last executing test programs: 2m32.180161553s ago: executing program 2 (id=86): r0 = socket$kcm(0x22, 0x5bfac67af6ef4cb, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0) 2m31.918815494s ago: executing program 2 (id=90): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r0}, &(0x7f0000002cc0), &(0x7f0000002d00)='%ps \x00'}, 0x20) 2m31.541325164s ago: executing program 2 (id=92): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x33fe0, 0x0}, 0x10) 2m31.239244559s ago: executing program 2 (id=95): perf_event_open(&(0x7f0000000480)={0x1, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m31.10441813s ago: executing program 2 (id=98): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{r3}, &(0x7f0000000e40), &(0x7f0000000e80)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m30.690945433s ago: executing program 2 (id=102): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004905c09c347ba235000000000000000000000000001e00000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m15.545168877s ago: executing program 32 (id=102): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004905c09c347ba235000000000000000000000000001e00000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 7.743401699s ago: executing program 5 (id=1059): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000130000009500000000000000f4544416adb8a23bb9731f760dce05855b44f226362e6c73dfeab9fd8d4a93cdd9c1fd313c20126c10ad158895ce5e96e05e02106b83f8ca1c83b6ff8f7440a0b3dd3720f0146bdb3b599f68fa5849586852b44beaefcbc85875ae757fa391043839b3adcaec7145c2ba17edf8219756b5e60166ac919e23fc06b9fbba94ba62e7480cdbf55750d0bea9b65a07800fd91c42da1ccea37575b8a753dca41291ad1a625a218b792cb5dbdaf687c33896db"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_clone(0x1000, &(0x7f00000001c0)="448c016a4c726062ecf16682d1fa20370808346e27bafe0dc08d78265e3cd3fc193dcda12a436018d099d8b902ffb0", 0x2f, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000540)="e3541c5874089af0fa8adbd3111b35768637c5783b19df5d1a50e12dad3055074dd98937a50e78170c0d37e6f1024406532399c8062904e3489054c924332deaa599c6a69b7c609d633a20826b128f77a60671d3e784a70c448220472dfff4f400751089ae3be36af90f40a19bbb2645101109315be3a454f5d8e841eac7a90c8d42e01fadf64c39026e822058ec1b82d1cc931b5ea46940c647bbc1cbf612afc93b8a6d02afb924a2c232dad09ade0623f01a3cd2c03185c593e13e3e5d71757421ba133bf853587581dc83b24c03bcf644") perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x5, 0x0, 0xfc, 0x0, 0x7, 0xa00, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100282, 0x4, 0x200, 0x4, 0xffffffff00000001, 0x7f, 0x8, 0x0, 0x4, 0x0, 0x8}, r4, 0x9, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.502890699s ago: executing program 5 (id=1067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x86}, 0x38) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000000c0), 0x43) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff21}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x43}]}}, 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140)="3444608d063d446ffc8bfacad0fbb4dfe837a9ecacfcce5acd19c271d4b77b43", &(0x7f0000000180)=""/5, 0x4}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="d800000010008104687da3aa7143a0bac81d080b25000000e8fe55a118000040a8002b00a400034006006aec036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e496e6f66112c88a2ddddbbb219c6c09136dd481d485dc2331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d15a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14feb9f519e53595e6e167c2ed64c804fba3f300"/216, 0xd8}], 0x1}, 0x856) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 5.499499379s ago: executing program 5 (id=1071): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500924e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000002000000000000120000000004000000000000120200000000005f0061"], 0x0, 0x42, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = getpid() r3 = perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'ipvlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a741000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.850742971s ago: executing program 5 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="00020300"}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0xff, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x10200, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0xc0a1, 0x57, 0x0, 0xd, 0xc, 0xe6, 0x0, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) close(0x3) 3.935455575s ago: executing program 5 (id=1084): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.932861305s ago: executing program 3 (id=1086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0, 0x2}, 0x20811, 0x2f, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x10000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000150081054e81f782db44b904021f08010a000000040000a118000200000000e4ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.315867234s ago: executing program 4 (id=1094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00', r0}, 0x18) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11) 2.971894122s ago: executing program 4 (id=1095): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1, 0x0, 0xf00}, 0x20000054) 2.579269403s ago: executing program 4 (id=1096): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x1a) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x11e) 2.578642064s ago: executing program 3 (id=1097): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x86}, 0x38) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000000c0), 0x43) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff21}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x43}]}}, 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140)="3444608d063d446ffc8bfacad0fbb4dfe837a9ecacfcce5acd19c271d4b77b43", &(0x7f0000000180)=""/5, 0x4}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="d800000010008104687da3aa7143a0bac81d080b25000000e8fe55a118000040a8002b00a400034006006aec036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e496e6f66112c88a2ddddbbb219c6c09136dd481d485dc2331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d15a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14feb9f519e53595e6e167c2ed64c804fba3f300"/216, 0xd8}], 0x1}, 0x856) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000), 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2.238216451s ago: executing program 4 (id=1098): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10012, 0x0, 0x0, 0x0, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500), 0x4) (fail_nth: 2) 2.237812861s ago: executing program 3 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbc, 0x0, 0x0, 0x38b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000130000009500000000000000f4544416adb8a23bb9731f760dce05855b44f226362e6c73dfeab9fd8d4a93cdd9c1fd313c20126c10ad158895ce5e96e05e02106b83f8ca1c83b6ff8f7440a0b3dd3720f0146bdb3b599f68fa5849586852b44beaefcbc85875ae757fa391043839b3adcaec7145c2ba17edf8219756b5e60166ac919e23fc06b9fbba94ba62e7480cdbf55750d0bea9b65a07800fd91c42da1ccea37575b8a753dca41291ad1a625a218b792cb5dbdaf687c33896db"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_clone(0x1000, &(0x7f00000001c0)="448c016a4c726062ecf16682d1fa20370808346e27bafe0dc08d78265e3cd3fc193dcda12a436018d099d8b902ffb0", 0x2f, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000540)="e3541c5874089af0fa8adbd3111b35768637c5783b19df5d1a50e12dad3055074dd98937a50e78170c0d37e6f1024406532399c8062904e3489054c924332deaa599c6a69b7c609d633a20826b128f77a60671d3e784a70c448220472dfff4f400751089ae3be36af90f40a19bbb2645101109315be3a454f5d8e841eac7a90c8d42e01fadf64c39026e822058ec1b82d1cc931b5ea46940c647bbc1cbf612afc93b8a6d02afb924a2c232dad09ade0623f01a3cd2c03185c593e13e3e5d71757421ba133bf853587581dc83b24c03bcf644") perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x5, 0x0, 0xfc, 0x0, 0x7, 0xa00, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100282, 0x4, 0x200, 0x4, 0xffffffff00000001, 0x7f, 0x8, 0x0, 0x4, 0x0, 0x8}, r4, 0x9, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.75046888s ago: executing program 1 (id=1111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, 0x0) 1.706954393s ago: executing program 4 (id=1101): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40800, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.651351048s ago: executing program 0 (id=1102): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500924e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000002000000000000120000000004000000000000120200000000005f0061"], 0x0, 0x42, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = getpid() r3 = perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'ipvlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a741000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="901615cb9da51e7f21ceff00", @ANYRES32, @ANYBLOB=' \x00'], 0x0}, 0x94) 1.472981152s ago: executing program 1 (id=1103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.279090268s ago: executing program 4 (id=1104): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a030000000800000000192a55b2da5a01530bfc0b00000b04"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00030000000029"], 0x66) 1.087477583s ago: executing program 1 (id=1105): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.00142522s ago: executing program 0 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00', r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11) 821.246704ms ago: executing program 0 (id=1107): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10012, 0x0, 0x0, 0x0, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500), 0x4) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)={'veth0_to_team', 0x32, 0x39}, 0x10) 814.327025ms ago: executing program 3 (id=1108): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x1a) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x11e) 708.657473ms ago: executing program 1 (id=1110): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x86}, 0x38) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000000c0), 0x43) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff21}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x43}]}}, 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000140)="3444608d063d446ffc8bfacad0fbb4dfe837a9ecacfcce5acd19c271d4b77b43", &(0x7f0000000180)=""/5, 0x4}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="d800000010008104687da3aa7143a0bac81d080b25000000e8fe55a118000040a8002b00a400034006006aec036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e496e6f66112c88a2ddddbbb219c6c09136dd481d485dc2331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d15a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14feb9f519e53595e6e167c2ed64c804fba3f300"/216, 0xd8}], 0x1}, 0x856) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x75, &(0x7f0000000000), 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 559.548035ms ago: executing program 0 (id=1112): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcf, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 0s ago: executing program 0 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4061}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x36, 0x0, &(0x7f00000000c0)="cedfb080cd21d308098e000081007e2286dd03cfbc74b73fbff7a324b9c76c9ca1919f1dfff9524c9c5a1e5868038f304e1723c57b8c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000540)=""/8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): p_stack_lvl+0x168/0x22e [ 101.313349][ T5013] ? show_regs_print_info+0x12/0x12 [ 101.318556][ T5013] ? load_image+0x3b0/0x3b0 [ 101.323063][ T5013] ? __lock_acquire+0x7c50/0x7c50 [ 101.328105][ T5013] ? perf_trace_buf_update+0x9c/0x220 [ 101.333498][ T5013] should_fail_ex+0x399/0x4d0 [ 101.338198][ T5013] _copy_from_user+0x2c/0x170 [ 101.342886][ T5013] do_ipv6_setsockopt+0x2b3/0x3b20 [ 101.348002][ T5013] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 101.353670][ T5013] ? sk_dst_reset+0xa0/0xa0 [ 101.358187][ T5013] ? perf_swevent_event+0xc8/0x530 [ 101.363319][ T5013] ? perf_tp_event+0xa4a/0xb60 [ 101.368113][ T5013] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 101.373978][ T5013] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 101.379733][ T5013] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 101.385458][ T5013] ? aa_label_sk_perm+0x3e7/0x500 [ 101.390554][ T5013] ? perf_trace_lock+0x2ec/0x370 [ 101.395509][ T5013] ? aa_sk_perm+0x920/0x920 [ 101.400048][ T5013] ? __might_sleep+0xd0/0xd0 [ 101.404658][ T5013] ? __fget_files+0x28/0x4d0 [ 101.409259][ T5013] ? __lock_acquire+0x7c50/0x7c50 [ 101.414289][ T5013] ipv6_setsockopt+0x55/0x190 [ 101.418974][ T5013] dccp_setsockopt+0x15a/0x830 [ 101.423734][ T5013] ? aa_af_perm+0x2b0/0x2b0 [ 101.428239][ T5013] ? dccp_ioctl+0x1d0/0x1d0 [ 101.432734][ T5013] ? aa_sock_opt_perm+0x74/0x100 [ 101.437672][ T5013] ? sock_common_setsockopt+0x32/0xb0 [ 101.443040][ T5013] ? sock_common_recvmsg+0x1a0/0x1a0 [ 101.448324][ T5013] __sys_setsockopt+0x2bf/0x3d0 [ 101.453201][ T5013] __x64_sys_setsockopt+0xb1/0xc0 [ 101.458241][ T5013] do_syscall_64+0x4c/0xa0 [ 101.462664][ T5013] ? clear_bhb_loop+0x60/0xb0 [ 101.467340][ T5013] ? clear_bhb_loop+0x60/0xb0 [ 101.472017][ T5013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.477912][ T5013] RIP: 0033:0x7fafc418ebe9 [ 101.482328][ T5013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.501927][ T5013] RSP: 002b:00007fafc5007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.510339][ T5013] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418ebe9 [ 101.518310][ T5013] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000004 [ 101.526272][ T5013] RBP: 00007fafc5007090 R08: 0000000000000004 R09: 0000000000000000 [ 101.534238][ T5013] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 101.542201][ T5013] R13: 00007fafc43b6038 R14: 00007fafc43b5fa0 R15: 00007ffd8698e088 [ 101.550190][ T5013] [ 101.574843][ T5011] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 101.631167][ T5011] netlink: 'syz.3.194': attribute type 8 has an invalid length. [ 101.651954][ T4994] chnl_net:caif_netlink_parms(): no params data found [ 102.423888][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.445139][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.485830][ T4994] device bridge_slave_0 entered promiscuous mode [ 102.512006][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.555084][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.563375][ T4994] device bridge_slave_1 entered promiscuous mode [ 102.663933][ T4994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.676958][ T5049] __nla_validate_parse: 7 callbacks suppressed [ 102.676972][ T5049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.205'. [ 102.719606][ T4994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.774424][ T4994] team0: Port device team_slave_0 added [ 102.801489][ T4994] team0: Port device team_slave_1 added [ 102.825236][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 103.266427][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.275088][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.326116][ T5061] device bridge_slave_1 left promiscuous mode [ 103.333303][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.361579][ T5061] device bridge_slave_0 left promiscuous mode [ 103.368408][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.481168][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.490241][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.523217][ T4994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.545641][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.552778][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.587319][ T4994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.911463][ T4994] device hsr_slave_0 entered promiscuous mode [ 103.937039][ T4994] device hsr_slave_1 entered promiscuous mode [ 103.965832][ T4994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.981958][ T4994] Cannot create hsr debugfs directory [ 103.989782][ T5073] FAULT_INJECTION: forcing a failure. [ 103.989782][ T5073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.007786][ T5073] CPU: 1 PID: 5073 Comm: syz.1.210 Not tainted 6.1.148-syzkaller #0 [ 104.015816][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.025885][ T5073] Call Trace: [ 104.029175][ T5073] [ 104.032115][ T5073] dump_stack_lvl+0x168/0x22e [ 104.036817][ T5073] ? show_regs_print_info+0x12/0x12 [ 104.042041][ T5073] ? load_image+0x3b0/0x3b0 [ 104.046569][ T5073] ? __lock_acquire+0x7c50/0x7c50 [ 104.051805][ T5073] should_fail_ex+0x399/0x4d0 [ 104.056505][ T5073] _copy_from_user+0x2c/0x170 [ 104.061199][ T5073] br_ioctl_stub+0x366/0x9e0 [ 104.065808][ T5073] ? rcu_read_unlock+0xa0/0xa0 [ 104.070567][ T5073] ? sock_ioctl+0x2ce/0x6e0 [ 104.075063][ T5073] ? mutex_lock_nested+0x10/0x10 [ 104.080002][ T5073] ? rcu_read_unlock+0xa0/0xa0 [ 104.084755][ T5073] sock_ioctl+0x2f1/0x6e0 [ 104.089078][ T5073] ? sock_poll+0x3f0/0x3f0 [ 104.093493][ T5073] ? bpf_lsm_file_ioctl+0x5/0x10 [ 104.098423][ T5073] ? security_file_ioctl+0x7c/0xa0 [ 104.103538][ T5073] ? sock_poll+0x3f0/0x3f0 [ 104.107947][ T5073] __se_sys_ioctl+0xfa/0x170 [ 104.112531][ T5073] do_syscall_64+0x4c/0xa0 [ 104.116938][ T5073] ? clear_bhb_loop+0x60/0xb0 [ 104.121603][ T5073] ? clear_bhb_loop+0x60/0xb0 [ 104.126274][ T5073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.132160][ T5073] RIP: 0033:0x7fafc418ebe9 [ 104.136567][ T5073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.156180][ T5073] RSP: 002b:00007fafc5007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.164602][ T5073] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418ebe9 [ 104.172566][ T5073] RDX: 0000000000000000 RSI: 00000000000089a1 RDI: 0000000000000008 [ 104.180529][ T5073] RBP: 00007fafc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 104.188489][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.196448][ T5073] R13: 00007fafc43b6038 R14: 00007fafc43b5fa0 R15: 00007ffd8698e088 [ 104.204510][ T5073] [ 104.222046][ T5079] FAULT_INJECTION: forcing a failure. [ 104.222046][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 104.240931][ T5079] CPU: 1 PID: 5079 Comm: syz.4.213 Not tainted 6.1.148-syzkaller #0 [ 104.248969][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.259042][ T5079] Call Trace: [ 104.262328][ T5079] [ 104.265268][ T5079] dump_stack_lvl+0x168/0x22e [ 104.270051][ T5079] ? show_regs_print_info+0x12/0x12 [ 104.275242][ T5079] ? load_image+0x3b0/0x3b0 [ 104.279762][ T5079] ? __might_sleep+0xd0/0xd0 [ 104.284358][ T5079] ? __lock_acquire+0x7c50/0x7c50 [ 104.289371][ T5079] should_fail_ex+0x399/0x4d0 [ 104.294039][ T5079] should_failslab+0x5/0x20 [ 104.298539][ T5079] slab_pre_alloc_hook+0x59/0x310 [ 104.303567][ T5079] kmem_cache_alloc_node+0x5a/0x320 [ 104.308758][ T5079] ? __alloc_skb+0xfc/0x7e0 [ 104.313255][ T5079] __alloc_skb+0xfc/0x7e0 [ 104.317588][ T5079] netlink_ack+0x372/0x1100 [ 104.322107][ T5079] ? genl_rcv_msg+0x281/0x780 [ 104.326791][ T5079] ? genl_bind+0x350/0x350 [ 104.331205][ T5079] ? netlink_dump+0xcd0/0xcd0 [ 104.335901][ T5079] netlink_rcv_skb+0x263/0x420 [ 104.340696][ T5079] ? genl_bind+0x350/0x350 [ 104.345140][ T5079] ? netlink_ack+0x1100/0x1100 [ 104.349913][ T5079] ? down_read+0x1a8/0x2d0 [ 104.354326][ T5079] genl_rcv+0x24/0x40 [ 104.358311][ T5079] netlink_unicast+0x74d/0x8d0 [ 104.363094][ T5079] netlink_sendmsg+0x89e/0xbc0 [ 104.367869][ T5079] ? netlink_getsockopt+0x540/0x540 [ 104.373067][ T5079] ? aa_sock_msg_perm+0x94/0x150 [ 104.378014][ T5079] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.383303][ T5079] ? security_socket_sendmsg+0x7c/0xa0 [ 104.388752][ T5079] ? netlink_getsockopt+0x540/0x540 [ 104.393964][ T5079] ____sys_sendmsg+0x59b/0x970 [ 104.398752][ T5079] ? __sys_sendmsg_sock+0x30/0x30 [ 104.403794][ T5079] ? __import_iovec+0x315/0x500 [ 104.408661][ T5079] ? import_iovec+0x6f/0xa0 [ 104.413177][ T5079] ___sys_sendmsg+0x21c/0x290 [ 104.417865][ T5079] ? __sys_sendmsg+0x270/0x270 [ 104.422649][ T5079] ? __lock_acquire+0x7c50/0x7c50 [ 104.427696][ T5079] ? __fdget+0x17c/0x200 [ 104.431949][ T5079] __se_sys_sendmsg+0x19e/0x270 [ 104.436891][ T5079] ? __x64_sys_sendmsg+0x80/0x80 [ 104.441844][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 104.447032][ T5079] do_syscall_64+0x4c/0xa0 [ 104.451489][ T5079] ? clear_bhb_loop+0x60/0xb0 [ 104.456168][ T5079] ? clear_bhb_loop+0x60/0xb0 [ 104.460862][ T5079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.466759][ T5079] RIP: 0033:0x7f916998ebe9 [ 104.471159][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.490760][ T5079] RSP: 002b:00007f916a878038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.499175][ T5079] RAX: ffffffffffffffda RBX: 00007f9169bb6090 RCX: 00007f916998ebe9 [ 104.507163][ T5079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 104.515140][ T5079] RBP: 00007f916a878090 R08: 0000000000000000 R09: 0000000000000000 [ 104.523119][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.531077][ T5079] R13: 00007f9169bb6128 R14: 00007f9169bb6090 R15: 00007ffee3ea0678 [ 104.539071][ T5079] [ 104.545496][ T5075] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 104.908889][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 105.162507][ T4994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.247048][ T4994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.287558][ T4994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.311932][ T4994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.355857][ T5122] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 106.413172][ T5122] device syz_tun entered promiscuous mode [ 106.421335][ T5122] team0: Port device syz_tun added [ 106.671588][ T4994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.754800][ T5127] FAULT_INJECTION: forcing a failure. [ 106.754800][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 106.782439][ T5127] CPU: 0 PID: 5127 Comm: syz.0.227 Not tainted 6.1.148-syzkaller #0 [ 106.790461][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.800512][ T5127] Call Trace: [ 106.803780][ T5127] [ 106.806699][ T5127] dump_stack_lvl+0x168/0x22e [ 106.811368][ T5127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.817512][ T5127] ? show_regs_print_info+0x12/0x12 [ 106.822699][ T5127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.828851][ T5127] should_fail_ex+0x399/0x4d0 [ 106.833524][ T5127] should_failslab+0x5/0x20 [ 106.838023][ T5127] slab_pre_alloc_hook+0x59/0x310 [ 106.843036][ T5127] ? lockdep_hardirqs_on+0x94/0x140 [ 106.848224][ T5127] ? tracepoint_add_func+0x307/0x9a0 [ 106.853506][ T5127] __kmem_cache_alloc_node+0x4f/0x260 [ 106.858869][ T5127] ? tracepoint_add_func+0x307/0x9a0 [ 106.864142][ T5127] __kmalloc+0xa0/0x240 [ 106.868291][ T5127] ? __bpf_trace_mmap_lock+0x30/0x30 [ 106.873566][ T5127] tracepoint_add_func+0x307/0x9a0 [ 106.878667][ T5127] ? ihold+0x2/0x50 [ 106.882463][ T5127] ? __bpf_trace_mmap_lock+0x30/0x30 [ 106.887738][ T5127] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 106.894489][ T5127] ? __bpf_trace_mmap_lock+0x30/0x30 [ 106.899765][ T5127] bpf_raw_tp_link_attach+0x3d1/0x550 [ 106.905127][ T5127] ? lock_chain_count+0x20/0x20 [ 106.909969][ T5127] ? bpf_insn_prepare_dump+0x840/0x840 [ 106.915436][ T5127] bpf_raw_tracepoint_open+0x194/0x200 [ 106.920885][ T5127] __sys_bpf+0x4e9/0x6d0 [ 106.925122][ T5127] ? bpf_link_show_fdinfo+0x340/0x340 [ 106.930498][ T5127] __x64_sys_bpf+0x78/0x90 [ 106.934907][ T5127] do_syscall_64+0x4c/0xa0 [ 106.939311][ T5127] ? clear_bhb_loop+0x60/0xb0 [ 106.943973][ T5127] ? clear_bhb_loop+0x60/0xb0 [ 106.948640][ T5127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.954524][ T5127] RIP: 0033:0x7f65e658ebe9 [ 106.958928][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.978518][ T5127] RSP: 002b:00007f65e7377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.986916][ T5127] RAX: ffffffffffffffda RBX: 00007f65e67b5fa0 RCX: 00007f65e658ebe9 [ 106.994874][ T5127] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 107.002838][ T5127] RBP: 00007f65e7377090 R08: 0000000000000000 R09: 0000000000000000 [ 107.010795][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.018755][ T5127] R13: 00007f65e67b6038 R14: 00007f65e67b5fa0 R15: 00007ffd56b84cf8 [ 107.026751][ T5127] [ 107.035275][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 107.073530][ T4994] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.108161][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.144373][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.306414][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.336398][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.357745][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.364972][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.386842][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.421067][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.441322][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.460677][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.467908][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.503325][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.542274][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.551466][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.561315][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.576104][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.589793][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.668598][ T4994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.721942][ T4994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.801740][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.845840][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.864690][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.880659][ T5152] FAULT_INJECTION: forcing a failure. [ 107.880659][ T5152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.896626][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.906528][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.921144][ T5152] CPU: 1 PID: 5152 Comm: syz.3.235 Not tainted 6.1.148-syzkaller #0 [ 107.929165][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.939225][ T5152] Call Trace: [ 107.942509][ T5152] [ 107.945442][ T5152] dump_stack_lvl+0x168/0x22e [ 107.950135][ T5152] ? show_regs_print_info+0x12/0x12 [ 107.955341][ T5152] ? load_image+0x3b0/0x3b0 [ 107.959858][ T5152] ? __lock_acquire+0x7c50/0x7c50 [ 107.964900][ T5152] ? snprintf+0xd7/0x120 [ 107.969159][ T5152] should_fail_ex+0x399/0x4d0 [ 107.973854][ T5152] _copy_to_user+0x2c/0x130 [ 107.978373][ T5152] simple_read_from_buffer+0xe3/0x150 [ 107.983763][ T5152] proc_fail_nth_read+0x19a/0x210 [ 107.988795][ T5152] ? proc_fault_inject_write+0x2f0/0x2f0 [ 107.994434][ T5152] ? fsnotify_perm+0x248/0x550 [ 107.999207][ T5152] ? proc_fault_inject_write+0x2f0/0x2f0 [ 108.004850][ T5152] vfs_read+0x2c0/0x920 [ 108.009026][ T5152] ? kernel_read+0x1e0/0x1e0 [ 108.013626][ T5152] ? __fget_files+0x28/0x4d0 [ 108.018223][ T5152] ? __fget_files+0x44a/0x4d0 [ 108.022915][ T5152] ? __fdget_pos+0x2ae/0x360 [ 108.027547][ T5152] ? ksys_read+0x71/0x240 [ 108.031895][ T5152] ksys_read+0x143/0x240 [ 108.036157][ T5152] ? vfs_write+0x960/0x960 [ 108.040582][ T5152] ? trace_sys_enter+0x22/0x80 [ 108.045356][ T5152] do_syscall_64+0x4c/0xa0 [ 108.049777][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 108.054455][ T5152] ? clear_bhb_loop+0x60/0xb0 [ 108.059134][ T5152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.065043][ T5152] RIP: 0033:0x7fd532f8d5fc [ 108.069465][ T5152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.089082][ T5152] RSP: 002b:00007fd533d33030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.097503][ T5152] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8d5fc [ 108.105487][ T5152] RDX: 000000000000000f RSI: 00007fd533d330a0 RDI: 0000000000000004 [ 108.113476][ T5152] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 108.121467][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.129453][ T5152] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 108.137475][ T5152] [ 108.170638][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.449838][ T5159] netlink: 'syz.1.237': attribute type 21 has an invalid length. [ 108.583954][ T5171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'. [ 108.615172][ T5171] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 109.033354][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.046856][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.065294][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 109.079964][ T4994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.136127][ T5183] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.243'. [ 109.388989][ T5188] netlink: 'syz.0.244': attribute type 7 has an invalid length. [ 109.406732][ T5188] netlink: 'syz.0.244': attribute type 5 has an invalid length. [ 110.028858][ T5198] bridge0: port 3(team0) entered disabled state [ 110.035310][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.042709][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.076946][ T5199] bridge0: port 3(team0) entered disabled state [ 110.114461][ T5199] device bridge_slave_1 left promiscuous mode [ 110.121426][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.131831][ T5199] device bridge_slave_0 left promiscuous mode [ 110.138458][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.223503][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.233072][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.288889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.309119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.342704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.365561][ T5204] FAULT_INJECTION: forcing a failure. [ 110.365561][ T5204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.386282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.446685][ T4994] device veth0_vlan entered promiscuous mode [ 110.448701][ T5204] CPU: 0 PID: 5204 Comm: syz.1.248 Not tainted 6.1.148-syzkaller #0 [ 110.460686][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.468656][ T4994] device veth1_vlan entered promiscuous mode [ 110.470733][ T5204] Call Trace: [ 110.470741][ T5204] [ 110.470748][ T5204] dump_stack_lvl+0x168/0x22e [ 110.470772][ T5204] ? show_regs_print_info+0x12/0x12 [ 110.492826][ T5204] ? load_image+0x3b0/0x3b0 [ 110.497365][ T5204] ? __lock_acquire+0x7c50/0x7c50 [ 110.502427][ T5204] should_fail_ex+0x399/0x4d0 [ 110.507132][ T5204] _copy_from_user+0x2c/0x170 [ 110.511833][ T5204] bpf_prog_test_run_skb+0x258/0x11b0 [ 110.517249][ T5204] ? __fget_files+0x28/0x4d0 [ 110.521859][ T5204] ? __fget_files+0x44a/0x4d0 [ 110.526564][ T5204] ? cpu_online+0xa0/0xa0 [ 110.530915][ T5204] bpf_prog_test_run+0x31e/0x390 [ 110.535872][ T5204] __sys_bpf+0x593/0x6d0 [ 110.540116][ T4994] device veth0_macvtap entered promiscuous mode [ 110.540130][ T5204] ? bpf_link_show_fdinfo+0x340/0x340 [ 110.551742][ T5204] ? lock_chain_count+0x20/0x20 [ 110.556616][ T5204] __x64_sys_bpf+0x78/0x90 [ 110.559164][ T4994] device veth1_macvtap entered promiscuous mode [ 110.561030][ T5204] do_syscall_64+0x4c/0xa0 [ 110.561052][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 110.561067][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 110.578494][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.581010][ T5204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.581039][ T5204] RIP: 0033:0x7fafc418ebe9 [ 110.581055][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.592346][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.597306][ T5204] RSP: 002b:00007fafc5007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.597336][ T5204] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418ebe9 [ 110.597346][ T5204] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 110.597356][ T5204] RBP: 00007fafc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 110.597365][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.597374][ T5204] R13: 00007fafc43b6038 R14: 00007fafc43b5fa0 R15: 00007ffd8698e088 [ 110.597396][ T5204] [ 110.687210][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.698422][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.728649][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.753721][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.778238][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.803077][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.813383][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.835276][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.858202][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.880047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.892634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.919259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.928709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.938236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.947262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.957288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.003751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.014479][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 111.031025][ T5209] netlink: 'syz.4.250': attribute type 3 has an invalid length. [ 