ 611.597429][T17355] ? aa_get_newest_label+0xf5/0x5a0 [ 611.602642][T17355] should_fail+0x38c/0x4c0 [ 611.607081][T17355] should_failslab+0x5/0x20 [ 611.611600][T17355] slab_pre_alloc_hook+0x51/0xc0 [ 611.616562][T17355] kmem_cache_alloc_trace+0x47/0x2a0 [ 611.621868][T17355] ? btf_new_fd+0x110/0x910 [ 611.626399][T17355] btf_new_fd+0x110/0x910 [ 611.630760][T17355] ? capable+0x84/0xe0 [ 611.634847][T17355] __sys_bpf+0x58c/0x6f0 [ 611.639106][T17355] ? bpf_link_show_fdinfo+0x380/0x380 [ 611.644512][T17355] __x64_sys_bpf+0x78/0x90 [ 611.648944][T17355] do_syscall_64+0x4c/0xa0 [ 611.653371][T17355] ? clear_bhb_loop+0x30/0x80 [ 611.658065][T17355] ? clear_bhb_loop+0x30/0x80 [ 611.662759][T17355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 611.668808][T17355] RIP: 0033:0x7efe53fb9eb9 [ 611.673248][T17355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.692897][T17355] RSP: 002b:00007efe52215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 611.701408][T17355] RAX: ffffffffffffffda RBX: 00007efe54234fa0 RCX: 00007efe53fb9eb9 [ 611.709394][T17355] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 611.717381][T17355] RBP: 00007efe52215090 R08: 0000000000000000 R09: 0000000000000000 [ 611.725358][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.733348][T17355] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 611.741351][T17355] [ 611.997801][T17373] netlink: 'syz.2.4336': attribute type 10 has an invalid length. [ 612.105237][T17380] netlink: 'syz.1.4337': attribute type 10 has an invalid length. [ 612.132632][T17380] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.161873][T17380] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 612.183798][T17380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 612.203126][T17380] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 612.214482][T17378] netlink: 'syz.4.4338': attribute type 10 has an invalid length. [ 612.232213][T17378] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.247554][T17378] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 612.272285][T17378] bond0: (slave hsr0): Error -95 calling set_mac_address [ 612.290303][T17385] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4340'. [ 612.326852][T17385] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4340'. [ 612.391302][T17390] FAULT_INJECTION: forcing a failure. [ 612.391302][T17390] name failslab, interval 1, probability 0, space 0, times 0 [ 612.437524][T17390] CPU: 1 PID: 17390 Comm: syz.2.4342 Not tainted syzkaller #0 [ 612.445024][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.446959][T17391] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4341'. [ 612.455089][T17390] Call Trace: [ 612.455129][T17390] [ 612.455137][T17390] dump_stack_lvl+0x188/0x250 [ 612.455165][T17390] ? show_regs_print_info+0x20/0x20 [ 612.455182][T17390] ? load_image+0x400/0x400 [ 612.455211][T17390] should_fail+0x38c/0x4c0 [ 612.455234][T17390] should_failslab+0x5/0x20 [ 612.455256][T17390] slab_pre_alloc_hook+0x51/0xc0 [ 612.455275][T17390] kmem_cache_alloc_trace+0x47/0x2a0 [ 612.455290][T17390] ? tipc_group_create+0x9d/0x4f0 [ 612.455307][T17390] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 612.455330][T17390] tipc_group_create+0x9d/0x4f0 [ 612.455354][T17390] tipc_sk_join+0x24f/0x6a0 [ 612.455369][T17390] ? lockdep_hardirqs_on+0x94/0x140 [ 612.455390][T17390] ? __local_bh_enable_ip+0x136/0x1c0 [ 612.455408][T17390] ? __tipc_sendstream+0x1270/0x1270 [ 612.455435][T17390] tipc_setsockopt+0x6bf/0x960 [ 612.455457][T17390] ? tipc_shutdown+0x4d0/0x4d0 [ 612.455476][T17390] ? aa_sock_opt_perm+0x74/0x100 [ 612.455494][T17390] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 612.560873][T17390] ? security_socket_setsockopt+0x7a/0xa0 [ 612.566611][T17390] ? tipc_shutdown+0x4d0/0x4d0 [ 612.571394][T17390] __sys_setsockopt+0x2bf/0x3d0 [ 612.576270][T17390] __x64_sys_setsockopt+0xb1/0xc0 [ 612.581316][T17390] do_syscall_64+0x4c/0xa0 [ 612.585758][T17390] ? clear_bhb_loop+0x30/0x80 [ 612.590453][T17390] ? clear_bhb_loop+0x30/0x80 [ 612.595151][T17390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 612.601076][T17390] RIP: 0033:0x7f943b29eeb9 [ 612.605508][T17390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.625129][T17390] RSP: 002b:00007f94394fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.633583][T17390] RAX: ffffffffffffffda RBX: 00007f943b519fa0 RCX: 00007f943b29eeb9 [ 612.641569][T17390] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 612.649559][T17390] RBP: 00007f94394fa090 R08: 0000000000000043 R09: 0000000000000000 [ 612.657641][T17390] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 612.665638][T17390] R13: 00007f943b51a038 R14: 00007f943b519fa0 R15: 00007ffeec5d9d18 [ 612.674168][T17390] [ 613.545740][T17418] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4350'. [ 613.803412][T17423] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4360'. [ 613.872545][T17431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4351'. [ 613.937785][T17436] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4351'. [ 614.616125][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 614.679272][T17456] validate_nla: 8 callbacks suppressed [ 614.679304][T17456] netlink: 'syz.5.4364': attribute type 1 has an invalid length. [ 614.764136][T17456] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.4364'. [ 614.949437][T17473] netlink: 'syz.3.4370': attribute type 10 has an invalid length. [ 614.976992][T17473] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 614.992084][T17473] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 615.005589][T17473] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 615.022664][T17473] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 615.095160][T17478] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4371'. [ 615.235802][T17480] netlink: 'syz.5.4372': attribute type 10 has an invalid length. [ 615.280493][T17480] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 615.344420][T17480] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 615.400729][T17480] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 615.459364][T17480] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 615.534942][T17486] netlink: 'syz.1.4374': attribute type 10 has an invalid length. [ 615.853904][T17499] FAULT_INJECTION: forcing a failure. [ 615.853904][T17499] name failslab, interval 1, probability 0, space 0, times 0 [ 615.867080][T17499] CPU: 0 PID: 17499 Comm: syz.5.4379 Not tainted syzkaller #0 [ 615.874558][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.884625][T17499] Call Trace: [ 615.887916][T17499] [ 615.890855][T17499] dump_stack_lvl+0x188/0x250 [ 615.895557][T17499] ? show_regs_print_info+0x20/0x20 [ 615.900769][T17499] ? load_image+0x400/0x400 [ 615.905291][T17499] should_fail+0x38c/0x4c0 [ 615.909717][T17499] should_failslab+0x5/0x20 [ 615.914223][T17499] slab_pre_alloc_hook+0x51/0xc0 [ 615.919267][T17499] __kmalloc_node_track_caller+0x68/0x3a0 [ 615.924988][T17499] ? tipc_buf_acquire+0x27/0xd0 [ 615.929850][T17499] ? kmem_cache_alloc_node+0x162/0x2d0 [ 615.935313][T17499] ? __alloc_skb+0xf4/0x750 [ 615.939836][T17499] ? tipc_buf_acquire+0x27/0xd0 [ 615.944686][T17499] __alloc_skb+0x22c/0x750 [ 615.949115][T17499] tipc_buf_acquire+0x27/0xd0 [ 615.953835][T17499] tipc_named_withdraw+0x1d7/0x760 [ 615.959050][T17499] tipc_nametbl_withdraw+0xc8/0x280 [ 615.964247][T17499] ? tipc_group_self+0x22/0x1c0 [ 615.969110][T17499] tipc_sk_leave+0x44f/0x4d0 [ 615.973712][T17499] ? __tipc_shutdown+0x1520/0x1520 [ 615.978816][T17499] ? _local_bh_enable+0xa0/0xa0 [ 615.983759][T17499] tipc_release+0x315/0x1ff0 [ 615.988471][T17499] ? tipc_sock_destruct+0x170/0x170 [ 615.993679][T17499] sock_close+0xd5/0x240 [ 615.997925][T17499] ? sock_mmap+0x90/0x90 [ 616.002174][T17499] __fput+0x234/0x930 [ 616.006160][T17499] task_work_run+0x125/0x1a0 [ 616.010760][T17499] exit_to_user_mode_loop+0x10f/0x130 [ 616.016143][T17499] exit_to_user_mode_prepare+0xee/0x180 [ 616.021715][T17499] syscall_exit_to_user_mode+0x16/0x40 [ 616.027190][T17499] do_syscall_64+0x58/0xa0 [ 616.031868][T17499] ? clear_bhb_loop+0x30/0x80 [ 616.036540][T17499] ? clear_bhb_loop+0x30/0x80 [ 616.041213][T17499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 616.047098][T17499] RIP: 0033:0x7f0579132eb9 [ 