last executing test programs: 11.333107989s ago: executing program 0 (id=5949): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x2000, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x40) 11.133182694s ago: executing program 0 (id=5952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa6", 0x50}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x81}, {&(0x7f0000000280)="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", 0x16d}, {&(0x7f0000000180)="6fe4dd9e", 0x4}], 0x4}, 0xcc800) 10.956111208s ago: executing program 0 (id=5953): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 10.730852983s ago: executing program 0 (id=5955): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000400000008000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f00000010c0)='./file0\x00', 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711233"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) 10.40815356s ago: executing program 0 (id=5959): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair(0x22, 0x3, 0x4, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a424}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000180), 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b05, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0xcc}, 0x1009c0, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002, 0x5, @perf_bp={0x0, 0xf}, 0x10b648, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x400, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000004000017", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRESHEX, @ANYRES32], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000200000000000700000000000000950000000000000030d3f402bb9f4e06239e024e6f730502a43575d280440daa68727ce1b26e52609d5348"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0xfff, &(0x7f0000014000)=""/4095, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x14, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.391099252s ago: executing program 3 (id=6029): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x1, &(0x7f0000000d80)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0xfd, 0x0, 0x0, 0x41ff, 0x29a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, &(0x7f0000000240)) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x88) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x40012103) 2.484194543s ago: executing program 3 (id=6035): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2504, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) 2.319308417s ago: executing program 3 (id=6037): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 1.885097836s ago: executing program 4 (id=6043): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x2000, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a18100310000", 0x17}], 0x1}, 0x40) 1.787051399s ago: executing program 4 (id=6044): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x3f26a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x2282, 0x0, 0x7904, 0x9, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000400000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000ff0100000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, 0x0, 0xfdef) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) (async, rerun: 32) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (rerun: 32) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0xe}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18a880c2c500000000000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r10], 0x14) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r11, 0x29, 0x8, 0x0, 0x0) 1.584208683s ago: executing program 4 (id=6045): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x1, &(0x7f0000000d80)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0xfd, 0x0, 0x0, 0x41ff, 0x29a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, &(0x7f0000000240)) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003}, 0x38) r4 = socket$kcm(0xa, 0x2, 0x88) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x40012103) 1.451556687s ago: executing program 1 (id=6046): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r3, 0x4008744b, &(0x7f0000000180)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a001105d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.067924515s ago: executing program 4 (id=6048): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 1.041952876s ago: executing program 2 (id=6049): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/1663], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.012509717s ago: executing program 3 (id=6050): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000100070000d4ba542000010000000000ca", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8910, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) (fail_nth: 4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) 919.027669ms ago: executing program 2 (id=6051): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x3}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$sock(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x14044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r2}) 918.020989ms ago: executing program 1 (id=6052): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f0000000740)=""/217, 0x0, 0xd9, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="60d3208e8ce7c12a9fd28c8379e70c006fe82fe29d4ada1171622f3f28b9761cae63ab520719c0d750da6fb8d3d669afcc6d7184c148293e02ef8b83e2126c5aeee65f62280bdda395175e8187d4", @ANYRES16=r5, @ANYRES16=r5], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2f, '\x00', 0x0, @fallback=0x29}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)=ANY=[], 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x28, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x27, &(0x7f0000000340)=""/39, 0x41100, 0x1, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x9, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 904.527569ms ago: executing program 4 (id=6053): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x2000, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a18100310000", 0x17}], 0x1}, 0x40) 564.202887ms ago: executing program 3 (id=6054): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="003e463cd428e73ff0f2cc2e05200e4cb0f37de03537c15cd52d5a7d7eac827073de11"], 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x15, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061108300000000001f010000000000009500000000000000ff11f5dd12049c751d0076f76a8326ff1beb81bea3ecaaa5c0a11137056f4eb4bd5e0be5999eb560b40eb3a5fd4737da55b96142118af717292ed05a035a8210f9395f070cb7bb45af13cfd8295e393f5ca82bd79c77b82de66a9267b12b5c5be101da1c589fd8b1302baa73c5a02a8d9a9dc87841f978a94c7d2a35a8650893cb5d4412eee89da02f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 563.306167ms ago: executing program 2 (id=6063): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x3}, 0x10fcb9, 0x0, 0xfffffffe, 0x6, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2000000000006) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180)) 516.599008ms ago: executing program 1 (id=6055): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$kcm(r0, 0x0, 0x20000001) socketpair(0x10, 0x1, 0xfd, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 409.033311ms ago: executing program 3 (id=6056): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 407.910451ms ago: executing program 4 (id=6057): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="003e463cd428e73ff0f2cc2e05200e4cb0f37de03537c15cd52d5a7d7eac827073de11"], 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x15, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061108300000000001f010000000000009500000000000000ff11f5dd12049c751d0076f76a8326ff1beb81bea3ecaaa5c0a11137056f4eb4bd5e0be5999eb560b40eb3a5fd4737da55b96142118af717292ed05a035a8210f9395f070cb7bb45af13cfd8295e393f5ca82bd79c77b82de66a9267b12b5c5be101da1c589fd8b1302baa73c5a02a8d9a9dc87841f978a94c7d2a35a8650893cb5d4412eee89da02f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 276.128254ms ago: executing program 2 (id=6058): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2504, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) 238.727985ms ago: executing program 1 (id=6059): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="003e463cd428e73ff0f2cc2e05200e4cb0f37de03537c15cd52d5a7d7eac827073de11"], 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x15, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061108300000000001f010000000000009500000000000000ff11f5dd12049c751d0076f76a8326ff1beb81bea3ecaaa5c0a11137056f4eb4bd5e0be5999eb560b40eb3a5fd4737da55b96142118af717292ed05a035a8210f9395f070cb7bb45af13cfd8295e393f5ca82bd79c77b82de66a9267b12b5c5be101da1c589fd8b1302baa73c5a02a8d9a9dc87841f978a94c7d2a35a8650893cb5d4412eee89da02f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 221.350975ms ago: executing program 0 (id=5968): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 127.773337ms ago: executing program 2 (id=6061): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/1663], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 92.419348ms ago: executing program 1 (id=6062): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 12.01092ms ago: executing program 2 (id=6064): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000008c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000b0f63648507bb7d2c75d35fed37a62f7ab2d11f043e2107f301b399fe5dac0e2331a616e374280078c032625a9167af85c07ff79287a24ec62dc1ba9efc040a709c8e21d9836227b936d9b40961f3910df4fae5f644930e66ef7c9e0d50bc5a2462158b88d03872281fa708c10c54a5b49e87e874ab2ba58031aefa2f660288279412f4875dc3aa3273b31e84c995f3b2794c08f9740310bb27f0574a014e34e4bdaa8c53eacea394d6f7726842241bf9574b2a4dd7070a450d3a4e36db7fc115c1500"/231]) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x77, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000069, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x0, 0x3e, &(0x7f0000000340), 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000580), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000100070000d4ba542000010000000000ca", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=6065): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f0000000740)=""/217, 0x0, 0xd9, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="60d3208e8ce7c12a9fd28c8379e70c006fe82fe29d4ada1171622f3f28b9761cae63ab520719c0d750da6fb8d3d669afcc6d7184c148293e02ef8b83e2126c5aeee65f62280bdda395175e8187d4", @ANYRES16=r5, @ANYRES16=r5], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2f, '\x00', 0x0, @fallback=0x29}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)=ANY=[], 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x28, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x27, &(0x7f0000000340)=""/39, 0x41100, 0x1, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x9, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 9][T17910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.859910][T17910] CPU: 1 PID: 17910 Comm: syz.3.5133 Not tainted syzkaller #0 [ 445.867491][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.877551][T17910] Call Trace: [ 445.880827][T17910] [ 445.883758][T17910] dump_stack_lvl+0x188/0x250 [ 445.888453][T17910] ? show_regs_print_info+0x20/0x20 [ 445.893660][T17910] ? load_image+0x410/0x410 [ 445.898172][T17910] ? __lock_acquire+0x7b50/0x7b50 [ 445.903221][T17910] should_fail+0x383/0x4b0 [ 445.907742][T17910] _copy_from_user+0x2e/0x170 [ 445.912431][T17910] __copy_msghdr_from_user+0xc9/0x630 [ 445.917887][T17910] ? verify_lock_unused+0x140/0x140 [ 445.923109][T17910] ? mark_lock+0x94/0x320 [ 445.927443][T17910] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 445.932740][T17910] ? __lock_acquire+0x13dc/0x7b50 [ 445.937781][T17910] ___sys_sendmsg+0x19a/0x2e0 [ 445.942469][T17910] ? __sys_sendmsg+0x290/0x290 [ 445.947250][T17910] __se_sys_sendmsg+0x1b7/0x2a0 [ 445.952137][T17910] ? __x64_sys_sendmsg+0x80/0x80 [ 445.957069][T17910] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 445.963046][T17910] ? lockdep_hardirqs_on+0x94/0x140 [ 445.968235][T17910] do_syscall_64+0x4c/0xa0 [ 445.972647][T17910] ? clear_bhb_loop+0x30/0x80 [ 445.977321][T17910] ? clear_bhb_loop+0x30/0x80 [ 445.981988][T17910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.987868][T17910] RIP: 0033:0x7f08bc1710d9 [ 445.992270][T17910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.011857][T17910] RSP: 002b:00007f08ba3c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.020255][T17910] RAX: ffffffffffffffda RBX: 00007f08bc3f8fa0 RCX: 00007f08bc1710d9 [ 446.028211][T17910] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 446.036166][T17910] RBP: 00007f08ba3c9090 R08: 0000000000000000 R09: 0000000000000000 [ 446.044139][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.052091][T17910] R13: 00007f08bc3f9038 R14: 00007f08bc3f8fa0 R15: 00007ffcd1c27278 [ 446.060056][T17910] [ 446.654455][T17935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5143'. [ 446.690373][T17940] FAULT_INJECTION: forcing a failure. [ 446.690373][T17940] name failslab, interval 1, probability 0, space 0, times 0 [ 446.708428][T17940] CPU: 0 PID: 17940 Comm: syz.1.5145 Not tainted syzkaller #0 [ 446.715923][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.726052][T17940] Call Trace: [ 446.729358][T17940] [ 446.732380][T17940] dump_stack_lvl+0x188/0x250 [ 446.737083][T17940] ? show_regs_print_info+0x20/0x20 [ 446.739772][T17935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5143'. [ 446.742299][T17940] ? load_image+0x410/0x410 [ 446.742330][T17940] ? __might_sleep+0xf0/0xf0 [ 446.742350][T17940] ? __lock_acquire+0x7b50/0x7b50 [ 446.742376][T17940] should_fail+0x383/0x4b0 [ 446.742403][T17940] should_failslab+0x5/0x20 [ 446.742421][T17940] slab_pre_alloc_hook+0x51/0xc0 [ 446.742443][T17940] kmem_cache_alloc_trace+0x47/0x290 [ 446.742460][T17940] ? dev_map_alloc+0x62/0x520 [ 446.789255][T17940] dev_map_alloc+0x62/0x520 [ 446.793799][T17940] map_create+0x481/0x2330 [ 446.798222][T17940] ? bpf_lsm_bpf+0x5/0x10 [ 446.802573][T17940] __sys_bpf+0x30a/0x6f0 [ 446.806831][T17940] ? bpf_link_show_fdinfo+0x380/0x380 [ 446.812241][T17940] __x64_sys_bpf+0x78/0x90 [ 446.816680][T17940] do_syscall_64+0x4c/0xa0 [ 446.821104][T17940] ? clear_bhb_loop+0x30/0x80 [ 446.825788][T17940] ? clear_bhb_loop+0x30/0x80 [ 446.830480][T17940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 446.836375][T17940] RIP: 0033:0x7f4e2d55d0d9 [ 446.840796][T17940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.856088][T17943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5143'. [ 446.860400][T17940] RSP: 002b:00007f4e2b7b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.860426][T17940] RAX: ffffffffffffffda RBX: 00007f4e2d7e4fa0 RCX: 00007f4e2d55d0d9 [ 446.860439][T17940] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 446.893674][T17940] RBP: 00007f4e2b7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 446.901659][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.909640][T17940] R13: 00007f4e2d7e5038 R14: 00007f4e2d7e4fa0 R15: 00007ffe6933f878 [ 446.917636][T17940] [ 447.876670][T17962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.299262][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.809614][T18010] FAULT_INJECTION: forcing a failure. [ 448.809614][T18010] name failslab, interval 1, probability 0, space 0, times 0 [ 448.927745][T18010] CPU: 0 PID: 18010 Comm: syz.2.5170 Not tainted syzkaller #0 [ 448.935266][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.945351][T18010] Call Trace: [ 448.948659][T18010] [ 448.951615][T18010] dump_stack_lvl+0x188/0x250 [ 448.956338][T18010] ? show_regs_print_info+0x20/0x20 [ 448.961583][T18010] ? load_image+0x410/0x410 [ 448.966147][T18010] ? __might_sleep+0xf0/0xf0 [ 448.970775][T18010] ? __lock_acquire+0x7b50/0x7b50 [ 448.975833][T18010] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.981252][T18010] should_fail+0x383/0x4b0 [ 448.985717][T18010] should_failslab+0x5/0x20 [ 448.990239][T18010] slab_pre_alloc_hook+0x51/0xc0 [ 448.995214][T18010] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 449.000955][T18010] ? __get_vm_area_node+0x119/0x2d0 [ 449.006202][T18010] __get_vm_area_node+0x119/0x2d0 [ 449.011280][T18010] __vmalloc_node_range+0xef/0x8b0 [ 449.016421][T18010] ? netlink_sendmsg+0x5ec/0xbe0 [ 449.021385][T18010] ? netlink_data_ready+0x10/0x10 [ 449.026476][T18010] ? netlink_sendmsg+0x5ec/0xbe0 [ 449.031441][T18010] vmalloc+0x75/0x80 [ 449.035360][T18010] ? netlink_sendmsg+0x5ec/0xbe0 [ 449.040326][T18010] netlink_sendmsg+0x5ec/0xbe0 [ 449.045171][T18010] ? netlink_getsockopt+0x570/0x570 [ 449.050385][T18010] ? aa_sock_msg_perm+0x94/0x150 [ 449.055365][T18010] ? apparmor_socket_sendmsg+0x88/0x230 [ 449.060948][T18010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.066258][T18010] ? security_socket_sendmsg+0x7c/0xa0 [ 449.071760][T18010] sock_write_iter+0x2a6/0x3a0 [ 449.076570][T18010] ? sock_read_iter+0x380/0x380 [ 449.081492][T18010] ? memset+0x1e/0x40 [ 449.085512][T18010] ? iov_iter_init+0xb4/0x170 [ 449.090228][T18010] vfs_write+0x748/0xd70 [ 449.094526][T18010] ? file_end_write+0x250/0x250 [ 449.099432][T18010] ? __fget_files+0x402/0x470 [ 449.104180][T18010] ? __fdget_pos+0x1e2/0x370 [ 449.108783][T18010] ? ksys_write+0x70/0x260 [ 449.113230][T18010] ksys_write+0x153/0x260 [ 449.117590][T18010] ? __ia32_sys_read+0x80/0x80 [ 449.122400][T18010] ? trace_sys_enter+0x1f/0x80 [ 449.127284][T18010] do_syscall_64+0x4c/0xa0 [ 449.131721][T18010] ? clear_bhb_loop+0x30/0x80 [ 449.136417][T18010] ? clear_bhb_loop+0x30/0x80 [ 449.141128][T18010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.147039][T18010] RIP: 0033:0x7faaa7b160d9 [ 449.151481][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.171189][T18010] RSP: 002b:00007faaa5d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.179627][T18010] RAX: ffffffffffffffda RBX: 00007faaa7d9dfa0 RCX: 00007faaa7b160d9 [ 449.187602][T18010] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000d [ 449.195610][T18010] RBP: 00007faaa5d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 449.203593][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.211583][T18010] R13: 00007faaa7d9e038 R14: 00007faaa7d9dfa0 R15: 00007fff488fd188 [ 449.219660][T18010] [ 449.305815][T18010] syz.2.5170: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 449.351845][T18010] CPU: 1 PID: 18010 Comm: syz.2.5170 Not tainted syzkaller #0 [ 449.359360][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.369442][T18010] Call Trace: [ 449.372746][T18010] [ 449.375703][T18010] dump_stack_lvl+0x188/0x250 [ 449.380431][T18010] ? rcu_lock_release+0x5/0x20 [ 449.385495][T18010] ? show_regs_print_info+0x20/0x20 [ 449.390736][T18010] ? load_image+0x410/0x410 [ 449.395327][T18010] warn_alloc+0x245/0x320 [ 449.399713][T18010] ? zone_watermark_ok_safe+0x250/0x250 [ 449.405296][T18010] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 449.411298][T18010] ? __get_vm_area_node+0x119/0x2d0 [ 449.416594][T18010] __vmalloc_node_range+0x2b1/0x8b0 [ 449.421824][T18010] ? netlink_data_ready+0x10/0x10 [ 449.426923][T18010] ? netlink_sendmsg+0x5ec/0xbe0 [ 449.431893][T18010] vmalloc+0x75/0x80 [ 449.435819][T18010] ? netlink_sendmsg+0x5ec/0xbe0 [ 449.440792][T18010] netlink_sendmsg+0x5ec/0xbe0 [ 449.445628][T18010] ? netlink_getsockopt+0x570/0x570 [ 449.450849][T18010] ? aa_sock_msg_perm+0x94/0x150 [ 449.455844][T18010] ? apparmor_socket_sendmsg+0x88/0x230 [ 449.461424][T18010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.466719][T18010] ? security_socket_sendmsg+0x7c/0xa0 [ 449.472195][T18010] sock_write_iter+0x2a6/0x3a0 [ 449.476971][T18010] ? sock_read_iter+0x380/0x380 [ 449.481877][T18010] ? memset+0x1e/0x40 [ 449.485873][T18010] ? iov_iter_init+0xb4/0x170 [ 449.490568][T18010] vfs_write+0x748/0xd70 [ 449.494832][T18010] ? file_end_write+0x250/0x250 [ 449.499704][T18010] ? __fget_files+0x402/0x470 [ 449.504405][T18010] ? __fdget_pos+0x1e2/0x370 [ 449.508994][T18010] ? ksys_write+0x70/0x260 [ 449.513420][T18010] ksys_write+0x153/0x260 [ 449.517760][T18010] ? __ia32_sys_read+0x80/0x80 [ 449.522537][T18010] ? trace_sys_enter+0x1f/0x80 [ 449.527333][T18010] do_syscall_64+0x4c/0xa0 [ 449.531933][T18010] ? clear_bhb_loop+0x30/0x80 [ 449.536605][T18010] ? clear_bhb_loop+0x30/0x80 [ 449.541287][T18010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.547175][T18010] RIP: 0033:0x7faaa7b160d9 [ 449.551597][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.571202][T18010] RSP: 002b:00007faaa5d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.579619][T18010] RAX: ffffffffffffffda RBX: 00007faaa7d9dfa0 RCX: 00007faaa7b160d9 [ 449.587589][T18010] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000d [ 449.595563][T18010] RBP: 00007faaa5d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 449.603535][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.611521][T18010] R13: 00007faaa7d9e038 R14: 00007faaa7d9dfa0 R15: 00007fff488fd188 [ 449.619546][T18010] [ 449.705928][T18010] Mem-Info: [ 449.709124][T18010] active_anon:274 inactive_anon:8591 isolated_anon:0 [ 449.709124][T18010] active_file:25994 inactive_file:35835 isolated_file:0 [ 449.709124][T18010] unevictable:768 dirty:428 writeback:0 [ 449.709124][T18010] slab_reclaimable:20943 slab_unreclaimable:95729 [ 449.709124][T18010] mapped:30114 shmem:1632 pagetables:585 bounce:0 [ 449.709124][T18010] kernel_misc_reclaimable:0 [ 449.709124][T18010] free:1364711 free_pcp:10841 free_cma:0 [ 449.781616][T18010] Node 0 active_anon:1064kB inactive_anon:33628kB active_file:103824kB inactive_file:143360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120512kB dirty:1740kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10164kB pagetables:2396kB all_unreclaimable? no [ 449.831156][T18010] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 449.909435][T18010] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.941982][T18032] validate_nla: 19 callbacks suppressed [ 449.941999][T18032] netlink: 'syz.1.5176': attribute type 29 has an invalid length. [ 449.942958][T18010] lowmem_reserve[]: [ 449.955953][T18032] netlink: 'syz.1.5176': attribute type 29 has an invalid length. [ 449.970880][T18010] 0 2539 2540 2540 2540 [ 449.975184][T18010] Node 0 DMA32 free:1524724kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:33828kB active_file:103824kB inactive_file:143360kB unevictable:1536kB writepending:1740kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:37904kB local_pcp:20176kB free_cma:0kB [ 450.030541][T18031] netlink: 'syz.0.5178': attribute type 39 has an invalid length. [ 450.040551][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 450.045386][T18010] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.071828][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 450.079360][T18010] Node 1 Normal free:3918696kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5188kB local_pcp:1108kB free_cma:0kB [ 450.125698][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 450.142167][T18010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.233811][T18010] Node 0 DMA32: 2769*4kB (UME) 1824*8kB (UME) 975*16kB (UME) 918*32kB (UME) 703*64kB (UME) 900*128kB (UME) 343*256kB (UME) 110*512kB (UME) 29*1024kB (UME) 15*2048kB (UME) 266*4096kB (M) = 1524916kB [ 450.272192][T18041] __nla_validate_parse: 5 callbacks suppressed [ 450.272212][T18041] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5181'. [ 450.296132][T18010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 450.325417][T18010] Node 1 Normal: 76*4kB (UME) 39*8kB (UME) 28*16kB (UME) 192*32kB (UME) 67*64kB (UME) 29*128kB (UE) 14*256kB (UM) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 951*4096kB (M) = 3918696kB [ 450.435793][T18010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.498193][T18010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.559410][T18010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.600441][T18051] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5185'. [ 450.612486][T18010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.662025][T18010] 63478 total pagecache pages [ 450.671562][T18010] 0 pages in swap cache [ 450.675969][T18010] Swap cache stats: add 0, delete 0, find 0/0 [ 450.682155][T18010] Free swap = 124996kB [ 450.698664][T18010] Total swap = 124996kB [ 450.704656][T18010] 2097051 pages RAM [ 450.710243][T18010] 0 pages HighMem/MovableOnly [ 450.715025][T18010] 411499 pages reserved [ 450.735770][T18010] 0 pages cma reserved [ 450.896429][T18064] netlink: 'syz.3.5191': attribute type 39 has an invalid length. [ 450.975349][T18074] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5196'. [ 451.026570][T18078] netlink: 'syz.4.5194': attribute type 29 has an invalid length. [ 451.065982][T18078] netlink: 'syz.4.5194': attribute type 29 has an invalid length. [ 451.521936][T18094] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5202'. [ 451.814568][T18106] netlink: 'syz.1.5207': attribute type 39 has an invalid length. [ 452.171257][T18113] netlink: 'syz.1.5210': attribute type 10 has an invalid length. [ 452.220908][T18113] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.316319][T18113] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 452.385332][T18113] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 452.492057][T18113] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 452.597081][T18124] netlink: 'syz.0.5212': attribute type 29 has an invalid length. [ 452.674307][T18124] netlink: 'syz.0.5212': attribute type 29 has an invalid length. [ 452.799888][T18132] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5216'. [ 452.823210][T18132] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5216'. [ 452.971877][T18144] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 453.570983][T18172] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.901965][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5236'. [ 454.043725][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5236'. [ 454.124929][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5236'. [ 454.243728][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5236'. [ 454.650283][T18213] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.735351][T18215] batman_adv: batadv0: Adding interface: virt_wifi0 [ 454.751367][T18215] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.785174][T18215] batman_adv: batadv0: Interface activated: virt_wifi0 [ 455.042112][T18232] validate_nla: 73 callbacks suppressed [ 455.042128][T18232] netlink: 'syz.3.5250': attribute type 29 has an invalid length. [ 455.096931][T18232] netlink: 'syz.3.5250': attribute type 29 has an invalid length. [ 455.216448][T18235] netlink: 'syz.0.5254': attribute type 39 has an invalid length. [ 455.612394][T18257] netlink: 'syz.3.5262': attribute type 10 has an invalid length. [ 455.669865][T18257] __nla_validate_parse: 32 callbacks suppressed [ 455.669882][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5262'. [ 455.732925][T18257] batman_adv: batadv0: Adding interface: virt_wifi0 [ 455.741272][T18257] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.799363][T18257] batman_adv: batadv0: Interface activated: virt_wifi0 [ 456.065419][T18275] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5266'. [ 456.094079][T18279] netlink: 'syz.3.5267': attribute type 29 has an invalid length. [ 456.127898][T18279] netlink: 'syz.3.5267': attribute type 29 has an invalid length. [ 456.197521][T18281] netlink: 'syz.2.5270': attribute type 39 has an invalid length. [ 456.422902][T18295] netlink: 'syz.4.5276': attribute type 8 has an invalid length. [ 456.466834][T18295] netlink: 'syz.4.5276': attribute type 6 has an invalid length. [ 456.517250][T18295] netlink: 'syz.4.5276': attribute type 8 has an invalid length. [ 456.545956][T18295] netlink: 198884 bytes leftover after parsing attributes in process `syz.4.5276'. [ 457.785629][T18348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5295'. [ 457.875919][T18348] batman_adv: batadv0: Adding interface: virt_wifi0 [ 457.885203][T18348] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.923758][T18348] batman_adv: batadv0: Interface activated: virt_wifi0 [ 458.142137][T18363] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5299'. [ 458.372375][T18374] FAULT_INJECTION: forcing a failure. [ 458.372375][T18374] name failslab, interval 1, probability 0, space 0, times 0 [ 458.453511][T18374] CPU: 1 PID: 18374 Comm: syz.2.5306 Not tainted syzkaller #0 [ 458.461027][T18374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.471131][T18374] Call Trace: [ 458.474430][T18374] [ 458.477378][T18374] dump_stack_lvl+0x188/0x250 [ 458.482099][T18374] ? show_regs_print_info+0x20/0x20 [ 458.487336][T18374] ? load_image+0x410/0x410 [ 458.491882][T18374] ? __might_sleep+0xf0/0xf0 [ 458.496499][T18374] ? __lock_acquire+0x7b50/0x7b50 [ 458.501587][T18374] should_fail+0x383/0x4b0 [ 458.506046][T18374] should_failslab+0x5/0x20 [ 458.510586][T18374] slab_pre_alloc_hook+0x51/0xc0 [ 458.515562][T18374] __kmalloc+0x6b/0x340 [ 458.519743][T18374] ? sk_prot_alloc+0xe7/0x210 [ 458.524462][T18374] sk_prot_alloc+0xe7/0x210 [ 458.529083][T18374] ? sk_alloc+0x1d/0x310 [ 458.533356][T18374] sk_alloc+0x2f/0x310 [ 458.537443][T18374] bpf_prog_test_run_skb+0x23c/0x1190 [ 458.542841][T18374] ? __fget_files+0x402/0x470 [ 458.547545][T18374] ? cpu_online+0x60/0x60 [ 458.551879][T18374] bpf_prog_test_run+0x31c/0x390 [ 458.556822][T18374] __sys_bpf+0x5a5/0x6f0 [ 458.561106][T18374] ? bpf_link_show_fdinfo+0x380/0x380 [ 458.566531][T18374] __x64_sys_bpf+0x78/0x90 [ 458.570951][T18374] do_syscall_64+0x4c/0xa0 [ 458.575369][T18374] ? clear_bhb_loop+0x30/0x80 [ 458.580052][T18374] ? clear_bhb_loop+0x30/0x80 [ 458.584731][T18374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.590640][T18374] RIP: 0033:0x7faaa7b160d9 [ 458.595053][T18374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.615002][T18374] RSP: 002b:00007faaa5d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.623413][T18374] RAX: ffffffffffffffda RBX: 00007faaa7d9dfa0 RCX: 00007faaa7b160d9 [ 458.631377][T18374] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 458.639338][T18374] RBP: 00007faaa5d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 458.647302][T18374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.655265][T18374] R13: 00007faaa7d9e038 R14: 00007faaa7d9dfa0 R15: 00007fff488fd188 [ 458.663256][T18374] [ 458.690876][T18376] device wlan0 entered promiscuous mode [ 458.893170][T18390] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5309'. [ 458.913077][T18390] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5309'. [ 459.155215][T18402] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5315'. [ 459.176227][T18402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 459.231187][T18402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.300824][T18407] device vxcan0 entered promiscuous mode [ 459.350471][T18407] team0: Device vxcan0 is of different type [ 459.714686][T18425] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.5324'. [ 460.928023][T18472] validate_nla: 12 callbacks suppressed [ 460.928044][T18472] netlink: 'syz.1.5339': attribute type 39 has an invalid length. [ 460.970966][T18473] netlink: 'syz.3.5338': attribute type 7 has an invalid length. [ 461.030565][T18473] netlink: 'syz.3.5338': attribute type 6 has an invalid length. [ 461.080001][T18470] netlink: 