111.046054][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.064172][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.096872][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.122127][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.133235][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.171028][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.190849][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.201759][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.213404][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.224251][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.238770][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.667171][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.709788][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.757740][ T4994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.814971][ T4994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.823729][ T4994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.872106][ T4994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.971809][ T4267] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 111.973580][ T5240] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.260'. [ 112.014508][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.022767][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.182359][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.223596][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.266594][ T5243] device bridge_slave_1 left promiscuous mode [ 112.272881][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.291008][ T5243] device bridge_slave_0 left promiscuous mode [ 112.302814][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.420720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.475184][ T5253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'. [ 112.485307][ T5253] netlink: 'syz.1.265': attribute type 3 has an invalid length. [ 112.520070][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.569928][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.592709][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.802186][ T5266] netlink: 'syz.5.183': attribute type 10 has an invalid length. [ 112.847910][ T5266] batman_adv: batadv0: Adding interface: team0 [ 112.861530][ T5266] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.897593][ T5266] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 112.951420][ T5268] netlink: 'syz.5.183': attribute type 10 has an invalid length. [ 112.981287][ T5268] netlink: 2 bytes leftover after parsing attributes in process `syz.5.183'. [ 113.000501][ T5276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.272'. [ 113.020874][ T5268] device team0 entered promiscuous mode [ 113.029101][ T5268] device team_slave_0 entered promiscuous mode [ 113.047975][ T5268] device team_slave_1 entered promiscuous mode [ 113.061237][ T5268] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.090497][ T5268] batman_adv: batadv0: Interface activated: team0 [ 113.145225][ T5268] batman_adv: batadv0: Interface deactivated: team0 [ 113.154331][ T5268] batman_adv: batadv0: Removing interface: team0 [ 113.870459][ T5268] bridge0: port 3(team0) entered blocking state [ 113.884764][ T5268] bridge0: port 3(team0) entered disabled state [ 113.926982][ T5268] bridge0: port 3(team0) entered blocking state [ 113.933465][ T5268] bridge0: port 3(team0) entered forwarding state [ 113.953364][ T5276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.272'. [ 113.985662][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 113.994987][ T5295] netlink: 'syz.0.278': attribute type 3 has an invalid length. [ 114.161849][ T5301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.279'. [ 114.212385][ T5301] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.215757][ T5300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.280'. [ 114.219092][ T5301] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.443003][ T5305] netlink: 'syz.0.282': attribute type 16 has an invalid length. [ 114.477278][ T5305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.282'. [ 114.498637][ T5314] netlink: 'syz.3.285': attribute type 21 has an invalid length. [ 115.276103][ T5337] netlink: 'syz.1.290': attribute type 2 has an invalid length. [ 115.506244][ T5337] device 0 entered promiscuous mode [ 115.705207][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'. [ 115.725622][ T5344] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 115.751521][ T5345] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 116.678169][ T5345] batman_adv: batadv0: Adding interface: team0 [ 116.684592][ T5345] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.726970][ T5345] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.738580][ T5348] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 116.747594][ T5348] netlink: 2 bytes leftover after parsing attributes in process `syz.3.293'. [ 116.758672][ T5348] device team0 entered promiscuous mode [ 116.764243][ T5348] device team_slave_0 entered promiscuous mode [ 116.772040][ T5348] device team_slave_1 entered promiscuous mode [ 116.783332][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.790795][ T5348] batman_adv: batadv0: Interface activated: team0 [ 116.797719][ T5348] batman_adv: batadv0: Interface deactivated: team0 [ 116.806314][ T5348] batman_adv: batadv0: Removing interface: team0 [ 116.830971][ T5360] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.296'. [ 116.866068][ T5361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.297'. [ 116.896242][ T5361] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.902897][ T5361] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.558103][ T5383] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 118.686081][ T5409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.313'. [ 118.746260][ T5412] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.752728][ T5412] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.294288][ T5422] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 119.367945][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.407928][ T5422] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.432062][ T5423] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.315'. [ 119.458166][ T5425] netlink: 'syz.5.316': attribute type 27 has an invalid length. [ 119.502372][ T5425] netlink: 164 bytes leftover after parsing attributes in process `syz.5.316'. [ 119.703140][ T5439] netlink: 'syz.4.320': attribute type 21 has an invalid length. [ 119.735773][ T5439] netlink: 164 bytes leftover after parsing attributes in process `syz.4.320'. [ 120.092483][ T5447] netlink: 'syz.5.323': attribute type 10 has an invalid length. [ 120.225135][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.264768][ T5447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.291835][ T5448] netlink: 'syz.5.323': attribute type 10 has an invalid length. [ 120.307873][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz.5.323'. [ 120.345447][ T5448] device batadv0 entered promiscuous mode [ 120.358257][ T5448] bond0: (slave batadv0): Releasing backup interface [ 120.423120][ T5448] bridge0: port 4(batadv0) entered blocking state [ 120.452407][ T5448] bridge0: port 4(batadv0) entered disabled state [ 120.485190][ T5454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.325'. [ 120.523633][ T5457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.530160][ T5457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.702635][ T5462] netlink: 'syz.5.328': attribute type 10 has an invalid length. [ 120.723330][ T5462] netlink: 'syz.5.328': attribute type 19 has an invalid length. [ 120.731972][ T5462] netlink: 156 bytes leftover after parsing attributes in process `syz.5.328'. [ 120.821637][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.831632][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.923516][ T5469] Zero length message leads to an empty skb [ 121.607947][ T5488] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.338'. [ 121.622641][ T5492] FAULT_INJECTION: forcing a failure. [ 121.622641][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 121.645117][ T5492] CPU: 0 PID: 5492 Comm: syz.5.337 Not tainted 6.1.148-syzkaller #0 [ 121.653154][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.663205][ T5492] Call Trace: [ 121.666475][ T5492] [ 121.669397][ T5492] dump_stack_lvl+0x168/0x22e [ 121.674084][ T5492] ? show_regs_print_info+0x12/0x12 [ 121.679304][ T5492] ? load_image+0x3b0/0x3b0 [ 121.683801][ T5492] ? __might_sleep+0xd0/0xd0 [ 121.688392][ T5492] ? __lock_acquire+0x7c50/0x7c50 [ 121.693407][ T5492] ? __might_sleep+0xd0/0xd0 [ 121.697993][ T5492] should_fail_ex+0x399/0x4d0 [ 121.702670][ T5492] should_failslab+0x5/0x20 [ 121.707166][ T5492] slab_pre_alloc_hook+0x59/0x310 [ 121.712183][ T5492] kmem_cache_alloc_lru+0x49/0x2e0 [ 121.717287][ T5492] ? sock_alloc_inode+0x24/0xc0 [ 121.722142][ T5492] sock_alloc_inode+0x24/0xc0 [ 121.726810][ T5492] ? sockfs_init_fs_context+0xa0/0xa0 [ 121.732172][ T5492] new_inode_pseudo+0x5f/0x1c0 [ 121.736933][ T5492] __sock_create+0x129/0x940 [ 121.741526][ T5492] ? __might_fault+0xa6/0x120 [ 121.746199][ T5492] ? __might_fault+0xc2/0x120 [ 121.750872][ T5492] __sys_socketpair+0x1bd/0x540 [ 121.755719][ T5492] __x64_sys_socketpair+0x97/0xb0 [ 121.760735][ T5492] do_syscall_64+0x4c/0xa0 [ 121.765149][ T5492] ? clear_bhb_loop+0x60/0xb0 [ 121.769815][ T5492] ? clear_bhb_loop+0x60/0xb0 [ 121.774481][ T5492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.780380][ T5492] RIP: 0033:0x7f60a958ebe9 [ 121.784796][ T5492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.804562][ T5492] RSP: 002b:00007f60aa389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 121.812963][ T5492] RAX: ffffffffffffffda RBX: 00007f60a97b5fa0 RCX: 00007f60a958ebe9 [ 121.820922][ T5492] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 121.828878][ T5492] RBP: 00007f60aa389090 R08: 0000000000000000 R09: 0000000000000000 [ 121.836834][ T5492] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001 [ 121.844794][ T5492] R13: 00007f60a97b6038 R14: 00007f60a97b5fa0 R15: 00007fff6d8dd2c8 [ 121.852769][ T5492] [ 121.879729][ T5492] socket: no more sockets [ 122.101786][ T5501] netlink: 'syz.5.342': attribute type 21 has an invalid length. [ 122.127485][ T5501] netlink: 'syz.5.342': attribute type 11 has an invalid length. [ 122.155544][ T5507] netlink: 14 bytes leftover after parsing attributes in process `syz.5.342'. [ 122.231984][ T5510] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.238551][ T5510] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 122.310270][ T5508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.343'. [ 122.740543][ T5521] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 122.809333][ T5521] bond0: (slave batadv0): Releasing backup interface [ 122.843965][ T5521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.861742][ T5521] team0: Port device batadv0 added [ 122.870455][ T5530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'. [ 122.899106][ T5530] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.905951][ T5530] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.481845][ T5553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.488757][ T5553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 124.700256][ T5588] __nla_validate_parse: 2 callbacks suppressed [ 124.700289][ T5588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.367'. [ 124.773504][ T5588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 124.984589][ T5597] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 125.026124][ T5597] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.371'. [ 125.332069][ T5612] netlink: 132 bytes leftover after parsing attributes in process `syz.5.375'. [ 126.454506][ T5621] netlink: 'syz.1.379': attribute type 25 has an invalid length. [ 126.500536][ T5621] netlink: 'syz.1.379': attribute type 16 has an invalid length. [ 126.525333][ T5621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.379'. [ 126.563711][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.559764][ T5652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.386'. [ 127.623811][ T5655] net_ratelimit: 3 callbacks suppressed [ 127.623825][ T5655] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.635885][ T5655] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.894534][ T5666] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.901064][ T5666] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.246663][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.393'. [ 129.514786][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 129.527677][ T5686] netlink: 'syz.1.397': attribute type 3 has an invalid length. [ 129.536201][ T5685] netlink: 'syz.4.399': attribute type 21 has an invalid length. [ 129.574534][ T5685] netlink: 164 bytes leftover after parsing attributes in process `syz.4.399'. [ 129.918067][ T5708] netlink: 132 bytes leftover after parsing attributes in process `syz.5.404'. [ 130.007552][ T5708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 130.014328][ T5708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 130.243314][ T5715] netlink: 'syz.3.406': attribute type 2 has an invalid length. [ 130.780349][ T5715] device 0 entered promiscuous mode [ 131.586011][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'. [ 131.606933][ T5732] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 131.662968][ T5731] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 131.687812][ T5731] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 131.726077][ T5731] netlink: 14 bytes leftover after parsing attributes in process `syz.0.413'. [ 132.669917][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677187][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.745854][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 133.754824][ T5772] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 135.440710][ T5813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'. [ 135.465710][ T5813] netlink: 'syz.0.439': attribute type 3 has an invalid length. [ 135.511094][ T5817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.440'. [ 135.553032][ T5817] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.559734][ T5817] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.283355][ T5839] netlink: 'syz.1.448': attribute type 17 has an invalid length. [ 136.320359][ T5839] netlink: 'syz.1.448': attribute type 16 has an invalid length. [ 136.353010][ T5839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.894803][ T5849] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.448'. [ 137.026860][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 137.060285][ T5855] netlink: 'syz.0.452': attribute type 3 has an invalid length. [ 138.050750][ T5870] FAULT_INJECTION: forcing a failure. [ 138.050750][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 138.091074][ T5872] FAULT_INJECTION: forcing a failure. [ 138.091074][ T5872] name failslab, interval 1, probability 0, space 0, times 0 [ 138.118394][ T5870] CPU: 1 PID: 5870 Comm: syz.3.457 Not tainted 6.1.148-syzkaller #0 [ 138.126443][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.136540][ T5870] Call Trace: [ 138.139818][ T5870] [ 138.142753][ T5870] dump_stack_lvl+0x168/0x22e [ 138.147445][ T5870] ? show_regs_print_info+0x12/0x12 [ 138.152656][ T5870] ? load_image+0x3b0/0x3b0 [ 138.157170][ T5870] ? __lock_acquire+0x7c50/0x7c50 [ 138.162201][ T5870] should_fail_ex+0x399/0x4d0 [ 138.166888][ T5870] should_failslab+0x5/0x20 [ 138.171401][ T5870] slab_pre_alloc_hook+0x59/0x310 [ 138.176443][ T5870] kmem_cache_alloc_lru+0x49/0x2e0 [ 138.181575][ T5870] ? __d_alloc+0x31/0x700 [ 138.185931][ T5870] __d_alloc+0x31/0x700 [ 138.190100][ T5870] ? rwsem_write_trylock+0x12f/0x1b0 [ 138.195401][ T5870] d_alloc+0x47/0x1a0 [ 138.199399][ T5870] ? lookup_one_qstr_excl+0xb1/0x240 [ 138.204705][ T5870] lookup_one_qstr_excl+0xc6/0x240 [ 138.209830][ T5870] filename_create+0x21e/0x450 [ 138.214612][ T5870] ? kern_path_create+0x50/0x50 [ 138.219486][ T5870] user_path_create+0x33/0x50 [ 138.224179][ T5870] bpf_obj_pin_user+0x12c/0x2f0 [ 138.229039][ T5870] ? verifier_remove_insns+0x1360/0x1360 [ 138.234676][ T5870] __sys_bpf+0x55c/0x6d0 [ 138.238917][ T5870] ? bpf_link_show_fdinfo+0x340/0x340 [ 138.244291][ T5870] ? lock_chain_count+0x20/0x20 [ 138.249129][ T5870] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.255107][ T5870] __x64_sys_bpf+0x78/0x90 [ 138.259517][ T5870] do_syscall_64+0x4c/0xa0 [ 138.263920][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 138.268594][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 138.273257][ T5870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.279146][ T5870] RIP: 0033:0x7fd532f8ebe9 [ 138.283549][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.303151][ T5870] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.311591][ T5870] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 138.319577][ T5870] RDX: 0000000000000018 RSI: 0000200000000200 RDI: 0000000000000006 [ 138.327565][ T5870] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 138.335537][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.343500][ T5870] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 138.351478][ T5870] [ 138.357807][ T5872] CPU: 1 PID: 5872 Comm: syz.4.458 Not tainted 6.1.148-syzkaller #0 [ 138.365828][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.375901][ T5872] Call Trace: [ 138.379195][ T5872] [ 138.382138][ T5872] dump_stack_lvl+0x168/0x22e [ 138.386845][ T5872] ? show_regs_print_info+0x12/0x12 [ 138.392064][ T5872] ? load_image+0x3b0/0x3b0 [ 138.396594][ T5872] ? __might_sleep+0xd0/0xd0 [ 138.401207][ T5872] ? __lock_acquire+0x7c50/0x7c50 [ 138.406260][ T5872] should_fail_ex+0x399/0x4d0 [ 138.410967][ T5872] should_failslab+0x5/0x20 [ 138.415494][ T5872] slab_pre_alloc_hook+0x59/0x310 [ 138.420545][ T5872] kmem_cache_alloc+0x56/0x2f0 [ 138.425322][ T5872] ? rxrpc_alloc_call+0x263/0xbf0 [ 138.430372][ T5872] ? rxrpc_alloc_call+0x7b/0xbf0 [ 138.435329][ T5872] rxrpc_alloc_call+0x263/0xbf0 [ 138.440201][ T5872] rxrpc_new_client_call+0xf3/0xd30 [ 138.445419][ T5872] ? rxrpc_do_sendmsg+0xa9a/0x1090 [ 138.450545][ T5872] ? do_raw_read_unlock+0x39/0x70 [ 138.455578][ T5872] rxrpc_do_sendmsg+0xa9a/0x1090 [ 138.460508][ T5872] ? rxrpc_process_local_events+0x980/0x980 [ 138.466407][ T5872] ? rxrpc_look_up_server_security+0x510/0x510 [ 138.472558][ T5872] ? rxrpc_sendmsg+0x467/0x890 [ 138.477323][ T5872] ? rxrpc_getsockopt+0x150/0x150 [ 138.482337][ T5872] ____sys_sendmsg+0x59b/0x970 [ 138.487092][ T5872] ? __lock_acquire+0x7c50/0x7c50 [ 138.492114][ T5872] ? __sys_sendmsg_sock+0x30/0x30 [ 138.497123][ T5872] ? __import_iovec+0x315/0x500 [ 138.501972][ T5872] ? import_iovec+0x6f/0xa0 [ 138.506472][ T5872] ___sys_sendmsg+0x21c/0x290 [ 138.511143][ T5872] ? __sys_sendmsg+0x270/0x270 [ 138.515914][ T5872] ? __lock_acquire+0x7c50/0x7c50 [ 138.520944][ T5872] ? __fdget+0x17c/0x200 [ 138.525183][ T5872] __se_sys_sendmsg+0x19e/0x270 [ 138.530029][ T5872] ? __x64_sys_sendmsg+0x80/0x80 [ 138.534966][ T5872] ? lockdep_hardirqs_on+0x94/0x140 [ 138.540160][ T5872] do_syscall_64+0x4c/0xa0 [ 138.544563][ T5872] ? clear_bhb_loop+0x60/0xb0 [ 138.549231][ T5872] ? clear_bhb_loop+0x60/0xb0 [ 138.553894][ T5872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.559784][ T5872] RIP: 0033:0x7f916998ebe9 [ 138.564190][ T5872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.583788][ T5872] RSP: 002b:00007f916a899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.592193][ T5872] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998ebe9 [ 138.600155][ T5872] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 138.608118][ T5872] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 138.616090][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.624051][ T5872] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 138.632025][ T5872] [ 138.710221][ T5880] Illegal XDP return value 4294967274 on prog (id 296) dev N/A, expect packet loss! [ 139.996700][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.466'. [ 139.998081][ T5899] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.468'. [ 140.026109][ T5904] netlink: 'syz.4.466': attribute type 3 has an invalid length. [ 140.047599][ T5899] netlink: zone id is out of range [ 140.073831][ T5899] netlink: get zone limit has 8 unknown bytes [ 140.231496][ T5911] FAULT_INJECTION: forcing a failure. [ 140.231496][ T5911] name failslab, interval 1, probability 0, space 0, times 0 [ 140.278583][ T5911] CPU: 0 PID: 5911 Comm: syz.3.470 Not tainted 6.1.148-syzkaller #0 [ 140.286629][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.296704][ T5911] Call Trace: [ 140.299990][ T5911] [ 140.302927][ T5911] dump_stack_lvl+0x168/0x22e [ 140.307623][ T5911] ? show_regs_print_info+0x12/0x12 [ 140.312836][ T5911] ? load_image+0x3b0/0x3b0 [ 140.317370][ T5911] ? __might_sleep+0xd0/0xd0 [ 140.321977][ T5911] ? __lock_acquire+0x7c50/0x7c50 [ 140.327024][ T5911] should_fail_ex+0x399/0x4d0 [ 140.331721][ T5911] should_failslab+0x5/0x20 [ 140.336241][ T5911] slab_pre_alloc_hook+0x59/0x310 [ 140.341284][ T5911] ? __get_vm_area_node+0x122/0x330 [ 140.346496][ T5911] __kmem_cache_alloc_node+0x4f/0x260 [ 140.351886][ T5911] ? __get_vm_area_node+0x122/0x330 [ 140.357100][ T5911] kmalloc_node_trace+0x22/0xe0 [ 140.361968][ T5911] __get_vm_area_node+0x122/0x330 [ 140.367008][ T5911] ? __local_bh_enable_ip+0x12a/0x1b0 [ 140.372400][ T5911] __vmalloc_node_range+0x357/0x1390 [ 140.377700][ T5911] ? netlink_sendmsg+0x5dd/0xbc0 [ 140.382651][ T5911] ? release_sock+0x2b/0x1b0 [ 140.387262][ T5911] ? netlink_insert+0x101f/0x13b0 [ 140.392310][ T5911] ? netlink_insert+0x274/0x13b0 [ 140.397276][ T5911] ? free_vm_area+0x50/0x50 [ 140.401803][ T5911] ? netlink_sendmsg+0x5dd/0xbc0 [ 140.406750][ T5911] vmalloc+0x75/0x80 [ 140.410658][ T5911] ? netlink_sendmsg+0x5dd/0xbc0 [ 140.415608][ T5911] netlink_sendmsg+0x5dd/0xbc0 [ 140.420396][ T5911] ? netlink_getsockopt+0x540/0x540 [ 140.425623][ T5911] ? aa_sock_msg_perm+0x94/0x150 [ 140.430589][ T5911] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.435895][ T5911] ? security_socket_sendmsg+0x7c/0xa0 [ 140.441374][ T5911] ? netlink_getsockopt+0x540/0x540 [ 140.446637][ T5911] ____sys_sendmsg+0x59b/0x970 [ 140.451427][ T5911] ? __sys_sendmsg_sock+0x30/0x30 [ 140.456475][ T5911] ? __import_iovec+0x315/0x500 [ 140.461356][ T5911] ? import_iovec+0x6f/0xa0 [ 140.465970][ T5911] ___sys_sendmsg+0x21c/0x290 [ 140.470668][ T5911] ? __sys_sendmsg+0x270/0x270 [ 140.475465][ T5911] ? __lock_acquire+0x7c50/0x7c50 [ 140.480528][ T5911] ? __fdget+0x17c/0x200 [ 140.484793][ T5911] __se_sys_sendmsg+0x19e/0x270 [ 140.489660][ T5911] ? __x64_sys_sendmsg+0x80/0x80 [ 140.494630][ T5911] ? lockdep_hardirqs_on+0x94/0x140 [ 140.499848][ T5911] do_syscall_64+0x4c/0xa0 [ 140.504447][ T5911] ? clear_bhb_loop+0x60/0xb0 [ 140.509133][ T5911] ? clear_bhb_loop+0x60/0xb0 [ 140.513823][ T5911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.519731][ T5911] RIP: 0033:0x7fd532f8ebe9 [ 140.524158][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.543785][ T5911] RSP: 002b:00007fd533d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.552233][ T5911] RAX: ffffffffffffffda RBX: 00007fd5331b6090 RCX: 00007fd532f8ebe9 [ 140.560228][ T5911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 140.568310][ T5911] RBP: 00007fd533d12090 R08: 0000000000000000 R09: 0000000000000000 [ 140.576299][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.584283][ T5911] R13: 00007fd5331b6128 R14: 00007fd5331b6090 R15: 00007ffd9f8755b8 [ 140.592284][ T5911] [ 140.610760][ T5911] syz.3.470: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 140.626509][ T5911] CPU: 0 PID: 5911 Comm: syz.3.470 Not tainted 6.1.148-syzkaller #0 [ 140.634538][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.644624][ T5911] Call Trace: [ 140.647913][ T5911] [ 140.650853][ T5911] dump_stack_lvl+0x168/0x22e [ 140.655547][ T5911] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 140.661989][ T5911] ? show_regs_print_info+0x12/0x12 [ 140.667206][ T5911] ? load_image+0x3b0/0x3b0 [ 140.671729][ T5911] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 140.678162][ T5911] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 140.684687][ T5911] warn_alloc+0x20c/0x300 [ 140.689042][ T5911] ? zone_watermark_ok_safe+0x270/0x270 [ 140.694612][ T5911] ? __get_vm_area_node+0x318/0x330 [ 140.699824][ T5911] ? __local_bh_enable_ip+0x12a/0x1b0 [ 140.705223][ T5911] __vmalloc_node_range+0x37c/0x1390 [ 140.710520][ T5911] ? release_sock+0x2b/0x1b0 [ 140.715136][ T5911] ? netlink_insert+0x101f/0x13b0 [ 140.720178][ T5911] ? netlink_insert+0x274/0x13b0 [ 140.725136][ T5911] ? free_vm_area+0x50/0x50 [ 140.729666][ T5911] ? netlink_sendmsg+0x5dd/0xbc0 [ 140.734605][ T5911] vmalloc+0x75/0x80 [ 140.738513][ T5911] ? netlink_sendmsg+0x5dd/0xbc0 [ 140.743457][ T5911] netlink_sendmsg+0x5dd/0xbc0 [ 140.748241][ T5911] ? netlink_getsockopt+0x540/0x540 [ 140.753465][ T5911] ? aa_sock_msg_perm+0x94/0x150 [ 140.758393][ T5911] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.763666][ T5911] ? security_socket_sendmsg+0x7c/0xa0 [ 140.769118][ T5911] ? netlink_getsockopt+0x540/0x540 [ 140.774303][ T5911] ____sys_sendmsg+0x59b/0x970 [ 140.779060][ T5911] ? __sys_sendmsg_sock+0x30/0x30 [ 140.784068][ T5911] ? __import_iovec+0x315/0x500 [ 140.788929][ T5911] ? import_iovec+0x6f/0xa0 [ 140.793446][ T5911] ___sys_sendmsg+0x21c/0x290 [ 140.798142][ T5911] ? __sys_sendmsg+0x270/0x270 [ 140.802922][ T5911] ? __lock_acquire+0x7c50/0x7c50 [ 140.807946][ T5911] ? __fdget+0x17c/0x200 [ 140.812207][ T5911] __se_sys_sendmsg+0x19e/0x270 [ 140.817047][ T5911] ? __x64_sys_sendmsg+0x80/0x80 [ 140.821980][ T5911] ? lockdep_hardirqs_on+0x94/0x140 [ 140.827182][ T5911] do_syscall_64+0x4c/0xa0 [ 140.831587][ T5911] ? clear_bhb_loop+0x60/0xb0 [ 140.836257][ T5911] ? clear_bhb_loop+0x60/0xb0 [ 140.840942][ T5911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.846843][ T5911] RIP: 0033:0x7fd532f8ebe9 [ 140.851245][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.870849][ T5911] RSP: 002b:00007fd533d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.879275][ T5911] RAX: ffffffffffffffda RBX: 00007fd5331b6090 RCX: 00007fd532f8ebe9 [ 140.887255][ T5911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 140.895232][ T5911] RBP: 00007fd533d12090 R08: 0000000000000000 R09: 0000000000000000 [ 140.903197][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.911155][ T5911] R13: 00007fd5331b6128 R14: 00007fd5331b6090 R15: 00007ffd9f8755b8 [ 140.919125][ T5911] [ 141.045961][ T5911] Mem-Info: [ 141.049147][ T5911] active_anon:5597 inactive_anon:0 isolated_anon:0 [ 141.049147][ T5911] active_file:14493 inactive_file:39861 isolated_file:0 [ 141.049147][ T5911] unevictable:768 dirty:368 writeback:25 [ 141.049147][ T5911] slab_reclaimable:20679 slab_unreclaimable:100239 [ 141.049147][ T5911] mapped:35025 shmem:1361 pagetables:622 [ 141.049147][ T5911] sec_pagetables:0 bounce:0 [ 141.049147][ T5911] kernel_misc_reclaimable:0 [ 141.049147][ T5911] free:1308954 free_pcp:11502 free_cma:0 [ 141.134574][ T5911] Node 0 active_anon:22488kB inactive_anon:0kB active_file:57972kB inactive_file:159244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140100kB dirty:168kB writeback:200kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11764kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no [ 141.169583][ T5911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 141.203198][ T5911] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.233765][ T5911] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 141.239632][ T5911] Node 0 DMA32 free:1326184kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:22488kB inactive_anon:0kB active_file:57972kB inactive_file:159244kB unevictable:1536kB writepending:168kB present:3129332kB managed:2593356kB mlocked:0kB bounce:0kB free_pcp:23676kB local_pcp:10152kB free_cma:0kB [ 141.313120][ T5911] lowmem_reserve[]: 0 0 1 1 1 [ 141.318112][ T5911] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.351482][ T5911] lowmem_reserve[]: 0 0 0 0 0 [ 141.356860][ T5911] Node 1 Normal free:3894020kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21952kB local_pcp:11616kB free_cma:0kB [ 141.400784][ T5911] lowmem_reserve[]: 0 0 0 0 0 [ 141.407127][ T5911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.432333][ T5911] Node 0 DMA32: 562*4kB (U) 471*8kB (UME) 461*16kB (UM) 517*32kB (UM) 326*64kB (UME) 42*128kB (UME) 17*256kB (UM) 5*512kB (UM) 1*1024kB (M) 4*2048kB (ME) 306*4096kB (M) = 1325680kB [ 141.486635][ T5911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 141.505044][ T5911] Node 1 Normal: 241*4kB (UME) 44*8kB (UME) 30*16kB (UE) 24*32kB (UME) 22*64kB (UME) 9*128kB (UME) 5*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894020kB [ 141.529804][ T5911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.555051][ T5911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.564390][ T5911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.627214][ T5911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.660302][ T5911] 55715 total pagecache pages [ 141.672381][ T5911] 0 pages in swap cache [ 141.676933][ T5911] Free swap = 124996kB [ 141.681107][ T5911] Total swap = 124996kB [ 141.694825][ T5911] 2097051 pages RAM [ 141.698981][ T5911] 0 pages HighMem/MovableOnly [ 141.703670][ T5911] 415111 pages reserved [ 141.719756][ T5911] 0 pages cma reserved [ 142.036082][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.481'. [ 142.080510][ T5946] netlink: 'syz.4.481': attribute type 3 has an invalid length. [ 142.357944][ T5949] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.404451][ T5949] netlink: 1 bytes leftover after parsing attributes in process `syz.5.482'. [ 142.982530][ T5955] netlink: 'syz.0.484': attribute type 29 has an invalid length. [ 142.996486][ T5955] netlink: 'syz.0.484': attribute type 29 has an invalid length. [ 143.058874][ T5960] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 143.072332][ T5960] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 143.113347][ T5960] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 143.159811][ T5962] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 143.214689][ T5967] netlink: 'syz.3.486': attribute type 28 has an invalid length. [ 143.246432][ T5967] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 143.276676][ T5967] netlink: 136 bytes leftover after parsing attributes in process `syz.3.486'. [ 143.384417][ T5960] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 143.881822][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 145.192733][ T6006] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.214202][ T6006] netlink: 1 bytes leftover after parsing attributes in process `syz.3.499'. [ 145.666600][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 148.031761][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 148.117542][ T6075] validate_nla: 2 callbacks suppressed [ 148.117578][ T6075] netlink: 'syz.0.521': attribute type 3 has an invalid length. [ 148.198116][ T6079] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 148.204647][ T6079] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 148.272201][ T6078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.522'. [ 150.634528][ T6090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.525'. [ 150.865358][ T6096] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.223037][ T6108] FAULT_INJECTION: forcing a failure. [ 151.223037][ T6108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.305119][ T6108] CPU: 0 PID: 6108 Comm: syz.3.532 Not tainted 6.1.148-syzkaller #0 [ 151.313159][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.323233][ T6108] Call Trace: [ 151.326529][ T6108] [ 151.329474][ T6108] dump_stack_lvl+0x168/0x22e [ 151.334176][ T6108] ? show_regs_print_info+0x12/0x12 [ 151.339394][ T6108] ? load_image+0x3b0/0x3b0 [ 151.343917][ T6108] ? __lock_acquire+0x7c50/0x7c50 [ 151.348964][ T6108] ? verify_lock_unused+0x140/0x140 [ 151.354184][ T6108] should_fail_ex+0x399/0x4d0 [ 151.358891][ T6108] _copy_from_user+0x2c/0x170 [ 151.363587][ T6108] ___sys_sendmsg+0x155/0x290 [ 151.370975][ T6108] ? __sys_sendmsg+0x270/0x270 [ 151.375776][ T6108] ? __lock_acquire+0x7c50/0x7c50 [ 151.380835][ T6108] ? __fdget+0x17c/0x200 [ 151.385098][ T6108] __se_sys_sendmsg+0x19e/0x270 [ 151.389967][ T6108] ? __x64_sys_sendmsg+0x80/0x80 [ 151.394935][ T6108] ? lockdep_hardirqs_on+0x94/0x140 [ 151.400165][ T6108] do_syscall_64+0x4c/0xa0 [ 151.404592][ T6108] ? clear_bhb_loop+0x60/0xb0 [ 151.409287][ T6108] ? clear_bhb_loop+0x60/0xb0 [ 151.413977][ T6108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.419888][ T6108] RIP: 0033:0x7fd532f8ebe9 [ 151.424317][ T6108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.443938][ T6108] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.452372][ T6108] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 151.460363][ T6108] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 151.468350][ T6108] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 151.476341][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.484331][ T6108] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 151.492354][ T6108] [ 152.108167][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.5.536'. [ 152.139829][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.146604][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.165632][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 