616.051507][T17499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.071192][T17499] RSP: 002b:00007f057738e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 616.079704][T17499] RAX: 0000000000000000 RBX: 00007f05793adfa0 RCX: 00007f0579132eb9 [ 616.087718][T17499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 616.095699][T17499] RBP: 00007f057738e090 R08: 0000000000000000 R09: 0000000000000000 [ 616.103664][T17499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.111630][T17499] R13: 00007f05793ae038 R14: 00007f05793adfa0 R15: 00007ffed4632778 [ 616.119615][T17499] [ 616.122888][T17499] tipc: Withdrawal distribution failure [ 616.390331][T17510] netlink: 135856 bytes leftover after parsing attributes in process `syz.4.4384'. [ 616.618538][T17512] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4386'. [ 617.188845][T17529] netlink: 'syz.5.4392': attribute type 21 has an invalid length. [ 617.236409][T17529] netlink: 'syz.5.4392': attribute type 6 has an invalid length. [ 617.269647][T17537] netlink: 'syz.5.4392': attribute type 1 has an invalid length. [ 617.285794][T17529] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4392'. [ 617.349024][T17537] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4392'. [ 617.352813][T17533] netlink: 'syz.3.4394': attribute type 10 has an invalid length. [ 617.807955][T17559] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.4402'. [ 618.361717][T17578] netlink: 'syz.5.4414': attribute type 4 has an invalid length. [ 618.748901][T17583] netlink: 'syz.1.4406': attribute type 10 has an invalid length. [ 618.882098][T17583] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 619.004195][T17583] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 619.128905][T17583] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 619.277573][T17583] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 619.424959][T17596] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4409'. [ 619.755433][T17608] validate_nla: 1 callbacks suppressed [ 619.755538][T17608] netlink: 'syz.5.4418': attribute type 10 has an invalid length. [ 620.210620][T17624] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4427'. [ 620.279465][T17624] netlink: 'syz.5.4427': attribute type 9 has an invalid length. [ 620.306386][T17624] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4427'. [ 620.793445][T17632] netlink: 'syz.2.4428': attribute type 10 has an invalid length. [ 620.842081][T17632] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 620.919766][T17632] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 621.043048][T17632] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 621.186592][T17632] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 621.620578][T17648] netlink: 'syz.2.4434': attribute type 21 has an invalid length. [ 621.732355][T17659] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 621.793186][T17648] netlink: 'syz.2.4434': attribute type 6 has an invalid length. [ 621.901802][T17648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4434'. [ 621.909378][T17659] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4434'. [ 622.388430][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4441'. [ 622.454484][T17672] netlink: 'syz.5.4441': attribute type 9 has an invalid length. [ 622.484468][T17672] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4441'. [ 622.695057][T17677] netlink: 'syz.3.4443': attribute type 4 has an invalid length. [ 622.827196][T17684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4446'. [ 623.038202][T17690] netlink: 'syz.5.4449': attribute type 10 has an invalid length. [ 623.179569][T17694] netlink: 'syz.4.4450': attribute type 10 has an invalid length. [ 623.207419][T17694] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 623.287387][T17694] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 623.345605][T17694] bond0: (slave hsr0): Error -95 calling set_mac_address [ 623.640785][T17710] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 623.716263][T17710] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 623.804502][T17710] bond0: (slave hsr0): Error -95 calling set_mac_address [ 624.270305][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.276875][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.928843][T17728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4460'. [ 624.951974][T17734] validate_nla: 2 callbacks suppressed [ 624.952015][T17734] netlink: 'syz.5.4463': attribute type 10 has an invalid length. [ 625.327985][T17745] netlink: 'syz.4.4467': attribute type 10 has an invalid length. [ 625.335971][T17745] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.403668][T17745] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 625.465487][T17745] bond0: (slave hsr0): Error -95 calling set_mac_address [ 625.762495][T17754] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4470'. [ 625.836479][T17757] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4471'. [ 625.998578][T17762] netlink: 'syz.3.4472': attribute type 10 has an invalid length. [ 626.094007][T17762] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 626.185714][T17762] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 626.233958][T17762] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 626.270982][T17762] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 626.515466][T17767] netlink: 'syz.2.4473': attribute type 10 has an invalid length. [ 629.686739][T17833] netlink: 'syz.1.4497': attribute type 21 has an invalid length. [ 629.812832][T17833] netlink: 'syz.1.4497': attribute type 6 has an invalid length. [ 629.862439][T17839] netlink: 'syz.1.4497': attribute type 1 has an invalid length. [ 629.956568][T17833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4497'. [ 630.102957][T17839] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4497'. [ 630.263929][T17847] FAULT_INJECTION: forcing a failure. [ 630.263929][T17847] name failslab, interval 1, probability 0, space 0, times 0 [ 630.391682][T17847] CPU: 1 PID: 17847 Comm: syz.4.4502 Not tainted syzkaller #0 [ 630.399185][T17847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.409256][T17847] Call Trace: [ 630.412546][T17847] [ 630.415486][T17847] dump_stack_lvl+0x188/0x250 [ 630.420189][T17847] ? show_regs_print_info+0x20/0x20 [ 630.425405][T17847] ? load_image+0x400/0x400 [ 630.429928][T17847] ? __might_sleep+0xf0/0xf0 [ 630.434538][T17847] ? __lock_acquire+0x7d10/0x7d10 [ 630.439570][T17847] ? account_kernel_stack+0x1b1/0x390 [ 630.444951][T17847] should_fail+0x38c/0x4c0 [ 630.449380][T17847] should_failslab+0x5/0x20 [ 630.453884][T17847] slab_pre_alloc_hook+0x51/0xc0 [ 630.458808][T17847] ? prepare_creds+0x3c/0x610 [ 630.463469][T17847] kmem_cache_alloc+0x3d/0x290 [ 630.468215][T17847] prepare_creds+0x3c/0x610 [ 630.472703][T17847] copy_creds+0x146/0xd00 [ 630.477018][T17847] copy_process+0x8a8/0x3e20 [ 630.481598][T17847] ? __lock_acquire+0x13bc/0x7d10 [ 630.486624][T17847] ? __pidfd_prepare+0x140/0x140 [ 630.491550][T17847] kernel_clone+0x23f/0x990 [ 630.496042][T17847] ? trace_event_raw_event_lock+0x270/0x270 [ 630.501922][T17847] ? create_io_thread+0x180/0x180 [ 630.506935][T17847] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 630.512901][T17847] __x64_sys_clone+0x19a/0x210 [ 630.517811][T17847] ? __ia32_sys_vfork+0x130/0x130 [ 630.522825][T17847] ? syscall_enter_from_user_mode+0x2a/0x70 [ 630.528703][T17847] do_syscall_64+0x4c/0xa0 [ 630.533098][T17847] ? clear_bhb_loop+0x30/0x80 [ 630.537762][T17847] ? clear_bhb_loop+0x30/0x80 [ 630.542429][T17847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 630.548315][T17847] RIP: 0033:0x7f513ba08eb9 [ 630.552713][T17847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.572305][T17847] RSP: 002b:00007f5139c63fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 630.580701][T17847] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 630.588657][T17847] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000008004000 [ 630.596615][T17847] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 630.604652][T17847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 630.612603][T17847] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 630.620573][T17847] [ 631.053422][T17857] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4504'. [ 