'syz.2.5340': attribute type 10 has an invalid length. [ 461.085070][T18478] netlink: 'syz.0.5342': attribute type 29 has an invalid length. [ 461.097712][T18470] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.097743][T18470] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 461.112662][T18470] bond0: (slave hsr0): Error -95 calling set_mac_address [ 461.248452][T18480] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.5344'. [ 461.349351][T18478] netlink: 'syz.0.5342': attribute type 29 has an invalid length. [ 461.684986][T18497] netlink: 'syz.2.5351': attribute type 9 has an invalid length. [ 461.712413][T18497] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5351'. [ 462.024097][T18506] netlink: 'syz.1.5355': attribute type 1 has an invalid length. [ 462.039561][T18506] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5355'. [ 462.054697][T18506] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5355'. [ 462.128312][T18513] netlink: 'syz.0.5358': attribute type 10 has an invalid length. [ 462.243027][T18516] netlink: 'syz.1.5359': attribute type 29 has an invalid length. [ 462.291211][T18521] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5360'. [ 462.522353][T18533] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5363'. [ 462.543811][T18534] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5364'. [ 462.580661][T18537] FAULT_INJECTION: forcing a failure. [ 462.580661][T18537] name failslab, interval 1, probability 0, space 0, times 0 [ 462.655986][T18537] CPU: 0 PID: 18537 Comm: syz.1.5366 Not tainted syzkaller #0 [ 462.663500][T18537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.673583][T18537] Call Trace: [ 462.676878][T18537] [ 462.679828][T18537] dump_stack_lvl+0x188/0x250 [ 462.684543][T18537] ? show_regs_print_info+0x20/0x20 [ 462.689767][T18537] ? load_image+0x410/0x410 [ 462.694345][T18537] should_fail+0x383/0x4b0 [ 462.698798][T18537] should_failslab+0x5/0x20 [ 462.703316][T18537] slab_pre_alloc_hook+0x51/0xc0 [ 462.708278][T18537] ? __build_skb+0x26/0x2e0 [ 462.712807][T18537] kmem_cache_alloc+0x3d/0x280 [ 462.717609][T18537] __build_skb+0x26/0x2e0 [ 462.721967][T18537] build_skb+0x1e/0x160 [ 462.726152][T18537] bpf_prog_test_run_skb+0x25c/0x1190 [ 462.731562][T18537] ? __fget_files+0x402/0x470 [ 462.736295][T18537] ? cpu_online+0x60/0x60 [ 462.740649][T18537] bpf_prog_test_run+0x31c/0x390 [ 462.745616][T18537] __sys_bpf+0x5a5/0x6f0 [ 462.749893][T18537] ? bpf_link_show_fdinfo+0x380/0x380 [ 462.755279][T18537] ? rcu_nmi_exit+0x6f/0xf0 [ 462.759868][T18537] __x64_sys_bpf+0x78/0x90 [ 462.764308][T18537] do_syscall_64+0x4c/0xa0 [ 462.768738][T18537] ? clear_bhb_loop+0x30/0x80 [ 462.773431][T18537] ? clear_bhb_loop+0x30/0x80 [ 462.778133][T18537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 462.784056][T18537] RIP: 0033:0x7f4e2d55d0d9 [ 462.788498][T18537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.808127][T18537] RSP: 002b:00007f4e2b7b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.816583][T18537] RAX: ffffffffffffffda RBX: 00007f4e2d7e4fa0 RCX: 00007f4e2d55d0d9 [ 462.824576][T18537] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 462.832565][T18537] RBP: 00007f4e2b7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 462.840556][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.848541][T18537] R13: 00007f4e2d7e5038 R14: 00007f4e2d7e4fa0 R15: 00007ffe6933f878 [ 462.856583][T18537] [ 463.293406][T18546] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5370'. [ 463.375968][T18546] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5370'. [ 463.581104][T18553] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5374'. [ 465.500987][T18625] device ipvlan1 entered promiscuous mode [ 465.523146][T18625] bridge0: port 4(ipvlan1) entered blocking state [ 465.583424][T18625] bridge0: port 4(ipvlan1) entered disabled state [ 465.610605][T18625] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 465.872167][T18644] FAULT_INJECTION: forcing a failure. [ 465.872167][T18644] name failslab, interval 1, probability 0, space 0, times 0 [ 465.923333][T18644] CPU: 0 PID: 18644 Comm: syz.2.5411 Not tainted syzkaller #0 [ 465.930835][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.940902][T18644] Call Trace: [ 465.944197][T18644] [ 465.947138][T18644] dump_stack_lvl+0x188/0x250 [ 465.951833][T18644] ? show_regs_print_info+0x20/0x20 [ 465.957045][T18644] ? load_image+0x410/0x410 [ 465.961565][T18644] ? __might_sleep+0xf0/0xf0 [ 465.966167][T18644] ? __lock_acquire+0x7b50/0x7b50 [ 465.971210][T18644] should_fail+0x383/0x4b0 [ 465.975641][T18644] should_failslab+0x5/0x20 [ 465.980152][T18644] slab_pre_alloc_hook+0x51/0xc0 [ 465.985100][T18644] kmem_cache_alloc_node+0x47/0x2c0 [ 465.990303][T18644] ? __alloc_skb+0xf4/0x750 [ 465.994819][T18644] __alloc_skb+0xf4/0x750 [ 465.999330][T18644] netlink_dump+0x1cc/0xdd0 [ 466.003841][T18644] ? lockdep_hardirqs_on+0x94/0x140 [ 466.009071][T18644] ? perf_trace_kmem_cache_free+0x4c/0x170 [ 466.014883][T18644] ? skb_free_datagram+0x25/0xe0 [ 466.019857][T18644] ? netlink_lookup+0x1d0/0x1d0 [ 466.024728][T18644] netlink_recvmsg+0x685/0xe50 [ 466.029504][T18644] ? netlink_sendmsg+0xbe0/0xbe0 [ 466.034444][T18644] ? aa_sk_perm+0x7dc/0x910 [ 466.038959][T18644] ? aa_af_perm+0x340/0x340 [ 466.043471][T18644] ? __lock_acquire+0x1305/0x7b50 [ 466.048518][T18644] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 466.053805][T18644] ? security_socket_recvmsg+0x85/0xb0 [ 466.059267][T18644] ? netlink_sendmsg+0xbe0/0xbe0 [ 466.064207][T18644] ____sys_recvmsg+0x2ca/0x5b0 [ 466.068989][T18644] ? __sys_recvmsg_sock+0x40/0x40 [ 466.074029][T18644] ? import_iovec+0x6f/0xa0 [ 466.078536][T18644] ___sys_recvmsg+0x213/0x5c0 [ 466.083223][T18644] ? __sys_recvmsg+0x280/0x280 [ 466.088003][T18644] ? __lock_acquire+0x7b50/0x7b50 [ 466.093026][T18644] ? vfs_write+0xaa6/0xd70 [ 466.097449][T18644] ? __fget_files+0x402/0x470 [ 466.102134][T18644] __x64_sys_recvmsg+0x201/0x2d0 [ 466.107089][T18644] ? ___sys_recvmsg+0x5c0/0x5c0 [ 466.112022][T18644] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 466.118026][T18644] ? lockdep_hardirqs_on+0x94/0x140 [ 466.123225][T18644] do_syscall_64+0x4c/0xa0 [ 466.127634][T18644] ? clear_bhb_loop+0x30/0x80 [ 466.132303][T18644] ? clear_bhb_loop+0x30/0x80 [ 466.136977][T18644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.142862][T18644] RIP: 0033:0x7faaa7b160d9 [ 466.147274][T18644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.166878][T18644] RSP: 002b:00007faaa5d6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 466.175290][T18644] RAX: ffffffffffffffda RBX: 00007faaa7d9dfa0 RCX: 00007faaa7b160d9 [ 466.183263][T18644] RDX: 0000000000000020 RSI: 0000200000001500 RDI: 0000000000000003 [ 466.191228][T18644] RBP: 00007faaa5d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 466.199188][T18644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.207190][T18644] R13: 00007faaa7d9e038 R14: 00007faaa7d9dfa0 R15: 00007fff488fd188 [ 466.215179][T18644] [ 466.304075][T18654] validate_nla: 11 callbacks suppressed [ 466.304110][T18654] netlink: 'syz.4.5414': attribute type 1 has an invalid length. [ 466.354904][T18654] __nla_validate_parse: 9 callbacks suppressed [ 466.354939][T18654] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5414'. [ 466.394332][T18654] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5414'. [ 469.980155][T18679] netlink: 'syz.0.5425': attribute type 49 has an invalid length. [ 470.052609][T18691] netlink: 'syz.0.5425': attribute type 10 has an invalid length. [ 470.081928][T18691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5425'. [ 470.109169][T18691] device ipvlan1 entered promiscuous mode [ 470.119344][T18684] FAULT_INJECTION: forcing a failure. [ 470.119344][T18684] name failslab, interval 1, probability 0, space 0, times 0 [ 470.132372][T18691] bridge0: port 3(ipvlan1) entered blocking state [ 470.133605][T18684] CPU: 0 PID: 18684 Comm: syz.4.5427 Not tainted syzkaller #0 [ 470.146298][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.149125][T18691] bridge0: port 3(ipvlan1) entered disabled state [ 470.156372][T18684] Call Trace: [ 470.156385][T18684] [ 470.156394][T18684] dump_stack_lvl+0x188/0x250 [ 470.156423][T18684] ? show_regs_print_info+0x20/0x20 [ 470.156442][T18684] ? load_image+0x410/0x410 [ 470.156463][T18684] ? __might_sleep+0xf0/0xf0 [ 470.156479][T18684] ? __lock_acquire+0x7b50/0x7b50 [ 470.156501][T18684] should_fail+0x383/0x4b0 [ 470.156523][T18684] should_failslab+0x5/0x20 [ 470.156539][T18684] slab_pre_alloc_hook+0x51/0xc0 [ 470.156558][T18684] kmem_cache_alloc_trace+0x47/0x290 [ 470.156574][T18684] ? call_usermodehelper_setup+0x8a/0x260 [ 470.218006][T18684] call_usermodehelper_setup+0x8a/0x260 [ 470.223544][T18684] ? __request_module+0x980/0x980 [ 470.228553][T18684] __request_module+0x3ea/0x980 [ 470.233415][T18684] ? umd_cleanup+0x110/0x110 [ 470.238008][T18684] ? __lock_acquire+0x7b50/0x7b50 [ 470.243023][T18684] ? rcu_lock_release+0x5/0x20 [ 470.247783][T18684] inet6_create+0x3f9/0x1130 [ 470.252368][T18684] __sock_create+0x473/0x910 [ 470.256950][T18684] __sys_socket+0xe2/0x170 [ 470.261376][T18684] __x64_sys_socket+0x76/0x80 [ 470.266041][T18684] do_syscall_64+0x4c/0xa0 [ 470.270439][T18684] ? clear_bhb_loop+0x30/0x80 [ 470.275099][T18684] ? clear_bhb_loop+0x30/0x80 [ 470.279762][T18684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.285640][T18684] RIP: 0033:0x7f0ceb02a0d9 [ 470.290041][T18684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.309631][T18684] RSP: 002b:00007f0ce9282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 470.318055][T18684] RAX: ffffffffffffffda RBX: 00007f0ceb2b1fa0 RCX: 00007f0ceb02a0d9 [ 470.326013][T18684] RDX: 0000000000000106 RSI: 0000000000000007 RDI: 000000000000000a [ 470.333975][T18684] RBP: 00007f0ce9282090 R08: 0000000000000000 R09: 0000000000000000 [ 470.341943][T18684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.349943][T18684] R13: 00007f0ceb2b2038 R14: 00007f0ceb2b1fa0 R15: 00007fffa6a30178 [ 470.357929][T18684] [ 470.366497][T18691] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 470.498263][T18706] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 470.542916][T18706] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5429'. [ 470.561757][T18706] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5429'. [ 470.642176][T18715] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5432'. [ 470.826288][T18722] netlink: 'syz.4.5437': attribute type 39 has an invalid length. [ 470.951818][T18728] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 470.981947][T18728] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 471.008824][T18733] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 471.040723][T18728] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 471.080008][T18728] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 471.937629][T18749] validate_nla: 1 callbacks suppressed [ 471.937650][T18749] netlink: 'syz.0.5447': attribute type 1 has an invalid length. [ 471.997319][T18749] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5447'. [ 472.045793][T18749] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5447'. [ 472.615918][T18762] netlink: 'syz.1.5451': attribute type 39 has an invalid length. [ 473.463458][T18782] netlink: 'syz.1.5461': attribute type 10 has an invalid length. [ 473.492095][T18782] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.575769][T18782] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 473.651004][T18782] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 473.752781][T18782] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 473.891138][T18797] netlink: 'syz.4.5464': attribute type 29 has an invalid length. [ 473.924841][T18797] netlink: 'syz.4.5464': attribute type 29 has an invalid length. [ 474.136877][T18792] netlink: 'syz.3.5465': attribute type 39 has an invalid length. [ 474.642110][T18818] netlink: 'syz.1.5473': attribute type 1 has an invalid length. [ 474.670947][T18818] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5473'. [ 474.715769][T18818] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5473'. [ 474.855420][T18834] netlink: 'syz.2.5477': attribute type 29 has an invalid length. [ 474.912304][T18834] netlink: 'syz.2.5477': attribute type 29 has an invalid length. [ 474.993565][T18837] netlink: 'syz.4.5480': attribute type 39 has an invalid length. [ 475.376662][T18858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5486'. [ 475.597546][T18867] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5490'. [ 475.668273][T18867] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5490'. [ 475.842214][T18877] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.857912][T18877] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 475.875365][T18877] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 475.894012][T18877] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 476.048172][T18887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5500'. [ 476.210233][T18898] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5503'. [ 476.289051][T18904] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5506'. [ 476.601977][T18917] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.622963][T18917] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 476.639970][T18917] bond0: (slave hsr0): Error -95 calling set_mac_address [ 477.009825][T18939] __nla_validate_parse: 5 callbacks suppressed [ 477.009852][T18939] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5521'. [ 477.019188][T18937] validate_nla: 20 callbacks suppressed [ 477.019220][T18937] netlink: 'syz.1.5531': attribute type 29 has an invalid length. [ 477.041752][T18937] netlink: 'syz.1.5531': attribute type 29 has an invalid length. [ 477.106041][T18941] netlink: 'syz.0.5522': attribute type 39 has an invalid length. [ 477.228933][T18947] netlink: 'syz.1.5525': attribute type 16 has an invalid length. [ 477.254066][T18947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5525'. [ 477.264351][T18949] netlink: 'syz.0.5526': attribute type 10 has an invalid length. [ 477.463560][T18961] FAULT_INJECTION: forcing a failure. [ 477.463560][T18961] name failslab, interval 1, probability 0, space 0, times 0 [ 477.486155][T18961] CPU: 1 PID: 18961 Comm: syz.1.5533 Not tainted syzkaller #0 [ 477.493661][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.503726][T18961] Call Trace: [ 477.507012][T18961] [ 477.510115][T18961] dump_stack_lvl+0x188/0x250 [ 477.514799][T18961] ? show_regs_print_info+0x20/0x20 [ 477.520003][T18961] ? load_image+0x410/0x410 [ 477.524523][T18961] ? __might_sleep+0xf0/0xf0 [ 477.529113][T18961] ? __lock_acquire+0x7b50/0x7b50 [ 477.534143][T18961] should_fail+0x383/0x4b0 [ 477.538568][T18961] should_failslab+0x5/0x20 [ 477.543072][T18961] slab_pre_alloc_hook+0x51/0xc0 [ 477.548013][T18961] __kmalloc+0x6b/0x340 [ 477.552162][T18961] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 477.557891][T18961] tomoyo_realpath_from_path+0xed/0x5e0 [ 477.563449][T18961] tomoyo_path_number_perm+0x251/0x6b0 [ 477.568908][T18961] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 477.574366][T18961] ? rcu_nmi_exit+0x6f/0xf0 [ 477.578915][T18961] security_file_ioctl+0x6c/0xa0 [ 477.583863][T18961] __se_sys_ioctl+0x48/0x170 [ 477.588452][T18961] do_syscall_64+0x4c/0xa0 [ 477.592869][T18961] ? clear_bhb_loop+0x30/0x80 [ 477.597541][T18961] ? clear_bhb_loop+0x30/0x80 [ 477.602215][T18961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.608108][T18961] RIP: 0033:0x7f4e2d55d0d9 [ 477.612522][T18961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.632124][T18961] RSP: 