152.204845][ T6123] netlink: 'syz.1.535': attribute type 3 has an invalid length. [ 152.222089][ T6124] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.266512][ T6124] netlink: 1 bytes leftover after parsing attributes in process `syz.0.534'. [ 153.888996][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'. [ 153.928163][ T6162] netlink: 'syz.0.547': attribute type 3 has an invalid length. [ 154.554544][ T6169] netlink: 'syz.0.549': attribute type 21 has an invalid length. [ 154.575192][ T6169] netlink: 100 bytes leftover after parsing attributes in process `syz.0.549'. [ 154.665104][ T46] wlan1: Trigger new scan to find an IBSS to join [ 154.862755][ T6180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.550'. [ 154.876670][ T6181] FAULT_INJECTION: forcing a failure. [ 154.876670][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.911996][ T6180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.918673][ T6180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.014458][ T6181] CPU: 1 PID: 6181 Comm: syz.4.552 Not tainted 6.1.148-syzkaller #0 [ 155.022496][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.032574][ T6181] Call Trace: [ 155.035874][ T6181] [ 155.038823][ T6181] dump_stack_lvl+0x168/0x22e [ 155.043528][ T6181] ? show_regs_print_info+0x12/0x12 [ 155.048746][ T6181] ? load_image+0x3b0/0x3b0 [ 155.053278][ T6181] ? __lock_acquire+0x7c50/0x7c50 [ 155.058327][ T6181] should_fail_ex+0x399/0x4d0 [ 155.063036][ T6181] _copy_from_user+0x2c/0x170 [ 155.067731][ T6181] __sys_bpf+0x265/0x6d0 [ 155.071990][ T6181] ? bpf_link_show_fdinfo+0x340/0x340 [ 155.077394][ T6181] ? lock_chain_count+0x20/0x20 [ 155.082270][ T6181] __x64_sys_bpf+0x78/0x90 [ 155.086709][ T6181] do_syscall_64+0x4c/0xa0 [ 155.091145][ T6181] ? clear_bhb_loop+0x60/0xb0 [ 155.095833][ T6181] ? clear_bhb_loop+0x60/0xb0 [ 155.100529][ T6181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.106441][ T6181] RIP: 0033:0x7f916998ebe9 [ 155.110866][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.130488][ T6181] RSP: 002b:00007f916a878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.138925][ T6181] RAX: ffffffffffffffda RBX: 00007f9169bb6090 RCX: 00007f916998ebe9 [ 155.147092][ T6181] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 155.155084][ T6181] RBP: 00007f916a878090 R08: 0000000000000000 R09: 0000000000000000 [ 155.163073][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.171062][ T6181] R13: 00007f9169bb6128 R14: 00007f9169bb6090 R15: 00007ffee3ea0678 [ 155.179075][ T6181] [ 155.833089][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 155.862919][ T6200] netlink: 'syz.0.560': attribute type 3 has an invalid length. [ 156.158738][ T6216] netlink: 'syz.5.565': attribute type 10 has an invalid length. [ 157.136698][ T6230] syz.1.568[6230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.136885][ T6230] syz.1.568[6230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.472284][ T6235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.490064][ T6235] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.706426][ T75] wlan1: Trigger new scan to find an IBSS to join [ 158.039072][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.570'. [ 158.322669][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 158.384228][ T6247] netlink: 'syz.4.574': attribute type 3 has an invalid length. [ 159.364502][ T46] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 159.550461][ T6274] netlink: 'syz.1.580': attribute type 2 has an invalid length. [ 159.569498][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.580'. [ 159.776318][ T6280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.584'. [ 159.836100][ T6282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 159.842607][ T6282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.765825][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 160.794966][ T6298] netlink: 'syz.5.588': attribute type 3 has an invalid length. [ 162.375158][ T6329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.596'. [ 162.400870][ T6329] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.407616][ T6329] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.128799][ T6387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.613'. [ 166.150474][ T6387] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.157603][ T6387] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.303498][ T6392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.617'. [ 166.324949][ T6392] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.331677][ T6392] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.411290][ T6427] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.417766][ T6427] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.426220][ T6426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.630'. [ 167.942201][ T6448] netlink: 180 bytes leftover after parsing attributes in process `syz.5.640'. [ 168.044691][ T6453] netlink: 'syz.3.637': attribute type 3 has an invalid length. [ 168.067098][ T6453] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.637'. [ 168.337088][ T6461] netlink: 830 bytes leftover after parsing attributes in process `syz.5.643'. [ 168.684608][ T6465] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.691130][ T6465] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.911429][ T6464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.644'. [ 169.231480][ T6483] FAULT_INJECTION: forcing a failure. [ 169.231480][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 169.256725][ T6483] CPU: 1 PID: 6483 Comm: syz.3.651 Not tainted 6.1.148-syzkaller #0 [ 169.264756][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.274826][ T6483] Call Trace: [ 169.278117][ T6483] [ 169.281054][ T6483] dump_stack_lvl+0x168/0x22e [ 169.285752][ T6483] ? show_regs_print_info+0x12/0x12 [ 169.290974][ T6483] ? load_image+0x3b0/0x3b0 [ 169.295499][ T6483] ? __lock_acquire+0x7c50/0x7c50 [ 169.300542][ T6483] should_fail_ex+0x399/0x4d0 [ 169.305244][ T6483] should_failslab+0x5/0x20 [ 169.309767][ T6483] slab_pre_alloc_hook+0x59/0x310 [ 169.314815][ T6483] kmem_cache_alloc+0x56/0x2f0 [ 169.319592][ T6483] ? security_file_alloc+0x30/0x110 [ 169.324813][ T6483] security_file_alloc+0x30/0x110 [ 169.329852][ T6483] __alloc_file+0xc2/0x230 [ 169.334287][ T6483] alloc_empty_file+0x90/0x180 [ 169.339049][ T6483] alloc_file+0x5c/0x5f0 [ 169.343303][ T6483] alloc_file_pseudo+0x17a/0x1f0 [ 169.348242][ T6483] ? alloc_empty_file_noaccount+0x80/0x80 [ 169.353960][ T6483] ? memset+0x1e/0x40 [ 169.357938][ T6483] ? alloc_perf_context+0x230/0x2d0 [ 169.363137][ T6483] anon_inode_getfile+0xc1/0x1a0 [ 169.368067][ T6483] __se_sys_perf_event_open+0xbf0/0x1e60 [ 169.373692][ T6483] ? __fget_files+0x44a/0x4d0 [ 169.378369][ T6483] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 169.384006][ T6483] ? lockdep_hardirqs_on+0x94/0x140 [ 169.389193][ T6483] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 169.394820][ T6483] do_syscall_64+0x4c/0xa0 [ 169.399224][ T6483] ? clear_bhb_loop+0x60/0xb0 [ 169.403889][ T6483] ? clear_bhb_loop+0x60/0xb0 [ 169.408556][ T6483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.414462][ T6483] RIP: 0033:0x7fd532f8ebe9 [ 169.418882][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.438489][ T6483] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 169.446897][ T6483] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 169.454861][ T6483] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 169.462828][ T6483] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 169.470788][ T6483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 169.478747][ T6483] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 169.486721][ T6483] [ 169.629026][ T6492] FAULT_INJECTION: forcing a failure. [ 169.629026][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.646876][ T6492] CPU: 1 PID: 6492 Comm: syz.4.655 Not tainted 6.1.148-syzkaller #0 [ 169.654905][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.664969][ T6492] Call Trace: [ 169.668258][ T6492] [ 169.671197][ T6492] dump_stack_lvl+0x168/0x22e [ 169.675917][ T6492] ? show_regs_print_info+0x12/0x12 [ 169.681121][ T6492] ? load_image+0x3b0/0x3b0 [ 169.685620][ T6492] ? __lock_acquire+0x7c50/0x7c50 [ 169.690645][ T6492] ? snprintf+0xd7/0x120 [ 169.694888][ T6492] should_fail_ex+0x399/0x4d0 [ 169.699571][ T6492] _copy_to_user+0x2c/0x130 [ 169.704067][ T6492] simple_read_from_buffer+0xe3/0x150 [ 169.709441][ T6492] proc_fail_nth_read+0x19a/0x210 [ 169.714456][ T6492] ? proc_fault_inject_write+0x2f0/0x2f0 [ 169.720082][ T6492] ? fsnotify_perm+0x248/0x550 [ 169.724836][ T6492] ? proc_fault_inject_write+0x2f0/0x2f0 [ 169.730459][ T6492] vfs_read+0x2c0/0x920 [ 169.734643][ T6492] ? kernel_read+0x1e0/0x1e0 [ 169.739245][ T6492] ? __fget_files+0x28/0x4d0 [ 169.743847][ T6492] ? __fget_files+0x44a/0x4d0 [ 169.748536][ T6492] ? __fdget_pos+0x2ae/0x360 [ 169.753140][ T6492] ? ksys_read+0x71/0x240 [ 169.757477][ T6492] ksys_read+0x143/0x240 [ 169.761720][ T6492] ? vfs_write+0x960/0x960 [ 169.766134][ T6492] ? lockdep_hardirqs_on+0x94/0x140 [ 169.771335][ T6492] do_syscall_64+0x4c/0xa0 [ 169.775829][ T6492] ? clear_bhb_loop+0x60/0xb0 [ 169.780500][ T6492] ? clear_bhb_loop+0x60/0xb0 [ 169.785172][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.791057][ T6492] RIP: 0033:0x7f916998d5fc [ 169.795462][ T6492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.815058][ T6492] RSP: 002b:00007f916a899030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.823545][ T6492] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998d5fc [ 169.831506][ T6492] RDX: 000000000000000f RSI: 00007f916a8990a0 RDI: 0000000000000006 [ 169.839464][ T6492] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 169.847424][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.855384][ T6492] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 169.863358][ T6492] [ 171.063883][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.660'. [ 171.113598][ T6512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.120229][ T6512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 172.623257][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'. [ 172.782431][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.5.677'. [ 172.878828][ T6563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 172.885332][ T6563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.337342][ T6598] FAULT_INJECTION: forcing a failure. [ 174.337342][ T6598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.400552][ T6598] CPU: 0 PID: 6598 Comm: syz.3.692 Not tainted 6.1.148-syzkaller #0 [ 174.408594][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.418647][ T6598] Call Trace: [ 174.421920][ T6598] [ 174.424843][ T6598] dump_stack_lvl+0x168/0x22e [ 174.429524][ T6598] ? show_regs_print_info+0x12/0x12 [ 174.434711][ T6598] ? load_image+0x3b0/0x3b0 [ 174.439206][ T6598] ? __lock_acquire+0x7c50/0x7c50 [ 174.444223][ T6598] ? verify_lock_unused+0x140/0x140 [ 174.449413][ T6598] should_fail_ex+0x399/0x4d0 [ 174.454087][ T6598] _copy_from_user+0x2c/0x170 [ 174.458756][ T6598] ___sys_sendmsg+0x155/0x290 [ 174.463423][ T6598] ? __sys_sendmsg+0x270/0x270 [ 174.468192][ T6598] ? __lock_acquire+0x7c50/0x7c50 [ 174.473219][ T6598] ? __fdget+0x17c/0x200 [ 174.477453][ T6598] __se_sys_sendmsg+0x19e/0x270 [ 174.482293][ T6598] ? __x64_sys_sendmsg+0x80/0x80 [ 174.487227][ T6598] ? lockdep_hardirqs_on+0x94/0x140 [ 174.492415][ T6598] do_syscall_64+0x4c/0xa0 [ 174.496816][ T6598] ? clear_bhb_loop+0x60/0xb0 [ 174.501481][ T6598] ? clear_bhb_loop+0x60/0xb0 [ 174.506147][ T6598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.512035][ T6598] RIP: 0033:0x7fd532f8ebe9 [ 174.516442][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.536036][ T6598] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.544438][ T6598] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 174.552394][ T6598] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.560352][ T6598] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 174.568307][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.576265][ T6598] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 174.584231][ T6598] [ 174.830560][ T6612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.696'. [ 174.880832][ T6612] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.887657][ T6612] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.090923][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 177.151041][ T6646] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 177.260629][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.711'. [ 177.443580][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.712'. [ 177.513757][ T6663] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.520720][ T6663] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.739093][ T6674] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.745631][ T6674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.805374][ T6677] netlink: 'syz.3.716': attribute type 3 has an invalid length. [ 177.844070][ T6677] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 177.905297][ T6677] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.716'. [ 179.691581][ T6695] netlink: 'syz.5.722': attribute type 39 has an invalid length. [ 179.706516][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 179.716197][ T6696] netlink: 'syz.4.723': attribute type 3 has an invalid length. [ 180.118440][ T6702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.726'. [ 180.322358][ T6712] FAULT_INJECTION: forcing a failure. [ 180.322358][ T6712] name failslab, interval 1, probability 0, space 0, times 0 [ 180.372088][ T6712] CPU: 0 PID: 6712 Comm: syz.4.731 Not tainted 6.1.148-syzkaller #0 [ 180.380220][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.390382][ T6712] Call Trace: [ 180.393669][ T6712] [ 180.396606][ T6712] dump_stack_lvl+0x168/0x22e [ 180.401302][ T6712] ? show_regs_print_info+0x12/0x12 [ 180.406514][ T6712] ? load_image+0x3b0/0x3b0 [ 180.411038][ T6712] ? __might_sleep+0xd0/0xd0 [ 180.415651][ T6712] ? __lock_acquire+0x7c50/0x7c50 [ 180.420791][ T6712] should_fail_ex+0x399/0x4d0 [ 180.425496][ T6712] should_failslab+0x5/0x20 [ 180.430012][ T6712] slab_pre_alloc_hook+0x59/0x310 [ 180.435030][ T6712] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 180.440744][ T6712] __kmem_cache_alloc_node+0x4f/0x260 [ 180.446109][ T6712] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 180.451820][ T6712] __kmalloc+0xa0/0x240 [ 180.456004][ T6712] tomoyo_realpath_from_path+0xdf/0x5d0 [ 180.461551][ T6712] tomoyo_path_number_perm+0x1e3/0x600 [ 180.467003][ T6712] ? tomoyo_path_number_perm+0x1b6/0x600 [ 180.472626][ T6712] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 180.478077][ T6712] ? ksys_write+0x1bd/0x240 [ 180.482578][ T6712] ? common_file_perm+0x171/0x1c0 [ 180.487703][ T6712] ? __fget_files+0x28/0x4d0 [ 180.492297][ T6712] security_file_ioctl+0x6c/0xa0 [ 180.497320][ T6712] __se_sys_ioctl+0x48/0x170 [ 180.501904][ T6712] do_syscall_64+0x4c/0xa0 [ 180.506309][ T6712] ? clear_bhb_loop+0x60/0xb0 [ 180.510976][ T6712] ? clear_bhb_loop+0x60/0xb0 [ 180.515645][ T6712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.521534][ T6712] RIP: 0033:0x7f916998ebe9 [ 180.525941][ T6712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.545539][ T6712] RSP: 002b:00007f916a899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.553945][ T6712] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998ebe9 [ 180.561906][ T6712] RDX: 0000000000000000 RSI: 0000000000008919 RDI: 0000000000000003 [ 180.569867][ T6712] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 180.577825][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.585786][ T6712] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 180.593759][ T6712] [ 180.643437][ T6712] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.835378][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 180.841489][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 180.848375][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 180.848418][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 180.854392][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 181.872146][ T6738] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.878648][ T6738] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.920379][ T6738] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 181.948204][ T6738] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 181.998423][ T6738] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.738'. [ 183.324600][ T6765] FAULT_INJECTION: forcing a failure. [ 