632.190646][T17885] netlink: 'syz.2.4515': attribute type 1 has an invalid length. [ 632.239285][T17883] netlink: 'syz.2.4515': attribute type 21 has an invalid length. [ 632.268816][T17883] netlink: 'syz.2.4515': attribute type 6 has an invalid length. [ 632.296278][T17885] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4515'. [ 632.377224][T17883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4515'. [ 632.820855][T17908] netlink: 'syz.3.4525': attribute type 10 has an invalid length. [ 632.888796][T17908] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 632.981020][T17908] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 632.981572][T17906] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4522'. [ 633.087474][T17908] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 633.241055][T17908] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 633.344270][T17910] netlink: 'syz.5.4526': attribute type 10 has an invalid length. [ 633.376688][T17910] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 633.408727][T17910] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 633.504262][T17910] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 633.562634][T17910] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 633.600529][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4523'. [ 633.794070][T17904] netlink: 'syz.1.4523': attribute type 9 has an invalid length. [ 633.816456][T17904] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4523'. [ 633.825213][T17917] netlink: 'syz.3.4528': attribute type 10 has an invalid length. [ 633.870823][T17919] delete_channel: no stack [ 633.918880][T17919] netlink: 'syz.5.4530': attribute type 46 has an invalid length. [ 634.018503][T17923] netlink: 'syz.4.4532': attribute type 21 has an invalid length. [ 634.034841][T17918] delete_channel: no stack [ 634.062261][T17923] netlink: 'syz.4.4532': attribute type 6 has an invalid length. [ 634.086345][T17923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4532'. [ 634.110421][T17924] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4532'. [ 634.246048][T17931] device syzkaller0 entered promiscuous mode [ 634.484074][T17937] FAULT_INJECTION: forcing a failure. [ 634.484074][T17937] name failslab, interval 1, probability 0, space 0, times 0 [ 634.636619][T17937] CPU: 0 PID: 17937 Comm: syz.3.4537 Not tainted syzkaller #0 [ 634.644217][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.654386][T17937] Call Trace: [ 634.657678][T17937] [ 634.660620][T17937] dump_stack_lvl+0x188/0x250 [ 634.665324][T17937] ? show_regs_print_info+0x20/0x20 [ 634.670548][T17937] ? load_image+0x400/0x400 [ 634.675088][T17937] should_fail+0x38c/0x4c0 [ 634.679532][T17937] should_failslab+0x5/0x20 [ 634.684047][T17937] slab_pre_alloc_hook+0x51/0xc0 [ 634.689000][T17937] ? prepare_creds+0x3c/0x610 [ 634.693693][T17937] kmem_cache_alloc+0x3d/0x290 [ 634.698478][T17937] prepare_creds+0x3c/0x610 [ 634.703003][T17937] copy_creds+0x146/0xd00 [ 634.707358][T17937] copy_process+0x8a8/0x3e20 [ 634.711971][T17937] ? __lock_acquire+0x13bc/0x7d10 [ 634.717032][T17937] ? __pidfd_prepare+0x140/0x140 [ 634.722092][T17937] kernel_clone+0x23f/0x990 [ 634.726616][T17937] ? ktime_get_real_ts64+0x440/0x440 [ 634.731915][T17937] ? create_io_thread+0x180/0x180 [ 634.736966][T17937] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.742974][T17937] __x64_sys_clone+0x19a/0x210 [ 634.747766][T17937] ? __ia32_sys_vfork+0x130/0x130 [ 634.752838][T17937] ? syscall_enter_from_user_mode+0x2a/0x70 [ 634.758760][T17937] do_syscall_64+0x4c/0xa0 [ 634.763199][T17937] ? clear_bhb_loop+0x30/0x80 [ 634.767888][T17937] ? clear_bhb_loop+0x30/0x80 [ 634.772583][T17937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 634.778495][T17937] RIP: 0033:0x7efe53fb9eb9 [ 634.782926][T17937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.802547][T17937] RSP: 002b:00007efe52214fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 634.810979][T17937] RAX: ffffffffffffffda RBX: 00007efe54234fa0 RCX: 00007efe53fb9eb9 [ 634.818968][T17937] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00000000000c0000 [ 634.826956][T17937] RBP: 00007efe52215090 R08: 0000200000000200 R09: 0000200000000200 [ 634.834975][T17937] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000000000000001 [ 634.842962][T17937] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 634.850971][T17937] [ 634.900096][T17940] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 634.919336][T17940] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 634.939031][T17940] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 634.995540][T17940] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 636.124335][T17977] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.215623][T17977] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 636.297601][T17977] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 636.367192][T17977] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 636.459929][T17987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 636.519297][T17987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.717885][T18004] delete_channel: no stack [ 636.789663][T17995] delete_channel: no stack [ 636.922381][T18013] FAULT_INJECTION: forcing a failure. [ 636.922381][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 637.045086][T18013] CPU: 1 PID: 18013 Comm: syz.4.4567 Not tainted syzkaller #0 [ 637.052593][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.062743][T18013] Call Trace: [ 637.066127][T18013] [ 637.069070][T18013] dump_stack_lvl+0x188/0x250 [ 637.073776][T18013] ? show_regs_print_info+0x20/0x20 [ 637.078992][T18013] ? load_image+0x400/0x400 [ 637.083508][T18013] ? __might_sleep+0xf0/0xf0 [ 637.088115][T18013] ? __lock_acquire+0x7d10/0x7d10 [ 637.093162][T18013] should_fail+0x38c/0x4c0 [ 637.097593][T18013] should_failslab+0x5/0x20 [ 637.102106][T18013] slab_pre_alloc_hook+0x51/0xc0 [ 637.107054][T18013] __kmalloc+0x6b/0x330 [ 637.111290][T18013] ? tomoyo_encode+0x27e/0x540 [ 637.116051][T18013] tomoyo_encode+0x27e/0x540 [ 637.120633][T18013] tomoyo_realpath_from_path+0x5cd/0x610 [ 637.126273][T18013] tomoyo_path_number_perm+0x242/0x660 [ 637.131726][T18013] ? verify_lock_unused+0x140/0x140 [ 637.137363][T18013] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 637.142825][T18013] ? ksys_write+0x1c6/0x260 [ 637.147358][T18013] security_file_ioctl+0x6c/0xa0 [ 637.152297][T18013] __se_sys_ioctl+0x48/0x170 [ 637.157013][T18013] do_syscall_64+0x4c/0xa0 [ 637.161414][T18013] ? clear_bhb_loop+0x30/0x80 [ 637.166072][T18013] ? clear_bhb_loop+0x30/0x80 [ 637.170744][T18013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 637.176620][T18013] RIP: 0033:0x7f513ba08eb9 [ 637.181023][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.200612][T18013] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.209011][T18013] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 637.216967][T18013] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 637.224919][T18013] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 637.232873][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.240826][T18013] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 637.248880][T18013] [ 637.256307][T18019] validate_nla: 7 callbacks suppressed [ 637.256322][T18019] netlink: 'syz.2.4569': attribute type 10 has an invalid length. [ 637.350657][T18013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 637.388765][T18029] netlink: 'syz.5.4573': attribute type 9 has an invalid length. [ 637.397552][T18029] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4573'. [ 637.558381][T18032] netlink: 'syz.2.4574': attribute type 10 has an invalid length. [ 637.587535][T18032] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 637.659557][T18032] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 637.701413][T18032] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 637.746585][T18032] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 637.968831][T18047] netlink: 'syz.5.4589': attribute type 29 has an invalid length. [ 638.056145][T18047] netlink: 'syz.5.4589': attribute type 29 has an invalid length. [ 638.110237][T18050] netlink: 'syz.5.4589': attribute type 29 has an invalid length. [ 638.132399][T18051] delete_channel: no stack [ 638.180314][T18051] netlink: 