002b:00007f4e2b7b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.640537][T18961] RAX: ffffffffffffffda RBX: 00007f4e2d7e4fa0 RCX: 00007f4e2d55d0d9 [ 477.648502][T18961] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000006 [ 477.656476][T18961] RBP: 00007f4e2b7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 477.664439][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.672404][T18961] R13: 00007f4e2d7e5038 R14: 00007f4e2d7e4fa0 R15: 00007ffe6933f878 [ 477.680387][T18961] [ 477.713044][T18961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 477.731800][T18961] netlink: 'syz.1.5533': attribute type 9 has an invalid length. [ 477.746339][T18961] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5533'. [ 477.863001][T18967] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5544'. [ 477.881395][T18969] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5535'. [ 478.316858][T18980] netlink: 'syz.1.5537': attribute type 29 has an invalid length. [ 478.326159][T18977] netlink: 'syz.4.5538': attribute type 39 has an invalid length. [ 478.366645][T18980] netlink: 'syz.1.5537': attribute type 29 has an invalid length. [ 478.553342][T18984] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5541'. [ 478.569521][T18986] netlink: 'syz.2.5542': attribute type 10 has an invalid length. [ 478.581338][T18986] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 478.623215][T18986] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 478.689376][T18986] bond0: (slave hsr0): Error -95 calling set_mac_address [ 478.703399][T18996] FAULT_INJECTION: forcing a failure. [ 478.703399][T18996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.724627][T18996] CPU: 0 PID: 18996 Comm: syz.0.5546 Not tainted syzkaller #0 [ 478.732132][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.742212][T18996] Call Trace: [ 478.745510][T18996] [ 478.748465][T18996] dump_stack_lvl+0x188/0x250 [ 478.753186][T18996] ? show_regs_print_info+0x20/0x20 [ 478.758409][T18996] ? load_image+0x410/0x410 [ 478.762963][T18996] ? __lock_acquire+0x7b50/0x7b50 [ 478.768039][T18996] should_fail+0x383/0x4b0 [ 478.772501][T18996] _copy_to_user+0x2e/0x130 [ 478.777049][T18996] simple_read_from_buffer+0xe3/0x150 [ 478.782810][T18996] proc_fail_nth_read+0x1a6/0x220 [ 478.787875][T18996] ? proc_fault_inject_write+0x310/0x310 [ 478.793648][T18996] ? fsnotify_perm+0x254/0x560 [ 478.798431][T18996] ? proc_fault_inject_write+0x310/0x310 [ 478.804088][T18996] vfs_read+0x2ff/0xd50 [ 478.808274][T18996] ? __lock_acquire+0x7b50/0x7b50 [ 478.813339][T18996] ? kernel_read+0x1e0/0x1e0 [ 478.818016][T18996] ? mutex_lock_nested+0x17/0x20 [ 478.822982][T18996] ? __fdget_pos+0x2bf/0x370 [ 478.827589][T18996] ? ksys_read+0x70/0x260 [ 478.831948][T18996] ksys_read+0x153/0x260 [ 478.836222][T18996] ? vfs_write+0xd70/0xd70 [ 478.840669][T18996] ? lockdep_hardirqs_on+0x94/0x140 [ 478.845909][T18996] do_syscall_64+0x4c/0xa0 [ 478.850428][T18996] ? clear_bhb_loop+0x30/0x80 [ 478.855117][T18996] ? clear_bhb_loop+0x30/0x80 [ 478.859815][T18996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.865731][T18996] RIP: 0033:0x7f5d4b17d90e [ 478.870171][T18996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.889801][T18996] RSP: 002b:00007f5d493f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.898238][T18996] RAX: ffffffffffffffda RBX: 00007f5d493f46c0 RCX: 00007f5d4b17d90e [ 478.906225][T18996] RDX: 000000000000000f RSI: 00007f5d493f40a0 RDI: 0000000000000000 [ 478.914207][T18996] RBP: 00007f5d493f4090 R08: 0000000000000000 R09: 0000000000000000 [ 478.922191][T18996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.930175][T18996] R13: 00007f5d4b445128 R14: 00007f5d4b445090 R15: 00007ffc487eab18 [ 478.938224][T18996] [ 479.222989][T19005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5559'. [ 479.240020][T19006] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5550'. [ 480.076012][T19036] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.126559][T19036] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 480.145148][T19036] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.179303][T19036] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 480.304210][T19040] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5564'. [ 481.112581][T19082] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5580'. [ 481.468781][T19104] device sit0 left promiscuous mode [ 481.511412][T19106] device sit0 entered promiscuous mode [ 482.082767][T19142] validate_nla: 13 callbacks suppressed [ 482.082784][T19142] netlink: 'syz.0.5606': attribute type 10 has an invalid length. [ 482.122127][T19142] device wg1 entered promiscuous mode [ 482.134485][T19142] team0: Device wg1 is of different type [ 482.164987][T19145] __nla_validate_parse: 3 callbacks suppressed [ 482.165041][T19145] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5607'. [ 482.188729][T19149] netlink: 'syz.1.5610': attribute type 10 has an invalid length. [ 482.218391][T19149] team0: Device wg1 is of different type [ 482.273019][T19147] netlink: 'syz.4.5609': attribute type 39 has an invalid length. [ 482.381215][T19155] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5612'. [ 482.788207][T19167] device syzkaller0 entered promiscuous mode [ 482.967698][T19177] netlink: 'syz.3.5620': attribute type 16 has an invalid length. [ 483.044863][T19177] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5620'. [ 483.156029][T19178] netlink: 'syz.3.5620': attribute type 10 has an invalid length. [ 483.177394][T19178] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5620'. [ 483.201032][T19179] netlink: 'syz.3.5620': attribute type 10 has an invalid length. [ 484.035209][T19196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5626'. [ 484.161713][T19198] netlink: 'syz.4.5627': attribute type 16 has an invalid length. [ 484.192566][T19198] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5627'. [ 484.210026][T19209] netlink: 'syz.2.5630': attribute type 10 has an invalid length. [ 484.222973][T19209] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.281975][T19209] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 484.301463][T19209] bond0: (slave hsr0): Error -95 calling set_mac_address [ 484.310563][T19211] netlink: 'syz.4.5627': attribute type 10 has an invalid length. [ 484.335907][T19211] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5627'. [ 484.351545][T19198] netlink: 'syz.4.5627': attribute type 10 has an invalid length. [ 484.362257][T19198] team0: Device bridge0 is already an upper device of the team interface [ 485.034925][T19243] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5642'. [ 485.121909][T19246] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5642'. [ 485.190879][T19243] FAULT_INJECTION: forcing a failure. [ 485.190879][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 485.225782][T19243] CPU: 1 PID: 19243 Comm: syz.0.5642 Not tainted syzkaller #0 [ 485.233291][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.243358][T19243] Call Trace: [ 485.246646][T19243] [ 485.249590][T19243] dump_stack_lvl+0x188/0x250 [ 485.254296][T19243] ? show_regs_print_info+0x20/0x20 [ 485.259515][T19243] ? load_image+0x410/0x410 [ 485.264028][T19243] ? __might_sleep+0xf0/0xf0 [ 485.268627][T19243] ? __lock_acquire+0x7b50/0x7b50 [ 485.273638][T19243] ? netlink_insert+0xe90/0x11f0 [ 485.278567][T19243] should_fail+0x383/0x4b0 [ 485.282980][T19243] should_failslab+0x5/0x20 [ 485.287476][T19243] slab_pre_alloc_hook+0x51/0xc0 [ 485.292425][T19243] kmem_cache_alloc_node+0x47/0x2c0 [ 485.297631][T19243] ? __alloc_skb+0xf4/0x750 [ 485.302151][T19243] __alloc_skb+0xf4/0x750 [ 485.306488][T19243] netlink_sendmsg+0x654/0xbe0 [ 485.311267][T19243] ? netlink_getsockopt+0x570/0x570 [ 485.316464][T19243] ? aa_sock_msg_perm+0x94/0x150 [ 485.321397][T19243] ? apparmor_socket_sendmsg+0x173/0x230 [ 485.327018][T19243] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 485.332294][T19243] ? security_socket_sendmsg+0x7c/0xa0 [ 485.337740][T19243] ? netlink_getsockopt+0x570/0x570 [ 485.342947][T19243] ____sys_sendmsg+0x5be/0x8f0 [ 485.347720][T19243] ? __sys_sendmsg_sock+0x30/0x30 [ 485.352738][T19243] ? import_iovec+0x6f/0xa0 [ 485.357253][T19243] ___sys_sendmsg+0x236/0x2e0 [ 485.361919][T19243] ? __sys_sendmsg+0x290/0x290 [ 485.366697][T19243] __se_sys_sendmsg+0x1b7/0x2a0 [ 485.371537][T19243] ? __x64_sys_sendmsg+0x80/0x80 [ 485.376483][T19243] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 485.382459][T19243] ? lockdep_hardirqs_on+0x94/0x140 [ 485.387644][T19243] do_syscall_64+0x4c/0xa0 [ 485.392046][T19243] ? clear_bhb_loop+0x30/0x80 [ 485.396711][T19243] ? clear_bhb_loop+0x30/0x80 [ 485.401376][T19243] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.407254][T19243] RIP: 0033:0x7f5d4b1bd0d9 [ 485.411657][T19243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.431334][T19243] RSP: 002b:00007f5d49415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.439732][T19243] RAX: ffffffffffffffda RBX: 00007f5d4b444fa0 RCX: 00007f5d4b1bd0d9 [ 485.447690][T19243] RDX: 0000000024000044 RSI: 0000200000000500 RDI: 0000000000000003 [ 485.455659][T19243] RBP: 00007f5d49415090 R08: 0000000000000000 R09: 0000000000000000 [ 485.463616][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.471569][T19243] R13: 00007f5d4b445038 R14: 00007f5d4b444fa0 R15: 00007ffc487eab18 [ 485.479534][T19243] [ 485.513385][T19258] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5649'. [ 485.548162][T19254] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 485.576846][T19254] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 485.622936][T19254] bond0: (slave hsr0): Error -95 calling set_mac_address [ 487.174886][T19328] __nla_validate_parse: 8 callbacks suppressed [ 487.174903][T19328] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5680'. [ 487.372199][T19333] validate_nla: 12 callbacks suppressed [ 487.372236][T19333] netlink: 'syz.0.5683': attribute type 1 has an invalid length. [ 487.386591][T19333] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5683'. [ 487.402779][T19333] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5683'. [ 487.440458][T19339] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5685'. [ 487.542176][T19343] netlink: 'syz.0.5688': attribute type 10 has an invalid length. [ 487.562092][T19343] device virt_wifi0 entered promiscuous mode [ 487.570013][T19343] team0: Port device virt_wifi0 added [ 487.582338][T19345] netlink: 'syz.2.5687': attribute type 16 has an invalid length. [ 487.599394][T19345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5687'. [ 487.776266][T19354] netlink: 'syz.2.5691': attribute type 39 has an invalid length. [ 487.872937][T19361] FAULT_INJECTION: forcing a failure. [ 487.872937][T19361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.887508][T19361] CPU: 0 PID: 19361 Comm: syz.2.5694 Not tainted syzkaller #0 [ 487.894993][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.905040][T19361] Call Trace: [ 487.908310][T19361] [ 487.911227][T19361] dump_stack_lvl+0x188/0x250 [ 487.915900][T19361] ? show_regs_print_info+0x20/0x20 [ 487.921084][T19361] ? load_image+0x410/0x410 [ 487.925577][T19361] ? __lock_acquire+0x7b50/0x7b50 [ 487.930598][T19361] should_fail+0x383/0x4b0 [ 487.935021][T19361] _copy_to_user+0x2e/0x130 [ 487.939530][T19361] simple_read_from_buffer+0xe3/0x150 [ 487.944904][T19361] proc_fail_nth_read+0x1a6/0x220 [ 487.949927][T19361] ? proc_fault_inject_write+0x310/0x310 [ 487.955563][T19361] ? fsnotify_perm+0x254/0x560 [ 487.960312][T19361] ? proc_fault_inject_write+0x310/0x310 [ 487.965931][T19361] vfs_read+0x2ff/0xd50 [ 487.970161][T19361] ? __lock_acquire+0x7b50/0x7b50 [ 487.975173][T19361] ? kernel_read+0x1e0/0x1e0 [ 487.979780][T19361] ? mutex_lock_nested+0x17/0x20 [ 487.984719][T19361] ? __fdget_pos+0x2bf/0x370 [ 487.989296][T19361] ? ksys_read+0x70/0x260 [ 487.993621][T19361] ksys_read+0x153/0x260 [ 487.997850][T19361] ? vfs_write+0xd70/0xd70 [ 488.002255][T19361] ? lockdep_hardirqs_on+0x94/0x140 [ 488.007441][T19361] do_syscall_64+0x4c/0xa0 [ 488.011841][T19361] ? clear_bhb_loop+0x30/0x80 [ 488.016513][T19361] ? clear_bhb_loop+0x30/0x80 [ 488.021174][T19361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.027047][T19361] RIP: 0033:0x7faaa7ad690e [ 488.031448][T19361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.051035][T19361] RSP: 002b:00007faaa5d6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.059535][T19361] RAX: ffffffffffffffda RBX: 00007faaa5d6e6c0 RCX: 00007faaa7ad690e [ 488.067494][T19361] RDX: 000000000000000f RSI: 00007faaa5d6e0a0 RDI: 0000000000000004 [ 488.075458][T19361] RBP: 00007faaa5d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.083421][T19361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.091376][T19361] R13: 00007faaa7d9e038 R14: 00007faaa7d9dfa0 R15: 00007fff488fd188 [ 488.099345][T19361] [ 488.179264][T19366] netlink: 'syz.3.5705': attribute type 2 has an invalid length. [ 488.192337][T19366] netlink: 'syz.3.5705': attribute type 1 has an invalid length. [ 488.212382][T19366] netlink: 'syz.3.5705': attribute type 2 has an invalid length. [ 488.221051][T19366] netlink: 'syz.3.5705': attribute type 8 has an invalid length. [ 488.229398][T19366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5705'. [ 488.278981][T19364] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5695'. [ 488.396027][T19376] netlink: 'syz.4.5698': attribute type 16 has an invalid length. [ 488.404065][T19376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5698'. [ 488.462072][T19375] netlink: 'syz.3.5699': attribute type 1 has an invalid length. [ 488.493475][T19375] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5699'. [ 488.513790][T19383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5703'. [ 489.106601][T19399] chnl_net:caif_netlink_parms(): no params data found [ 489.194111][T19399] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.201503][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.210267][T19399] device bridge_slave_0 entered promiscuous mode [ 489.219579][T19399] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.227458][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.237043][T19399] device bridge_slave_1 entered promiscuous mode [ 489.280756][T19399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.295490][T19399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.370465][T19399] team0: Port device team_slave_0 added [ 489.390990][T19399] team0: Port device team_slave_1 added [ 489.411980][T19399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.431600][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.482568][T19399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.503004][T19399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.511699][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.539824][T19399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.587354][T19399] device hsr_slave_0 entered promiscuous mode [ 489.605868][T19399] device hsr_slave_1 entered promiscuous mode [ 489.728229][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.742865][T19437] FAULT_INJECTION: forcing a failure. [ 489.742865][T19437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.761268][T19437] CPU: 0 PID: 19437 Comm: syz.1.5722 Not tainted syzkaller #0 [ 489.768764][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.778832][T19437] Call Trace: [ 489.782122][T19437] [ 489.785059][T19437] dump_stack_lvl+0x188/0x250 [ 489.789745][T19437] ? show_regs_print_info+0x20/0x20 [ 489.794948][T19437] ? load_image+0x410/0x410 [ 489.799453][T19437] ? __lock_acquire+0x7b50/0x7b50 [ 489.804476][T19437] should_fail+0x383/0x4b0 [ 489.808882][T19437] _copy_from_user+0x2e/0x170 [ 489.813550][T19437] iovec_from_user+0x142/0x370 [ 489.818300][T19437] __import_iovec+0x70/0x490 [ 489.822875][T19437] ? __lock_acquire+0x13dc/0x7b50 [ 489.827892][T19437] import_iovec+0x6f/0xa0 [ 489.832213][T19437] ___sys_sendmsg+0x1fd/0x2e0 [ 489.836885][T19437] ? __sys_sendmsg+0x290/0x290 [ 489.841656][T19437] __se_sys_sendmsg+0x1b7/0x2a0 [ 489.846512][T19437] ? __x64_sys_sendmsg+0x80/0x80 [ 489.851435][T19437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 489.857419][T19437] ? lockdep_hardirqs_on+0x94/0x140 [ 489.862606][T19437] do_syscall_64+0x4c/0xa0 [ 489.867017][T19437] ? clear_bhb_loop+0x30/0x80 [ 489.871677][T19437] ? clear_bhb_loop+0x30/0x80 [ 489.876336][T19437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.882301][T19437] RIP: 0033:0x7f4e2d55d0d9 [ 489.886705][T19437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.906294][T19437] RSP: 002b:00007f4e2b7b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.914695][T19437] RAX: ffffffffffffffda RBX: 00007f4e2d7e4fa0 RCX: 00007f4e2d55d0d9 [ 489.922650][T19437] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000007 [ 489.930603][T19437] RBP: 00007f4e2b7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 489.938557][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.946512][T19437] R13: 00007f4e2d7e5038 R14: 00007f4e2d7e4fa0 R15: 00007ffe6933f878 [ 489.954477][T19437] [ 489.985123][T19443] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.992625][T19443] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.015575][T19443] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.022900][T19443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.031270][T19443] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.038481][T19443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.060991][T19443] team0: Port device bridge0 added [ 490.108788][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.144502][T19449] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.157551][T19449] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 490.168146][T19449] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 490.181171][T19449] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 490.218005][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.855646][T19486] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.898753][T19486] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 490.933146][T19486] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 490.945609][ T1106] Bluetooth: hci2: command 0x0409 tx timeout [ 490.963315][T19486] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 490.973568][T19500] FAULT_INJECTION: forcing a failure. [ 490.973568][T19500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.988947][T19500] CPU: 0 PID: 19500 Comm: syz.0.5742 Not tainted syzkaller #0 [ 490.996427][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.006487][T19500] Call Trace: [ 491.009771][T19500] [ 491.012714][T19500] dump_stack_lvl+0x188/0x250 [ 491.017409][T19500] ? show_regs_print_info+0x20/0x20 [ 491.022617][T19500] ? load_image+0x410/0x410 [ 491.027134][T19500] ? __lock_acquire+0x7b50/0x7b50 [ 491.032200][T19500] should_fail+0x383/0x4b0 [ 491.036634][T19500] _copy_from_user+0x2e/0x170 [ 491.041329][T19500] __copy_msghdr_from_user+0xc9/0x630 [ 491.046709][T19500] ? verify_lock_unused+0x140/0x140 [ 491.051924][T19500] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 491.057240][T19500] ___sys_sendmsg+0x19a/0x2e0 [ 491.061938][T19500] ? __sys_sendmsg+0x290/0x290 [ 491.066744][T19500] __se_sys_sendmsg+0x1b7/0x2a0 [ 491.071613][T19500] ? __x64_sys_sendmsg+0x80/0x80 [ 491.076561][T19500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.082565][T19500] ? lockdep_hardirqs_on+0x94/0x140 [ 491.087775][T19500] do_syscall_64+0x4c/0xa0 [ 491.092199][T19500] ? clear_bhb_loop+0x30/0x80 [ 491.096882][T19500] ? clear_bhb_loop+0x30/0x80 [ 491.101573][T19500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.107468][T19500] RIP: 0033:0x7f5d4b1bd0d9 [ 491.111889][T19500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.131504][T19500] RSP: 002b:00007f5d49415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.139930][T19500] RAX: ffffffffffffffda RBX: 00007f5d4b444fa0 RCX: 00007f5d4b1bd0d9 [ 491.147917][T19500] RDX: 0000000020000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 491.156074][T19500] RBP: 00007f5d49415090 R08: 0000000000000000 R09: 0000000000000000 [ 491.164045][T19500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.172008][T19500] R13: 00007f5d4b445038 R14: 00007f5d4b444fa0 R15: 00007ffc487eab18 [ 491.179981][T19500] [ 491.454926][T19399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.493584][T19399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.508439][T19399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 491.518781][T19399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.656954][T19399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.679091][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.689122][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.710380][T19399] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.766292][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.777060][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.793776][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.800905][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.810443][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.824138][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.834140][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.841286][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.889588][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.898944][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.908754][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.962966][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.974701][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.988006][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.008103][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.030432][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.057522][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.073197][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.095415][T19544] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 492.110990][T19544] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 492.122943][T19544] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.136758][T19544] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 492.149486][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.160931][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.186130][T19399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.444512][ T9] device wlan1 left promiscuous mode [ 492.463074][ T9] team0: Port device wlan1 removed [ 492.487849][T19557] validate_nla: 20 callbacks suppressed [ 492.487883][T19557] netlink: 'syz.1.5760': attribute type 1 has an invalid length. [ 492.513996][T19557] __nla_validate_parse: 15 callbacks suppressed [ 492.514032][T19557] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5760'. [ 492.554164][T19557] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5760'. [ 492.592240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.610456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.662851][T19399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.779159][T19565] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5763'. [ 492.793952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.816921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.862021][T19569] netlink: 'syz.3.5765': attribute type 16 has an invalid length. [ 492.870706][T19569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5765'. [ 492.894604][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.911999][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.936791][T19399] device veth0_vlan entered promiscuous mode [ 492.947248][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.973407][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.021124][T19399] device veth1_vlan entered promiscuous mode [ 493.028683][ T1106] Bluetooth: hci2: command 0x041b tx timeout [ 493.099886][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 493.125131][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 493.143906][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.163095][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.186706][T19399] device veth0_macvtap entered promiscuous mode [ 493.211805][T19583] netlink: 'syz.1.5771': attribute type 39 has an invalid length. [ 493.226493][T19399] device veth1_macvtap entered promiscuous mode [ 493.285245][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.298261][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.308612][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.319315][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.329677][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.360096][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.374837][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.393557][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.403742][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.422363][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.435343][T19399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.470333][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 493.498003][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.558831][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.576704][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.576904][T19594] netlink: 'syz.3.5774': attribute type 1 has an invalid length. [ 493.597095][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.611770][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.622334][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.626498][T19594] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5774'. [ 493.634204][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.701464][T19594] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5774'. [ 493.714376][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.739383][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.750539][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.761851][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.782458][T19399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.799620][T19399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.813390][T19399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.829134][T19601] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5777'. [ 493.849188][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.873393][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.932608][T19399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.950280][T19399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.985659][T19399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.994407][T19399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.140437][T19605] netlink: 'syz.4.5779': attribute type 21 has an invalid length. [ 494.188407][ T5753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.203856][ T5753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.214754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 494.262572][ T5761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.286039][ T5761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.300539][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 494.307623][T19613] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 494.353502][T19613] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5783'. [ 494.385386][T19613] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5783'. [ 494.509398][ T9] device hsr_slave_1 left promiscuous mode [ 494.533912][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.542271][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.551135][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.565371][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.573970][ T9] batman_adv: batadv0: Interface deactivated: vlan1 [ 494.581202][ T9] batman_adv: batadv0: Removing interface: vlan1 [ 494.588467][ T9] bridge0: port 3(team0) entered disabled state [ 494.613407][ T9] device bridge_slave_1 left promiscuous mode [ 494.620004][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.628959][ T9] device bridge_slave_0 left promiscuous mode [ 494.635220][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.648480][ T9] device veth0_macvtap left promiscuous mode [ 494.655045][ T9] device veth1_vlan left promiscuous mode [ 494.668535][ T9] device veth0_vlan left promiscuous mode [ 494.725151][T19632] netlink: 'syz.2.5788': attribute type 1 has an invalid length. [ 494.750972][T19632] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5788'. [ 494.928060][ T9] device geneve1 left promiscuous mode [ 494.937006][ T9] team0 (unregistering): Port device geneve1 removed [ 495.092318][ T9] device virt_wifi0 left promiscuous mode [ 495.105854][ T24] Bluetooth: hci2: command 0x040f tx timeout [ 495.108517][ T9] team0 (unregistering): Port device virt_wifi0 removed [ 495.164836][ T9] device team_slave_1 left promiscuous mode [ 495.174381][ T9] team0 (unregistering): Port device team_slave_1 removed [ 495.190281][ T9] device team_slave_0 left promiscuous mode [ 495.199520][ T9] team0 (unregistering): Port device team_slave_0 removed [ 495.215086][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.230858][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.293060][ T9] bond0 (unregistering): Released all slaves [ 495.364590][T19636] device sit0 entered promiscuous mode [ 495.438270][T19643] device sit0 left promiscuous mode [ 495.652433][T19651] device syzkaller0 entered promiscuous mode [ 495.862988][T19672] FAULT_INJECTION: forcing a failure. [ 495.862988][T19672] name failslab, interval 1, probability 0, space 0, times 0 [ 495.877114][T19672] CPU: 0 PID: 19672 Comm: syz.0.5801 Not tainted syzkaller #0 [ 495.884593][T19672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.894638][T19672] Call Trace: [ 495.897910][T19672] [ 495.900828][T19672] dump_stack_lvl+0x188/0x250 [ 495.905496][T19672] ? show_regs_print_info+0x20/0x20 [ 495.910689][T19672] ? load_image+0x410/0x410 [ 495.915187][T19672] should_fail+0x383/0x4b0 [ 495.919593][T19672] should_failslab+0x5/0x20 [ 495.924080][T19672] slab_pre_alloc_hook+0x51/0xc0 [ 495.929020][T19672] ? skb_clone+0x1bd/0x350 [ 495.933580][T19672] kmem_cache_alloc+0x3d/0x280 [ 495.938350][T19672] skb_clone+0x1bd/0x350 [ 495.942595][T19672] __netlink_deliver_tap+0x3cb/0x7c0 [ 495.947883][T19672] netlink_deliver_tap+0x16c/0x180 [ 495.952985][T19672] netlink_unicast+0x759/0x940 [ 495.957741][T19672] netlink_sendmsg+0x8ba/0xbe0 [ 495.962497][T19672] ? netlink_getsockopt+0x570/0x570 [ 495.967680][T19672] ? aa_sock_msg_perm+0x94/0x150 [ 495.972608][T19672] ? apparmor_socket_sendmsg+0x88/0x230 [ 495.978228][T19672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 495.983500][T19672] ? security_socket_sendmsg+0x7c/0xa0 [ 495.988945][T19672] ? netlink_getsockopt+0x570/0x570 [ 495.994137][T19672] ____sys_sendmsg+0x5be/0x8f0 [ 495.998894][T19672] ? __sys_sendmsg_sock+0x30/0x30 [ 496.003907][T19672] ? import_iovec+0x6f/0xa0 [ 496.008396][T19672] ___sys_sendmsg+0x236/0x2e0 [ 496.013062][T19672] ? __sys_sendmsg+0x290/0x290 [ 496.017840][T19672] __se_sys_sendmsg+0x1b7/0x2a0 [ 496.022676][T19672] ? __x64_sys_sendmsg+0x80/0x80 [ 496.027595][T19672] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 496.033566][T19672] ? lockdep_hardirqs_on+0x94/0x140 [ 496.038756][T19672] do_syscall_64+0x4c/0xa0 [ 