183.324600][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 183.388346][ T6768] delete_channel: no stack [ 183.414848][ T6765] CPU: 1 PID: 6765 Comm: syz.3.751 Not tainted 6.1.148-syzkaller #0 [ 183.422894][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.432973][ T6765] Call Trace: [ 183.436273][ T6765] [ 183.439226][ T6765] dump_stack_lvl+0x168/0x22e [ 183.443931][ T6765] ? show_regs_print_info+0x12/0x12 [ 183.447984][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.753'. [ 183.449170][ T6765] ? load_image+0x3b0/0x3b0 [ 183.449218][ T6765] should_fail_ex+0x399/0x4d0 [ 183.449257][ T6765] should_failslab+0x5/0x20 [ 183.471858][ T6765] slab_pre_alloc_hook+0x59/0x310 [ 183.476915][ T6765] kmem_cache_alloc+0x56/0x2f0 [ 183.481697][ T6765] ? skb_clone+0x1e7/0x370 [ 183.486139][ T6765] skb_clone+0x1e7/0x370 [ 183.490408][ T6765] bpf_clone_redirect+0xa9/0x3c0 [ 183.495381][ T6765] bpf_prog_3aea14b1f6cd0d8b+0x56/0x5b [ 183.500863][ T6765] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 183.506475][ T6775] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 183.506857][ T6765] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 183.506888][ T6765] ? lock_chain_count+0x20/0x20 [ 183.506908][ T6765] ? rcu_is_watching+0x11/0xa0 [ 183.506933][ T6765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 183.513463][ T6775] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.519218][ T6765] ? lockdep_hardirqs_on+0x94/0x140 [ 183.519253][ T6765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 183.519287][ T6765] ? bpf_prog_3aea14b1f6cd0d8b+0x5/0x5b [ 183.519309][ T6765] bpf_test_run+0x4a9/0x7d0 [ 183.519352][ T6765] ? convert___skb_to_skb+0x580/0x580 [ 183.568272][ T6765] ? eth_get_headlen+0x1f0/0x1f0 [ 183.573228][ T6765] ? __build_skb+0x257/0x3c0 [ 183.577845][ T6765] ? convert___skb_to_skb+0x3d/0x580 [ 183.583155][ T6765] bpf_prog_test_run_skb+0xa40/0x11b0 [ 183.588568][ T6765] ? cpu_online+0xa0/0xa0 [ 183.592923][ T6765] bpf_prog_test_run+0x31e/0x390 [ 183.597888][ T6765] __sys_bpf+0x593/0x6d0 [ 183.602156][ T6765] ? bpf_link_show_fdinfo+0x340/0x340 [ 183.607562][ T6765] ? lock_chain_count+0x20/0x20 [ 183.612426][ T6765] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 183.618435][ T6765] __x64_sys_bpf+0x78/0x90 [ 183.622867][ T6765] do_syscall_64+0x4c/0xa0 [ 183.627298][ T6765] ? clear_bhb_loop+0x60/0xb0 [ 183.631987][ T6765] ? clear_bhb_loop+0x60/0xb0 [ 183.636680][ T6765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.642597][ T6765] RIP: 0033:0x7fd532f8ebe9 [ 183.647023][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.666732][ T6765] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.675171][ T6765] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 183.683157][ T6765] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 183.691136][ T6765] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 183.699110][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.707091][ T6765] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 183.715109][ T6765] [ 184.381434][ T6793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.387925][ T6793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.447159][ T6796] netlink: 'syz.4.758': attribute type 3 has an invalid length. [ 184.462340][ T6796] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 184.480377][ T6796] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.758'. [ 184.534314][ T6795] FAULT_INJECTION: forcing a failure. [ 184.534314][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 184.563599][ T6795] CPU: 1 PID: 6795 Comm: syz.3.760 Not tainted 6.1.148-syzkaller #0 [ 184.571634][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.581710][ T6795] Call Trace: [ 184.585004][ T6795] [ 184.587952][ T6795] dump_stack_lvl+0x168/0x22e [ 184.592652][ T6795] ? trace_event_raw_event_lock+0x230/0x230 [ 184.598567][ T6795] ? show_regs_print_info+0x12/0x12 [ 184.603781][ T6795] ? load_image+0x3b0/0x3b0 [ 184.608328][ T6795] should_fail_ex+0x399/0x4d0 [ 184.613038][ T6795] should_failslab+0x5/0x20 [ 184.617565][ T6795] slab_pre_alloc_hook+0x59/0x310 [ 184.622617][ T6795] kmem_cache_alloc+0x56/0x2f0 [ 184.627396][ T6795] ? __nf_conntrack_alloc+0x99/0x380 [ 184.632712][ T6795] __nf_conntrack_alloc+0x99/0x380 [ 184.637886][ T6795] init_conntrack+0x22d/0x1140 [ 184.642674][ T6795] ? lockdep_hardirqs_on+0x94/0x140 [ 184.647897][ T6795] ? early_drop+0x850/0x850 [ 184.652423][ T6795] nf_conntrack_in+0xcf5/0x1770 [ 184.657295][ T6795] ? nf_ct_pernet+0x270/0x270 [ 184.662017][ T6795] ? ip6t_alloc_initial_table+0x640/0x640 [ 184.667737][ T6795] ? ipv6_defrag+0x2d2/0x3a0 [ 184.672326][ T6795] ? ipv6_conntrack_in+0x20/0x20 [ 184.677257][ T6795] nf_hook_slow+0xb9/0x200 [ 184.681671][ T6795] __ip6_local_out+0x76e/0x880 [ 184.686428][ T6795] ? __ip6_local_out+0x60c/0x880 [ 184.691355][ T6795] ? ip6_dst_hoplimit+0x340/0x340 [ 184.696372][ T6795] ? ip6_setup_cork+0xa30/0xfe0 [ 184.701218][ T6795] ? __ip6_local_out+0x880/0x880 [ 184.706144][ T6795] ? read_lock_is_recursive+0x10/0x10 [ 184.711516][ T6795] ? csum_partial+0x23d/0x2c0 [ 184.716191][ T6795] ? __skb_checksum+0x7a0/0x7a0 [ 184.721208][ T6795] ip6_local_out+0x26/0x120 [ 184.725703][ T6795] ? ip6_send_skb+0x10b/0x380 [ 184.730370][ T6795] ip6_send_skb+0x1d1/0x380 [ 184.734959][ T6795] udp_v6_send_skb+0xb62/0x17f0 [ 184.740076][ T6795] udpv6_sendmsg+0x1c3e/0x2370 [ 184.745009][ T6795] ? udpv6_sendmsg+0x2370/0x2370 [ 184.749944][ T6795] ? udp_v6_early_demux+0xf50/0xf50 [ 184.755132][ T6795] ? ct_irq_exit_irqson+0xfa/0x160 [ 184.760241][ T6795] ? lock_chain_count+0x20/0x20 [ 184.765098][ T6795] ? _local_bh_enable+0xa0/0xa0 [ 184.769948][ T6795] ? release_sock+0x2b/0x1b0 [ 184.774533][ T6795] ? inet_send_prepare+0x1af/0x260 [ 184.779651][ T6795] ? inet_send_prepare+0x1af/0x260 [ 184.784756][ T6795] ? inet6_sendmsg+0x5b/0xd0 [ 184.789335][ T6795] ? inet6_compat_ioctl+0x380/0x380 [ 184.794520][ T6795] ____sys_sendmsg+0x59b/0x970 [ 184.799274][ T6795] ? __lock_acquire+0x7c50/0x7c50 [ 184.804294][ T6795] ? __sys_sendmsg_sock+0x30/0x30 [ 184.809307][ T6795] ? __import_iovec+0x315/0x500 [ 184.814177][ T6795] ? import_iovec+0x6f/0xa0 [ 184.818678][ T6795] ___sys_sendmsg+0x21c/0x290 [ 184.823348][ T6795] ? __sys_sendmsg+0x270/0x270 [ 184.828137][ T6795] ? __fdget+0x17c/0x200 [ 184.832377][ T6795] __se_sys_sendmsg+0x19e/0x270 [ 184.837222][ T6795] ? __x64_sys_sendmsg+0x80/0x80 [ 184.842163][ T6795] ? syscall_enter_from_user_mode+0x2a/0x80 [ 184.848100][ T6795] do_syscall_64+0x4c/0xa0 [ 184.852503][ T6795] ? clear_bhb_loop+0x60/0xb0 [ 184.857168][ T6795] ? clear_bhb_loop+0x60/0xb0 [ 184.861834][ T6795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.867724][ T6795] RIP: 0033:0x7fd532f8ebe9 [ 184.872131][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.891727][ T6795] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.900136][ T6795] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 184.908098][ T6795] RDX: 0000000004000080 RSI: 0000200000000580 RDI: 0000000000000009 [ 184.916057][ T6795] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 184.924108][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.932068][ T6795] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 184.940043][ T6795] [ 185.190987][ T6806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 185.277004][ T4589] bridge0: port 3(team0) entered disabled state [ 186.071022][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 186.082601][ T6835] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 186.094986][ T6837] netlink: 'syz.4.773': attribute type 3 has an invalid length. [ 186.128116][ T6835] device 0 entered promiscuous mode [ 187.117359][ T6852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.779'. [ 187.584047][ T6870] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.590537][ T6870] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.604842][ T6870] netlink: 'syz.1.784': attribute type 3 has an invalid length. [ 187.612811][ T6870] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 187.631044][ T6870] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.784'. [ 187.661830][ T6872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 187.683483][ T6872] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.690284][ T6872] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.077279][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.788'. [ 188.101047][ T6877] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 188.300881][ T6885] device syzkaller0 entered promiscuous mode [ 188.372368][ T6888] netlink: 'syz.5.791': attribute type 11 has an invalid length. [ 188.409568][ T6888] netlink: 'syz.5.791': attribute type 11 has an invalid length. [ 188.455377][ T6888] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.791'. [ 188.790367][ T6905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 189.216008][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.805'. [ 189.255591][ T6919] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.262509][ T6919] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.401366][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 189.849331][ T6923] can: request_module (can-proto-0) failed. [ 189.905278][ T6936] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 189.964999][ T6936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 190.004474][ T6936] device batadv0 entered promiscuous mode [ 190.076122][ T6936] bridge0: port 4(batadv0) entered blocking state [ 190.095130][ T6936] bridge0: port 4(batadv0) entered disabled state [ 190.143656][ T6936] bridge0: port 4(batadv0) entered blocking state [ 190.150304][ T6936] bridge0: port 4(batadv0) entered forwarding state [ 190.340490][ T38] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 190.349789][ T38] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 190.956942][ T6973] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.963567][ T6973] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.158909][ T6951] device syzkaller0 entered promiscuous mode [ 191.200084][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.207611][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.243958][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 191.255248][ T6972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'. [ 193.733132][ T7007] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.833'. [ 193.758581][ T7007] openvswitch: netlink: Message has 48126 unknown bytes. [ 193.798087][ T7007] delete_channel: no stack [ 193.807769][ T7007] delete_channel: no stack [ 194.406143][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412636][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.637030][ T7020] netlink: 'syz.5.837': attribute type 2 has an invalid length. [ 194.648040][ T7023] syz.0.838 uses obsolete (PF_INET,SOCK_PACKET) [ 194.700504][ T7020] device 0 entered promiscuous mode [ 196.905764][ T7050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.958240][ T4589] bridge0: port 3(team0) entered disabled state [ 197.024805][ T7061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.850'. [ 197.069175][ T7061] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 197.076147][ T7061] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 197.594583][ T7072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.853'. [ 197.657024][ T7074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 197.663531][ T7074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 198.195791][ T7091] netlink: 'syz.5.862': attribute type 16 has an invalid length. [ 198.215152][ T7093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 198.291967][ T7100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.865'. [ 198.312477][ T7100] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 198.319277][ T7100] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 198.517052][ T7106] netlink: 'syz.3.866': attribute type 2 has an invalid length. [ 198.546998][ T7106] device 1 entered promiscuous mode [ 198.626943][ T7107] netlink: 'syz.0.868': attribute type 39 has an invalid length. [ 200.789300][ T7127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 201.127107][ T7130] FAULT_INJECTION: forcing a failure. [ 201.127107][ T7130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.171677][ T7130] CPU: 1 PID: 7130 Comm: syz.4.877 Not tainted 6.1.148-syzkaller #0 [ 201.179724][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.189793][ T7130] Call Trace: [ 201.193083][ T7130] [ 201.196025][ T7130] dump_stack_lvl+0x168/0x22e [ 201.200718][ T7130] ? show_regs_print_info+0x12/0x12 [ 201.205928][ T7130] ? load_image+0x3b0/0x3b0 [ 201.210456][ T7130] ? __lock_acquire+0x7c50/0x7c50 [ 201.215499][ T7130] should_fail_ex+0x399/0x4d0 [ 201.220184][ T7130] prepare_alloc_pages+0x1e2/0x5f0 [ 201.225314][ T7130] __alloc_pages+0x123/0x4e0 [ 201.229910][ T7130] ? zone_statistics+0x170/0x170 [ 201.234856][ T7130] __pmd_alloc+0xaf/0x730 [ 201.239192][ T7130] ? __pud_alloc+0x150/0x150 [ 201.243780][ T7130] ? count_memcg_event_mm+0x358/0x3b0 [ 201.249146][ T7130] ? __lock_acquire+0x7c50/0x7c50 [ 201.254163][ T7130] ? count_memcg_event_mm+0x8f/0x3b0 [ 201.259441][ T7130] ? put_page+0x270/0x270 [ 201.263764][ T7130] ? hugepage_vma_check+0x466/0x540 [ 201.268957][ T7130] handle_mm_fault+0x9b7/0x3e70 [ 201.273821][ T7130] ? mt_find+0x145/0x810 [ 201.278070][ T7130] ? numa_migrate_prep+0x250/0x250 [ 201.283199][ T7130] ? lock_chain_count+0x20/0x20 [ 201.288097][ T7130] ? perf_trace_lock+0xf3/0x370 [ 201.292952][ T7130] ? lock_mm_and_find_vma+0xae/0x2f0 [ 201.298246][ T7130] do_user_addr_fault+0x51f/0xb10 [ 201.303279][ T7130] exc_page_fault+0x60/0x100 [ 201.307866][ T7130] asm_exc_page_fault+0x22/0x30 [ 201.312712][ T7130] RIP: 0010:copy_user_short_string+0xa/0x40 [ 201.318602][ T7130] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 201.338392][ T7130] RSP: 0018:ffffc90004b8fa88 EFLAGS: 00050202 [ 201.344446][ T7130] RAX: ffffffff84068501 RBX: 0000000000000020 RCX: 0000000000000004 [ 201.352407][ T7130] RDX: 0000000000000000 RSI: 000000110c230000 RDI: ffff88802f040300 [ 201.360370][ T7130] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005e08064 [ 201.368328][ T7130] R10: ffffed1005e08064 R11: 1ffff11005e08060 R12: 00007fffffffefe0 [ 201.376290][ T7130] R13: ffff88802f040300 R14: ffff88802f040300 R15: 000000110c230000 [ 201.384258][ T7130] ? _copy_from_user+0x41/0x170 [ 201.389114][ T7130] _copy_from_user+0xf4/0x170 [ 201.393781][ T7130] ioctl_standard_iw_point+0x58a/0xc90 [ 201.399232][ T7130] ? rcu_is_watching+0x11/0xa0 [ 201.403994][ T7130] ? __cfg80211_wext_giwscan+0x30/0x30 [ 201.409445][ T7130] ? iw_handler_get_iwstats+0x240/0x240 [ 201.414978][ T7130] ? wext_ioctl_dispatch+0xaf/0x470 [ 201.420165][ T7130] ? mutex_lock_nested+0x10/0x10 [ 201.425092][ T7130] ? full_name_hash+0x8e/0xe0 [ 201.429787][ T7130] ? __cfg80211_wext_giwscan+0x30/0x30 [ 201.435242][ T7130] ioctl_standard_call+0xb3/0x2b0 [ 201.440299][ T7130] ? __cfg80211_wext_giwscan+0x30/0x30 [ 201.445748][ T7130] wext_ioctl_dispatch+0x3da/0x470 [ 201.450846][ T7130] ? wext_ioctl_dispatch+0x470/0x470 [ 201.456126][ T7130] ? iw_handler_get_private+0x1e0/0x1e0 [ 201.461659][ T7130] wext_handle_ioctl+0x104/0x1c0 [ 201.466588][ T7130] ? call_commit_handler+0xf0/0xf0 [ 201.471700][ T7130] sock_ioctl+0x145/0x6e0 [ 201.476023][ T7130] ? sock_poll+0x3f0/0x3f0 [ 201.480434][ T7130] ? bpf_lsm_file_ioctl+0x5/0x10 [ 201.485362][ T7130] ? security_file_ioctl+0x7c/0xa0 [ 201.490463][ T7130] ? sock_poll+0x3f0/0x3f0 [ 201.494876][ T7130] __se_sys_ioctl+0xfa/0x170 [ 201.499461][ T7130] do_syscall_64+0x4c/0xa0 [ 201.503864][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 201.508526][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 201.513191][ T7130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.519083][ T7130] RIP: 0033:0x7f916998ebe9 [ 201.523486][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.543102][ T7130] RSP: 002b:00007f916a899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.551504][ T7130] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998ebe9 [ 201.559463][ T7130] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005 [ 201.567426][ T7130] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 201.575390][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.583348][ T7130] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 201.591327][ T7130] [ 201.858872][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.865354][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 202.002696][ T7130] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 202.061101][ T7144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.881'. [ 202.680399][ T7157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.893'. [ 