'syz.1.4579': attribute type 46 has an invalid length. [ 638.420010][T18048] delete_channel: no stack [ 638.553167][T18060] netlink: 'syz.2.4583': attribute type 10 has an invalid length. [ 638.840836][T18067] netlink: 'syz.2.4586': attribute type 10 has an invalid length. [ 639.105531][T18076] FAULT_INJECTION: forcing a failure. [ 639.105531][T18076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.189306][T18076] CPU: 0 PID: 18076 Comm: syz.3.4587 Not tainted syzkaller #0 [ 639.196807][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.206867][T18076] Call Trace: [ 639.210152][T18076] [ 639.213088][T18076] dump_stack_lvl+0x188/0x250 [ 639.217780][T18076] ? show_regs_print_info+0x20/0x20 [ 639.222990][T18076] ? load_image+0x400/0x400 [ 639.227509][T18076] ? __lock_acquire+0x7d10/0x7d10 [ 639.232558][T18076] should_fail+0x38c/0x4c0 [ 639.236996][T18076] _copy_to_user+0x2e/0x130 [ 639.241507][T18076] simple_read_from_buffer+0xe3/0x150 [ 639.247069][T18076] proc_fail_nth_read+0x1a6/0x220 [ 639.252103][T18076] ? proc_fault_inject_write+0x310/0x310 [ 639.257750][T18076] ? fsnotify_perm+0x254/0x560 [ 639.262529][T18076] ? proc_fault_inject_write+0x310/0x310 [ 639.268186][T18076] vfs_read+0x301/0xd60 [ 639.272358][T18076] ? kernel_read+0x1e0/0x1e0 [ 639.276970][T18076] ? __fget_files+0x40f/0x480 [ 639.281662][T18076] ? mutex_lock_nested+0x17/0x20 [ 639.286610][T18076] ? __fdget_pos+0x2bf/0x370 [ 639.291202][T18076] ? ksys_read+0x71/0x260 [ 639.295543][T18076] ksys_read+0x152/0x260 [ 639.299798][T18076] ? vfs_write+0xd60/0xd60 [ 639.304213][T18076] ? lockdep_hardirqs_on+0x94/0x140 [ 639.309412][T18076] do_syscall_64+0x4c/0xa0 [ 639.313824][T18076] ? clear_bhb_loop+0x30/0x80 [ 639.318487][T18076] ? clear_bhb_loop+0x30/0x80 [ 639.323148][T18076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 639.329026][T18076] RIP: 0033:0x7efe53f7a78e [ 639.333426][T18076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.353013][T18076] RSP: 002b:00007efe521f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.361421][T18076] RAX: ffffffffffffffda RBX: 00007efe521f46c0 RCX: 00007efe53f7a78e [ 639.369390][T18076] RDX: 000000000000000f RSI: 00007efe521f40a0 RDI: 0000000000000005 [ 639.377352][T18076] RBP: 00007efe521f4090 R08: 0000000000000000 R09: 0000000000000000 [ 639.385319][T18076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.393274][T18076] R13: 00007efe54235128 R14: 00007efe54235090 R15: 00007ffdace1a5b8 [ 639.401247][T18076] [ 639.562401][T18069] chnl_net:caif_netlink_parms(): no params data found [ 639.572928][T18089] netlink: 'syz.4.4594': attribute type 10 has an invalid length. [ 639.619511][T18089] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 639.670840][T18089] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 639.705864][T18097] delete_channel: no stack [ 639.741388][T18089] bond0: (slave hsr0): Error -95 calling set_mac_address [ 639.811477][ T6774] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.982434][ T6774] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.993084][T18092] delete_channel: no stack [ 640.095432][ T6774] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.149388][T18069] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.162822][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.191001][T18069] device bridge_slave_0 entered promiscuous mode [ 640.208648][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.215733][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.237298][T18069] device bridge_slave_1 entered promiscuous mode [ 640.255015][T18109] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 640.276513][T18109] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 640.314133][T18109] bond0: (slave hsr0): Error -95 calling set_mac_address [ 640.370771][ T6774] bond0: (slave netdevsim0): Releasing backup interface [ 640.415670][ T6774] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.497680][T18069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.530586][T18069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.695195][T18069] team0: Port device team_slave_0 added [ 640.780321][T18069] team0: Port device team_slave_1 added [ 640.922505][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 640.942200][T18069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.988546][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.096037][T18069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.122548][T18136] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 641.136477][T18136] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 641.183756][T18136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 641.236555][T18136] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 641.280433][T18069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.303412][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.397808][T18069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.504584][T18152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4608'. [ 641.551418][T18154] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4608'. [ 641.614788][T18069] device hsr_slave_0 entered promiscuous mode [ 641.636736][T18069] device hsr_slave_1 entered promiscuous mode [ 641.691203][T18069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.704581][T18069] Cannot create hsr debugfs directory [ 642.450937][T18181] validate_nla: 6 callbacks suppressed [ 642.450952][T18181] netlink: 'syz.3.4616': attribute type 10 has an invalid length. [ 642.498024][T18181] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 642.531956][T18181] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 642.589757][T18181] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 642.620335][T18181] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 642.838888][T18199] netlink: 'syz.2.4620': attribute type 10 has an invalid length. [ 642.871108][T18069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 642.907101][T18069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 642.949418][T18069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.986425][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 643.003612][T18069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.439608][T18229] netlink: 'syz.1.4627': attribute type 21 has an invalid length. [ 643.461913][T18229] netlink: 'syz.1.4627': attribute type 6 has an invalid length. [ 643.487918][T18234] netlink: 'syz.1.4627': attribute type 1 has an invalid length. [ 643.495558][T18229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4627'. [ 643.576243][T18234] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4627'. [ 644.383339][ T6774] device hsr_slave_0 left promiscuous mode [ 644.417317][ T6774] device hsr_slave_1 left promiscuous mode [ 644.451107][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.477184][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.496021][ T6774] device veth1_macvtap left promiscuous mode [ 644.507181][ T6774] device veth0_macvtap left promiscuous mode [ 644.519453][ T6774] device veth1_vlan left promiscuous mode [ 644.525298][ T6774] device veth0_vlan left promiscuous mode [ 644.848220][ T6774] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 644.873827][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 644.895101][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 644.920824][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.941600][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.025285][ T6774] bond0 (unregistering): Released all slaves [ 645.041613][T18069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.062659][T18259] netlink: 'syz.2.4634': attribute type 10 has an invalid length. [ 645.076439][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 645.096573][T18259] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 645.112776][T18259] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 645.134205][T18259] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 645.152061][T18259] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 645.162831][T18257] netlink: 'syz.1.4633': attribute type 10 has an invalid length. [ 645.189110][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.235907][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.263060][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.275433][T18270] FAULT_INJECTION: forcing a failure. [ 645.275433][T18270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.303423][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.316560][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.349672][T18270] CPU: 1 PID: 18270 Comm: syz.4.4637 Not tainted syzkaller #0 [ 645.354067][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.357167][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.357180][T18270] Call Trace: [ 645.357186][T18270] [ 645.357192][T18270] dump_stack_lvl+0x188/0x250 [ 645.357220][T18270] ? show_regs_print_info+0x20/0x20 [ 645.364289][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.374274][T18270] ? load_image+0x400/0x400 [ 645.374297][T18270] ? __lock_acquire+0x7d10/0x7d10 [ 645.406506][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.407018][T18270] should_fail+0x38c/0x4c0 [ 645.415731][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.418870][T18270] strncpy_from_user+0x32/0x360 [ 645.418899][T18270] getname_flags+0xef/0x500 [ 645.418920][T18270] do_sys_openat2+0xdd/0x4b0 [ 645.428751][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.431795][T18270] ? __lock_acquire+0x7d10/0x7d10 [ 645.431825][T18270] ? do_sys_open+0xe0/0xe0 [ 645.437148][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.440875][T18270] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 645.440903][T18270] ? lock_chain_count+0x20/0x20 [ 645.440920][T18270] ? vtime_user_exit+0x2c8/0x3e0 [ 645.440941][T18270] __x64_sys_openat+0x135/0x160 [ 645.448980][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.453894][T18270] do_syscall_64+0x4c/0xa0 [ 645.462453][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.465334][T18270] ? clear_bhb_loop+0x30/0x80 [ 645.465358][T18270] ? clear_bhb_loop+0x30/0x80 [ 645.465374][T18270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.465387][T18270] RIP: 0033:0x7f513b9c978e [ 645.465402][T18270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.465414][T18270] RSP: 002b:00007f5139c63ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.465432][T18270] RAX: ffffffffffffffda RBX: 00007f5139c646c0 RCX: 00007f513b9c978e [ 645.465444][T18270] RDX: 0000000000000002 RSI: 00007f5139c63f90 RDI: ffffffffffffff9c [ 645.472654][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.476230][T18270] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 645.476245][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.476254][T18270] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 645.476279][T18270] [ 645.637482][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.660357][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.694473][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.731218][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.758029][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.794783][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 645.831070][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 645.843595][T18296] netlink: 'syz.1.4641': attribute type 1 has an invalid length. [ 645.866754][T18296] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4641'. [ 645.894431][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 645.915188][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.017499][T18069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.041277][T18292] netlink: 'syz.1.4641': attribute type 21 has an invalid length. [ 646.050388][T18292] netlink: 'syz.1.4641': attribute type 6 has an invalid length. [ 646.058452][T18292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4641'. [ 646.132888][T18304] device wlan0 entered promiscuous mode [ 646.403100][T18323] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 646.446615][T18323] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 646.492050][T18323] bond0: (slave hsr0): Error -95 calling set_mac_address [ 646.531104][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.542779][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.581128][T18069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.819861][T18348] FAULT_INJECTION: forcing a failure. [ 646.819861][T18348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.916253][T18348] CPU: 1 PID: 18348 Comm: syz.3.4654 Not tainted syzkaller #0 [ 646.923758][T18348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.933829][T18348] Call Trace: [ 646.937115][T18348] [ 646.940041][T18348] dump_stack_lvl+0x188/0x250 [ 646.944723][T18348] ? show_regs_print_info+0x20/0x20 [ 646.949918][T18348] ? load_image+0x400/0x400 [ 646.954427][T18348] ? __lock_acquire+0x7d10/0x7d10 [ 646.959457][T18348] should_fail+0x38c/0x4c0 [ 646.963883][T18348] _copy_to_user+0x2e/0x130 [ 646.968382][T18348] simple_read_from_buffer+0xe3/0x150 [ 646.973763][T18348] proc_fail_nth_read+0x1a6/0x220 [ 646.978801][T18348] ? proc_fault_inject_write+0x310/0x310 [ 646.984451][T18348] ? fsnotify_perm+0x254/0x560 [ 646.989226][T18348] ? proc_fault_inject_write+0x310/0x310 [ 646.994872][T18348] vfs_read+0x301/0xd60 [ 646.999032][T18348] ? kernel_read+0x1e0/0x1e0 [ 647.003627][T18348] ? __fget_files+0x40f/0x480 [ 647.008304][T18348] ? mutex_lock_nested+0x17/0x20 [ 647.013235][T18348] ? __fdget_pos+0x2bf/0x370 [ 647.017823][T18348] ? ksys_read+0x71/0x260 [ 647.022168][T18348] ksys_read+0x152/0x260 [ 647.026429][T18348] ? vfs_write+0xd60/0xd60 [ 647.030855][T18348] ? lockdep_hardirqs_on+0x94/0x140 [ 647.036053][T18348] do_syscall_64+0x4c/0xa0 [ 647.040463][T18348] ? clear_bhb_loop+0x30/0x80 [ 647.045144][T18348] ? clear_bhb_loop+0x30/0x80 [ 647.049923][T18348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.055818][T18348] RIP: 0033:0x7efe53f7a78e [ 647.060367][T18348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.079969][T18348] RSP: 002b:00007efe52214fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.088385][T18348] RAX: ffffffffffffffda RBX: 00007efe522156c0 RCX: 00007efe53f7a78e [ 647.096351][T18348] RDX: 000000000000000f RSI: 00007efe522150a0 RDI: 0000000000000004 [ 647.104311][T18348] RBP: 00007efe52215090 R08: 0000000000000000 R09: 0000000000000000 [ 647.112278][T18348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.120254][T18348] R13: 00007efe54235038 R14: 00007efe54234fa0 R15: 00007ffdace1a5b8 [ 647.128238][T18348] [ 647.156826][ T4353] Bluetooth: hci2: command 0x0419 tx timeout [ 647.490265][T18354] validate_nla: 3 callbacks suppressed [ 647.490281][T18354] netlink: 'syz.4.4656': attribute type 10 has an invalid length. [ 647.654966][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 647.678634][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.719874][T18374] netlink: 'syz.4.4662': attribute type 10 has an invalid length. [ 647.746909][T18374] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 647.786422][T18374] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 647.820446][T18371] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4660'. [ 647.836606][T18374] bond0: (slave hsr0): Error -95 calling set_mac_address [ 647.883077][T18069] device veth0_vlan entered promiscuous mode [ 647.903430][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 647.929503][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.951325][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.982825][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.029294][T18069] device veth1_vlan entered promiscuous mode [ 648.075394][T18387] FAULT_INJECTION: forcing a failure. [ 648.075394][T18387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.106439][T18381] netlink: 'syz.1.4664': attribute type 10 has an invalid length. [ 648.124504][T18387] CPU: 0 PID: 18387 Comm: syz.4.4666 Not tainted syzkaller #0 [ 648.132004][T18387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.142058][T18387] Call Trace: [ 648.145328][T18387] [ 648.148243][T18387] dump_stack_lvl+0x188/0x250 [ 648.152911][T18387] ? show_regs_print_info+0x20/0x20 [ 648.158091][T18387] ? load_image+0x400/0x400 [ 648.162598][T18387] ? __lock_acquire+0x7d10/0x7d10 [ 648.167625][T18387] should_fail+0x38c/0x4c0 [ 648.172056][T18387] _copy_to_user+0x2e/0x130 [ 648.176646][T18387] bpf_prog_test_run_syscall+0x379/0x4f0 [ 648.182296][T18387] ? sock_gen_cookie+0x60/0x60 [ 648.187062][T18387] ? sock_gen_cookie+0x60/0x60 [ 648.191824][T18387] bpf_prog_test_run+0x31e/0x390 [ 648.196764][T18387] __sys_bpf+0x5a5/0x6f0 [ 648.201007][T18387] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 648.207240][T18387] ? bpf_link_show_fdinfo+0x380/0x380 [ 648.212597][T18387] ? rcu_nmi_exit+0x6f/0xf0 [ 648.217097][T18387] ? vtime_user_exit+0x2c8/0x3e0 [ 648.222125][T18387] __x64_sys_bpf+0x78/0x90 [ 648.226528][T18387] do_syscall_64+0x4c/0xa0 [ 648.230924][T18387] ? clear_bhb_loop+0x30/0x80 [ 648.235580][T18387] ? clear_bhb_loop+0x30/0x80 [ 648.240236][T18387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 648.246110][T18387] RIP: 0033:0x7f513ba08eb9 [ 648.250528][T18387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.270115][T18387] RSP: 002b:00007f5139c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.278528][T18387] RAX: ffffffffffffffda RBX: 00007f513bc83fa0 RCX: 00007f513ba08eb9 [ 648.286486][T18387] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 648.294441][T18387] RBP: 00007f5139c64090 R08: 0000000000000000 R09: 0000000000000000 [ 648.302394][T18387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.310348][T18387] R13: 00007f513bc84038 R14: 00007f513bc83fa0 R15: 00007ffd41948298 [ 648.318324][T18387] [ 648.360189][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 648.376935][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 648.410922][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 648.494485][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 648.544890][T18069] device veth0_macvtap entered promiscuous mode [ 648.583783][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 648.823978][T18069] device veth1_macvtap entered promiscuous mode [ 648.929710][T18393] netlink: 'syz.1.4668': attribute type 10 has an invalid length. [ 648.939490][T18069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.956040][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 648.964661][T18393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4668'. [ 648.973952][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.125054][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.181281][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.193122][T18069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.201337][T18393] netlink: 'syz.1.4668': attribute type 10 has an invalid length. [ 649.258812][T18393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4668'. [ 649.289397][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.319675][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 649.389250][T18069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.401277][T18069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.446127][T18069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.454890][T18069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.623128][T18415] device wlan0 entered promiscuous mode [ 649.851768][T18410] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.4682'. [ 649.895007][ T6754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.925730][ T6754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.003762][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 650.030282][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.053045][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.244248][T18432] netlink: 'syz.4.4677': attribute type 1 has an invalid length. [ 650.256394][T18432] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4677'. [ 650.324433][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.344075][T18425] netlink: 'syz.4.4677': attribute type 21 has an invalid length. [ 650.407612][T18436] netlink: 'syz.1.4679': attribute type 10 has an invalid length. [ 650.447703][T18425] netlink: 'syz.4.4677': attribute type 6 has an invalid length. [ 650.453231][T18435] FAULT_INJECTION: forcing a failure. [ 650.453231][T18435] name failslab, interval 1, probability 0, space 0, times 0 [ 650.464598][T18436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4679'. [ 650.469842][T18435] CPU: 1 PID: 18435 Comm: syz.1.4679 Not tainted syzkaller #0 [ 650.485295][T18435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.495374][T18435] Call Trace: [ 650.498690][T18435] [ 650.499278][T18425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4677'. [ 650.501631][T18435] dump_stack_lvl+0x188/0x250 [ 650.501660][T18435] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 650.501686][T18435] ? show_regs_print_info+0x20/0x20 [ 650.501709][T18435] ? load_image+0x400/0x400 [ 650.501752][T18435] should_fail+0x38c/0x4c0 [ 650.536142][T18435] should_failslab+0x5/0x20 [ 650.540644][T18435] slab_pre_alloc_hook+0x51/0xc0 [ 650.545581][T18435] __kmalloc_node+0x6e/0x3b0 [ 650.550157][T18435] ? kvmalloc_node+0x84/0x130 [ 650.554827][T18435] ? rcu_nmi_exit+0x6f/0xf0 [ 650.559326][T18435] kvmalloc_node+0x84/0x130 [ 650.563820][T18435] generic_map_lookup_batch+0x3c1/0xbc0 [ 650.569367][T18435] ? lockdep_hardirqs_on+0x94/0x140 [ 650.574556][T18435] ? bpf_map_update_value+0x650/0x650 [ 650.579917][T18435] ? bpf_map_update_value+0x650/0x650 [ 650.585277][T18435] ? bpf_map_do_batch+0x2bd/0x600 [ 650.590305][T18435] ? bpf_map_update_value+0x650/0x650 [ 650.595667][T18435] bpf_map_do_batch+0x2c8/0x600 [ 650.600505][T18435] ? security_bpf+0x7a/0xa0 [ 650.604998][T18435] __sys_bpf+0x671/0x6f0 [ 650.609229][T18435] ? bpf_link_show_fdinfo+0x380/0x380 [ 650.614610][T18435] ? __sys_bpf+0x1/0x6f0 [ 650.618839][T18435] __x64_sys_bpf+0x78/0x90 [ 650.623243][T18435] do_syscall_64+0x4c/0xa0 [ 650.627712][T18435] ? clear_bhb_loop+0x30/0x80 [ 650.632373][T18435] ? clear_bhb_loop+0x30/0x80 [ 650.637034][T18435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 650.642910][T18435] RIP: 0033:0x7f92f52aaeb9 [ 650.647319][T18435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.666923][T18435] RSP: 002b:00007f92f3506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 650.675338][T18435] RAX: ffffffffffffffda RBX: 00007f92f5525fa0 RCX: 00007f92f52aaeb9 [ 650.683302][T18435] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000018 [ 650.691261][T18435] RBP: 00007f92f3506090 R08: 0000000000000000 R09: 0000000000000000 [ 650.699224][T18435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.707190][T18435] R13: 00007f92f5526038 R14: 00007f92f5525fa0 R15: 00007ffe92c951c8 [ 650.715180][T18435] [ 651.083763][T18436] netlink: 'syz.1.4679': attribute type 10 has an invalid length. [ 651.279609][T18436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4679'. [ 651.805179][T18456] device wlan0 entered promiscuous mode [ 652.034013][T18467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 652.491690][T18492] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.4698'. [ 652.732797][T18505] validate_nla: 2 callbacks suppressed [ 652.732833][T18505] netlink: 'syz.3.4705': attribute type 10 has an invalid length. [ 652.781215][T18508] netlink: 'syz.2.4706': attribute type 10 has an invalid length. [ 653.351859][T18534] netlink: 'syz.5.4714': attribute type 28 has an invalid length. [ 653.362698][T18534] netlink: 'syz.5.4714': attribute type 29 has an invalid length. [ 653.377637][T18534] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4714'. [ 653.424994][T18536] netlink: 'syz.3.4718': attribute type 10 has an invalid length. [ 653.668061][T18550] netlink: 'syz.4.4721': attribute type 10 has an invalid length. [ 653.891387][T18555] netlink: 'syz.2.4734': attribute type 10 has an invalid length. [ 654.172864][T18565] netlink: 'syz.3.4737': attribute type 10 has an invalid length. [ 654.195125][T18560] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.4723'. [ 654.205878][T18568] netlink: 'syz.1.4726': attribute type 21 has an invalid length. [ 654.221413][T18568] netlink: 'syz.1.4726': attribute type 6 has an invalid length. [ 654.276825][T18568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4726'. [ 654.278466][T18572] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4726'. [ 654.440516][T18575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4729'. [ 654.469002][T18575] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4729'. [ 654.970823][T18591] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4736'. [ 655.171681][T18595] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4739'. [ 655.266255][T18600] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4750'. [ 