496.043154][T19672] ? clear_bhb_loop+0x30/0x80 [ 496.047814][T19672] ? clear_bhb_loop+0x30/0x80 [ 496.052474][T19672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.058349][T19672] RIP: 0033:0x7f5d4b1bd0d9 [ 496.062749][T19672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.082338][T19672] RSP: 002b:00007f5d49415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.090742][T19672] RAX: ffffffffffffffda RBX: 00007f5d4b444fa0 RCX: 00007f5d4b1bd0d9 [ 496.098697][T19672] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 496.106651][T19672] RBP: 00007f5d49415090 R08: 0000000000000000 R09: 0000000000000000 [ 496.114601][T19672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.122558][T19672] R13: 00007f5d4b445038 R14: 00007f5d4b444fa0 R15: 00007ffc487eab18 [ 496.130526][T19672] [ 496.138767][T19672] netlink: 'syz.0.5801': attribute type 10 has an invalid length. [ 496.217988][T19674] netlink: 'syz.2.5802': attribute type 39 has an invalid length. [ 496.487225][T19674] device hsr_slave_0 left promiscuous mode [ 496.518470][T19683] netlink: 'syz.0.5806': attribute type 16 has an invalid length. [ 497.186450][ T24] Bluetooth: hci2: command 0x0419 tx timeout [ 498.166731][T19737] __nla_validate_parse: 7 callbacks suppressed [ 498.166777][T19737] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5824'. [ 500.048122][T19779] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5840'. [ 500.137808][T19782] validate_nla: 3 callbacks suppressed [ 500.137824][T19782] netlink: 'syz.4.5839': attribute type 39 has an invalid length. [ 500.311563][T19795] netlink: 'syz.4.5844': attribute type 17 has an invalid length. [ 500.346052][T19795] netlink: 'syz.4.5844': attribute type 16 has an invalid length. [ 500.359152][T19795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5844'. [ 500.378448][T19800] netlink: 'syz.4.5844': attribute type 10 has an invalid length. [ 500.393732][T19800] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 500.435391][T19800] batman_adv: batadv0: Removing interface: virt_wifi0 [ 500.452907][T19800] device virt_wifi0 entered promiscuous mode [ 500.459749][T19800] team0: Port device virt_wifi0 added [ 500.470217][T19804] netlink: 'syz.1.5847': attribute type 16 has an invalid length. [ 500.484865][T19804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5847'. [ 500.736716][T19820] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5853'. [ 500.791944][T19821] netlink: 'syz.2.5854': attribute type 10 has an invalid length. [ 500.815028][T19821] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5854'. [ 500.851044][T19821] device bond0 entered promiscuous mode [ 500.883916][T19821] device bond_slave_0 entered promiscuous mode [ 500.895406][T19821] device bond_slave_1 entered promiscuous mode [ 500.903820][T19821] bridge0: port 3(bond0) entered blocking state [ 500.911965][T19821] bridge0: port 3(bond0) entered disabled state [ 500.937065][T19821] bridge0: port 3(bond0) entered blocking state [ 500.943706][T19821] bridge0: port 3(bond0) entered forwarding state [ 501.017607][T19826] netlink: 'syz.3.5855': attribute type 39 has an invalid length. [ 501.377827][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384367][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.510160][T19850] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.615387][T19854] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5868'. [ 501.908919][T19860] netlink: 'syz.2.5871': attribute type 39 has an invalid length. [ 502.109145][T19867] netlink: 'syz.1.5870': attribute type 10 has an invalid length. [ 502.128154][T19867] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5870'. [ 502.137549][T19867] device bond0 entered promiscuous mode [ 502.143526][T19867] device bond_slave_0 entered promiscuous mode [ 502.150441][T19867] device bond_slave_1 entered promiscuous mode [ 502.289391][T19867] device macvlan1 entered promiscuous mode [ 502.359060][T19867] bridge0: port 3(bond0) entered blocking state [ 502.424139][T19867] bridge0: port 3(bond0) entered disabled state [ 502.556077][T19867] bridge0: port 3(bond0) entered blocking state [ 502.562539][T19867] bridge0: port 3(bond0) entered forwarding state [ 502.761132][T19871] delete_channel: no stack [ 502.969316][T19882] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5880'. [ 502.994853][T19882] netlink: 21648 bytes leftover after parsing attributes in process `syz.2.5880'. [ 503.031827][T19882] tipc: Started in network mode [ 503.041086][T19883] netlink: set zone limit has 8 unknown bytes [ 503.061644][T19882] tipc: Node identity e, cluster identity 4711 [ 503.081106][T19882] tipc: Node number set to 14 [ 503.283521][T19889] FAULT_INJECTION: forcing a failure. [ 503.283521][T19889] name failslab, interval 1, probability 0, space 0, times 0 [ 503.299081][T19889] CPU: 1 PID: 19889 Comm: syz.2.5882 Not tainted syzkaller #0 [ 503.306570][T19889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.316635][T19889] Call Trace: [ 503.319932][T19889] [ 503.322863][T19889] dump_stack_lvl+0x188/0x250 [ 503.327555][T19889] ? show_regs_print_info+0x20/0x20 [ 503.332760][T19889] ? load_image+0x410/0x410 [ 503.337286][T19889] should_fail+0x383/0x4b0 [ 503.341708][T19889] should_failslab+0x5/0x20 [ 503.346212][T19889] slab_pre_alloc_hook+0x51/0xc0 [ 503.351153][T19889] kmem_cache_alloc_trace+0x47/0x290 [ 503.356434][T19889] ? sctp_add_bind_addr+0x89/0x350 [ 503.361539][T19889] sctp_add_bind_addr+0x89/0x350 [ 503.366461][T19889] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 503.372086][T19889] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 503.378148][T19889] ? sctp_v4_is_any+0x31/0x50 [ 503.382809][T19889] ? sctp_copy_one_addr+0x93/0x660 [ 503.387908][T19889] sctp_bind_addr_copy+0xaf/0x3c0 [ 503.392924][T19889] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 503.399325][T19889] sctp_connect_new_asoc+0x2f5/0x6a0 [ 503.404600][T19889] ? __sctp_connect+0xd80/0xd80 [ 503.409434][T19889] ? __local_bh_enable_ip+0x136/0x1c0 [ 503.414970][T19889] ? _local_bh_enable+0xa0/0xa0 [ 503.419828][T19889] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 503.425477][T19889] ? security_sctp_bind_connect+0x85/0xb0 [ 503.431203][T19889] sctp_sendmsg+0x15e1/0x2940 [ 503.435893][T19889] ? sctp_getsockopt+0x8a0/0x8a0 [ 503.440825][T19889] ? aa_af_perm+0x340/0x340 [ 503.445322][T19889] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 503.451730][T19889] ? aa_sock_msg_perm+0x94/0x150 [ 503.456654][T19889] ? sock_rps_record_flow+0x17/0x3b0 [ 503.461927][T19889] ? inet_sendmsg+0x7a/0x2a0 [ 503.466498][T19889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 503.471767][T19889] ? inet_send_prepare+0x250/0x250 [ 503.476872][T19889] ____sys_sendmsg+0x5be/0x8f0 [ 503.481636][T19889] ? __sys_sendmsg_sock+0x30/0x30 [ 503.486659][T19889] ? import_iovec+0x6f/0xa0 [ 503.491155][T19889] ___sys_sendmsg+0x236/0x2e0 [ 503.495825][T19889] ? __sys_sendmsg+0x290/0x290 [ 503.500597][T19889] __se_sys_sendmsg+0x1b7/0x2a0 [ 503.505433][T19889] ? __x64_sys_sendmsg+0x80/0x80 [ 503.510353][T19889] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 503.516330][T19889] ? lockdep_hardirqs_on+0x94/0x140 [ 503.521518][T19889] do_syscall_64+0x4c/0xa0 [ 503.525921][T19889] ? clear_bhb_loop+0x30/0x80 [ 503.530585][T19889] ? clear_bhb_loop+0x30/0x80 [ 503.535422][T19889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.541300][T19889] RIP: 0033:0x7fdccc83b0d9 [ 503.545702][T19889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.565297][T19889] RSP: 002b:00007fdccaa93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.573697][T19889] RAX: ffffffffffffffda RBX: 00007fdcccac2fa0 RCX: 00007fdccc83b0d9 [ 503.581666][T19889] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 503.589708][T19889] RBP: 00007fdccaa93090 R08: 0000000000000000 R09: 0000000000000000 [ 503.597661][T19889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.605616][T19889] R13: 00007fdcccac3038 R14: 00007fdcccac2fa0 R15: 00007fffd7e3a6e8 [ 503.613590][T19889] [ 503.747550][T19884] chnl_net:caif_netlink_parms(): no params data found [ 503.865316][T19895] netlink: 'syz.4.5884': attribute type 39 has an invalid length. [ 504.066379][T19884] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.106778][T19884] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.134058][T19884] device bridge_slave_0 entered promiscuous mode [ 504.142694][T19884] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.150967][T19884] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.159453][T19884] device bridge_slave_1 entered promiscuous mode [ 504.168893][T19912] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5888'. [ 504.179442][T19912] device bond0 entered promiscuous mode [ 504.185255][T19912] device bond_slave_0 entered promiscuous mode [ 504.194438][T19912] device bond_slave_1 entered promiscuous mode [ 504.218854][T19912] bridge0: port 3(bond0) entered blocking state [ 504.237901][T19912] bridge0: port 3(bond0) entered disabled state [ 504.264396][T19912] bridge0: port 3(bond0) entered blocking state [ 504.271036][T19912] bridge0: port 3(bond0) entered forwarding state [ 504.384367][T19884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.485845][T19884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.571027][T19884] team0: Port device team_slave_0 added [ 504.588004][T19884] team0: Port device team_slave_1 added [ 504.623398][T19884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.633154][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.666742][T19884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.685327][T19884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.746032][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.781200][T19884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.841653][T19932] FAULT_INJECTION: forcing a failure. [ 504.841653][T19932] name failslab, interval 1, probability 0, space 0, times 0 [ 504.864530][T19932] CPU: 1 PID: 19932 Comm: syz.4.5897 Not tainted syzkaller #0 [ 504.872028][T19932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.882105][T19932] Call Trace: [ 504.885397][T19932] [ 504.888337][T19932] dump_stack_lvl+0x188/0x250 [ 504.893053][T19932] ? show_regs_print_info+0x20/0x20 [ 504.898355][T19932] ? load_image+0x410/0x410 [ 504.902896][T19932] should_fail+0x383/0x4b0 [ 504.907421][T19932] should_failslab+0x5/0x20 [ 504.911938][T19932] slab_pre_alloc_hook+0x51/0xc0 [ 504.916890][T19932] kmem_cache_alloc_trace+0x47/0x290 [ 504.922187][T19932] ? sctp_add_bind_addr+0x89/0x350 [ 504.927321][T19932] sctp_add_bind_addr+0x89/0x350 [ 504.932275][T19932] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 504.938016][T19932] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 504.944116][T19932] ? sctp_v4_is_any+0x31/0x50 [ 504.948795][T19932] ? sctp_copy_one_addr+0x93/0x660 [ 504.953941][T19932] sctp_bind_addr_copy+0xaf/0x3c0 [ 504.958982][T19932] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 504.965313][T19932] sctp_connect_new_asoc+0x2f5/0x6a0 [ 504.970617][T19932] ? __sctp_connect+0xd80/0xd80 [ 504.975560][T19932] ? __local_bh_enable_ip+0x136/0x1c0 [ 504.980931][T19932] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 504.986467][T19932] ? security_sctp_bind_connect+0x85/0xb0 [ 504.992184][T19932] sctp_sendmsg+0x15e1/0x2940 [ 504.996886][T19932] ? sctp_getsockopt+0x8a0/0x8a0 [ 505.001816][T19932] ? aa_af_perm+0x340/0x340 [ 505.006311][T19932] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 505.012718][T19932] ? aa_sock_msg_perm+0x94/0x150 [ 505.017668][T19932] ? sock_rps_record_flow+0x17/0x3b0 [ 505.022949][T19932] ? inet_sendmsg+0xca/0x2a0 [ 505.027527][T19932] ? inet_send_prepare+0x250/0x250 [ 505.032640][T19932] ____sys_sendmsg+0x5be/0x8f0 [ 505.037438][T19932] ? __sys_sendmsg_sock+0x30/0x30 [ 505.042461][T19932] ? import_iovec+0x6f/0xa0 [ 505.046979][T19932] ___sys_sendmsg+0x236/0x2e0 [ 505.051671][T19932] ? __sys_sendmsg+0x290/0x290 [ 505.056456][T19932] ? trace_event_raw_event_lock+0x250/0x250 [ 505.062468][T19932] __se_sys_sendmsg+0x1b7/0x2a0 [ 505.067325][T19932] ? __x64_sys_sendmsg+0x80/0x80 [ 505.072250][T19932] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 505.078245][T19932] ? lockdep_hardirqs_on+0x94/0x140 [ 505.083434][T19932] do_syscall_64+0x4c/0xa0 [ 505.087843][T19932] ? clear_bhb_loop+0x30/0x80 [ 505.092508][T19932] ? clear_bhb_loop+0x30/0x80 [ 505.097185][T19932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 505.103066][T19932] RIP: 0033:0x7f0ceb02a0d9 [ 505.107468][T19932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.127061][T19932] RSP: 002b:00007f0ce9282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.135467][T19932] RAX: ffffffffffffffda RBX: 00007f0ceb2b1fa0 RCX: 00007f0ceb02a0d9 [ 505.143541][T19932] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 505.151604][T19932] RBP: 00007f0ce9282090 R08: 0000000000000000 R09: 0000000000000000 [ 505.159640][T19932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.167634][T19932] R13: 00007f0ceb2b2038 R14: 00007f0ceb2b1fa0 R15: 00007fffa6a30178 [ 505.175625][T19932] [ 505.187594][ T2300] Bluetooth: hci4: command 0x0409 tx timeout [ 505.201796][T19884] device hsr_slave_0 entered promiscuous mode [ 505.226542][T19884] device hsr_slave_1 entered promiscuous mode [ 505.235246][T19884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.245409][T19884] Cannot create hsr debugfs directory [ 505.402707][T19938] validate_nla: 2 callbacks suppressed [ 505.402724][T19938] netlink: 'syz.4.5899': attribute type 39 has an invalid length. [ 505.469572][T19884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.594200][T19884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.643183][T19951] netlink: 'syz.2.5905': attribute type 16 has an invalid length. [ 505.661828][T19951] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5905'. [ 505.712152][T19884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.784802][T19956] netlink: 'syz.0.5907': attribute type 16 has an invalid length. [ 505.801874][T19956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5907'. [ 506.394522][T19884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.412911][T19884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.435124][T19884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.497809][T19884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.816267][T19884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.904291][T19985] netlink: 'syz.4.5920': attribute type 16 has an invalid length. [ 506.920973][T19985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5920'. [ 506.948008][T19983] device veth1_macvtap left promiscuous mode [ 507.041537][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.066422][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.118390][T19994] FAULT_INJECTION: forcing a failure. [ 507.118390][T19994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.131670][T19994] CPU: 0 PID: 19994 Comm: syz.4.5923 Not tainted syzkaller #0 [ 507.139144][T19994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.149202][T19994] Call Trace: [ 507.152480][T19994] [ 507.155411][T19994] dump_stack_lvl+0x188/0x250 [ 507.160099][T19994] ? show_regs_print_info+0x20/0x20 [ 507.165298][T19994] ? load_image+0x410/0x410 [ 507.169810][T19994] ? __lock_acquire+0x7b50/0x7b50 [ 507.174845][T19994] should_fail+0x383/0x4b0 [ 507.179267][T19994] _copy_from_user+0x2e/0x170 [ 507.183947][T19994] iovec_from_user+0x142/0x370 [ 507.188730][T19994] __import_iovec+0x70/0x490 [ 507.193394][T19994] import_iovec+0x6f/0xa0 [ 507.197752][T19994] ___sys_sendmsg+0x1fd/0x2e0 [ 507.202453][T19994] ? __sys_sendmsg+0x290/0x290 [ 507.207263][T19994] __se_sys_sendmsg+0x1b7/0x2a0 [ 507.212124][T19994] ? __x64_sys_sendmsg+0x80/0x80 [ 507.217066][T19994] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 507.223069][T19994] ? lockdep_hardirqs_on+0x94/0x140 [ 507.228279][T19994] do_syscall_64+0x4c/0xa0 [ 507.232699][T19994] ? clear_bhb_loop+0x30/0x80 [ 507.237370][T19994] ? clear_bhb_loop+0x30/0x80 [ 507.242045][T19994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 507.247942][T19994] RIP: 0033:0x7f0ceb02a0d9 [ 507.252367][T19994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.271978][T19994] RSP: 002b:00007f0ce9282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.275758][ T2300] Bluetooth: hci4: command 0x041b tx timeout [ 507.280401][T19994] RAX: ffffffffffffffda RBX: 00007f0ceb2b1fa0 RCX: 00007f0ceb02a0d9 [ 507.294357][T19994] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 507.302322][T19994] RBP: 00007f0ce9282090 R08: 0000000000000000 R09: 0000000000000000 [ 507.310284][T19994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.318265][T19994] R13: 00007f0ceb2b2038 R14: 00007f0ceb2b1fa0 R15: 00007fffa6a30178 [ 507.326248][T19994] [ 507.336638][T19884] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.358671][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 507.376124][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.400110][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.407306][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.424504][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.444967][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.455033][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.462237][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.470327][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.482253][T19998] netlink: 'syz.4.5925': attribute type 10 has an invalid length. [ 507.493909][T19998] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5925'. [ 507.518556][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.527185][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.543000][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.568551][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.586299][T20004] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.5927'. [ 507.620343][T19996] netlink: 'syz.2.5924': attribute type 10 has an invalid length. [ 507.686256][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.694925][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.704455][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.781037][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.796568][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.819159][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.836781][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.868288][T19884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.915770][ T9] device wlan1 left promiscuous mode [ 507.939759][ T9] team0: Port device wlan1 removed [ 508.008201][T20020] netlink: 'syz.4.5932': attribute type 39 has an invalid length. [ 508.202552][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.214058][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.228691][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.236533][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.244934][ T9] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 508.252252][ T9] batman_adv: batadv0: Removing interface: virt_wifi0 [ 508.260973][ T9] batman_adv: batadv0: Interface deactivated: vlan1 [ 508.267887][ T9] batman_adv: batadv0: Removing interface: vlan1 [ 508.275300][ T9] device bridge_slave_0 left promiscuous mode [ 508.281749][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.295479][ T9] device veth0_macvtap left promiscuous mode [ 508.303239][ T9] device veth1_vlan left promiscuous mode [ 508.309419][ T9] device veth0_vlan left promiscuous mode [ 508.530582][ T9] device team_slave_1 left promiscuous mode [ 508.540328][ T9] team0 (unregistering): Port device team_slave_1 removed [ 508.553989][ T9] device team_slave_0 left promiscuous mode [ 508.562469][ T9] team0 (unregistering): Port device team_slave_0 removed [ 508.574866][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.589590][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.648503][ T9] device bridge0 left promiscuous mode [ 508.654527][ T9] team0 (unregistering): Port device bridge0 removed [ 508.676312][ T9] bond0 (unregistering): Released all slaves [ 508.722348][T20033] netlink: 'syz.2.5937': attribute type 16 has an invalid length. [ 508.730544][T20033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5937'. [ 508.741029][T20030] netlink: 'syz.0.5936': attribute type 10 has an invalid length. [ 508.760977][T20030] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5936'. [ 508.865316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.884133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.929277][T19884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.185859][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.214825][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.285063][T19884] device veth0_vlan entered promiscuous mode [ 509.316945][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.346369][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 509.352941][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.401217][T19884] device veth1_vlan entered promiscuous mode [ 509.413849][T20056] netlink: 'syz.1.5944': attribute type 39 has an invalid length. [ 509.424299][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.437742][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.448129][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.513302][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.532366][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.547974][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.560256][T19884] device veth0_macvtap entered promiscuous mode [ 509.604871][T19884] device veth1_macvtap entered promiscuous mode [ 509.621317][T20070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5948'. [ 509.653528][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.688358][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.699511][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.710893][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.721287][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.733330][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.745008][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.756809][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.778665][T19884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.820831][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.841472][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.865589][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.876631][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.886994][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.905396][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.926442][T19884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.937419][T19884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.955024][T19884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.964281][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.986394][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 509.996817][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.006904][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.016801][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.026062][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.052646][T19884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.070794][T19884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.082253][T19884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.098191][T19884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.112423][T20084] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5953'. [ 510.279828][ T5761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.327871][ T5761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.372927][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.429388][ T5753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.445904][ T5753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.456201][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 510.740707][T20103] device ipvlan1 left promiscuous mode [ 511.421477][T20118] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5965'. [ 511.430815][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 511.831810][T20136] device veth1_macvtap left promiscuous mode [ 512.411110][T20156] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5979'. [ 512.603104][T20165] FAULT_INJECTION: forcing a failure. [ 512.603104][T20165] name failslab, interval 1, probability 0, space 0, times 0 [ 512.643128][T20165] CPU: 0 PID: 20165 Comm: syz.2.5982 Not tainted syzkaller #0 [ 512.646533][T20147] chnl_net:caif_netlink_parms(): no params data found [ 512.650621][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.667408][T20165] Call Trace: [ 512.670899][T20165] [ 512.673833][T20165] dump_stack_lvl+0x188/0x250 [ 512.678527][T20165] ? show_regs_print_info+0x20/0x20 [ 512.683736][T20165] ? load_image+0x410/0x410 [ 512.688256][T20165] ? __might_sleep+0xf0/0xf0 [ 512.692857][T20165] ? __lock_acquire+0x7b50/0x7b50 [ 512.697901][T20165] should_fail+0x383/0x4b0 [ 512.702334][T20165] should_failslab+0x5/0x20 [ 512.706845][T20165] slab_pre_alloc_hook+0x51/0xc0 [ 512.711795][T20165] kmem_cache_alloc_trace+0x47/0x290 [ 512.717086][T20165] ? dev_map_alloc+0x62/0x520 [ 512.721780][T20165] dev_map_alloc+0x62/0x520 [ 512.726312][T20165] map_create+0x481/0x2330 [ 512.730733][T20165] ? bpf_lsm_bpf+0x5/0x10 [ 512.735077][T20165] __sys_bpf+0x30a/0x6f0 [ 512.739334][T20165] ? bpf_link_show_fdinfo+0x380/0x380 [ 512.744731][T20165] __x64_sys_bpf+0x78/0x90 [ 512.749163][T20165] do_syscall_64+0x4c/0xa0 [ 512.753585][T20165] ? clear_bhb_loop+0x30/0x80 [ 512.758265][T20165] ? clear_bhb_loop+0x30/0x80 [ 512.762947][T20165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.768846][T20165] RIP: 0033:0x7fdccc83b0d9 [ 512.773269][T20165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.792879][T20165] RSP: 002b:00007fdccaa93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.801302][T20165] RAX: ffffffffffffffda RBX: 00007fdcccac2fa0 RCX: 00007fdccc83b0d9 [ 512.809311][T20165] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 512.817289][T20165] RBP: 00007fdccaa93090 R08: 0000000000000000 R09: 0000000000000000 [ 512.825396][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.833376][T20165] R13: 00007fdcccac3038 R14: 00007fdcccac2fa0 R15: 00007fffd7e3a6e8 [ 512.841388][T20165] [ 512.953039][T20147] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.963925][T20147] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.982461][T20147] device bridge_slave_0 entered promiscuous mode [ 512.994932][T20147] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.013214][T20147] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.047652][T20147] device bridge_slave_1 entered promiscuous mode [ 513.071541][T20180] validate_nla: 2 callbacks suppressed [ 513.071557][T20180] netlink: 'syz.4.5985': attribute type 16 has an invalid length. [ 513.097257][T20180] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5985'. [ 513.138207][T20147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.166924][T20147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.250319][T20147] team0: Port device team_slave_0 added [ 513.273787][T20186] netlink: 'syz.4.5987': attribute type 1 has an invalid length. [ 513.277924][T20147] team0: Port device team_slave_1 added [ 513.299757][T20186] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5987'. [ 513.312900][T20186] netlink: 'syz.4.5987': attribute type 1 has an invalid length. [ 513.355912][T20147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.383544][T20147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.418550][T20147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.439744][T20147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.447152][T20147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.474844][T20147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.512986][T20193] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5990'. [ 513.554155][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.578157][T20147] device hsr_slave_0 entered promiscuous mode [ 513.586440][T20147] device hsr_slave_1 entered promiscuous mode [ 513.593298][T20147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.612600][T20147] Cannot create hsr debugfs directory [ 513.648401][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.720034][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.779362][T20197] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.096482][T20208] netlink: 'syz.3.5995': attribute type 10 has an invalid length. [ 514.134797][T20208] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5995'. [ 514.175743][T20208] device bond0 entered promiscuous mode [ 514.203648][T20208] device bond_slave_0 entered promiscuous mode [ 514.226449][T20208] device bond_slave_1 entered promiscuous mode [ 514.236754][T20208] bridge0: port 3(bond0) entered blocking state [ 514.245610][T20208] bridge0: port 3(bond0) entered disabled state [ 514.289032][T20208] bridge0: port 3(bond0) entered blocking state [ 514.295348][T20208] bridge0: port 3(bond0) entered forwarding state [ 514.306294][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 514.361862][T20218] netlink: 'syz.4.5997': attribute type 16 has an invalid length. [ 514.380232][T20218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5997'. [ 514.749722][T20235] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.6001'. [ 514.872262][T20248] netlink: 'syz.2.6003': attribute type 2 has an invalid length. [ 514.894800][T20248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6003'. [ 515.057493][T20259] netlink: 'syz.4.6005': attribute type 10 has an invalid length. [ 515.122463][T20259] device macvlan0 entered promiscuous mode [ 515.129990][T20259] team0: Port device macvlan0 added [ 515.167541][T20264] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6006'. [ 515.177127][T20261] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6008'. [ 515.312116][T20147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 515.818244][T20147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 515.869615][T20147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 515.902767][T20147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.344037][T20147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.410739][ T2300] Bluetooth: hci3: command 0x041b tx timeout [ 516.468006][T20147] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.515436][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.554313][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.693452][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 516.702951][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.728245][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.735393][ T5753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.760983][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.771439][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.788944][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.796129][ T5753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.805956][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 516.814776][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 516.823694][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.889960][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 