202.732236][ T7160] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 202.738725][ T7160] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 202.975770][ T7169] netlink: 'syz.1.887': attribute type 2 has an invalid length. [ 203.017260][ T7169] device 1 entered promiscuous mode [ 203.669129][ T7179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.745526][ T4346] wlan1: Trigger new scan to find an IBSS to join [ 205.971757][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.903'. [ 206.019325][ T7211] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.026001][ T7211] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.360539][ T7217] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.445443][ T7219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 208.639233][ T7258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 208.645735][ T7258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.745165][ T4589] wlan1: Trigger new scan to find an IBSS to join [ 208.771752][ T7245] device syzkaller0 entered promiscuous mode [ 208.787407][ T7256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.918'. [ 208.823428][ T7259] device veth1_macvtap left promiscuous mode [ 208.914029][ T7268] device veth1_macvtap entered promiscuous mode [ 208.921104][ T7268] device macsec0 entered promiscuous mode [ 208.931015][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 208.947463][ T7269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 210.084231][ T75] wlan1: Creating new IBSS network, BSSID 92:90:78:cd:9e:04 [ 212.977462][ T7315] netlink: 'syz.5.934': attribute type 1 has an invalid length. [ 213.059660][ T7315] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.934'. [ 213.123384][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'. [ 213.132784][ T7323] netlink: 'syz.4.936': attribute type 3 has an invalid length. [ 213.178999][ T7324] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 213.999015][ T7329] FAULT_INJECTION: forcing a failure. [ 213.999015][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 214.018476][ T7329] CPU: 1 PID: 7329 Comm: syz.1.939 Not tainted 6.1.148-syzkaller #0 [ 214.026506][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.036585][ T7329] Call Trace: [ 214.039865][ T7329] [ 214.042779][ T7329] dump_stack_lvl+0x168/0x22e [ 214.047443][ T7329] ? show_regs_print_info+0x12/0x12 [ 214.052625][ T7329] ? load_image+0x3b0/0x3b0 [ 214.057115][ T7329] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.063084][ T7329] ? lock_chain_count+0x20/0x20 [ 214.067920][ T7329] should_fail_ex+0x399/0x4d0 [ 214.072587][ T7329] should_failslab+0x5/0x20 [ 214.077084][ T7329] slab_pre_alloc_hook+0x59/0x310 [ 214.082105][ T7329] kmem_cache_alloc+0x56/0x2f0 [ 214.086858][ T7329] ? __build_skb+0x2a/0x3c0 [ 214.091353][ T7329] __build_skb+0x2a/0x3c0 [ 214.095678][ T7329] build_skb+0x1e/0x230 [ 214.099825][ T7329] bpf_prog_test_run_skb+0x372/0x11b0 [ 214.105188][ T7329] ? __fget_files+0x28/0x4d0 [ 214.109768][ T7329] ? __fget_files+0x44a/0x4d0 [ 214.114438][ T7329] ? cpu_online+0xa0/0xa0 [ 214.118771][ T7329] bpf_prog_test_run+0x31e/0x390 [ 214.123701][ T7329] __sys_bpf+0x593/0x6d0 [ 214.127940][ T7329] ? bpf_link_show_fdinfo+0x340/0x340 [ 214.133314][ T7329] ? lock_chain_count+0x20/0x20 [ 214.138160][ T7329] __x64_sys_bpf+0x78/0x90 [ 214.142567][ T7329] do_syscall_64+0x4c/0xa0 [ 214.146969][ T7329] ? clear_bhb_loop+0x60/0xb0 [ 214.151629][ T7329] ? clear_bhb_loop+0x60/0xb0 [ 214.156291][ T7329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.162174][ T7329] RIP: 0033:0x7fafc418ebe9 [ 214.166579][ T7329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.186172][ T7329] RSP: 002b:00007fafc5007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.194578][ T7329] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418ebe9 [ 214.202534][ T7329] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 214.210491][ T7329] RBP: 00007fafc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 214.218450][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.226406][ T7329] R13: 00007fafc43b6038 R14: 00007fafc43b5fa0 R15: 00007ffd8698e088 [ 214.234373][ T7329] [ 214.482925][ T7334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.853304][ T7372] netlink: 'syz.1.954': attribute type 7 has an invalid length. [ 216.388457][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 216.402035][ T7382] netlink: 'syz.1.959': attribute type 3 has an invalid length. [ 216.870314][ T7394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.962'. [ 216.938573][ T7397] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.945083][ T7397] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 217.771809][ T7423] FAULT_INJECTION: forcing a failure. [ 217.771809][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 217.823660][ T7425] netlink: 'syz.5.973': attribute type 10 has an invalid length. [ 217.915337][ T7423] CPU: 0 PID: 7423 Comm: syz.4.974 Not tainted 6.1.148-syzkaller #0 [ 217.923383][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.933449][ T7423] Call Trace: [ 217.936737][ T7423] [ 217.939675][ T7423] dump_stack_lvl+0x168/0x22e [ 217.944371][ T7423] ? show_regs_print_info+0x12/0x12 [ 217.949580][ T7423] ? load_image+0x3b0/0x3b0 [ 217.954102][ T7423] ? __might_sleep+0xd0/0xd0 [ 217.958703][ T7423] ? __lock_acquire+0x7c50/0x7c50 [ 217.963741][ T7423] should_fail_ex+0x399/0x4d0 [ 217.968436][ T7423] should_failslab+0x5/0x20 [ 217.972430][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.972932][ T7423] slab_pre_alloc_hook+0x59/0x310 [ 217.980070][ T7425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.984941][ T7423] ? sock_kmalloc+0x92/0xf0 [ 217.984963][ T7423] __kmem_cache_alloc_node+0x4f/0x260 [ 217.984983][ T7423] ? sock_kmalloc+0x92/0xf0 [ 217.984997][ T7423] __kmalloc+0xa0/0x240 [ 217.985019][ T7423] sock_kmalloc+0x92/0xf0 [ 217.992420][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.996681][ T7423] ____sys_sendmsg+0x19e/0x970 [ 217.996705][ T7423] ? iovec_from_user+0x2dc/0x360 [ 217.996730][ T7423] ? __sys_sendmsg_sock+0x30/0x30 [ 218.002167][ T7425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.006565][ T7423] ? __import_iovec+0x315/0x500 [ 218.006595][ T7423] ? import_iovec+0x6f/0xa0 [ 218.006623][ T7423] ___sys_sendmsg+0x21c/0x290 [ 218.057974][ T7423] ? __sys_sendmsg+0x270/0x270 [ 218.062777][ T7423] ? ktime_get_real_ts64+0x420/0x420 [ 218.068091][ T7423] ? __fdget+0x17c/0x200 [ 218.072341][ T7423] __se_sys_sendmsg+0x19e/0x270 [ 218.077197][ T7423] ? perf_trace_preemptirq_template+0x287/0x330 [ 218.083433][ T7423] ? __x64_sys_sendmsg+0x80/0x80 [ 218.088372][ T7423] ? lockdep_hardirqs_on+0x94/0x140 [ 218.093568][ T7423] do_syscall_64+0x4c/0xa0 [ 218.097969][ T7423] ? clear_bhb_loop+0x60/0xb0 [ 218.102629][ T7423] ? clear_bhb_loop+0x60/0xb0 [ 218.107293][ T7423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.113176][ T7423] RIP: 0033:0x7f916998ebe9 [ 218.117578][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.137177][ T7423] RSP: 002b:00007f916a899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.145575][ T7423] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998ebe9 [ 218.153534][ T7423] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000006 [ 218.161492][ T7423] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 218.169448][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.177407][ T7423] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 218.185375][ T7423] [ 218.237573][ T7425] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 218.603692][ T7439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 218.654376][ T7441] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.660886][ T7441] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.863854][ T7450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.980'. [ 218.889219][ T7450] netlink: 'syz.5.980': attribute type 3 has an invalid length. [ 219.094411][ T7457] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.985'. [ 219.364250][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.989'. [ 219.386590][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.989'. [ 219.445743][ T7466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.989'. [ 219.491667][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.989'. [ 219.715800][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.996'. [ 219.737343][ T7486] netlink: 'syz.3.996': attribute type 3 has an invalid length. [ 220.005658][ T7495] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.012342][ T7495] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 220.327967][ T4346] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.753711][ T4276] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 220.761704][ T4276] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 220.845213][ T7517] FAULT_INJECTION: forcing a failure. [ 220.845213][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.859167][ T7517] CPU: 1 PID: 7517 Comm: syz.3.1007 Not tainted 6.1.148-syzkaller #0 [ 220.867273][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.877199][ T7514] netlink: 'syz.5.1005': attribute type 10 has an invalid length. [ 220.877322][ T7517] Call Trace: [ 220.877332][ T7517] [ 220.877341][ T7517] dump_stack_lvl+0x168/0x22e [ 220.877369][ T7517] ? show_regs_print_info+0x12/0x12 [ 220.877388][ T7517] ? load_image+0x3b0/0x3b0 [ 220.877414][ T7517] ? __lock_acquire+0x7c50/0x7c50 [ 220.877436][ T7517] ? __rcu_read_unlock+0x78/0xd0 [ 220.915851][ T7517] should_fail_ex+0x399/0x4d0 [ 220.920547][ T7517] _copy_to_user+0x2c/0x130 [ 220.925042][ T7517] bpf_test_finish+0x4fa/0x600 [ 220.929803][ T7517] ? convert___skb_to_skb+0x580/0x580 [ 220.935170][ T7517] ? convert_skb_to___skb+0x420/0x420 [ 220.940540][ T7517] ? __build_skb+0x257/0x3c0 [ 220.945136][ T7517] bpf_prog_test_run_skb+0xc03/0x11b0 [ 220.950528][ T7517] ? cpu_online+0xa0/0xa0 [ 220.954858][ T7517] bpf_prog_test_run+0x31e/0x390 [ 220.959798][ T7517] __sys_bpf+0x593/0x6d0 [ 220.964041][ T7517] ? bpf_link_show_fdinfo+0x340/0x340 [ 220.969419][ T7517] ? lock_chain_count+0x20/0x20 [ 220.974272][ T7517] __x64_sys_bpf+0x78/0x90 [ 220.978678][ T7517] do_syscall_64+0x4c/0xa0 [ 220.983081][ T7517] ? clear_bhb_loop+0x60/0xb0 [ 220.987743][ T7517] ? clear_bhb_loop+0x60/0xb0 [ 220.992410][ T7517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.998306][ T7517] RIP: 0033:0x7fd532f8ebe9 [ 221.002710][ T7517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.022302][ T7517] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.030707][ T7517] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 221.038668][ T7517] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 221.046628][ T7517] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 221.054585][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.062544][ T7517] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 221.070518][ T7517] [ 221.089843][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.099224][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.245171][ T7520] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 221.389995][ T7529] netlink: 'syz.1.1010': attribute type 3 has an invalid length. [ 221.721650][ T7543] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 222.033518][ T7549] __nla_validate_parse: 7 callbacks suppressed [ 222.033535][ T7549] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1018'. [ 222.805132][ T7561] netlink: 'syz.0.1021': attribute type 21 has an invalid length. [ 223.062068][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 223.089335][ T7573] netlink: 'syz.3.1024': attribute type 3 has an invalid length. [ 223.111743][ T7572] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 225.647002][ T7594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 225.814572][ T7598] netlink: 'syz.5.1033': attribute type 1 has an invalid length. [ 225.897728][ T7598] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.1033'. [ 225.984392][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 226.026188][ T7613] netlink: 'syz.1.1039': attribute type 3 has an invalid length. [ 226.088366][ T7615] netlink: 'syz.3.1041': attribute type 16 has an invalid length. [ 226.345283][ T7629] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 226.914112][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 227.504024][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'. [ 227.533199][ T7659] netlink: 'syz.1.1054': attribute type 3 has an invalid length. [ 227.790080][ T7668] netlink: 'syz.4.1056': attribute type 16 has an invalid length. [ 228.043301][ T7650] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 228.064662][ T7675] FAULT_INJECTION: forcing a failure. [ 228.064662][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 228.104266][ T7650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1051'. [ 228.108381][ T7675] CPU: 0 PID: 7675 Comm: syz.3.1060 Not tainted 6.1.148-syzkaller #0 [ 228.121397][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.131443][ T7675] Call Trace: [ 228.134708][ T7675] [ 228.137626][ T7675] dump_stack_lvl+0x168/0x22e [ 228.142294][ T7675] ? show_regs_print_info+0x12/0x12 [ 228.147479][ T7675] ? load_image+0x3b0/0x3b0 [ 228.151971][ T7675] ? __might_sleep+0xd0/0xd0 [ 228.156552][ T7675] ? __lock_acquire+0x7c50/0x7c50 [ 228.161567][ T7675] should_fail_ex+0x399/0x4d0 [ 228.166242][ T7675] should_failslab+0x5/0x20 [ 228.170735][ T7675] slab_pre_alloc_hook+0x59/0x310 [ 228.175747][ T7675] ? kvmalloc_node+0x6c/0x180 [ 228.180417][ T7675] __kmem_cache_alloc_node+0x4f/0x260 [ 228.185776][ T7675] ? kvmalloc_node+0x6c/0x180 [ 228.190445][ T7675] __kmalloc_node+0xa0/0x240 [ 228.195028][ T7675] kvmalloc_node+0x6c/0x180 [ 228.199521][ T7675] page_pool_create+0x1f3/0x5d0 [ 228.204364][ T7675] bpf_test_run_xdp_live+0x1c3/0x1970 [ 228.209729][ T7675] ? verify_lock_unused+0x140/0x140 [ 228.214917][ T7675] ? kasan_set_track+0x60/0x70 [ 228.219667][ T7675] ? kasan_set_track+0x4b/0x70 [ 228.224417][ T7675] ? __kasan_kmalloc+0x8e/0xa0 [ 228.229166][ T7675] ? __kmalloc+0xb0/0x240 [ 228.233483][ T7675] ? bpf_test_init+0xc0/0x150 [ 228.238150][ T7675] ? bpf_prog_test_run_xdp+0x359/0xe50 [ 228.243599][ T7675] ? __sys_bpf+0x593/0x6d0 [ 228.248001][ T7675] ? __x64_sys_bpf+0x78/0x90 [ 228.252574][ T7675] ? do_syscall_64+0x4c/0xa0 [ 228.257156][ T7675] ? xdp_convert_md_to_buff+0x330/0x330 [ 228.262703][ T7675] ? __lock_acquire+0x7c50/0x7c50 [ 228.267721][ T7675] ? __virt_addr_valid+0x188/0x540 [ 228.272828][ T7675] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 228.279066][ T7675] ? bpf_test_init+0x134/0x150 [ 228.283821][ T7675] ? xdp_convert_md_to_buff+0x5b/0x330 [ 228.289293][ T7675] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 228.294681][ T7675] ? dev_put+0x80/0x80 [ 228.298761][ T7675] ? dev_put+0x80/0x80 [ 228.302831][ T7675] bpf_prog_test_run+0x31e/0x390 [ 228.307767][ T7675] __sys_bpf+0x593/0x6d0 [ 228.312001][ T7675] ? bpf_link_show_fdinfo+0x340/0x340 [ 228.317395][ T7675] ? lock_chain_count+0x20/0x20 [ 228.322258][ T7675] __x64_sys_bpf+0x78/0x90 [ 228.326675][ T7675] do_syscall_64+0x4c/0xa0 [ 228.331086][ T7675] ? clear_bhb_loop+0x60/0xb0 [ 228.335753][ T7675] ? clear_bhb_loop+0x60/0xb0 [ 228.340433][ T7675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.346326][ T7675] RIP: 0033:0x7fd532f8ebe9 [ 228.350731][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.370565][ T7675] RSP: 002b:00007fd533d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.378975][ T7675] RAX: ffffffffffffffda RBX: 00007fd5331b5fa0 RCX: 00007fd532f8ebe9 [ 228.386936][ T7675] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 228.394915][ T7675] RBP: 00007fd533d33090 R08: 0000000000000000 R09: 0000000000000000 [ 228.402880][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.410843][ T7675] R13: 00007fd5331b6038 R14: 00007fd5331b5fa0 R15: 00007ffd9f8755b8 [ 228.418929][ T7675] [ 228.613958][ T7675] page_pool_create() gave up with errno -12 [ 229.632195][ T7704] FAULT_INJECTION: forcing a failure. [ 229.632195][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.670579][ T7704] CPU: 1 PID: 7704 Comm: syz.1.1068 Not tainted 6.1.148-syzkaller #0 [ 229.678714][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.688878][ T7704] Call Trace: [ 229.692175][ T7704] [ 229.695118][ T7704] dump_stack_lvl+0x168/0x22e [ 229.699819][ T7704] ? show_regs_print_info+0x12/0x12 [ 229.705037][ T7704] ? load_image+0x3b0/0x3b0 [ 229.709566][ T7704] ? __lock_acquire+0x7c50/0x7c50 [ 229.714609][ T7704] ? __rcu_read_unlock+0x78/0xd0 [ 229.719660][ T7704] should_fail_ex+0x399/0x4d0 [ 229.724365][ T7704] _copy_to_user+0x2c/0x130 [ 229.728888][ T7704] bpf_test_finish+0x4fa/0x600 [ 229.733673][ T7704] ? convert___skb_to_skb+0x580/0x580 [ 229.739064][ T7704] ? convert_skb_to___skb+0x420/0x420 [ 229.744463][ T7704] ? bpf_prog_test_run_skb+0x546/0x11b0 [ 229.750037][ T7704] bpf_prog_test_run_skb+0xc03/0x11b0 [ 229.755455][ T7704] ? cpu_online+0xa0/0xa0 [ 229.759804][ T7704] bpf_prog_test_run+0x31e/0x390 [ 229.764761][ T7704] __sys_bpf+0x593/0x6d0 [ 229.769023][ T7704] ? bpf_link_show_fdinfo+0x340/0x340 [ 229.774429][ T7704] ? lock_chain_count+0x20/0x20 [ 229.779297][ T7704] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 229.785292][ T7704] __x64_sys_bpf+0x78/0x90 [ 229.789701][ T7704] do_syscall_64+0x4c/0xa0 [ 229.794107][ T7704] ? clear_bhb_loop+0x60/0xb0 [ 229.798775][ T7704] ? clear_bhb_loop+0x60/0xb0 [ 229.803444][ T7704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.809331][ T7704] RIP: 0033:0x7fafc418ebe9 [ 229.813737][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.833336][ T7704] RSP: 002b:00007fafc5007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.841739][ T7704] RAX: ffffffffffffffda RBX: 00007fafc43b5fa0 RCX: 00007fafc418ebe9 [ 229.849723][ T7704] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 229.857685][ T7704] RBP: 00007fafc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 229.865650][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.873611][ T7704] R13: 00007fafc43b6038 R14: 00007fafc43b5fa0 R15: 00007ffd8698e088 [ 229.881584][ T7704] [ 230.015261][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1067'. [ 230.024273][ T7702] netlink: 'syz.5.1067': attribute type 3 has an invalid length. [ 230.500725][ T7713] netlink: 'syz.5.1071': attribute type 16 has an invalid length. [ 230.519958][ T7717] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 230.865353][ T7725] netlink: 'syz.3.1075': attribute type 2 has an invalid length. [ 230.903900][ T7725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1075'. [ 231.114720][ T7729] device syzkaller0 entered promiscuous mode [ 231.587270][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 231.625077][ T7747] netlink: 'syz.3.1081': attribute type 3 has an invalid length. [ 231.973208][ T7759] netlink: 'syz.4.1087': attribute type 16 has an invalid length. [ 232.202111][ T7767] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1090'. [ 232.881465][ T7781] netlink: 'syz.1.1093': attribute type 2 has an invalid length. [ 232.916085][ T7781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1093'. [ 233.237007][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'. [ 233.305267][ T7788] netlink: 'syz.3.1097': attribute type 3 has an invalid length. [ 233.521559][ T7794] FAULT_INJECTION: forcing a failure. [ 233.521559][ T7794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.602344][ T7794] CPU: 0 PID: 7794 Comm: syz.4.1098 Not tainted 6.1.148-syzkaller #0 [ 233.610484][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.620601][ T7794] Call Trace: [ 233.623892][ T7794] [ 233.626832][ T7794] dump_stack_lvl+0x168/0x22e [ 233.631532][ T7794] ? show_regs_print_info+0x12/0x12 [ 233.636743][ T7794] ? load_image+0x3b0/0x3b0 [ 233.641270][ T7794] ? __lock_acquire+0x7c50/0x7c50 [ 233.646314][ T7794] ? snprintf+0xd7/0x120 [ 233.650575][ T7794] should_fail_ex+0x399/0x4d0 [ 233.655276][ T7794] _copy_to_user+0x2c/0x130 [ 233.659793][ T7794] simple_read_from_buffer+0xe3/0x150 [ 233.665186][ T7794] proc_fail_nth_read+0x19a/0x210 [ 233.670233][ T7794] ? proc_fault_inject_write+0x2f0/0x2f0 [ 233.675880][ T7794] ? fsnotify_perm+0x248/0x550 [ 233.680652][ T7794] ? proc_fault_inject_write+0x2f0/0x2f0 [ 233.686299][ T7794] vfs_read+0x2c0/0x920 [ 233.690475][ T7794] ? kernel_read+0x1e0/0x1e0 [ 233.695080][ T7794] ? __fget_files+0x28/0x4d0 [ 233.699681][ T7794] ? __fget_files+0x44a/0x4d0 [ 233.704382][ T7794] ? __fdget_pos+0x2ae/0x360 [ 233.708980][ T7794] ? ksys_read+0x71/0x240 [ 233.713322][ T7794] ksys_read+0x143/0x240 [ 233.717580][ T7794] ? vfs_write+0x960/0x960 [ 233.722011][ T7794] ? lockdep_hardirqs_on+0x94/0x140 [ 233.727229][ T7794] do_syscall_64+0x4c/0xa0 [ 233.731652][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 233.736331][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 233.741013][ T7794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.746915][ T7794] RIP: 0033:0x7f916998d5fc [ 233.751339][ T7794] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.770957][ T7794] RSP: 002b:00007f916a899030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.779381][ T7794] RAX: ffffffffffffffda RBX: 00007f9169bb5fa0 RCX: 00007f916998d5fc [ 233.787358][ T7794] RDX: 000000000000000f RSI: 00007f916a8990a0 RDI: 0000000000000005 [ 233.795335][ T7794] RBP: 00007f916a899090 R08: 0000000000000000 R09: 0000000000000000 [ 233.803309][ T7794] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 233.811284][ T7794] R13: 00007f9169bb6038 R14: 00007f9169bb5fa0 R15: 00007ffee3ea0678 [ 233.819284][ T7794] [ 234.313411][ T7807] netlink: 'syz.0.1102': attribute type 16 has an invalid length. [ 235.705836][ T27] INFO: task syz.2.102:4731 blocked for more than 143 seconds. [ 235.714181][ T27] Not tainted 6.1.148-syzkaller #0 [ 235.751245][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.770197][ T27] task:syz.2.102 state:D stack:22976 pid:4731 ppid:4269 flags:0x00004006 [ 235.785007][ T27] Call Trace: [ 235.793342][ T27] [ 235.799853][ T27] __schedule+0x10ec/0x40b0 [ 235.806713][ T27] ? __lock_acquire+0x7c50/0x7c50 [ 235.817957][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 235.823918][ T27] ? task_work_cancel+0x9f/0x230 [ 235.837733][ T27] ? task_work_cancel_func+0x200/0x200 [ 235.849266][ T27] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 235.859316][ T27] ? _free_event+0xfd/0x10a0 [ 235.868280][ T27] schedule+0xb9/0x180 [ 235.874684][ T27] _free_event+0x171/0x10a0 [ 235.882863][ T27] ? perf_remove_from_context+0x10c/0x250 [ 235.903878][ T27] ? perf_mmap+0x13f0/0x13f0 [ 235.918455][ T27] perf_event_release_kernel+0x832/0x8c0 [ 235.929916][ T27] ? __might_sleep+0xd0/0xd0 [ 235.940305][ T27] ? calc_timer_values+0x410/0x410 [ 235.951306][ T27] ? perf_mmap+0x13f0/0x13f0 [ 235.960587][ T27] perf_release+0x37/0x40 [ 235.970616][ T27] __fput+0x22c/0x920 [ 235.979176][ T27] task_work_run+0x1ca/0x250 [ 235.988299][ T27] ? task_work_cancel+0x230/0x230 [ 235.999115][ T27] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 236.011778][ T27] get_signal+0x11a6/0x1350 [ 236.022076][ T27] arch_do_signal_or_restart+0xb0/0x1230 [ 236.033545][ T27] ? do_futex+0x2e2/0x320 [ 236.043604][ T27] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 236.054911][ T27] ? get_sigframe_size+0x10/0x10 [ 236.065563][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 236.077814][ T27] exit_to_user_mode_loop+0x70/0x110 [ 236.088773][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 236.101104][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 236.112557][ T27] do_syscall_64+0x58/0xa0 [ 236.122728][ T27] ? clear_bhb_loop+0x60/0xb0 [ 236.133193][ T27] ? clear_bhb_loop+0x60/0xb0 [ 236.142498][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.155225][ T27] RIP: 0033:0x7f76bbb8ebe9 [ 236.165035][ T27] RSP: 002b:00007f76bca8efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 236.188350][ T27] RAX: fffffffffffffffc RBX: 00007f76bbdb5fa0 RCX: 00007f76bbb8ebe9 [ 236.205557][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 236.222606][ T27] RBP: 00007f76bbc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.239648][ T27] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.256784][ T27] R13: 00007f76bbdb6038 R14: 00007f76bbdb5fa0 R15: 00007ffea0e686f8 [ 236.282736][ T27] [ 236.289396][ T27] [ 236.289396][ T27] Showing all locks held in the system: [ 236.308904][ T27] 1 lock held by rcu_tasks_kthre/12: [ 236.321538][ T27] #0: ffffffff8cb2b770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 236.343340][ T27] 1 lock held by rcu_tasks_trace/13: [ 236.355750][ T27] #0: ffffffff8cb2bf90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 236.379179][ T27] 1 lock held by khungtaskd/27: [ 236.389648][ T27] #0: ffffffff8cb2ade0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 236.410661][ T27] 2 locks held by kworker/1:1/41: [ 236.416410][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 236.427318][ T27] #1: ffffc90000b27d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 236.439350][ T27] 2 locks held by getty/4026: [ 236.444126][ T27] #0: ffff888030ac2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 236.454346][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 236.465062][ T27] 3 locks held by kworker/u4:6/4357: [ 236.470441][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 236.481920][ T27] #1: ffffc90004947d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 236.492732][ T27] #2: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 236.502017][ T27] 1 lock held by syz.1.1079/7748: [ 236.508242][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 236.517628][ T27] 2 locks held by syz.5.1090/7770: [ 236.522850][ T27] #0: ffffffff8dd33e10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 236.532733][ T27] #1: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: bareudp_exit_batch_net+0xb0/0x1f0 [ 236.542894][ T27] 2 locks held by syz.4.1104/7814: [ 236.548307][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 236.557659][ T27] #1: ffffffff8cb30ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 236.569012][ T27] 3 locks held by syz.3.1100/7816: [ 236.574219][ T27] 1 lock held by syz.3.1108/7825: [ 236.579744][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 236.589041][ T27] 1 lock held by syz.1.1110/7832: [ 236.594243][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 236.603996][ T27] 1 lock held by syz.0.1113/7836: [ 236.609541][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3ab/0x1e10 [ 236.619149][ T27] 1 lock held by syz.0.1113/7837: [ 236.624332][ T27] #0: ffffffff8dd40aa8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3ab/0x1e10 [ 236.646115][ T27] [ 236.648542][ T27] ============================================= [ 236.648542][ T27] [ 236.666445][ T27] NMI backtrace for cpu 1 [ 236.670809][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 236.678710][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.688781][ T27] Call Trace: [ 236.692070][ T27] [ 236.695005][ T27] dump_stack_lvl+0x168/0x22e [ 236.699691][ T27] ? ct_irq_enter_irqson+0x160/0x160 [ 236.704992][ T27] ? show_regs_print_info+0x12/0x12 [ 236.710289][ T27] ? load_image+0x3b0/0x3b0 [ 236.714805][ T27] ? vprintk_emit+0x571/0x680 [ 236.719498][ T27] ? nmi_cpu_backtrace+0x1df/0x470 [ 236.724626][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 236.729582][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 236.735745][ T27] ? _printk+0xcc/0x110 [ 236.739911][ T27] ? load_image+0x3b0/0x3b0 [ 236.744431][ T27] ? load_image+0x3b0/0x3b0 [ 236.748947][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 236.755027][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 236.761023][ T27] watchdog+0xeee/0xf30 [ 236.765191][ T27] ? watchdog+0x1ed/0xf30 [ 236.769539][ T27] kthread+0x29d/0x330 [ 236.773625][ T27] ? hungtask_pm_notify+0x40/0x40 [ 236.778651][ T27] ? kthread_blkcg+0xd0/0xd0 [ 236.783238][ T27] ret_from_fork+0x1f/0x30 [ 236.787653][ T27] [ 236.791202][ T27] Sending NMI from CPU 1 to CPUs 0: [ 236.796642][ C0] NMI backtrace for cpu 0 [ 236.796651][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.148-syzkaller #0 [ 236.796666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.796674][ C0] Workqueue: phy9 ieee80211_iface_work [ 236.796694][ C0] RIP: 0010:unwind_next_frame+0x3f3/0x20b0 [ 236.796718][ C0] Code: 28 84 c0 0f 85 39 17 00 00 41 c6 06 01 49 c7 c4 c0 79 89 8a 49 8d 6c 24 04 4d 8d 7c 24 05 48 89 e8 48 c1 e8 03 48 89 44 24 48 <42> 0f b6 04 28 84 c0 0f 85 72 16 00 00 4c 89 f8 48 c1 e8 03 42 0f [ 236.796731][ C0] RSP: 0018:ffffc90000106fd0 EFLAGS: 00000a06 [ 236.796742][ C0] RAX: 1ffffffff1e58cb4 RBX: ffffc900001070a8 RCX: ffffffff8e8d7588 [ 236.796754][ C0] RDX: ffffffff8f2c659e RSI: ffffffff8e8d7584 RDI: ffffffff8138551f [ 236.796764][ C0] RBP: ffffffff8f2c65a2 R08: 0000000000000001 R09: 0000000000000003 [ 236.796774][ C0] R10: fffff52000020e21 R11: 1ffff92000020e1f R12: ffffffff8f2c659e [ 236.796784][ C0] R13: dffffc0000000000 R14: ffffffff8e8d7584 R15: ffffffff8f2c65a3 [ 236.796795][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 236.796807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.796817][ C0] CR2: 0000001b2f522ff8 CR3: 000000005c1dc000 CR4: 00000000003506f0 [ 236.796831][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 236.796840][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 236.796849][ C0] Call Trace: [ 236.796853][ C0] [ 236.796863][ C0] ? cfg80211_inform_bss_frame_data+0x6a0/0x1370 [ 236.796888][ C0] ? stack_trace_save+0xe0/0xe0 [ 236.796904][ C0] arch_stack_walk+0x10c/0x140 [ 236.796922][ C0] ? cfg80211_inform_bss_frame_data+0x6a0/0x1370 [ 236.796945][ C0] stack_trace_save+0x98/0xe0 [ 236.796960][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 236.796981][ C0] kasan_set_track+0x4b/0x70 [ 236.796997][ C0] ? kasan_set_track+0x4b/0x70 [ 236.797012][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 236.797028][ C0] ? __kmalloc+0xb0/0x240 [ 236.797045][ C0] ? cfg80211_inform_bss_frame_data+0x6a0/0x1370 [ 236.797086][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 236.797100][ C0] __kasan_kmalloc+0x8e/0xa0 [ 236.797117][ C0] ? cfg80211_inform_bss_frame_data+0x6a0/0x1370 [ 236.797138][ C0] __kmalloc+0xb0/0x240 [ 236.797154][ C0] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 236.797172][ C0] cfg80211_inform_bss_frame_data+0x6a0/0x1370 [ 236.797201][ C0] ? cfg80211_parse_mbssid_data+0x2320/0x2320 [ 236.797231][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 236.797254][ C0] ieee80211_bss_info_update+0x734/0xbc0 [ 236.797278][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 236.797297][ C0] ? __mutex_lock+0x19e/0xaf0 [ 236.797314][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 236.797332][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 236.797349][ C0] ? mutex_lock_nested+0x10/0x10 [ 236.797365][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 236.797380][ C0] ? verify_lock_unused+0x140/0x140 [ 236.797398][ C0] ? ieee80211_get_channel_khz+0x157/0x8a0 [ 236.797416][ C0] ieee80211_ibss_rx_queued_mgmt+0x17b4/0x2b10 [ 236.797442][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 236.797456][ C0] ? mark_lock+0x94/0x320 [ 236.797477][ C0] ? mark_lock+0x94/0x320 [ 236.797495][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 236.797514][ C0] ? lock_chain_count+0x20/0x20 [ 236.797531][ C0] ? __rwlock_init+0x140/0x140 [ 236.797552][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 236.797571][ C0] ? skb_dequeue+0x10a/0x140 [ 236.797590][ C0] ieee80211_iface_work+0x726/0xc80 [ 236.797606][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.797626][ C0] ? process_one_work+0x7a1/0x1160 [ 236.797640][ C0] process_one_work+0x898/0x1160 [ 236.797661][ C0] ? worker_detach_from_pool+0x240/0x240 [ 236.797675][ C0] ? _raw_spin_lock_irq+0x7a/0xe0 [ 236.797694][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 236.797718][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 236.797736][ C0] ? kthread_data+0x4b/0xc0 [ 236.797756][ C0] worker_thread+0xaa2/0x1250 [ 236.797783][ C0] kthread+0x29d/0x330 [ 236.797799][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 236.797813][ C0] ? kthread_blkcg+0xd0/0xd0 [ 236.797833][ C0] ret_from_fork+0x1f/0x30 [ 236.797857][ C0] [ 237.216510][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 237.223381][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 237.231281][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.241345][ T27] Call Trace: [ 237.244623][ T27] [ 237.247571][ T27] dump_stack_lvl+0x168/0x22e [ 237.252262][ T27] ? memcpy+0x3c/0x60 [ 237.256248][ T27] ? show_regs_print_info+0x12/0x12 [ 237.261433][ T27] ? load_image+0x3b0/0x3b0 [ 237.265932][ T27] panic+0x2c9/0x710 [ 237.269817][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 237.275439][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 237.279926][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 237.285459][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 237.291595][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 237.297735][ T27] watchdog+0xf2d/0xf30 [ 237.301877][ T27] ? watchdog+0x1ed/0xf30 [ 237.306192][ T27] kthread+0x29d/0x330 [ 237.310266][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.315303][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.319895][ T27] ret_from_fork+0x1f/0x30 [ 237.324308][ T27] [ 237.327586][ T27] Kernel Offset: disabled [ 237.331910][ T27] Rebooting in 86400 seconds..