655.301174][T18600] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4750'. [ 655.459326][T18612] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4744'. [ 656.755504][T18633] delete_channel: no stack [ 657.929129][T18689] validate_nla: 18 callbacks suppressed [ 657.929148][T18689] netlink: 'syz.4.4771': attribute type 10 has an invalid length. [ 658.606878][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.614374][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.755230][T18711] netlink: 'syz.3.4780': attribute type 10 has an invalid length. [ 659.149650][T18730] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 659.284063][T18740] netlink: 'syz.1.4788': attribute type 21 has an invalid length. [ 659.316402][T18740] netlink: 'syz.1.4788': attribute type 6 has an invalid length. [ 659.356510][T18740] __nla_validate_parse: 2 callbacks suppressed [ 659.356540][T18740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4788'. [ 659.405711][T18744] netlink: 'syz.1.4788': attribute type 1 has an invalid length. [ 659.452993][T18748] netlink: 'syz.2.4791': attribute type 9 has an invalid length. [ 659.469117][T18744] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4788'. [ 659.486059][T18748] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4791'. [ 659.501181][T18734] netlink: 'syz.3.4787': attribute type 10 has an invalid length. [ 659.665712][T18755] netlink: 'syz.2.4793': attribute type 3 has an invalid length. [ 659.717413][T18755] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4793'. [ 659.911790][T18763] FAULT_INJECTION: forcing a failure. [ 659.911790][T18763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.996735][T18763] CPU: 1 PID: 18763 Comm: syz.2.4798 Not tainted syzkaller #0 [ 660.004244][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.014308][T18763] Call Trace: [ 660.017582][T18763] [ 660.020497][T18763] dump_stack_lvl+0x188/0x250 [ 660.025164][T18763] ? show_regs_print_info+0x20/0x20 [ 660.030343][T18763] ? load_image+0x400/0x400 [ 660.034829][T18763] ? __lock_acquire+0x7d10/0x7d10 [ 660.039843][T18763] should_fail+0x38c/0x4c0 [ 660.044245][T18763] _copy_from_user+0x2e/0x170 [ 660.048910][T18763] iovec_from_user+0x142/0x370 [ 660.053661][T18763] __import_iovec+0x70/0x490 [ 660.058228][T18763] ? perf_tp_event+0xa92/0xbf0 [ 660.062981][T18763] import_iovec+0x6f/0xa0 [ 660.067299][T18763] ___sys_sendmsg+0x1fd/0x2e0 [ 660.071978][T18763] ? __sys_sendmsg+0x2a0/0x2a0 [ 660.076754][T18763] __se_sys_sendmsg+0x1af/0x290 [ 660.081591][T18763] ? __x64_sys_sendmsg+0x80/0x80 [ 660.086513][T18763] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 660.092485][T18763] ? lockdep_hardirqs_on+0x94/0x140 [ 660.097668][T18763] do_syscall_64+0x4c/0xa0 [ 660.102090][T18763] ? clear_bhb_loop+0x30/0x80 [ 660.106756][T18763] ? clear_bhb_loop+0x30/0x80 [ 660.111439][T18763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.117323][T18763] RIP: 0033:0x7f943b29eeb9 [ 660.121819][T18763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.141759][T18763] RSP: 002b:00007f94394fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.150162][T18763] RAX: ffffffffffffffda RBX: 00007f943b519fa0 RCX: 00007f943b29eeb9 [ 660.158236][T18763] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 660.166221][T18763] RBP: 00007f94394fa090 R08: 0000000000000000 R09: 0000000000000000 [ 660.174185][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.182137][T18763] R13: 00007f943b51a038 R14: 00007f943b519fa0 R15: 00007ffeec5d9d18 [ 660.190107][T18763] [ 676.061995][T18785] chnl_net:caif_netlink_parms(): no params data found [ 676.152190][T18786] chnl_net:caif_netlink_parms(): no params data found [ 676.218170][T18785] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.225249][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.235263][T18785] device bridge_slave_0 entered promiscuous mode [ 676.261411][T18785] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.272693][T18785] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.282320][T18785] device bridge_slave_1 entered promiscuous mode [ 676.299616][T18786] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.308029][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.317674][T18786] device bridge_slave_0 entered promiscuous mode [ 676.342093][T18786] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.350525][T18786] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.361272][T18786] device bridge_slave_1 entered promiscuous mode [ 676.373603][T18785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.403818][T18785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.420169][T18786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.455406][T18786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.472387][T18785] team0: Port device team_slave_0 added [ 676.499518][T18785] team0: Port device team_slave_1 added [ 676.519114][T18786] team0: Port device team_slave_0 added [ 676.529907][T18786] team0: Port device team_slave_1 added [ 676.543553][T18785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.553717][T18785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.582230][T18785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.612405][T18785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.620167][T18785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.648765][T18785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.661119][T18786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.670789][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.700841][T18786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.729945][T18786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.739483][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.769029][T18786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.866416][ T4244] Bluetooth: hci5: command 0x0409 tx timeout [ 677.946289][ T4244] Bluetooth: hci6: command 0x0409 tx timeout [ 679.787042][ T4244] Bluetooth: hci7: command 0x0409 tx timeout [ 679.946420][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 680.026232][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 680.826186][ T4244] Bluetooth: hci8: command 0x0409 tx timeout [ 681.866222][ T4244] Bluetooth: hci9: command 0x0409 tx timeout [ 681.872352][ T4244] Bluetooth: hci7: command 0x041b tx timeout [ 682.027116][ T4244] Bluetooth: hci5: command 0x040f tx timeout [ 682.106224][ T4244] Bluetooth: hci6: command 0x040f tx timeout [ 682.906211][ T23] Bluetooth: hci8: command 0x041b tx timeout [ 683.946236][ T4244] Bluetooth: hci7: command 0x040f tx timeout [ 683.952973][ T4244] Bluetooth: hci9: command 0x041b tx timeout [ 684.106550][ T4244] Bluetooth: hci5: command 0x0419 tx timeout [ 684.186257][ T4244] Bluetooth: hci6: command 0x0419 tx timeout [ 684.986186][ T4244] Bluetooth: hci8: command 0x040f tx timeout [ 686.026222][ T23] Bluetooth: hci9: command 0x040f tx timeout [ 686.034376][ T23] Bluetooth: hci7: command 0x0419 tx timeout [ 687.066200][ T23] Bluetooth: hci8: command 0x0419 tx timeout [ 688.106207][ T4244] Bluetooth: hci9: command 0x0419 tx timeout [ 738.186567][ T4173] Bluetooth: hci11: command 0x0409 tx timeout [ 738.266343][ T4173] Bluetooth: hci10: command 0x0409 tx timeout [ 740.189223][ T4244] Bluetooth: hci12: command 0x0409 tx timeout [ 740.269371][ T4244] Bluetooth: hci11: command 0x041b tx timeout [ 740.348473][ T4244] Bluetooth: hci10: command 0x041b tx timeout [ 741.226352][ T4244] Bluetooth: hci13: command 0x0409 tx timeout [ 742.186276][ T4244] Bluetooth: hci14: command 0x0409 tx timeout [ 742.266268][ T4244] Bluetooth: hci12: command 0x041b tx timeout [ 742.346492][ T4244] Bluetooth: hci11: command 0x040f tx timeout [ 742.426373][ T4244] Bluetooth: hci10: command 0x040f tx timeout [ 743.306341][ T4244] Bluetooth: hci13: command 0x041b tx timeout [ 744.266238][ T4244] Bluetooth: hci14: command 0x041b tx timeout [ 744.346292][ T4244] Bluetooth: hci12: command 0x040f tx timeout [ 744.426404][ T4244] Bluetooth: hci11: command 0x0419 tx timeout [ 744.506322][ T4244] Bluetooth: hci10: command 0x0419 tx timeout [ 745.386271][ T4244] Bluetooth: hci13: command 0x040f tx timeout [ 746.346239][ T23] Bluetooth: hci14: command 0x040f tx timeout [ 746.426281][ T23] Bluetooth: hci12: command 0x0419 tx timeout [ 747.466247][ T23] Bluetooth: hci13: command 0x0419 tx timeout [ 