516.903240][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 516.963248][T20314] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6022'. [ 516.986218][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.010910][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.020974][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.032661][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.043857][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.118076][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.148020][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.209834][T20147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 517.436335][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.452107][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.493584][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.508590][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.542034][ T9] batman_adv: batadv0: Interface deactivated: vlan1 [ 517.565803][ T9] batman_adv: batadv0: Removing interface: vlan1 [ 517.582968][ T9] bridge0: port 3(bond0) entered disabled state [ 517.612936][ T9] device bridge_slave_1 left promiscuous mode [ 517.641304][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.702168][ T9] device bridge_slave_0 left promiscuous mode [ 517.711079][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.745451][ T9] device veth0_macvtap left promiscuous mode [ 517.752297][ T9] device veth1_vlan left promiscuous mode [ 517.758505][ T9] device veth0_vlan left promiscuous mode [ 517.978084][ T9] device geneve1 left promiscuous mode [ 517.999996][ T9] team0 (unregistering): Port device geneve1 removed [ 518.082350][ T9] device virt_wifi0 left promiscuous mode [ 518.088779][ T9] team0 (unregistering): Port device virt_wifi0 removed [ 518.141143][ T9] device team_slave_1 left promiscuous mode [ 518.148214][ T9] team0 (unregistering): Port device team_slave_1 removed [ 518.160085][ T9] device team_slave_0 left promiscuous mode [ 518.172249][ T9] team0 (unregistering): Port device team_slave_0 removed [ 518.185034][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.195079][ T9] device bond_slave_1 left promiscuous mode [ 518.209197][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.219783][ T9] device bond_slave_0 left promiscuous mode [ 518.270182][ T9] device bridge0 left promiscuous mode [ 518.277216][ T9] team0 (unregistering): Port device bridge0 removed [ 518.300241][ T9] bond0 (unregistering): Released all slaves [ 518.465621][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 518.527766][T20352] netlink: 'syz.3.6035': attribute type 16 has an invalid length. [ 518.536644][T20352] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6035'. [ 518.581854][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.596730][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.620256][T20147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.700378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.726358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.794830][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 518.840991][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.874143][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.884691][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.925112][T20147] device veth0_vlan entered promiscuous mode [ 518.953184][T20147] device veth1_vlan entered promiscuous mode [ 519.065979][T20147] device veth0_macvtap entered promiscuous mode [ 519.081538][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.102929][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.114943][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.149803][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.177682][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.200739][T20147] device veth1_macvtap entered promiscuous mode [ 519.280528][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.351255][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.365468][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.382395][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.395271][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.412713][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.422979][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.449321][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.482932][T20147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.507067][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.537853][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.574588][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.624217][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.645555][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.668317][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.679223][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.694903][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.712934][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.723030][T20147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.738994][T20147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.751603][T20147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.781193][T20388] netlink: 'syz.2.6047': attribute type 16 has an invalid length. [ 519.790313][T20388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6047'. [ 519.818687][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.848003][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.897564][T20147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.941119][T20147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.953010][T20147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.974264][T20147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.028189][T20397] FAULT_INJECTION: forcing a failure. [ 520.028189][T20397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.067830][T20397] CPU: 0 PID: 20397 Comm: syz.3.6050 Not tainted syzkaller #0 [ 520.075330][T20397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.085820][T20397] Call Trace: [ 520.089103][T20397] [ 520.092022][T20397] dump_stack_lvl+0x188/0x250 [ 520.096703][T20397] ? show_regs_print_info+0x20/0x20 [ 520.101888][T20397] ? load_image+0x410/0x410 [ 520.106383][T20397] ? __lock_acquire+0x7b50/0x7b50 [ 520.111399][T20397] should_fail+0x383/0x4b0 [ 520.115811][T20397] _copy_to_user+0x2e/0x130 [ 520.120397][T20397] simple_read_from_buffer+0xe3/0x150 [ 520.125761][T20397] proc_fail_nth_read+0x1a6/0x220 [ 520.130781][T20397] ? proc_fault_inject_write+0x310/0x310 [ 520.136402][T20397] ? fsnotify_perm+0x254/0x560 [ 520.141176][T20397] ? proc_fault_inject_write+0x310/0x310 [ 520.146801][T20397] vfs_read+0x2ff/0xd50 [ 520.151064][T20397] ? __lock_acquire+0x7b50/0x7b50 [ 520.156078][T20397] ? kernel_read+0x1e0/0x1e0 [ 520.160753][T20397] ? mutex_lock_nested+0x17/0x20 [ 520.165675][T20397] ? __fdget_pos+0x2bf/0x370 [ 520.170249][T20397] ? ksys_read+0x70/0x260 [ 520.174563][T20397] ksys_read+0x153/0x260 [ 520.178797][T20397] ? vfs_write+0xd70/0xd70 [ 520.183209][T20397] ? lockdep_hardirqs_on+0x94/0x140 [ 520.188393][T20397] do_syscall_64+0x4c/0xa0 [ 520.192790][T20397] ? clear_bhb_loop+0x30/0x80 [ 520.197447][T20397] ? clear_bhb_loop+0x30/0x80 [ 520.202105][T20397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 520.207981][T20397] RIP: 0033:0x7f2eacaaa90e [ 520.212380][T20397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.231980][T20397] RSP: 002b:00007f2eaad41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.240375][T20397] RAX: ffffffffffffffda RBX: 00007f2eaad426c0 RCX: 00007f2eacaaa90e [ 520.248437][T20397] RDX: 000000000000000f RSI: 00007f2eaad420a0 RDI: 0000000000000009 [ 520.256390][T20397] RBP: 00007f2eaad42090 R08: 0000000000000000 R09: 0000000000000000 [ 520.264351][T20397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.272305][T20397] R13: 00007f2eacd72038 R14: 00007f2eacd71fa0 R15: 00007ffff6942968 [ 520.280277][T20397] [ 520.419332][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.433397][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.458187][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.547477][ T2300] Bluetooth: hci3: command 0x0419 tx timeout [ 520.576613][ T5755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.604914][ T5755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.641396][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.676146][T20418] netlink: 'syz.2.6058': attribute type 16 has an invalid length. [ 520.705379][T20418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6058'. [ 520.767301][T20425] netlink: 'syz.0.5968': attribute type 10 has an invalid length. [ 520.775273][T20425] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5968'. [ 520.910656][T20425] device bond0 entered promiscuous mode [ 520.935677][T20425] device bond_slave_0 entered promiscuous mode [ 520.980449][T20425] device bond_slave_1 entered promiscuous mode [ 521.005995][T20425] bridge0: port 3(bond0) entered blocking state [ 521.012934][T20416] ------------[ cut here ]------------ [ 521.018745][T20416] WARNING: CPU: 1 PID: 20416 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.028567][T20416] Modules linked in: [ 521.032583][T20416] CPU: 1 PID: 20416 Comm: syz.3.6056 Not tainted syzkaller #0 [ 521.040095][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.050200][T20416] RIP: 0010:perf_pending_task+0x353/0x480 [ 521.056071][T20416] Code: e8 12 46 de ff 84 db 75 10 e8 a9 43 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 99 43 de ff e8 1c c1 65 ff eb e9 e8 8d 43 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 521.075733][T20416] RSP: 0018:ffffc90002f6f9c0 EFLAGS: 00010293 [ 521.081810][T20416] RAX: ffffffff819abc13 RBX: ffff8880512e9638 RCX: ffff88807aa01dc0 [ 521.089826][T20416] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 521.097848][T20416] RBP: ffff8880512e9408 R08: ffff88807aa027d3 R09: 1ffff1100f5404fa [ 521.105865][T20416] R10: dffffc0000000000 R11: ffffed100f5404fb R12: ffff88807aa01dc0 [ 521.113848][T20416] R13: ffff88802bd6ed58 R14: 0000000000000000 R15: 1ffff1100a25d281 [ 521.121875][T20416] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 521.130858][T20416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.137585][T20416] CR2: 00007f2eaa8df000 CR3: 000000004f0de000 CR4: 00000000003506e0 [ 521.145605][T20416] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 521.153603][T20416] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 521.161625][T20416] Call Trace: [ 521.164914][T20416] [ 521.167890][T20416] task_work_run+0x125/0x1a0 [ 521.172598][T20416] do_exit+0x635/0x2110 [ 521.176802][T20416] ? preempt_schedule+0xbc/0xd0 [ 521.181661][T20416] ? put_task_struct+0x80/0x80 [ 521.186468][T20416] ? preempt_schedule_common+0xa5/0xd0 [ 521.191948][T20416] ? preempt_schedule+0xbc/0xd0 [ 521.196881][T20416] do_group_exit+0x12c/0x2f0 [ 521.201483][T20416] get_signal+0x7eb/0x12e0 [ 521.205960][T20416] arch_do_signal_or_restart+0xe6/0x12a0 [ 521.211702][T20416] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 521.217379][T20416] ? get_sigframe_size+0x10/0x10 [ 521.222320][T20416] ? rcu_nmi_exit+0x6f/0xf0 [ 521.226878][T20416] ? exit_to_user_mode_loop+0x3b/0x130 [ 521.232344][T20416] exit_to_user_mode_loop+0x9e/0x130 [ 521.237669][T20416] exit_to_user_mode_prepare+0xee/0x180 [ 521.243225][T20416] syscall_exit_to_user_mode+0x16/0x40 [ 521.248726][T20416] do_syscall_64+0x58/0xa0 [ 521.253145][T20416] ? clear_bhb_loop+0x30/0x80 [ 521.257944][T20416] ? clear_bhb_loop+0x30/0x80 [ 521.262644][T20416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 521.268574][T20416] RIP: 0033:0x7f2eacaea0d9 [ 521.272989][T20416] Code: Unable to access opcode bytes at RIP 0x7f2eacaea0af. [ 521.280381][T20416] RSP: 002b:00007f2eaad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.289002][T20416] RAX: 0000000000000012 RBX: 00007f2eacd71fa0 RCX: 00007f2eacaea0d9 [ 521.297010][T20416] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008 [ 521.304988][T20416] RBP: 00007f2eacb81024 R08: 0000000000000000 R09: 0000000000000000 [ 521.312997][T20416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.321010][T20416] R13: 00007f2eacd72038 R14: 00007f2eacd71fa0 R15: 00007ffff6942968 [ 521.329031][T20416] [ 521.332067][T20416] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 521.339339][T20416] CPU: 1 PID: 20416 Comm: syz.3.6056 Not tainted syzkaller #0 [ 521.346793][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.356854][T20416] Call Trace: [ 521.360139][T20416] [ 521.363084][T20416] dump_stack_lvl+0x188/0x250 [ 521.367778][T20416] ? show_regs_print_info+0x20/0x20 [ 521.372991][T20416] ? load_image+0x410/0x410 [ 521.377519][T20416] panic+0x2f8/0x850 [ 521.381434][T20416] ? bpf_jit_dump+0xd0/0xd0 [ 521.385959][T20416] ? perf_pending_task+0x353/0x480 [ 521.391087][T20416] __warn+0x248/0x2b0 [ 521.395347][T20416] ? perf_pending_task+0x353/0x480 [ 521.400465][T20416] report_bug+0x1b9/0x2e0 [ 521.404816][T20416] handle_bug+0x3a/0x70 [ 521.409006][T20416] exc_invalid_op+0x16/0x40 [ 521.413533][T20416] asm_exc_invalid_op+0x16/0x20 [ 521.418396][T20416] RIP: 0010:perf_pending_task+0x353/0x480 [ 521.424313][T20416] Code: e8 12 46 de ff 84 db 75 10 e8 a9 43 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 99 43 de ff e8 1c c1 65 ff eb e9 e8 8d 43 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 521.444015][T20416] RSP: 0018:ffffc90002f6f9c0 EFLAGS: 00010293 [ 521.450094][T20416] RAX: ffffffff819abc13 RBX: ffff8880512e9638 RCX: ffff88807aa01dc0 [ 521.458072][T20416] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 521.466057][T20416] RBP: ffff8880512e9408 R08: ffff88807aa027d3 R09: 1ffff1100f5404fa [ 521.474047][T20416] R10: dffffc0000000000 R11: ffffed100f5404fb R12: ffff88807aa01dc0 [ 521.482113][T20416] R13: ffff88802bd6ed58 R14: 0000000000000000 R15: 1ffff1100a25d281 [ 521.490098][T20416] ? perf_pending_task+0x353/0x480 [ 521.495228][T20416] task_work_run+0x125/0x1a0 [ 521.499837][T20416] do_exit+0x635/0x2110 [ 521.504013][T20416] ? preempt_schedule+0xbc/0xd0 [ 521.508868][T20416] ? put_task_struct+0x80/0x80 [ 521.513635][T20416] ? preempt_schedule_common+0xa5/0xd0 [ 521.519102][T20416] ? preempt_schedule+0xbc/0xd0 [ 521.523976][T20416] do_group_exit+0x12c/0x2f0 [ 521.528569][T20416] get_signal+0x7eb/0x12e0 [ 521.533096][T20416] arch_do_signal_or_restart+0xe6/0x12a0 [ 521.538748][T20416] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 521.544391][T20416] ? get_sigframe_size+0x10/0x10 [ 521.549333][T20416] ? rcu_nmi_exit+0x6f/0xf0 [ 521.553833][T20416] ? exit_to_user_mode_loop+0x3b/0x130 [ 521.559409][T20416] exit_to_user_mode_loop+0x9e/0x130 [ 521.564697][T20416] exit_to_user_mode_prepare+0xee/0x180 [ 521.570234][T20416] syscall_exit_to_user_mode+0x16/0x40 [ 521.575687][T20416] do_syscall_64+0x58/0xa0 [ 521.580093][T20416] ? clear_bhb_loop+0x30/0x80 [ 521.584753][T20416] ? clear_bhb_loop+0x30/0x80 [ 521.589419][T20416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 521.595295][T20416] RIP: 0033:0x7f2eacaea0d9 [ 521.599692][T20416] Code: Unable to access opcode bytes at RIP 0x7f2eacaea0af. [ 521.607122][T20416] RSP: 002b:00007f2eaad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.615522][T20416] RAX: 0000000000000012 RBX: 00007f2eacd71fa0 RCX: 00007f2eacaea0d9 [ 521.623477][T20416] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008 [ 521.631519][T20416] RBP: 00007f2eacb81024 R08: 0000000000000000 R09: 0000000000000000 [ 521.639479][T20416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.647440][T20416] R13: 00007f2eacd72038 R14: 00007f2eacd71fa0 R15: 00007ffff6942968 [ 521.655409][T20416] [ 521.658631][T20416] Kernel Offset: disabled [ 521.662959][T20416] Rebooting in 86400 seconds..