last executing test programs: 5.98498822s ago: executing program 0 (id=587): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={r12, r2, 0x0, 0x2, 0xfffffffffffffffe}, 0x17) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000000000070000000000b83e8165005f00"], 0x0, 0x2c, 0x0, 0x9}, 0x28) 5.477984708s ago: executing program 0 (id=593): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfa, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8024, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x5, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200590414000600002f1eafbcf706e10500000086ddffff1104ee1611d4b8bf4a82f6184b8a34f90186cee84400000000000000001900000000", 0x3c}, {&(0x7f0000000800)="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", 0x41f}, {&(0x7f0000003200)="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", 0xac8}], 0x3}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891b, &(0x7f0000000400)={'rose0\x00', @random="0200ff7fffff"}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYBLOB="b3acad8354850e0fd87df54aae919704d684858386e3089e48aad4db57e7577aa46bd49259a6db5ed3ee3cc788c68717614213c8aa9779b1ce07dfaf054bce5a0b4e2ce32b9b92db721042bd8e219d99e70c48c8ed776f53add114f6bd8dfc8e6e70e1c9cf3cd0ce20a8b20344c6337b434d41b00cac97c8acf345d99773ff9c92ed8989fa5f7df99910b725efedc22442bcb77e816aa1583dbbcd4a2f5cf1d0f23f196d3a54af4dababe1ecab6fa37e0d25a84da0d230df3238faa972a8324db223479c65d7d95d83f9f734d074da3ecea8fda60b5b512a2ce03efa05698877c434270679a7dcaab91469f3e0afefadf11fb02e", @ANYRES8=r2, @ANYRESHEX=r2], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff80, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x8, 0x9, 0x40000006}, 0x10, 0x15a0e, 0xffffffffffffffff, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x3, 0x5, 0xb, 0xd}, {0x1, 0x5, 0x8, 0x7}], 0x10, 0x4}, 0x94) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/30) 5.408897538s ago: executing program 3 (id=595): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000001800000085000000500000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x45, &(0x7f0000000040)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x56}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000840)=""/166, 0x5b, 0xa6, 0x1, 0x3, 0x10000}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000580)=""/200, 0x40f00, 0x8, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9c1a, r4, 0x1, &(0x7f00000009c0)=[r10, r0], &(0x7f0000000a80)=[{0x1, 0x4, 0x9, 0xb}], 0x10, 0x2}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r14 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r14, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r14, r3, 0x22, 0x2b, r11, @void, @void, @void, @value=r15, r13}, 0x20) r16 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r16) 5.128821223s ago: executing program 3 (id=596): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="0210000902000000e4a17c45c8d260c9fe33ad2d7e72dd48f4bb014f3996db6bc7b6b8480ae014d4bdfe", 0x2a}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 4.908726756s ago: executing program 0 (id=597): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x20, 0x0, 0x0, 0x800000000000, 0x20009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c204, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0xa, 0x300) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 4.752490679s ago: executing program 3 (id=599): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000000)="06fc13e85d486d9d159e14f04305e0b55623f0fd803eccefedd5e641a542601d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.68917614s ago: executing program 0 (id=600): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) (fail_nth: 7) 4.680188289s ago: executing program 2 (id=601): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={r12, r2, 0x0, 0x2, 0xfffffffffffffffe}, 0x17) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000000000070000000000b83e8165005f00"], 0x0, 0x2c, 0x0, 0x9}, 0x28) 4.589712981s ago: executing program 0 (id=602): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x120, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102", 0x5}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x16000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.553185471s ago: executing program 3 (id=603): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 4.117068778s ago: executing program 1 (id=604): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x7, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000053f48064a6a1d9d9bf2156e0f8be3cabfa1f5a1f2227b1e469f14885cf7337e04ad713fec3f1f6d16a36914c2a8c7f3aff149fe2e4fff17e0d80773985cbab3dfc4ffba8ce2f6db8d709fb12ebebe0236b19958cbcb23a11bfee868aea798b0f70b92e43fa34cd5946b91c7c1f10"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.98213598s ago: executing program 1 (id=605): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000001800000085000000500000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x45, &(0x7f0000000040)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x56}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000840)=""/166, 0x5b, 0xa6, 0x1, 0x3, 0x10000}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000580)=""/200, 0x40f00, 0x8, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9c1a, r4, 0x0, &(0x7f00000009c0)=[r10, r0], &(0x7f0000000a80), 0x10, 0x2}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r14 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r14, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r14, r3, 0x22, 0x2b, r11, @void, @void, @void, @value=r15, r13}, 0x20) r16 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r16) 1.515857197s ago: executing program 2 (id=606): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2281], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x12}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x15, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1.405897829s ago: executing program 3 (id=607): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="0210000902000000e4a17c45c8d260c9fe33ad2d7e72dd48f4bb014f3996db6bc7b6b8480ae014d4bdfe", 0x2a}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.36405809s ago: executing program 1 (id=608): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xc3, 0x8, 0x0, 0x0, 0xf1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 1.30894008s ago: executing program 0 (id=609): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xff, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/23, 0x17}, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe"], 0xffdd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000001000000800000002b6d9b2c72a60f69cdb3bbf50671294a9f1b8c252c93d8bb3e4c97c24a3cd49cf3c57698bb7d6680721db3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x61, 0x0, 0xa4d4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000000000000000000eb0000000000024d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff8c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r10, 0xc0189436, 0x8000001ffffffd) 1.127483583s ago: executing program 3 (id=610): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0xfffffffc}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x4, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x7, 0x4, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit, @generic={0x3, 0x0, 0xa, 0x5, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x66, 0x101, 0x6}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r5 = socket$kcm(0x29, 0x2, 0x0) close(r5) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) 960.687925ms ago: executing program 1 (id=611): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000000)="06fc13e85d486d9d159e14f04305e0b55623f0fd803eccefedd5e641a542601d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 705.444999ms ago: executing program 1 (id=612): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xac22}, 0xc84, 0x5, 0x43a1bdf6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000280)="61df718305a35997984d47", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 473.819573ms ago: executing program 2 (id=613): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x24, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) 473.179743ms ago: executing program 1 (id=614): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={r12, r2, 0x0, 0x2, 0xfffffffffffffffe}, 0x17) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000000000070000000000b83e8165005f00"], 0x0, 0x2c, 0x0, 0x9}, 0x28) 385.074354ms ago: executing program 2 (id=615): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 160.714497ms ago: executing program 2 (id=616): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x9}, 0x28) (fail_nth: 7) 0s ago: executing program 2 (id=617): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000001800000085000000500000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x45, &(0x7f0000000040)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x56}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000840)=""/166, 0x5b, 0xa6, 0x1, 0x3, 0x10000}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000580)=""/200, 0x40f00, 0x8, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9c1a, r4, 0x0, &(0x7f00000009c0)=[r10, r0], &(0x7f0000000a80), 0x10, 0x2}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r14 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r14, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r14, r3, 0x22, 0x2b, r11, @void, @void, @void, @value=r15, r13}, 0x20) r16 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r16) kernel console output (not intermixed with test programs): netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 87.349470][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34'. [ 87.360858][ T5970] team0: entered promiscuous mode [ 87.366045][ T5970] team_slave_0: entered promiscuous mode [ 87.373182][ T5970] team_slave_1: entered promiscuous mode [ 87.380065][ T5970] team0: entered allmulticast mode [ 87.391161][ T5970] team_slave_0: entered allmulticast mode [ 87.417846][ T5970] team_slave_1: entered allmulticast mode [ 87.435506][ T5970] bond0: (slave team0): Releasing backup interface [ 87.528915][ T5970] bridge0: port 3(team0) entered blocking state [ 87.539303][ T5970] bridge0: port 3(team0) entered disabled state [ 87.554265][ T5971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.561560][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 87.568870][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 87.576155][ T5971] IPv6: NLM_F_CREATE should be set when creating new route [ 87.834747][ T5978] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.37'. [ 88.317851][ T5989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.40'. [ 88.441624][ T5989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.773565][ T5993] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.43'. [ 89.015278][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 89.042907][ T5998] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 89.050853][ T5998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.45'. [ 91.194953][ T6002] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 91.261506][ T6002] team0: left allmulticast mode [ 91.276155][ T6002] team_slave_0: left allmulticast mode [ 91.282224][ T6002] team_slave_1: left allmulticast mode [ 91.306274][ T6002] team0: left promiscuous mode [ 91.320165][ T6002] team_slave_0: left promiscuous mode [ 91.347824][ T6002] team_slave_1: left promiscuous mode [ 91.394214][ T6002] bridge0: port 3(team0) entered