748.426329][ T23] Bluetooth: hci14: command 0x0419 tx timeout [ 765.356116][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 765.363107][ C1] rcu: 0-....: (1 GPs behind) idle=087/1/0x4000000000000000 softirq=60143/60145 fqs=5242 [ 765.374101][ C1] (detected by 1, t=10502 jiffies, g=74621, q=3823) [ 765.380900][ C1] Sending NMI from CPU 1 to CPUs 0: [ 765.386122][ C0] NMI backtrace for cpu 0 [ 765.386133][ C0] CPU: 0 PID: 18769 Comm: syz.5.4795 Not tainted syzkaller #0 [ 765.386148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.386157][ C0] RIP: 0010:__kasan_check_read+0x0/0x10 [ 765.386180][ C0] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 1b c5 de 8b eb 0a 48 c7 c7 3b d8 c4 8b 48 89 de e8 88 1c f3 07 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 [ 765.386192][ C0] RSP: 0018:ffffc900032ef298 EFLAGS: 00000046 [ 765.386205][ C0] RAX: 0000000000000000 RBX: ffff888067f73b80 RCX: 0000000000000002 [ 765.386215][ C0] RDX: 0000000000000002 RSI: 0000000000000008 RDI: ffffffff901d10c0 [ 765.386224][ C0] RBP: 0000000000000002 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 765.386233][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 0000000000000004 [ 765.386243][ C0] R13: dffffc0000000000 R14: ffff888067f74670 R15: 000000000000002b [ 765.386253][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 765.386266][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.386276][ C0] CR2: 00007faacce38f6f CR3: 000000000c08e000 CR4: 00000000003506f0 [ 765.386289][ C0] DR0: 0000200000000380 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.386298][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 765.386307][ C0] Call Trace: [ 765.386313][ C0] [ 765.386318][ C0] mark_lock+0x94/0x320 [ 765.386349][ C0] lockdep_hardirqs_on_prepare+0x249/0x770 [ 765.386370][ C0] ? lock_chain_count+0x20/0x20 [ 765.386386][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 765.386401][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 765.386415][ C0] trace_hardirqs_on+0x67/0x80 [ 765.386430][ C0] asm_sysvec_irq_work+0x16/0x20 [ 765.386443][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 765.386459][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 c2 ef 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 765.386470][ C0] RSP: 0018:ffffc900032ef460 EFLAGS: 00000206 [ 765.386481][ C0] RAX: bc0b55eda22d3400 RBX: 1ffff9200065de90 RCX: bc0b55eda22d3400 [ 765.386491][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 765.386502][ C0] RBP: ffffc900032ef530 R08: ffffffff901d10c7 R09: 1ffffffff203a218 [ 765.386512][ C0] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffffffff8c322f00 [ 765.386522][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 765.386540][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 765.386553][ C0] ? rcu_lock_acquire+0x30/0x30 [ 765.386570][ C0] __rcu_read_unlock+0x78/0xd0 [ 765.386584][ C0] __unlock_page_memcg+0xea/0x100 [ 765.386598][ C0] unmap_page_range+0xf96/0x2500 [ 765.386623][ C0] unmap_vmas+0x131/0x250 [ 765.386636][ C0] ? unmap_page_range+0x2500/0x2500 [ 765.386648][ C0] ? __mutex_lock_common+0x465/0x2400 [ 765.386670][ C0] exit_mmap+0x3b9/0x640 [ 765.386685][ C0] ? vm_brk+0x20/0x20 [ 765.386704][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 765.386718][ C0] ? mm_update_next_owner+0x522/0x640 [ 765.386737][ C0] __mmput+0x115/0x3b0 [ 765.386751][ C0] exit_mm+0x588/0x6e0 [ 765.386763][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 765.386779][ C0] ? do_exit+0x20c0/0x20c0 [ 765.386792][ C0] ? taskstats_exit+0x439/0xab0 [ 765.386807][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 765.386825][ C0] do_exit+0x5a9/0x20c0 [ 765.386838][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 765.386853][ C0] ? put_task_struct+0x80/0x80 [ 765.386865][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 765.386882][ C0] ? lock_chain_count+0x20/0x20 [ 765.386898][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 765.386914][ C0] do_group_exit+0x12e/0x300 [ 765.386927][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 765.386942][ C0] get_signal+0x6ca/0x12c0 [ 765.386962][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 765.386983][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 765.387001][ C0] ? get_sigframe_size+0x10/0x10 [ 765.387016][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 765.387034][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 765.387051][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 765.387071][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 765.387084][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 765.387101][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 765.387116][ C0] ret_from_fork+0x15/0x30 [ 765.387135][ C0] RIP: 0033:0x7f6266792cc9 [ 765.387146][ C0] Code: Unable to access opcode bytes at RIP 0x7f6266792c9f. [ 765.387153][ C0] RSP: 002b:00007f626498a1c0 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 765.387166][ C0] RAX: 0000000000000000 RBX: 00007f626674e2e0 RCX: 00007f6266792cc9 [ 765.387176][ C0] RDX: 00007f626674e2e0 RSI: 0000000000000058 RDI: 00007ffe2f25a860 [ 765.387185][ C0] RBP: 00007f626498a6c0 R08: 00007f626498a6c0 R09: 00007ffe2f25a947 [ 765.387195][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 765.387204][ C0] R13: 000000000000006e R14: 00007ffe2f25a860 R15: 00007ffe2f25a948 [ 765.387220][ C0] [ 767.627638][ T21] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10739 jiffies s: 41081 root: 0x1/. [ 767.647840][ T21] rcu: blocking rcu_node structures (internal RCU debug): [ 767.654995][ T21] Task dump for CPU 0: [ 767.659230][ T21] task:syz.5.4795 state:R running task stack:26064 pid:18769 ppid: 18069 flags:0x00004008 [ 767.670147][ T21] Call Trace: [ 767.673449][ T21] [ 767.676425][ T21] ? mark_lock+0x94/0x320 [ 767.680761][ T21] ? asm_sysvec_irq_work+0x16/0x20 [ 767.685870][ T21] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 767.693326][ T21] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.699410][ T21] ? lock_chain_count+0x20/0x20 [ 767.704266][ T21] ? rcu_is_watching+0x11/0xa0 [ 767.709072][ T21] ? asm_sysvec_irq_work+0x16/0x20 [ 767.714186][ T21] ? asm_sysvec_irq_work+0x16/0x20 [ 767.719334][ T21] ? sysvec_irq_work+0x7d/0xc0 [ 767.724097][ T21] ? trace_hardirqs_on+0x57/0x80 [ 767.729070][ T21] ? asm_sysvec_irq_work+0x16/0x20 [ 767.734186][ T21] ? rcu_read_unlock_special+0x7f/0x4a0 [ 767.739765][ T21] ? __rcu_read_unlock+0xd0/0xd0 [ 767.744699][ T21] ? rcu_lock_acquire+0x30/0x30 [ 767.749589][ T21] ? __rcu_read_unlock+0x78/0xd0 [ 767.754528][ T21] ? __unlock_page_memcg+0xea/0x100 [ 767.759756][ T21] ? unmap_page_range+0xf96/0x2500 [ 767.764898][ T21] ? unmap_vmas+0x131/0x250 [ 767.769427][ T21] ? unmap_page_range+0x2500/0x2500 [ 767.774619][ T21] ? __mutex_lock_common+0x465/0x2400 [ 767.780037][ T21] ? exit_mmap+0x3b9/0x640 [ 767.784453][ T21] ? vm_brk+0x20/0x20 [ 767.788473][ T21] ? uprobe_clear_state+0x2f6/0x460 [ 767.793684][ T21] ? mm_update_next_owner+0x522/0x640 [ 767.799091][ T21] ? __mmput+0x115/0x3b0 [ 767.803331][ T21] ? exit_mm+0x588/0x6e0 [ 767.807590][ T21] ? xacct_add_tsk+0x4a0/0x4a0 [ 767.812353][ T21] ? do_exit+0x20c0/0x20c0 [ 767.816788][ T21] ? taskstats_exit+0x439/0xab0 [ 767.821656][ T21] ? tty_audit_exit+0x14e/0x1f0 [ 767.826647][ T21] ? do_exit+0x5a9/0x20c0 [ 767.830978][ T21] ? rcu_nmi_exit+0x6f/0xf0 [ 767.835474][ T21] ? put_task_struct+0x80/0x80 [ 767.840270][ T21] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.846281][ T21] ? lock_chain_count+0x20/0x20 [ 767.851139][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 767.856193][ T21] ? do_group_exit+0x12e/0x300 [ 767.860954][ T21] ? lockdep_hardirqs_on+0x94/0x140 [ 767.866182][ T21] ? get_signal+0x6ca/0x12c0 [ 767.870889][ T21] ? arch_do_signal_or_restart+0xe7/0x12c0 [ 767.876790][ T21] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 767.882525][ T21] ? get_sigframe_size+0x10/0x10 [ 767.887504][ T21] ? rcu_nmi_exit+0x6f/0xf0 [ 767.892018][ T21] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.898043][ T21] ? exit_to_user_mode_loop+0x3b/0x130 [ 767.903500][ T21] ? exit_to_user_mode_loop+0x9e/0x130 [ 767.908996][ T21] ? exit_to_user_mode_prepare+0xee/0x180 [ 767.914720][ T21] ? syscall_exit_to_user_mode+0x16/0x40 [ 767.920380][ T21] ? ret_from_fork+0x15/0x30 [ 767.924981][ T21]