disabled state [ 91.435939][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.446483][ T6002] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.495161][ T6006] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 91.525024][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'. [ 91.550925][ T6006] team0: entered promiscuous mode [ 91.559493][ T6006] team_slave_0: entered promiscuous mode [ 91.573211][ T6006] team_slave_1: entered promiscuous mode [ 91.579202][ T6006] team0: entered allmulticast mode [ 91.585402][ T6006] team_slave_0: entered allmulticast mode [ 91.596907][ T6006] team_slave_1: entered allmulticast mode [ 91.603868][ T6006] bond0: (slave team0): Releasing backup interface [ 91.618754][ T6006] bridge0: port 3(team0) entered blocking state [ 91.625198][ T6006] bridge0: port 3(team0) entered disabled state [ 91.635511][ T6007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.686089][ T6012] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.50'. [ 91.742128][ T6010] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.49'. [ 91.835249][ T6017] netlink: 'syz.1.52': attribute type 21 has an invalid length. [ 91.859315][ T6017] netlink: 'syz.1.52': attribute type 21 has an invalid length. [ 92.030728][ T6020] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 92.045541][ T6020] team0: left allmulticast mode [ 92.050439][ T6020] team_slave_0: left allmulticast mode [ 92.060285][ T6020] team_slave_1: left allmulticast mode [ 92.074297][ T6020] team0: left promiscuous mode [ 92.091727][ T6020] team_slave_0: left promiscuous mode [ 92.098992][ T6020] team_slave_1: left promiscuous mode [ 92.122169][ T6020] bridge0: port 4(team0) entered disabled state [ 92.270797][ T6020] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.283930][ T6020] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.300275][ T6027] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 92.308513][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'. [ 92.318004][ T6027] team0: entered promiscuous mode [ 92.323165][ T6027] team_slave_0: entered promiscuous mode [ 92.329107][ T6027] team_slave_1: entered promiscuous mode [ 92.335320][ T6027] team0: entered allmulticast mode [ 92.340461][ T6027] team_slave_0: entered allmulticast mode [ 92.346293][ T6027] team_slave_1: entered allmulticast mode [ 92.376522][ T6027] bond0: (slave team0): Releasing backup interface [ 92.393899][ T6027] bridge0: port 4(team0) entered blocking state [ 92.400269][ T6027] bridge0: port 4(team0) entered disabled state [ 92.434822][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.603656][ T6037] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 92.641359][ T6037] team0: left allmulticast mode [ 92.646270][ T6037] team_slave_0: left allmulticast mode [ 92.667031][ T6037] team_slave_1: left allmulticast mode [ 92.692020][ T6037] team0: left promiscuous mode [ 92.708406][ T6037] team_slave_0: left promiscuous mode [ 92.715305][ T6037] team_slave_1: left promiscuous mode [ 92.722496][ T6037] bridge0: port 3(team0) entered disabled state [ 92.741055][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.755506][ T6037] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.764643][ T6039] netlink: 'syz.1.60': attribute type 29 has an invalid length. [ 92.773349][ T6041] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 92.781013][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.59'. [ 92.790104][ T6041] team0: entered promiscuous mode [ 92.795305][ T6041] team_slave_0: entered promiscuous mode [ 92.803665][ T6041] team_slave_1: entered promiscuous mode [ 92.809507][ T6041] team0: entered allmulticast mode [ 92.815002][ T6041] team_slave_0: entered allmulticast mode [ 92.823997][ T6041] team_slave_1: entered allmulticast mode [ 92.838231][ T6041] bond0: (slave team0): Releasing backup interface [ 92.868155][ T6041] bridge0: port 3(team0) entered blocking state [ 92.876035][ T6041] bridge0: port 3(team0) entered disabled state [ 92.892040][ T6049] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 92.899850][ T6049] team0: left allmulticast mode [ 92.906304][ T6049] team_slave_0: left allmulticast mode [ 92.912935][ T6049] team_slave_1: left allmulticast mode [ 92.918440][ T6049] team0: left promiscuous mode [ 92.923305][ T6049] team_slave_0: left promiscuous mode [ 92.929676][ T6049] team_slave_1: left promiscuous mode [ 92.936522][ T6049] bridge0: port 3(team0) entered disabled state [ 92.953386][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.961746][ T6049] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.970322][ T6037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.982322][ T6044] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.62'. [ 92.994130][ T6052] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.61'. [ 93.041188][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 93.061267][ T6051] team0: entered promiscuous mode [ 93.069445][ T6051] team_slave_0: entered promiscuous mode [ 93.076174][ T6051] team_slave_1: entered promiscuous mode [ 93.087950][ T6051] team0: entered allmulticast mode [ 93.102755][ T6051] team_slave_0: entered allmulticast mode [ 93.108686][ T6051] team_slave_1: entered allmulticast mode [ 93.116830][ T6051] bond0: (slave team0): Releasing backup interface [ 93.132506][ T6051] bridge0: port 3(team0) entered blocking state [ 93.140210][ T6051] bridge0: port 3(team0) entered disabled state [ 93.164990][ T6049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.807173][ T6079] team0: left allmulticast mode [ 93.821437][ T6079] team_slave_0: left allmulticast mode [ 93.832308][ T6079] team_slave_1: left allmulticast mode [ 93.837818][ T6079] team0: left promiscuous mode [ 93.844170][ T6079] team_slave_0: left promiscuous mode [ 93.850572][ T6079] team_slave_1: left promiscuous mode [ 93.869515][ T6079] bridge0: port 3(team0) entered disabled state [ 93.889078][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.899718][ T6079] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.922226][ T6082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 93.976068][ T6082] team0: entered promiscuous mode [ 93.999119][ T6082] team_slave_0: entered promiscuous mode [ 94.015849][ T6082] team_slave_1: entered promiscuous mode [ 94.023876][ T6082] team0: entered allmulticast mode [ 94.038209][ T6082] team_slave_0: entered allmulticast mode [ 94.044641][ T6082] team_slave_1: entered allmulticast mode [ 94.058470][ T6082] bond0: (slave team0): Releasing backup interface [ 94.078232][ T6082] bridge0: port 3(team0) entered blocking state [ 94.084918][ T6082] bridge0: port 3(team0) entered disabled state [ 94.100783][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.119518][ T6087] team0: left allmulticast mode [ 94.128335][ T6087] team_slave_0: left allmulticast mode [ 94.138129][ T6087] team_slave_1: left allmulticast mode [ 94.144787][ T6087] team0: left promiscuous mode [ 94.149584][ T6087] team_slave_0: left promiscuous mode [ 94.161469][ T6087] team_slave_1: left promiscuous mode [ 94.167242][ T6087] bridge0: port 4(team0) entered disabled state [ 94.239861][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.257775][ T6087] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.266692][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'. [ 94.276142][ T6090] team0: entered promiscuous mode [ 94.291630][ T6090] team_slave_0: entered promiscuous mode [ 94.297505][ T6090] team_slave_1: entered promiscuous mode [ 94.310199][ T6090] team0: entered allmulticast mode [ 94.315829][ T6090] team_slave_0: entered allmulticast mode [ 94.326523][ T6090] team_slave_1: entered allmulticast mode [ 94.334919][ T6090] bond0: (slave team0): Releasing backup interface [ 94.345462][ T6090] bridge0: port 4(team0) entered blocking state [ 94.355645][ T6090] bridge0: port 4(team0) entered disabled state [ 94.372302][ T6091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.451279][ T6131] team0: left allmulticast mode [ 95.456308][ T6131] team_slave_0: left allmulticast mode [ 95.468593][ T6131] team_slave_1: left allmulticast mode [ 95.488040][ T6131] team0: left promiscuous mode [ 95.500111][ T6131] team_slave_0: left promiscuous mode [ 95.506082][ T6131] team_slave_1: left promiscuous mode [ 95.518288][ T6131] bridge0: port 3(team0) entered disabled state [ 95.534551][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.551551][ T6131] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.572183][ T6134] team0: left allmulticast mode [ 95.600672][ T6134] team_slave_0: left allmulticast mode [ 95.622411][ T6134] team_slave_1: left allmulticast mode [ 95.627926][ T6134] team0: left promiscuous mode [ 95.633363][ T6134] team_slave_0: left promiscuous mode [ 95.638961][ T6134] team_slave_1: left promiscuous mode [ 95.645285][ T6134] bridge0: port 3(team0) entered disabled state [ 95.656103][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.664389][ T6134] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.673080][ T6135] team0: entered promiscuous mode [ 95.678391][ T6135] team_slave_0: entered promiscuous mode [ 95.690265][ T6135] team_slave_1: entered promiscuous mode [ 95.697419][ T6135] team0: entered allmulticast mode [ 95.705134][ T6135] team_slave_0: entered allmulticast mode [ 95.710906][ T6135] team_slave_1: entered allmulticast mode [ 95.717846][ T6135] bond0: (slave team0): Releasing backup interface [ 95.730960][ T6135] bridge0: port 3(team0) entered blocking state [ 95.737562][ T6135] bridge0: port 3(team0) entered disabled state [ 95.747905][ T6139] team0: entered promiscuous mode [ 95.755338][ T6139] team_slave_0: entered promiscuous mode [ 95.766836][ T6139] team_slave_1: entered promiscuous mode [ 95.776472][ T6139] team0: entered allmulticast mode [ 95.782093][ T6139] team_slave_0: entered allmulticast mode [ 95.787953][ T6139] team_slave_1: entered allmulticast mode [ 95.795436][ T6139] bond0: (slave team0): Releasing backup interface [ 95.806918][ T6139] bridge0: port 3(team0) entered blocking state [ 95.813834][ T6139] bridge0: port 3(team0) entered disabled state [ 95.844651][ T6131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.853855][ T6143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.206150][ T6158] validate_nla: 13 callbacks suppressed [ 96.206164][ T6158] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 96.225194][ T6158] team0: left allmulticast mode [ 96.230097][ T6158] team_slave_0: left allmulticast mode [ 96.237389][ T6158] team_slave_1: left allmulticast mode [ 96.246879][ T6158] team0: left promiscuous mode [ 96.252829][ T6158] team_slave_0: left promiscuous mode [ 96.258433][ T6158] team_slave_1: left promiscuous mode [ 96.266256][ T6158] bridge0: port 3(team0) entered disabled state [ 96.280166][ T6158] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.288641][ T6158] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.301310][ T6160] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 96.309605][ T6160] team0: entered promiscuous mode [ 96.314785][ T6160] team_slave_0: entered promiscuous mode [ 96.320648][ T6160] team_slave_1: entered promiscuous mode [ 96.326882][ T6160] team0: entered allmulticast mode [ 96.332163][ T6160] team_slave_0: entered allmulticast mode [ 96.337991][ T6160] team_slave_1: entered allmulticast mode [ 96.345392][ T6160] bond0: (slave team0): Releasing backup interface [ 96.360541][ T6160] bridge0: port 3(team0) entered blocking state [ 96.368509][ T6160] bridge0: port 3(team0) entered disabled state [ 96.397457][ T6158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.666970][ T6163] __nla_validate_parse: 7 callbacks suppressed [ 96.667014][ T6163] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.101'. [ 97.021712][ T6170] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.102'. [ 97.098952][ T6175] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 97.123160][ T6175] team0: left allmulticast mode [ 97.128062][ T6175] team_slave_0: left allmulticast mode [ 97.134311][ T6175] team_slave_1: left allmulticast mode [ 97.139889][ T6175] team0: left promiscuous mode [ 97.181690][ T6175] team_slave_0: left promiscuous mode [ 97.187312][ T6175] team_slave_1: left promiscuous mode [ 97.213997][ T6175] bridge0: port 4(team0) entered disabled state [ 97.233833][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.245106][ T6175] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.253931][ T6177] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 97.267264][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.105'. [ 97.276883][ T6177] team0: entered promiscuous mode [ 97.287178][ T6177] team_slave_0: entered promiscuous mode [ 97.312023][ T6177] team_slave_1: entered promiscuous mode [ 97.317865][ T6177] team0: entered allmulticast mode [ 97.352722][ T6177] team_slave_0: entered allmulticast mode [ 97.374509][ T6177] team_slave_1: entered allmulticast mode [ 97.394881][ T6177] bond0: (slave team0): Releasing backup interface [ 97.424599][ T6177] bridge0: port 4(team0) entered blocking state [ 97.431353][ T6177] bridge0: port 4(team0) entered disabled state [ 97.439615][ T6180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.548190][ T6187] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.110'. [ 97.602486][ T6192] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 97.610556][ T6192] team0: left allmulticast mode [ 97.615627][ T6192] team_slave_0: left allmulticast mode [ 97.631022][ T6192] team_slave_1: left allmulticast mode [ 97.638033][ T6192] team0: left promiscuous mode [ 97.644764][ T6192] team_slave_0: left promiscuous mode [ 97.650333][ T6192] team_slave_1: left promiscuous mode [ 97.656600][ T6192] bridge0: port 3(team0) entered disabled state [ 97.667093][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.676410][ T6192] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.690732][ T6193] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 97.706025][ T6193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 97.716133][ T6193] team0: entered promiscuous mode [ 97.723870][ T6193] team_slave_0: entered promiscuous mode [ 97.729817][ T6193] team_slave_1: entered promiscuous mode [ 97.736739][ T6193] team0: entered allmulticast mode [ 97.771769][ T6193] team_slave_0: entered allmulticast mode [ 97.777536][ T6193] team_slave_1: entered allmulticast mode [ 97.827919][ T6193] bond0: (slave team0): Releasing backup interface [ 97.849753][ T6193] bridge0: port 3(team0) entered blocking state [ 97.857155][ T6193] bridge0: port 3(team0) entered disabled state [ 97.876409][ T6192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.910526][ T6198] netlink: 'syz.3.115': attribute type 4 has an invalid length. [ 97.921503][ T6198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.115'. [ 97.931153][ T6199] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 97.949290][ T6199] team0: left allmulticast mode [ 97.979561][ T6199] team_slave_0: left allmulticast mode [ 98.001967][ T6199] team_slave_1: left allmulticast mode [ 98.017654][ T6199] team0: left promiscuous mode [ 98.038056][ T6199] team_slave_0: left promiscuous mode [ 98.057492][ T6199] team_slave_1: left promiscuous mode [ 98.064320][ T6199] bridge0: port 4(team0) entered disabled state [ 98.147942][ T6199] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.177248][ T6199] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.190199][ T6201] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 98.214487][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 98.245984][ T6201] team0: entered promiscuous mode [ 98.252446][ T6201] team_slave_0: entered promiscuous mode [ 98.260369][ T6201] team_slave_1: entered promiscuous mode [ 98.302562][ T6201] team0: entered allmulticast mode [ 98.309808][ T6201] team_slave_0: entered allmulticast mode [ 98.320269][ T6201] team_slave_1: entered allmulticast mode [ 98.327243][ T6201] bond0: (slave team0): Releasing backup interface [ 98.353232][ T6201] bridge0: port 4(team0) entered blocking state [ 98.360753][ T6201] bridge0: port 4(team0) entered disabled state [ 98.376254][ T6196] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.113'. [ 98.386836][ T6204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.435659][ T6208] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.117'. [ 98.813376][ T6216] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.120'. [ 98.980880][ T6228] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 98.995338][ T6228] team0: left allmulticast mode [ 99.011234][ T6228] team_slave_0: left allmulticast mode [ 99.031225][ T6228] team_slave_1: left allmulticast mode [ 99.036756][ T6228] team0: left promiscuous mode [ 99.050553][ T6228] team_slave_0: left promiscuous mode [ 99.070640][ T6228] team_slave_1: left promiscuous mode [ 99.083765][ T6228] bridge0: port 3(team0) entered disabled state [ 99.105165][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.124715][ T6228] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.176488][ T6231] team0: entered promiscuous mode [ 99.191128][ T6231] team_slave_0: entered promiscuous mode [ 99.196959][ T6231] team_slave_1: entered promiscuous mode [ 99.216730][ T6231] team0: entered allmulticast mode [ 99.248617][ T6231] team_slave_0: entered allmulticast mode [ 99.254872][ T6231] team_slave_1: entered allmulticast mode [ 99.269423][ T6231] bond0: (slave team0): Releasing backup interface [ 99.292011][ T6231] bridge0: port 3(team0) entered blocking state [ 99.298496][ T6231] bridge0: port 3(team0) entered disabled state [ 99.312874][ T6237] team0: left allmulticast mode [ 99.317755][ T6237] team_slave_0: left allmulticast mode [ 99.332440][ T6237] team_slave_1: left allmulticast mode [ 99.341799][ T6237] team0: left promiscuous mode [ 99.347764][ T6237] team_slave_0: left promiscuous mode [ 99.354614][ T6237] team_slave_1: left promiscuous mode [ 99.360395][ T6237] bridge0: port 3(team0) entered disabled state [ 99.369294][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.380570][ T6237] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.390410][ T6228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.400430][ T6240] team0: entered promiscuous mode [ 99.420333][ T6240] team_slave_0: entered promiscuous mode [ 99.430240][ T6240] team_slave_1: entered promiscuous mode [ 99.439620][ T6240] team0: entered allmulticast mode [ 99.446509][ T6240] team_slave_0: entered allmulticast mode [ 99.456046][ T6240] team_slave_1: entered allmulticast mode [ 99.466753][ T6240] bond0: (slave team0): Releasing backup interface [ 99.480158][ T6240] bridge0: port 3(team0) entered blocking state [ 99.486804][ T6240] bridge0: port 3(team0) entered disabled state [ 99.495193][ T6244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.403197][ T6286] validate_nla: 5 callbacks suppressed [ 101.403212][ T6286] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 101.422888][ T6286] team0: left allmulticast mode [ 101.428194][ T6286] team_slave_0: left allmulticast mode [ 101.434372][ T6286] team_slave_1: left allmulticast mode [ 101.439870][ T6286] team0: left promiscuous mode [ 101.446426][ T6279] syz.3.144 (6279) used greatest stack depth: 19848 bytes left [ 101.446848][ T6286] team_slave_0: left promiscuous mode [ 101.480543][ T6286] team_slave_1: left promiscuous mode [ 101.487127][ T6286] bridge0: port 3(team0) entered disabled state [ 101.510890][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.563992][ T6286] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.637083][ T6287] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 101.662094][ T6287] team0: entered promiscuous mode [ 101.680380][ T6287] team_slave_0: entered promiscuous mode [ 101.694620][ T6287] team_slave_1: entered promiscuous mode [ 101.700744][ T6287] team0: entered allmulticast mode [ 101.711328][ T6287] team_slave_0: entered allmulticast mode [ 101.718136][ T6287] team_slave_1: entered allmulticast mode [ 101.726234][ T6287] bond0: (slave team0): Releasing backup interface [ 101.743871][ T6287] bridge0: port 3(team0) entered blocking state [ 101.752356][ T6287] bridge0: port 3(team0) entered disabled state [ 101.820948][ T6283] syzkaller0: entered promiscuous mode [ 101.826780][ T6283] syzkaller0: entered allmulticast mode [ 101.835215][ T6288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.372091][ T6300] __nla_validate_parse: 7 callbacks suppressed [ 103.372106][ T6300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.149'. [ 103.399444][ T6300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.666468][ T6302] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 103.673487][ T6302] syzkaller1: Linktype set failed because interface is up [ 103.684746][ T23] syzkaller1: tun_net_xmit 90 [ 103.760223][ T6306] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.153'. [ 103.989132][ T6313] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.155'. [ 104.726580][ T6319] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.066264][ T6348] syzkaller0: entered promiscuous mode [ 109.072312][ T6348] syzkaller0: entered allmulticast mode [ 111.122450][ T6359] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 111.128451][ T6359] syzkaller1: linktype set to 769 [ 111.166882][ T6366] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.167'. [ 111.708245][ T6377] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.180'. [ 111.881442][ T6376] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.171'. [ 112.303202][ T6385] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 112.331340][ T6385] team0: left allmulticast mode [ 112.346054][ T6385] team_slave_0: left allmulticast mode [ 112.357436][ T6385] team_slave_1: left allmulticast mode [ 112.378579][ T6385] team0: left promiscuous mode [ 112.391698][ T6385] team_slave_0: left promiscuous mode [ 112.397346][ T6385] team_slave_1: left promiscuous mode [ 112.411273][ T6385] bridge0: port 4(team0) entered disabled state [ 112.852141][ T6385] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.012208][ T6385] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.158393][ T6390] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 113.200750][ T6390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 113.220194][ T6390] team0: entered promiscuous mode [ 113.244189][ T6390] team_slave_0: entered promiscuous mode [ 113.250114][ T6390] team_slave_1: entered promiscuous mode [ 113.256628][ T6390] team0: entered allmulticast mode [ 113.266612][ T6390] team_slave_0: entered allmulticast mode [ 113.272783][ T6390] team_slave_1: entered allmulticast mode [ 113.280513][ T6390] bond0: (slave team0): Releasing backup interface [ 113.292943][ T6390] bridge0: port 4(team0) entered blocking state [ 113.304984][ T6390] bridge0: port 4(team0) entered disabled state [ 113.314374][ T6389] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 113.322956][ T6389] team0: left allmulticast mode [ 113.327839][ T6389] team_slave_0: left allmulticast mode [ 113.334208][ T6389] team_slave_1: left allmulticast mode [ 113.339707][ T6389] team0: left promiscuous mode [ 113.345088][ T6389] team_slave_0: left promiscuous mode [ 113.350711][ T6389] team_slave_1: left promiscuous mode [ 113.357710][ T6389] bridge0: port 3(team0) entered disabled state [ 113.378422][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.393526][ T6389] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.407855][ T6395] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 113.425840][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.177'. [ 113.435477][ T6395] team0: entered promiscuous mode [ 113.440633][ T6395] team_slave_0: entered promiscuous mode [ 113.448189][ T6395] team_slave_1: entered promiscuous mode [ 113.457979][ T6395] team0: entered allmulticast mode [ 113.471196][ T6395] team_slave_0: entered allmulticast mode [ 113.476956][ T6395] team_slave_1: entered allmulticast mode [ 113.493486][ T6395] bond0: (slave team0): Releasing backup interface [ 113.519706][ T6395] bridge0: port 3(team0) entered blocking state [ 113.551416][ T6395] bridge0: port 3(team0) entered disabled state [ 113.581424][ T6392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.609476][ T6385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.909164][ T6403] sctp: [Deprecated]: syz.1.178 (pid 6403) Use of int in max_burst socket option deprecated. [ 113.909164][ T6403] Use struct sctp_assoc_value instead [ 113.970336][ T6405] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 113.976495][ T6405] syzkaller1: Linktype set failed because interface is up [ 113.992700][ T23] syzkaller1: tun_net_xmit 90 [ 114.569885][ T6413] syzkaller0: entered promiscuous mode [ 114.581262][ T6413] syzkaller0: entered allmulticast mode [ 116.216657][ T6417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.192'. [ 116.237916][ T6417] netlink: 'syz.0.192': attribute type 28 has an invalid length. [ 116.246111][ T6417] netlink: 'syz.0.192': attribute type 29 has an invalid length. [ 116.256159][ T6417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.192'. [ 116.433272][ T6426] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 116.461631][ T6426] team0: left allmulticast mode [ 116.466541][ T6426] team_slave_0: left allmulticast mode [ 116.474948][ T6426] team_slave_1: left allmulticast mode [ 116.480731][ T6426] team0: left promiscuous mode [ 116.487477][ T6426] team_slave_0: left promiscuous mode [ 116.495682][ T6426] team_slave_1: left promiscuous mode [ 116.501829][ T6426] bridge0: port 3(team0) entered disabled state [ 116.527195][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.536180][ T6426] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.589497][ T6426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.599695][ T6428] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 116.611689][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.187'. [ 116.625665][ T6428] team0: entered promiscuous mode [ 116.630780][ T6428] team_slave_0: entered promiscuous mode [ 116.638201][ T6428] team_slave_1: entered promiscuous mode [ 116.649923][ T6428] team0: entered allmulticast mode [ 116.660051][ T6428] team_slave_0: entered allmulticast mode [ 116.677782][ T6428] team_slave_1: entered allmulticast mode [ 116.688465][ T6428] bond0: (slave team0): Releasing backup interface [ 116.704537][ T6428] bridge0: port 3(team0) entered blocking state [ 116.710925][ T6428] bridge0: port 3(team0) entered disabled state [ 120.713778][ T6436] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 120.722633][ T6436] team0: left allmulticast mode [ 120.727558][ T6436] team_slave_0: left allmulticast mode [ 120.735342][ T6436] team_slave_1: left allmulticast mode [ 120.740866][ T6436] team0: left promiscuous mode [ 120.746534][ T6436] team_slave_0: left promiscuous mode [ 120.755399][ T6436] team_slave_1: left promiscuous mode [ 120.761441][ T6436] bridge0: port 3(team0) entered disabled state [ 120.772023][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.783037][ T6436] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.886916][ T6440] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 120.949207][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.190'. [ 120.988166][ T6440] team0: entered promiscuous mode [ 121.008486][ T6440] team_slave_0: entered promiscuous mode [ 121.032670][ T6440] team_slave_1: entered promiscuous mode [ 121.057098][ T6440] team0: entered allmulticast mode [ 121.091024][ T6440] team_slave_0: entered allmulticast mode [ 121.101943][ T6440] team_slave_1: entered allmulticast mode [ 121.117761][ T6440] bond0: (slave team0): Releasing backup interface [ 121.166197][ T6440] bridge0: port 3(team0) entered blocking state [ 121.179074][ T6440] bridge0: port 3(team0) entered disabled state [ 121.205097][ T6435] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 121.242071][ T6435] syzkaller1: linktype set to 769 [ 121.263334][ T6436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.452006][ T10] syzkaller1: tun_net_xmit 90 [ 121.516106][ T5769] syzkaller1: tun_net_xmit 90 [ 121.580224][ T6449] syzkaller0: entered promiscuous mode [ 121.586974][ T6449] syzkaller0: entered allmulticast mode [ 124.108614][ T6466] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 124.139757][ T6466] team0: left allmulticast mode [ 124.146122][ T6466] team_slave_0: left allmulticast mode [ 124.191174][ T6466] team_slave_1: left allmulticast mode [ 124.199749][ T6466] team0: left promiscuous mode [ 124.207440][ T6466] team_slave_0: left promiscuous mode [ 124.218974][ T6466] team_slave_1: left promiscuous mode [ 124.241904][ T6466] bridge0: port 4(team0) entered disabled state [ 124.262770][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.272465][ T6466] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.286157][ T6467] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 124.294171][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 124.312099][ T6467] team0: entered promiscuous mode [ 124.317295][ T6467] team_slave_0: entered promiscuous mode [ 124.326563][ T6467] team_slave_1: entered promiscuous mode [ 124.333509][ T6467] team0: entered allmulticast mode [ 124.338733][ T6467] team_slave_0: entered allmulticast mode [ 124.348995][ T6467] team_slave_1: entered allmulticast mode [ 124.358105][ T6467] bond0: (slave team0): Releasing backup interface [ 124.375915][ T6467] bridge0: port 4(team0) entered blocking state [ 124.385551][ T6467] bridge0: port 4(team0) entered disabled state [ 124.394218][ T6468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.405372][ T6473] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 124.415125][ T6473] team0: left allmulticast mode [ 124.431267][ T6473] team_slave_0: left allmulticast mode [ 124.437146][ T6473] team_slave_1: left allmulticast mode [ 124.447149][ T6473] team0: left promiscuous mode [ 124.452294][ T6473] team_slave_0: left promiscuous mode [ 124.468244][ T6473] team_slave_1: left promiscuous mode [ 124.481032][ T6473] bridge0: port 3(team0) entered disabled state [ 124.498934][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.509280][ T6473] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.522920][ T6476] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 124.536096][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'. [ 124.547145][ T6476] team0: entered promiscuous mode [ 124.556037][ T6476] team_slave_0: entered promiscuous mode [ 124.563882][ T6476] team_slave_1: entered promiscuous mode [ 124.570963][ T6476] team0: entered allmulticast mode [ 124.594857][ T6476] team_slave_0: entered allmulticast mode [ 124.600737][ T6476] team_slave_1: entered allmulticast mode [ 124.610196][ T6476] bond0: (slave team0): Releasing backup interface [ 124.623345][ T6476] bridge0: port 3(team0) entered blocking state [ 124.629870][ T6476] bridge0: port 3(team0) entered disabled state [ 124.646749][ T6478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.655869][ T6479] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.197'. [ 125.623810][ T6514] syzkaller0: entered promiscuous mode [ 125.629466][ T6514] syzkaller0: entered allmulticast mode [ 125.766434][ T6519] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 125.799517][ T6519] team0: left allmulticast mode [ 125.822218][ T6519] team_slave_0: left allmulticast mode [ 125.834595][ T6519] team_slave_1: left allmulticast mode [ 125.840201][ T6519] team0: left promiscuous mode [ 125.845750][ T6519] team_slave_0: left promiscuous mode [ 125.852146][ T6519] team_slave_1: left promiscuous mode [ 125.858562][ T6519] bridge0: port 3(team0) entered disabled state [ 125.868966][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.879320][ T6519] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.887940][ T6521] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 125.898245][ T6521] team0: left allmulticast mode [ 125.906624][ T6521] team_slave_0: left allmulticast mode [ 125.915400][ T6521] team_slave_1: left allmulticast mode [ 125.921001][ T6521] team0: left promiscuous mode [ 125.926530][ T6521] team_slave_0: left promiscuous mode [ 125.932306][ T6521] team_slave_1: left promiscuous mode [ 125.938109][ T6521] bridge0: port 3(team0) entered disabled state [ 125.947964][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.955980][ T6521] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.964629][ T6524] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 125.972816][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 125.981875][ T6524] team0: entered promiscuous mode [ 125.989270][ T6524] team_slave_0: entered promiscuous mode [ 125.995224][ T6524] team_slave_1: entered promiscuous mode [ 126.001515][ T6524] team0: entered allmulticast mode [ 126.006650][ T6524] team_slave_0: entered allmulticast mode [ 126.012626][ T6524] team_slave_1: entered allmulticast mode [ 126.019239][ T6524] bond0: (slave team0): Releasing backup interface [ 126.028764][ T6524] bridge0: port 3(team0) entered blocking state [ 126.040427][ T6524] bridge0: port 3(team0) entered disabled state [ 127.099398][ T6525] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 127.107467][ T6525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 127.116658][ T6525] team0: entered promiscuous mode [ 127.122046][ T6525] team_slave_0: entered promiscuous mode [ 127.128154][ T6525] team_slave_1: entered promiscuous mode [ 127.134476][ T6525] team0: entered allmulticast mode [ 127.140801][ T6525] team_slave_0: entered allmulticast mode [ 127.152433][ T6525] team_slave_1: entered allmulticast mode [ 127.159748][ T6525] bond0: (slave team0): Releasing backup interface [ 127.183669][ T6525] bridge0: port 3(team0) entered blocking state [ 127.198372][ T6525] bridge0: port 3(team0) entered disabled state [ 127.207767][ T6519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.216858][ T6526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.739061][ T6545] FAULT_INJECTION: forcing a failure. [ 127.739061][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.767182][ T6545] CPU: 0 PID: 6545 Comm: syz.1.221 Not tainted syzkaller #0 [ 127.774506][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.784576][ T6545] Call Trace: [ 127.787851][ T6545] [ 127.790778][ T6545] dump_stack_lvl+0x18c/0x250 [ 127.795465][ T6545] ? show_regs_print_info+0x20/0x20 [ 127.800663][ T6545] ? load_image+0x420/0x420 [ 127.805164][ T6545] ? __might_fault+0xaa/0x120 [ 127.809837][ T6545] ? __lock_acquire+0x7d80/0x7d80 [ 127.814857][ T6545] ? __virt_addr_valid+0x10c/0x380 [ 127.819967][ T6545] should_fail_ex+0x394/0x4c0 [ 127.824654][ T6545] _copy_from_user+0x2f/0xe0 [ 127.829253][ T6545] ip_set_mcast_msfilter+0x127/0x3d0 [ 127.834538][ T6545] ? do_ip_setsockopt+0x1aa0/0x2d50 [ 127.839735][ T6545] do_ip_setsockopt+0x1ab4/0x2d50 [ 127.844766][ T6545] ? ip_sock_set_pktinfo+0x30/0x30 [ 127.849876][ T6545] ? aa_sk_perm+0x83c/0x970 [ 127.854372][ T6545] ? __fget_files+0x28/0x460 [ 127.858965][ T6545] ? aa_af_perm+0x330/0x330 [ 127.863467][ T6545] ? __fget_files+0x28/0x460 [ 127.868054][ T6545] ? aa_sock_opt_perm+0x74/0x100 [ 127.872992][ T6545] ip_setsockopt+0x61/0x110 [ 127.877518][ T6545] ? sock_common_recvmsg+0x190/0x190 [ 127.882820][ T6545] do_sock_setsockopt+0x175/0x1a0 [ 127.887851][ T6545] ? __fdget+0x180/0x210 [ 127.892111][ T6545] __x64_sys_setsockopt+0x182/0x200 [ 127.897319][ T6545] do_syscall_64+0x55/0xb0 [ 127.901736][ T6545] ? clear_bhb_loop+0x40/0x90 [ 127.906410][ T6545] ? clear_bhb_loop+0x40/0x90 [ 127.911084][ T6545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.916990][ T6545] RIP: 0033:0x7f3472f9ce59 [ 127.921409][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.941013][ T6545] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.949441][ T6545] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 127.957410][ T6545] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 127.965379][ T6545] RBP: 00007f34711f6090 R08: 0000000000005000 R09: 0000000000000000 [ 127.973345][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.981310][ T6545] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 127.989287][ T6545] [ 128.198675][ T6556] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 128.205186][ T6556] syzkaller1: linktype set to 769 [ 128.296274][ T6560] netlink: 'syz.3.226': attribute type 10 has an invalid length. [ 128.322194][ T6560] team0: left allmulticast mode [ 128.327129][ T6560] team_slave_0: left allmulticast mode [ 128.351573][ T6560] team_slave_1: left allmulticast mode [ 128.357492][ T6560] team0: left promiscuous mode [ 128.369369][ T6560] team_slave_0: left promiscuous mode [ 128.389957][ T6560] team_slave_1: left promiscuous mode [ 128.398968][ T6560] bridge0: port 3(team0) entered disabled state [ 128.458933][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.487865][ T6560] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.504027][ T6563] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 128.512629][ T6563] team0: left allmulticast mode [ 128.517525][ T6563] team_slave_0: left allmulticast mode [ 128.523149][ T6563] team_slave_1: left allmulticast mode [ 128.528630][ T6563] team0: left promiscuous mode [ 128.541192][ T6563] team_slave_0: left promiscuous mode [ 128.551434][ T6563] team_slave_1: left promiscuous mode [ 128.557293][ T6563] bridge0: port 3(team0) entered disabled state [ 128.579016][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.599228][ T6563] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.610003][ T6565] netlink: 'syz.3.226': attribute type 10 has an invalid length. [ 128.621183][ T6565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.226'. [ 128.634707][ T6565] team0: entered promiscuous mode [ 128.639916][ T6565] team_slave_0: entered promiscuous mode [ 128.646500][ T6565] team_slave_1: entered promiscuous mode [ 128.664775][ T6565] team0: entered allmulticast mode [ 128.669912][ T6565] team_slave_0: entered allmulticast mode [ 128.678029][ T6565] team_slave_1: entered allmulticast mode [ 128.686964][ T6565] bond0: (slave team0): Releasing backup interface [ 128.753237][ T6565] bridge0: port 3(team0) entered blocking state [ 128.759633][ T6565] bridge0: port 3(team0) entered disabled state [ 128.786943][ T6566] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 128.798258][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.227'. [ 128.807692][ T6566] team0: entered promiscuous mode [ 128.838215][ T6566] team_slave_0: entered promiscuous mode [ 128.851522][ T6566] team_slave_1: entered promiscuous mode [ 128.857579][ T6566] team0: entered allmulticast mode [ 128.868633][ T6566] team_slave_0: entered allmulticast mode [ 128.874835][ T6566] team_slave_1: entered allmulticast mode [ 128.886141][ T6566] bond0: (slave team0): Releasing backup interface [ 128.906290][ T6566] bridge0: port 3(team0) entered blocking state [ 128.914231][ T6566] bridge0: port 3(team0) entered disabled state [ 128.929138][ T6567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.943152][ T6568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.230602][ T6585] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.238068][ T6585] syzkaller1: linktype set to 769 [ 129.382050][ T6593] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.392747][ T6593] syzkaller1: linktype set to 769 [ 129.981891][ T6608] FAULT_INJECTION: forcing a failure. [ 129.981891][ T6608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.007720][ T6608] CPU: 0 PID: 6608 Comm: syz.3.246 Not tainted syzkaller #0 [ 130.015057][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.025127][ T6608] Call Trace: [ 130.028418][ T6608] [ 130.031360][ T6608] dump_stack_lvl+0x18c/0x250 [ 130.036063][ T6608] ? show_regs_print_info+0x20/0x20 [ 130.041282][ T6608] ? load_image+0x420/0x420 [ 130.045805][ T6608] ? __might_fault+0xaa/0x120 [ 130.050499][ T6608] ? __lock_acquire+0x7d80/0x7d80 [ 130.055551][ T6608] should_fail_ex+0x394/0x4c0 [ 130.060258][ T6608] _copy_from_user+0x2f/0xe0 [ 130.064875][ T6608] br_dev_siocdevprivate+0x119/0x15e0 [ 130.070266][ T6608] ? rcu_is_watching+0x15/0xb0 [ 130.075047][ T6608] ? br_handle_local_finish+0x20/0x20 [ 130.080431][ T6608] ? trace_contention_end+0x39/0xe0 [ 130.085643][ T6608] ? __mutex_lock+0x30d/0xc80 [ 130.090348][ T6608] ? dev_load+0x21/0x1f0 [ 130.094612][ T6608] ? dev_ioctl+0x83c/0x1140 [ 130.099139][ T6608] ? __lock_acquire+0x7d80/0x7d80 [ 130.104185][ T6608] ? mutex_lock_nested+0x20/0x20 [ 130.109139][ T6608] ? full_name_hash+0x92/0xe0 [ 130.113848][ T6608] ? dev_ifsioc+0x957/0xc40 [ 130.118375][ T6608] dev_ioctl+0x84c/0x1140 [ 130.122730][ T6608] sock_ioctl+0x74c/0x7e0 [ 130.127081][ T6608] ? sock_poll+0x3e0/0x3e0 [ 130.131529][ T6608] ? bpf_lsm_file_ioctl+0x9/0x10 [ 130.136495][ T6608] ? security_file_ioctl+0x80/0xa0 [ 130.141622][ T6608] ? sock_poll+0x3e0/0x3e0 [ 130.146058][ T6608] __se_sys_ioctl+0xfd/0x170 [ 130.150671][ T6608] do_syscall_64+0x55/0xb0 [ 130.155103][ T6608] ? clear_bhb_loop+0x40/0x90 [ 130.159791][ T6608] ? clear_bhb_loop+0x40/0x90 [ 130.164484][ T6608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.170394][ T6608] RIP: 0033:0x7f276eb9ce59 [ 130.174824][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.194442][ T6608] RSP: 002b:00007f276fae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.202877][ T6608] RAX: ffffffffffffffda RBX: 00007f276ee15fa0 RCX: 00007f276eb9ce59 [ 130.210865][ T6608] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 130.218848][ T6608] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 130.226832][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.234813][ T6608] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 130.242819][ T6608] [ 133.151843][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158418][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.383313][ T6627] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 133.389306][ T6627] syzkaller1: Linktype set failed because interface is up [ 133.658317][ T6631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.759538][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.0.254'. [ 133.810705][ T6631] hsr_slave_0: left promiscuous mode [ 133.841034][ T6631] hsr_slave_1: left promiscuous mode [ 137.478760][ T6644] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 137.488434][ T6644] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 137.529183][ T6644] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 137.561024][ T6644] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 137.571878][ T6650] FAULT_INJECTION: forcing a failure. [ 137.571878][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.577190][ T6644] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 137.585276][ T6650] CPU: 0 PID: 6650 Comm: syz.2.261 Not tainted syzkaller #0 [ 137.585318][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.585329][ T6650] Call Trace: [ 137.585336][ T6650] [ 137.585344][ T6650] dump_stack_lvl+0x18c/0x250 [ 137.585374][ T6650] ? show_regs_print_info+0x20/0x20 [ 137.585396][ T6650] ? load_image+0x420/0x420 [ 137.585416][ T6650] ? __might_fault+0xaa/0x120 [ 137.585437][ T6650] ? __lock_acquire+0x7d80/0x7d80 [ 137.585456][ T6650] ? __virt_addr_valid+0x10c/0x380 [ 137.585481][ T6650] should_fail_ex+0x394/0x4c0 [ 137.585511][ T6650] _copy_from_user+0x2f/0xe0 [ 137.585534][ T6650] csum_and_copy_from_iter+0x46e/0x1480 [ 137.585567][ T6650] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 137.585584][ T6650] ? __kasan_slab_alloc+0x6c/0x80 [ 137.585607][ T6650] ? slab_post_alloc_hook+0x86/0x4d0 [ 137.585634][ T6650] ? rcu_is_watching+0x15/0xb0 [ 137.585660][ T6650] ip_generic_getfrag+0x163/0x2f0 [ 137.585686][ T6650] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 137.585705][ T6650] ? __build_skb_around+0x245/0x3c0 [ 137.585728][ T6650] ? __alloc_skb+0x1b2/0x2c0 [ 137.585746][ T6650] ? skb_put+0x112/0x210 [ 137.585776][ T6650] __ip_append_data+0x2f4b/0x3be0 [ 137.585823][ T6650] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 137.585857][ T6650] ? ip_setup_cork+0x840/0x840 [ 137.585881][ T6650] ? __local_bh_enable_ip+0x13a/0x1c0 [ 137.585901][ T6650] ? lockdep_hardirqs_on+0x98/0x150 [ 137.585926][ T6650] ip_append_data+0x10d/0x180 [ 137.585951][ T6650] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 137.585974][ T6650] udp_sendmsg+0x5f6/0x23d0 [ 137.586006][ T6650] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 137.586030][ T6650] ? udp_cmsg_send+0x350/0x350 [ 137.586054][ T6650] ? __lock_acquire+0x1262/0x7d80 [ 137.586080][ T6650] ? aa_sk_perm+0x83c/0x970 [ 137.586106][ T6650] ? aa_af_perm+0x330/0x330 [ 137.586121][ T6650] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 137.586146][ T6650] ? sock_rps_record_flow+0x19/0x3f0 [ 137.586173][ T6650] ? inet_sendmsg+0x7e/0x2a0 [ 137.586193][ T6650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 137.586215][ T6650] ? inet_send_prepare+0x250/0x250 [ 137.586240][ T6650] ____sys_sendmsg+0x61b/0x980 [ 137.586266][ T6650] ? __asan_memset+0x22/0x40 [ 137.586287][ T6650] ? __sys_sendmsg_sock+0x30/0x30 [ 137.586306][ T6650] ? __import_iovec+0x3fa/0x850 [ 137.586332][ T6650] ? import_iovec+0x73/0xa0 [ 137.586353][ T6650] ___sys_sendmsg+0x2a6/0x360 [ 137.586373][ T6650] ? get_pid_task+0x20/0x1e0 [ 137.586398][ T6650] ? __sys_sendmsg+0x2b0/0x2b0 [ 137.586439][ T6650] ? __lock_acquire+0x7d80/0x7d80 [ 137.586483][ T6650] __se_sys_sendmsg+0x1d0/0x2c0 [ 137.586506][ T6650] ? __x64_sys_sendmsg+0x80/0x80 [ 137.586543][ T6650] ? lockdep_hardirqs_on+0x98/0x150 [ 137.586568][ T6650] do_syscall_64+0x55/0xb0 [ 137.586587][ T6650] ? clear_bhb_loop+0x40/0x90 [ 137.586604][ T6650] ? clear_bhb_loop+0x40/0x90 [ 137.586622][ T6650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.586645][ T6650] RIP: 0033:0x7f31bf39ce59 [ 137.586663][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.586678][ T6650] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.586698][ T6650] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 137.586712][ T6650] RDX: 0000000024000000 RSI: 00002000000020c0 RDI: 0000000000000003 [ 137.586724][ T6650] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 137.586736][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.586747][ T6650] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 137.944614][ T6650] [ 138.310627][ T6664] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 138.319216][ T6664] syzkaller1: Linktype set failed because interface is up [ 138.522296][ T6671] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 139.172566][ T6681] netlink: 'syz.3.273': attribute type 39 has an invalid length. [ 141.726484][ T6692] FAULT_INJECTION: forcing a failure. [ 141.726484][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 141.751783][ T6692] CPU: 0 PID: 6692 Comm: syz.2.276 Not tainted syzkaller #0 [ 141.759125][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.769199][ T6692] Call Trace: [ 141.772494][ T6692] [ 141.775439][ T6692] dump_stack_lvl+0x18c/0x250 [ 141.780138][ T6692] ? show_regs_print_info+0x20/0x20 [ 141.785358][ T6692] ? load_image+0x420/0x420 [ 141.789893][ T6692] ? __might_sleep+0xe0/0xe0 [ 141.794510][ T6692] ? __lock_acquire+0x7d80/0x7d80 [ 141.799561][ T6692] should_fail_ex+0x394/0x4c0 [ 141.804273][ T6692] should_failslab+0x9/0x20 [ 141.808798][ T6692] slab_pre_alloc_hook+0x59/0x300 [ 141.813841][ T6692] ? __lock_acquire+0x7d80/0x7d80 [ 141.818868][ T6692] kmem_cache_alloc_node+0x5e/0x310 [ 141.824064][ T6692] ? __alloc_skb+0x103/0x2c0 [ 141.828673][ T6692] __alloc_skb+0x103/0x2c0 [ 141.833107][ T6692] netlink_sendmsg+0x66a/0xbf0 [ 141.837877][ T6692] ? lockdep_hardirqs_on+0x98/0x150 [ 141.843089][ T6692] ? netlink_getsockopt+0x590/0x590 [ 141.848289][ T6692] ? security_socket_sendmsg+0x45/0xa0 [ 141.853752][ T6692] ? security_socket_sendmsg+0x80/0xa0 [ 141.859206][ T6692] ? netlink_getsockopt+0x590/0x590 [ 141.864407][ T6692] ____sys_sendmsg+0x61b/0x980 [ 141.869172][ T6692] ? __asan_memset+0x22/0x40 [ 141.873759][ T6692] ? __sys_sendmsg_sock+0x30/0x30 [ 141.878776][ T6692] ? __import_iovec+0x5f2/0x850 [ 141.883624][ T6692] ? import_iovec+0x73/0xa0 [ 141.888121][ T6692] ___sys_sendmsg+0x2a6/0x360 [ 141.892815][ T6692] ? get_pid_task+0x20/0x1e0 [ 141.897433][ T6692] ? __sys_sendmsg+0x2b0/0x2b0 [ 141.902224][ T6692] ? __lock_acquire+0x7d80/0x7d80 [ 141.907267][ T6692] __se_sys_sendmsg+0x1d0/0x2c0 [ 141.912124][ T6692] ? __x64_sys_sendmsg+0x80/0x80 [ 141.917068][ T6692] ? lockdep_hardirqs_on+0x98/0x150 [ 141.922269][ T6692] do_syscall_64+0x55/0xb0 [ 141.926681][ T6692] ? clear_bhb_loop+0x40/0x90 [ 141.931349][ T6692] ? clear_bhb_loop+0x40/0x90 [ 141.936019][ T6692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.941909][ T6692] RIP: 0033:0x7f31bf39ce59 [ 141.946322][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.965932][ T6692] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.974343][ T6692] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 141.982310][ T6692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 141.990275][ T6692] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 141.998237][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.006207][ T6692] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 142.014204][ T6692] [ 142.336506][ T6703] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.393776][ T6703] syzkaller1: Linktype set failed because interface is up [ 142.451771][ T23] syzkaller1: tun_net_xmit 90 [ 143.440018][ T6718] netlink: 196 bytes leftover after parsing attributes in process `syz.3.285'. [ 144.709812][ T6739] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 144.721743][ T6739] syzkaller1: Linktype set failed because interface is up [ 144.727242][ T1190] syzkaller1: tun_net_xmit 90 [ 144.753315][ T6742] FAULT_INJECTION: forcing a failure. [ 144.753315][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 144.770908][ T6742] CPU: 1 PID: 6742 Comm: syz.3.292 Not tainted syzkaller #0 [ 144.778247][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.788333][ T6742] Call Trace: [ 144.791640][ T6742] [ 144.794597][ T6742] dump_stack_lvl+0x18c/0x250 [ 144.799322][ T6742] ? show_regs_print_info+0x20/0x20 [ 144.804548][ T6742] ? load_image+0x420/0x420 [ 144.809061][ T6742] ? __might_sleep+0xe0/0xe0 [ 144.813676][ T6742] ? __lock_acquire+0x7d80/0x7d80 [ 144.818751][ T6742] should_fail_ex+0x394/0x4c0 [ 144.823458][ T6742] should_failslab+0x9/0x20 [ 144.827961][ T6742] slab_pre_alloc_hook+0x59/0x300 [ 144.833007][ T6742] ? kernfs_fop_write_iter+0x158/0x520 [ 144.838499][ T6742] ? kernfs_fop_write_iter+0x158/0x520 [ 144.843970][ T6742] __kmem_cache_alloc_node+0x53/0x250 [ 144.849356][ T6742] ? kernfs_fop_write_iter+0x158/0x520 [ 144.854858][ T6742] __kmalloc+0xa7/0x240 [ 144.859112][ T6742] kernfs_fop_write_iter+0x158/0x520 [ 144.864465][ T6742] vfs_write+0x474/0x9a0 [ 144.868759][ T6742] ? file_end_write+0x250/0x250 [ 144.873668][ T6742] ? __fget_files+0x3fc/0x460 [ 144.878411][ T6742] ? __fdget_pos+0x2a3/0x330 [ 144.883027][ T6742] ? ksys_write+0x74/0x260 [ 144.887506][ T6742] ksys_write+0x151/0x260 [ 144.891889][ T6742] ? __ia32_sys_read+0x90/0x90 [ 144.896695][ T6742] ? lockdep_hardirqs_on+0x98/0x150 [ 144.901935][ T6742] do_syscall_64+0x55/0xb0 [ 144.906373][ T6742] ? clear_bhb_loop+0x40/0x90 [ 144.911071][ T6742] ? clear_bhb_loop+0x40/0x90 [ 144.915790][ T6742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.921709][ T6742] RIP: 0033:0x7f276eb9ce59 [ 144.926153][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.945786][ T6742] RSP: 002b:00007f276fae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.954232][ T6742] RAX: ffffffffffffffda RBX: 00007f276ee15fa0 RCX: 00007f276eb9ce59 [ 144.962229][ T6742] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000005 [ 144.970218][ T6742] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 144.978214][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.986207][ T6742] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 144.994251][ T6742] [ 145.320614][ T6757] netlink: 'syz.1.296': attribute type 19 has an invalid length. [ 145.359519][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'. [ 146.045619][ T6765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 146.149153][ T6772] FAULT_INJECTION: forcing a failure. [ 146.149153][ T6772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.173927][ T6772] CPU: 0 PID: 6772 Comm: syz.1.302 Not tainted syzkaller #0 [ 146.181266][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.191340][ T6772] Call Trace: [ 146.194638][ T6772] [ 146.197588][ T6772] dump_stack_lvl+0x18c/0x250 [ 146.202297][ T6772] ? show_regs_print_info+0x20/0x20 [ 146.207522][ T6772] ? load_image+0x420/0x420 [ 146.212048][ T6772] ? __might_fault+0xaa/0x120 [ 146.216742][ T6772] ? __lock_acquire+0x7d80/0x7d80 [ 146.221788][ T6772] should_fail_ex+0x394/0x4c0 [ 146.226493][ T6772] _copy_from_user+0x2f/0xe0 [ 146.231107][ T6772] br_dev_siocdevprivate+0x119/0x15e0 [ 146.236501][ T6772] ? rcu_is_watching+0x15/0xb0 [ 146.241283][ T6772] ? br_handle_local_finish+0x20/0x20 [ 146.246661][ T6772] ? trace_contention_end+0x39/0xe0 [ 146.251865][ T6772] ? __mutex_lock+0x30d/0xc80 [ 146.256547][ T6772] ? dev_load+0x21/0x1f0 [ 146.260791][ T6772] ? dev_ioctl+0x83c/0x1140 [ 146.265291][ T6772] ? __lock_acquire+0x7d80/0x7d80 [ 146.270312][ T6772] ? mutex_lock_nested+0x20/0x20 [ 146.275247][ T6772] ? full_name_hash+0x92/0xe0 [ 146.279931][ T6772] ? dev_ifsioc+0x957/0xc40 [ 146.284442][ T6772] dev_ioctl+0x84c/0x1140 [ 146.288778][ T6772] sock_ioctl+0x74c/0x7e0 [ 146.293108][ T6772] ? sock_poll+0x3e0/0x3e0 [ 146.297530][ T6772] ? bpf_lsm_file_ioctl+0x9/0x10 [ 146.302462][ T6772] ? security_file_ioctl+0x80/0xa0 [ 146.307567][ T6772] ? sock_poll+0x3e0/0x3e0 [ 146.311979][ T6772] __se_sys_ioctl+0xfd/0x170 [ 146.316568][ T6772] do_syscall_64+0x55/0xb0 [ 146.320988][ T6772] ? clear_bhb_loop+0x40/0x90 [ 146.325658][ T6772] ? clear_bhb_loop+0x40/0x90 [ 146.330329][ T6772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.336224][ T6772] RIP: 0033:0x7f3472f9ce59 [ 146.340634][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.360231][ T6772] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.368643][ T6772] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 146.376607][ T6772] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 146.384573][ T6772] RBP: 00007f34711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.392538][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.400762][ T6772] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 146.408742][ T6772] [ 146.830643][ T6783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 146.852036][ T10] syzkaller1: tun_net_xmit 90 [ 146.859890][ T6783] syzkaller1: Linktype set failed because interface is up [ 147.011772][ T69] syzkaller1: tun_net_xmit 86 [ 147.539501][ T5769] syzkaller1: tun_net_xmit 90 [ 149.338445][ T6826] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.358734][ T6826] syzkaller1: Linktype set failed because interface is up [ 149.374080][ T27] syzkaller1: tun_net_xmit 90 [ 149.411567][ T6830] FAULT_INJECTION: forcing a failure. [ 149.411567][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.425646][ T6830] CPU: 1 PID: 6830 Comm: syz.2.323 Not tainted syzkaller #0 [ 149.432982][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.443058][ T6830] Call Trace: [ 149.446352][ T6830] [ 149.449295][ T6830] dump_stack_lvl+0x18c/0x250 [ 149.454004][ T6830] ? show_regs_print_info+0x20/0x20 [ 149.459218][ T6830] ? load_image+0x420/0x420 [ 149.463731][ T6830] ? __might_fault+0xaa/0x120 [ 149.468408][ T6830] ? __lock_acquire+0x7d80/0x7d80 [ 149.473433][ T6830] should_fail_ex+0x394/0x4c0 [ 149.478122][ T6830] _copy_from_user+0x2f/0xe0 [ 149.482711][ T6830] dev_ethtool+0xc6/0x18d0 [ 149.487140][ T6830] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 149.493383][ T6830] ? __lock_acquire+0x7d80/0x7d80 [ 149.498409][ T6830] ? __might_fault+0xaa/0x120 [ 149.503080][ T6830] ? full_name_hash+0x92/0xe0 [ 149.507768][ T6830] ? dev_load+0x21/0x1f0 [ 149.512014][ T6830] dev_ioctl+0x392/0x1140 [ 149.516346][ T6830] sock_do_ioctl+0x239/0x310 [ 149.520933][ T6830] ? sock_show_fdinfo+0xb0/0xb0 [ 149.525790][ T6830] sock_ioctl+0x5be/0x7e0 [ 149.530121][ T6830] ? sock_poll+0x3e0/0x3e0 [ 149.534542][ T6830] ? bpf_lsm_file_ioctl+0x9/0x10 [ 149.539487][ T6830] ? security_file_ioctl+0x80/0xa0 [ 149.544595][ T6830] ? sock_poll+0x3e0/0x3e0 [ 149.549011][ T6830] __se_sys_ioctl+0xfd/0x170 [ 149.553601][ T6830] do_syscall_64+0x55/0xb0 [ 149.558015][ T6830] ? clear_bhb_loop+0x40/0x90 [ 149.562688][ T6830] ? clear_bhb_loop+0x40/0x90 [ 149.567357][ T6830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.573248][ T6830] RIP: 0033:0x7f31bf39ce59 [ 149.577658][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.597258][ T6830] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.605665][ T6830] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 149.613633][ T6830] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 149.621597][ T6830] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 149.629560][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.637526][ T6830] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 149.645503][ T6830] [ 149.902820][ T6842] netlink: 168 bytes leftover after parsing attributes in process `syz.3.327'. [ 150.479343][ T6858] FAULT_INJECTION: forcing a failure. [ 150.479343][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.497351][ T6858] CPU: 0 PID: 6858 Comm: syz.0.333 Not tainted syzkaller #0 [ 150.504682][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.514761][ T6858] Call Trace: [ 150.518052][ T6858] [ 150.520992][ T6858] dump_stack_lvl+0x18c/0x250 [ 150.525698][ T6858] ? show_regs_print_info+0x20/0x20 [ 150.530917][ T6858] ? load_image+0x420/0x420 [ 150.535442][ T6858] ? __lock_acquire+0x7d80/0x7d80 [ 150.540500][ T6858] ? snprintf+0xe9/0x140 [ 150.544760][ T6858] should_fail_ex+0x394/0x4c0 [ 150.549470][ T6858] _copy_to_user+0x2f/0xa0 [ 150.553916][ T6858] simple_read_from_buffer+0xe7/0x150 [ 150.559306][ T6858] proc_fail_nth_read+0x1e8/0x260 [ 150.564351][ T6858] ? proc_fault_inject_write+0x360/0x360 [ 150.569995][ T6858] ? fsnotify_perm+0x271/0x5e0 [ 150.574768][ T6858] ? proc_fault_inject_write+0x360/0x360 [ 150.580405][ T6858] vfs_read+0x298/0x990 [ 150.584574][ T6858] ? kernel_read+0x1e0/0x1e0 [ 150.589162][ T6858] ? __fget_files+0x28/0x460 [ 150.593755][ T6858] ? __fget_files+0x3fc/0x460 [ 150.598440][ T6858] ? __fdget_pos+0x2a3/0x330 [ 150.603036][ T6858] ? ksys_read+0x74/0x260 [ 150.607368][ T6858] ksys_read+0x151/0x260 [ 150.611613][ T6858] ? vfs_write+0x9a0/0x9a0 [ 150.616031][ T6858] ? lockdep_hardirqs_on+0x98/0x150 [ 150.621233][ T6858] do_syscall_64+0x55/0xb0 [ 150.625645][ T6858] ? clear_bhb_loop+0x40/0x90 [ 150.630315][ T6858] ? clear_bhb_loop+0x40/0x90 [ 150.634988][ T6858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.640893][ T6858] RIP: 0033:0x7ff44db5d68e [ 150.645343][ T6858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.664949][ T6858] RSP: 002b:00007ff44ea74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.673362][ T6858] RAX: ffffffffffffffda RBX: 00007ff44ea756c0 RCX: 00007ff44db5d68e [ 150.681328][ T6858] RDX: 000000000000000f RSI: 00007ff44ea750a0 RDI: 0000000000000005 [ 150.689295][ T6858] RBP: 00007ff44ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 150.697262][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.705228][ T6858] R13: 00007ff44de16038 R14: 00007ff44de15fa0 R15: 00007ffd05c5d088 [ 150.713208][ T6858] [ 151.034675][ T6862] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 151.041446][ T6862] syzkaller1: Linktype set failed because interface is up [ 152.738169][ T6902] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 152.748878][ T6902] syzkaller1: Linktype set failed because interface is up [ 152.761535][ T172] syzkaller1: tun_net_xmit 90 [ 152.867480][ T6909] : renamed from ip6gre0 (while UP) [ 153.102850][ T6913] netlink: 'syz.3.353': attribute type 3 has an invalid length. [ 153.135077][ T6913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.169174][ T6917] netlink: 164 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.215129][ T6926] netlink: 188 bytes leftover after parsing attributes in process `syz.1.357'. [ 153.239978][ T6924] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.357'. [ 153.257512][ T6924] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 153.280569][ T6924] netlink: 'syz.1.357': attribute type 3 has an invalid length. [ 153.294532][ T6924] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.357'. [ 156.374242][ T6934] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 156.398204][ T6934] netlink: 152 bytes leftover after parsing attributes in process `syz.3.361'. [ 156.446758][ T6934] FAULT_INJECTION: forcing a failure. [ 156.446758][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 156.502265][ T6934] CPU: 0 PID: 6934 Comm: syz.3.361 Not tainted syzkaller #0 [ 156.509602][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.519666][ T6934] Call Trace: [ 156.522959][ T6934] [ 156.525898][ T6934] dump_stack_lvl+0x18c/0x250 [ 156.530598][ T6934] ? show_regs_print_info+0x20/0x20 [ 156.535807][ T6934] ? load_image+0x420/0x420 [ 156.540327][ T6934] ? __lock_acquire+0x7d80/0x7d80 [ 156.545373][ T6934] should_fail_ex+0x394/0x4c0 [ 156.550072][ T6934] should_failslab+0x9/0x20 [ 156.554589][ T6934] slab_pre_alloc_hook+0x59/0x300 [ 156.559626][ T6934] ? br_netlink_fini+0x30/0x30 [ 156.564411][ T6934] kmem_cache_alloc_node+0x5e/0x310 [ 156.569627][ T6934] ? __alloc_skb+0x103/0x2c0 [ 156.574234][ T6934] __alloc_skb+0x103/0x2c0 [ 156.578663][ T6934] rtmsg_ifinfo_build_skb+0x83/0x260 [ 156.583971][ T6934] rtnetlink_event+0x1b7/0x260 [ 156.588762][ T6934] notifier_call_chain+0x18f/0x380 [ 156.593922][ T6934] dev_set_mtu_ext+0x463/0x680 [ 156.598707][ T6934] ? irq_work_queue+0xbc/0x140 [ 156.603491][ T6934] ? dev_validate_mtu+0x170/0x170 [ 156.608529][ T6934] ? __wake_up_klogd+0xd9/0x100 [ 156.613398][ T6934] ? vprintk_emit+0x53d/0x610 [ 156.618101][ T6934] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 156.624010][ T6934] ? _raw_spin_unlock+0x40/0x40 [ 156.628859][ T6934] do_setlink+0x842/0x3f40 [ 156.633282][ T6934] ? load_image+0x420/0x420 [ 156.637782][ T6934] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 156.643933][ T6934] ? stack_trace_save+0xaa/0x100 [ 156.648869][ T6934] ? rcu_is_watching+0x15/0xb0 [ 156.653635][ T6934] ? do_trace_netlink_extack+0x7e/0x1a0 [ 156.659192][ T6934] ? __nla_validate+0x50/0x50 [ 156.663886][ T6934] ? validate_linkmsg+0x719/0x910 [ 156.668916][ T6934] rtnl_newlink+0x1848/0x2170 [ 156.673597][ T6934] ? rtnl_newlink+0x4c1/0x2170 [ 156.678364][ T6934] ? rtnl_setlink+0x4e0/0x4e0 [ 156.683033][ T6934] ? __rwlock_init+0x150/0x150 [ 156.687796][ T6934] ? do_raw_spin_unlock+0x121/0x230 [ 156.692990][ T6934] ? __mutex_lock+0x923/0xc80 [ 156.697662][ T6934] ? __mutex_lock+0x4d2/0xc80 [ 156.702352][ T6934] ? rtnl_setlink+0x4e0/0x4e0 [ 156.707022][ T6934] rtnetlink_rcv_msg+0x843/0xf90 [ 156.711963][ T6934] ? rtnetlink_rcv_msg+0x220/0xf90 [ 156.717075][ T6934] ? rtnetlink_bind+0x80/0x80 [ 156.721753][ T6934] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 156.727728][ T6934] ? lock_chain_count+0x20/0x20 [ 156.732572][ T6934] ? __local_bh_enable_ip+0x13a/0x1c0 [ 156.737944][ T6934] ? lockdep_hardirqs_on+0x98/0x150 [ 156.743144][ T6934] ? __local_bh_enable_ip+0x13a/0x1c0 [ 156.748507][ T6934] ? _local_bh_enable+0xa0/0xa0 [ 156.753353][ T6934] ? __dev_queue_xmit+0x275/0x3630 [ 156.758461][ T6934] ? __dev_queue_xmit+0x1bc2/0x3630 [ 156.763658][ T6934] ? __dev_queue_xmit+0x275/0x3630 [ 156.768781][ T6934] ? ref_tracker_free+0x686/0x830 [ 156.773808][ T6934] netlink_rcv_skb+0x235/0x4c0 [ 156.778566][ T6934] ? rtnetlink_bind+0x80/0x80 [ 156.783237][ T6934] ? netlink_ack+0x1160/0x1160 [ 156.788005][ T6934] ? __lock_acquire+0x7d80/0x7d80 [ 156.793033][ T6934] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.798226][ T6934] netlink_unicast+0x7b1/0x930 [ 156.802991][ T6934] netlink_sendmsg+0x8d0/0xbf0 [ 156.807756][ T6934] ? netlink_getsockopt+0x590/0x590 [ 156.812951][ T6934] ? aa_sock_msg_perm+0x94/0x150 [ 156.817885][ T6934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.823177][ T6934] ? security_socket_sendmsg+0x80/0xa0 [ 156.828628][ T6934] ? netlink_getsockopt+0x590/0x590 [ 156.833843][ T6934] ____sys_sendmsg+0x61b/0x980 [ 156.838622][ T6934] ? __asan_memset+0x22/0x40 [ 156.843207][ T6934] ? __sys_sendmsg_sock+0x30/0x30 [ 156.848222][ T6934] ? __import_iovec+0x5f2/0x850 [ 156.853071][ T6934] ? import_iovec+0x73/0xa0 [ 156.857569][ T6934] ___sys_sendmsg+0x2a6/0x360 [ 156.862241][ T6934] ? get_pid_task+0x20/0x1e0 [ 156.866851][ T6934] ? __sys_sendmsg+0x2b0/0x2b0 [ 156.871644][ T6934] ? __lock_acquire+0x7d80/0x7d80 [ 156.876696][ T6934] __se_sys_sendmsg+0x1d0/0x2c0 [ 156.881549][ T6934] ? __x64_sys_sendmsg+0x80/0x80 [ 156.886496][ T6934] ? lockdep_hardirqs_on+0x98/0x150 [ 156.891698][ T6934] do_syscall_64+0x55/0xb0 [ 156.896113][ T6934] ? clear_bhb_loop+0x40/0x90 [ 156.900791][ T6934] ? clear_bhb_loop+0x40/0x90 [ 156.905464][ T6934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.911380][ T6934] RIP: 0033:0x7f276eb9ce59 [ 156.915800][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.935412][ T6934] RSP: 002b:00007f276fae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.943826][ T6934] RAX: ffffffffffffffda RBX: 00007f276ee15fa0 RCX: 00007f276eb9ce59 [ 156.951794][ T6934] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000003 [ 156.959757][ T6934] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 156.967720][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.975696][ T6934] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 156.983681][ T6934] [ 157.229294][ T6934] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 157.252882][ T6938] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.475174][ T6950] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 157.489978][ T6950] syzkaller1: Linktype set failed because interface is up [ 157.501342][ T5769] syzkaller1: tun_net_xmit 90 [ 157.515563][ T6955] FAULT_INJECTION: forcing a failure. [ 157.515563][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 157.528250][ T6955] CPU: 1 PID: 6955 Comm: syz.1.367 Not tainted syzkaller #0 [ 157.535549][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.545621][ T6955] Call Trace: [ 157.548919][ T6955] [ 157.551861][ T6955] dump_stack_lvl+0x18c/0x250 [ 157.556562][ T6955] ? show_regs_print_info+0x20/0x20 [ 157.561779][ T6955] ? load_image+0x420/0x420 [ 157.566322][ T6955] should_fail_ex+0x394/0x4c0 [ 157.571029][ T6955] should_failslab+0x9/0x20 [ 157.575556][ T6955] slab_pre_alloc_hook+0x59/0x300 [ 157.580613][ T6955] kmem_cache_alloc+0x5a/0x2c0 [ 157.585409][ T6955] ? skb_clone+0x1eb/0x370 [ 157.589855][ T6955] skb_clone+0x1eb/0x370 [ 157.594126][ T6955] bpf_clone_redirect+0x16d/0x4a0 [ 157.599182][ T6955] bpf_prog_dde6c29962cc7727+0x5e/0x63 [ 157.604674][ T6955] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 157.610680][ T6955] ? __lock_acquire+0x7d80/0x7d80 [ 157.615717][ T6955] ? lock_chain_count+0x20/0x20 [ 157.620568][ T6955] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 157.626805][ T6955] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 157.632088][ T6955] ? ktime_get+0x7f/0x280 [ 157.636408][ T6955] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 157.642647][ T6955] ? ktime_get_real_ts64+0x440/0x440 [ 157.647926][ T6955] ? __x64_sys_bpf+0x7c/0x90 [ 157.652513][ T6955] ? __local_bh_disable_ip+0x108/0x1a0 [ 157.657970][ T6955] ? __cant_sleep+0x220/0x220 [ 157.662642][ T6955] ? read_tsc+0x9/0x20 [ 157.666704][ T6955] ? ktime_get+0x24b/0x280 [ 157.671127][ T6955] ? bpf_test_run+0x174/0x870 [ 157.675804][ T6955] bpf_test_run+0x2df/0x870 [ 157.680317][ T6955] ? bpf_test_run+0x174/0x870 [ 157.684994][ T6955] ? dst_hold+0x70/0x70 [ 157.689149][ T6955] ? eth_get_headlen+0x210/0x210 [ 157.694083][ T6955] ? slab_build_skb+0x25a/0x3e0 [ 157.698929][ T6955] ? convert___skb_to_skb+0x3d/0x590 [ 157.704210][ T6955] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 157.709589][ T6955] ? cpu_online+0x60/0x60 [ 157.713913][ T6955] bpf_prog_test_run+0x31f/0x390 [ 157.718846][ T6955] __sys_bpf+0x49d/0x890 [ 157.723083][ T6955] ? bpf_link_show_fdinfo+0x390/0x390 [ 157.728458][ T6955] ? lock_chain_count+0x20/0x20 [ 157.733311][ T6955] __x64_sys_bpf+0x7c/0x90 [ 157.737719][ T6955] do_syscall_64+0x55/0xb0 [ 157.742128][ T6955] ? clear_bhb_loop+0x40/0x90 [ 157.746796][ T6955] ? clear_bhb_loop+0x40/0x90 [ 157.751471][ T6955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.757360][ T6955] RIP: 0033:0x7f3472f9ce59 [ 157.761769][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.781368][ T6955] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.789774][ T6955] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 157.797740][ T6955] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 157.805702][ T6955] RBP: 00007f34711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.813666][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.821626][ T6955] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 157.829621][ T6955] [ 157.839108][ T49] syzkaller1: tun_net_xmit 86 [ 157.843906][ T49] syzkaller1: tun_net_xmit 90 [ 158.859040][ T6980] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 158.867385][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 158.887667][ T6980] batman_adv: batadv0: Adding interface: vlan1 [ 158.900006][ T6980] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.933434][ T6980] batman_adv: batadv0: Interface activated: vlan1 [ 159.201799][ T5769] syzkaller1: tun_net_xmit 90 [ 159.207929][ T6989] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 159.240958][ T6989] syzkaller1: Linktype set failed because interface is up [ 159.293476][ T1145] syzkaller1: tun_net_xmit 86 [ 159.328736][ T6997] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 159.341207][ T6997] netlink: 152 bytes leftover after parsing attributes in process `syz.0.381'. [ 159.554756][ T6997] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 160.012455][ T172] syzkaller1: tun_net_xmit 90 [ 162.304781][ T7007] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 162.312663][ T7007] netlink: 152 bytes leftover after parsing attributes in process `syz.3.384'. [ 162.322099][ T7007] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 162.844955][ T7028] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 162.860733][ T7028] syzkaller1: Linktype set failed because interface is up [ 162.881808][ T23] syzkaller1: tun_net_xmit 90 [ 164.144360][ T7046] FAULT_INJECTION: forcing a failure. [ 164.144360][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.151329][ T7049] netlink: 128 bytes leftover after parsing attributes in process `syz.1.400'. [ 164.167586][ T7046] CPU: 0 PID: 7046 Comm: syz.3.401 Not tainted syzkaller #0 [ 164.174916][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.184987][ T7046] Call Trace: [ 164.185025][ T7049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 164.188260][ T7046] [ 164.188290][ T7046] dump_stack_lvl+0x18c/0x250 [ 164.211263][ T7046] ? show_regs_print_info+0x20/0x20 [ 164.216487][ T7046] ? load_image+0x420/0x420 [ 164.221006][ T7046] ? __lock_acquire+0x7d80/0x7d80 [ 164.226050][ T7046] ? snprintf+0xe9/0x140 [ 164.230308][ T7046] should_fail_ex+0x394/0x4c0 [ 164.235013][ T7046] _copy_to_user+0x2f/0xa0 [ 164.239456][ T7046] simple_read_from_buffer+0xe7/0x150 [ 164.244859][ T7046] proc_fail_nth_read+0x1e8/0x260 [ 164.249908][ T7046] ? proc_fault_inject_write+0x360/0x360 [ 164.255565][ T7046] ? fsnotify_perm+0x271/0x5e0 [ 164.260344][ T7046] ? proc_fault_inject_write+0x360/0x360 [ 164.265006][ T7053] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 164.265983][ T7046] vfs_read+0x298/0x990 [ 164.277863][ T7046] ? kernel_read+0x1e0/0x1e0 [ 164.282483][ T7046] ? __fget_files+0x28/0x460 [ 164.287093][ T7046] ? __fget_files+0x3fc/0x460 [ 164.289281][ T7053] bridge0: port 3(team0) entered disabled state [ 164.291777][ T7046] ? __fdget_pos+0x2a3/0x330 [ 164.291801][ T7046] ? ksys_read+0x74/0x260 [ 164.291824][ T7046] ksys_read+0x151/0x260 [ 164.311148][ T7046] ? vfs_write+0x9a0/0x9a0 [ 164.315575][ T7046] ? lockdep_hardirqs_on+0x98/0x150 [ 164.320798][ T7046] do_syscall_64+0x55/0xb0 [ 164.325233][ T7046] ? clear_bhb_loop+0x40/0x90 [ 164.329925][ T7046] ? clear_bhb_loop+0x40/0x90 [ 164.334626][ T7046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.340554][ T7046] RIP: 0033:0x7f276eb5d68e [ 164.344986][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.364602][ T7046] RSP: 002b:00007f276fae4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.373021][ T7046] RAX: ffffffffffffffda RBX: 00007f276fae56c0 RCX: 00007f276eb5d68e [ 164.381013][ T7046] RDX: 000000000000000f RSI: 00007f276fae50a0 RDI: 000000000000003d [ 164.389002][ T7046] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 164.396992][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.404986][ T7046] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 164.412989][ T7046] [ 164.438072][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.463252][ T7053] bond0: (slave team0): Enslaving as an active interface with an up link [ 164.474968][ T7055] netlink: 'syz.1.403': attribute type 19 has an invalid length. [ 164.489353][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.403'. [ 164.618537][ T7060] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.404'. [ 164.753118][ T7069] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 164.759770][ T7069] syzkaller1: Linktype set failed because interface is up [ 164.896002][ T7075] syzkaller0: entered promiscuous mode [ 164.902218][ T7075] syzkaller0: entered allmulticast mode [ 165.329682][ T7090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.413'. [ 167.865499][ T7099] netlink: 164 bytes leftover after parsing attributes in process `syz.3.415'. [ 168.004704][ T7104] netlink: 128 bytes leftover after parsing attributes in process `syz.0.416'. [ 168.039375][ T7104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 168.062711][ T7107] netlink: 164 bytes leftover after parsing attributes in process `syz.1.419'. [ 168.451019][ T7122] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 168.471344][ T7122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'. [ 168.485226][ T7122] batman_adv: batadv0: Adding interface: vlan1 [ 168.501028][ T7122] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.542340][ T7122] batman_adv: batadv0: Interface activated: vlan1 [ 168.792561][ T7142] FAULT_INJECTION: forcing a failure. [ 168.792561][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 168.805299][ T7142] CPU: 1 PID: 7142 Comm: syz.1.429 Not tainted syzkaller #0 [ 168.812597][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.822657][ T7142] Call Trace: [ 168.825940][ T7142] [ 168.828874][ T7142] dump_stack_lvl+0x18c/0x250 [ 168.833563][ T7142] ? show_regs_print_info+0x20/0x20 [ 168.838758][ T7142] ? load_image+0x420/0x420 [ 168.843264][ T7142] should_fail_ex+0x394/0x4c0 [ 168.847947][ T7142] should_failslab+0x9/0x20 [ 168.852448][ T7142] slab_pre_alloc_hook+0x59/0x300 [ 168.857477][ T7142] kmem_cache_alloc+0x5a/0x2c0 [ 168.862240][ T7142] ? skb_clone+0x1eb/0x370 [ 168.866656][ T7142] skb_clone+0x1eb/0x370 [ 168.870894][ T7142] bpf_clone_redirect+0x16d/0x4a0 [ 168.875924][ T7142] bpf_prog_dde6c29962cc7727+0x5e/0x63 [ 168.881382][ T7142] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 168.887356][ T7142] ? __lock_acquire+0x7d80/0x7d80 [ 168.892375][ T7142] ? lock_chain_count+0x20/0x20 [ 168.897222][ T7142] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 168.903459][ T7142] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 168.908744][ T7142] ? ktime_get+0x7f/0x280 [ 168.913068][ T7142] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 168.919304][ T7142] ? ktime_get_real_ts64+0x440/0x440 [ 168.924586][ T7142] ? __x64_sys_bpf+0x7c/0x90 [ 168.929172][ T7142] ? __local_bh_disable_ip+0x108/0x1a0 [ 168.934623][ T7142] ? __cant_sleep+0x220/0x220 [ 168.939299][ T7142] ? read_tsc+0x9/0x20 [ 168.943361][ T7142] ? ktime_get+0x24b/0x280 [ 168.947774][ T7142] ? bpf_test_run+0x174/0x870 [ 168.952447][ T7142] bpf_test_run+0x2df/0x870 [ 168.956956][ T7142] ? bpf_test_run+0x174/0x870 [ 168.961629][ T7142] ? dst_hold+0x70/0x70 [ 168.965784][ T7142] ? eth_get_headlen+0x210/0x210 [ 168.970722][ T7142] ? slab_build_skb+0x25a/0x3e0 [ 168.975565][ T7142] ? convert___skb_to_skb+0x3d/0x590 [ 168.980845][ T7142] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 168.986228][ T7142] ? cpu_online+0x60/0x60 [ 168.990551][ T7142] bpf_prog_test_run+0x31f/0x390 [ 168.995485][ T7142] __sys_bpf+0x49d/0x890 [ 168.999724][ T7142] ? bpf_link_show_fdinfo+0x390/0x390 [ 169.005097][ T7142] ? lock_chain_count+0x20/0x20 [ 169.009948][ T7142] __x64_sys_bpf+0x7c/0x90 [ 169.014362][ T7142] do_syscall_64+0x55/0xb0 [ 169.018774][ T7142] ? clear_bhb_loop+0x40/0x90 [ 169.023441][ T7142] ? clear_bhb_loop+0x40/0x90 [ 169.028109][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.034002][ T7142] RIP: 0033:0x7f3472f9ce59 [ 169.038412][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.058009][ T7142] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.066413][ T7142] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 169.074379][ T7142] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 169.082343][ T7142] RBP: 00007f34711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.090305][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.098268][ T7142] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 169.106244][ T7142] [ 169.948408][ T7167] FAULT_INJECTION: forcing a failure. [ 169.948408][ T7167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.975956][ T7168] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.438'. [ 169.985838][ T7167] CPU: 0 PID: 7167 Comm: syz.0.437 Not tainted syzkaller #0 [ 169.993161][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.003217][ T7167] Call Trace: [ 170.006496][ T7167] [ 170.009431][ T7167] dump_stack_lvl+0x18c/0x250 [ 170.014149][ T7167] ? show_regs_print_info+0x20/0x20 [ 170.019370][ T7167] ? load_image+0x420/0x420 [ 170.023889][ T7167] ? __might_fault+0xaa/0x120 [ 170.028577][ T7167] ? __lock_acquire+0x7d80/0x7d80 [ 170.033621][ T7167] should_fail_ex+0x394/0x4c0 [ 170.038318][ T7167] _copy_from_iter+0x1cd/0x1290 [ 170.043183][ T7167] ? rcu_is_watching+0x15/0xb0 [ 170.047958][ T7167] ? copyout_mc+0x70/0x70 [ 170.052293][ T7167] ? __virt_addr_valid+0x10c/0x380 [ 170.057411][ T7167] ? __virt_addr_valid+0x10c/0x380 [ 170.062528][ T7167] ? __virt_addr_valid+0x10c/0x380 [ 170.067647][ T7167] ? __check_object_size+0x4fc/0xa40 [ 170.072939][ T7167] netlink_sendmsg+0x76b/0xbf0 [ 170.077707][ T7167] ? perf_trace_lock+0x303/0x3b0 [ 170.082659][ T7167] ? netlink_getsockopt+0x590/0x590 [ 170.087867][ T7167] ? aa_sock_msg_perm+0x94/0x150 [ 170.092812][ T7167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.098100][ T7167] ? security_socket_sendmsg+0x80/0xa0 [ 170.103562][ T7167] ? netlink_getsockopt+0x590/0x590 [ 170.108765][ T7167] ____sys_sendmsg+0x61b/0x980 [ 170.113543][ T7167] ? __asan_memset+0x22/0x40 [ 170.118138][ T7167] ? __sys_sendmsg_sock+0x30/0x30 [ 170.123159][ T7167] ? __import_iovec+0x5f2/0x850 [ 170.128019][ T7167] ? import_iovec+0x73/0xa0 [ 170.132530][ T7167] ___sys_sendmsg+0x2a6/0x360 [ 170.137230][ T7167] ? __sys_sendmsg+0x2b0/0x2b0 [ 170.142031][ T7167] ? __lock_acquire+0x7d80/0x7d80 [ 170.147090][ T7167] __se_sys_sendmsg+0x1d0/0x2c0 [ 170.151952][ T7167] ? __x64_sys_sendmsg+0x80/0x80 [ 170.156912][ T7167] ? lockdep_hardirqs_on+0x98/0x150 [ 170.162124][ T7167] do_syscall_64+0x55/0xb0 [ 170.166539][ T7167] ? clear_bhb_loop+0x40/0x90 [ 170.171212][ T7167] ? clear_bhb_loop+0x40/0x90 [ 170.175895][ T7167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.181793][ T7167] RIP: 0033:0x7ff44db9ce59 [ 170.186211][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.205816][ T7167] RSP: 002b:00007ff44ea75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.214236][ T7167] RAX: ffffffffffffffda RBX: 00007ff44de15fa0 RCX: 00007ff44db9ce59 [ 170.222207][ T7167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 170.230178][ T7167] RBP: 00007ff44ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 170.238152][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.246126][ T7167] R13: 00007ff44de16038 R14: 00007ff44de15fa0 R15: 00007ffd05c5d088 [ 170.254129][ T7167] [ 170.584229][ T7177] bridge0: port 4(batadv0) entered blocking state [ 170.590922][ T7177] bridge0: port 4(batadv0) entered disabled state [ 170.624463][ T7177] batadv0: entered allmulticast mode [ 170.666531][ T7177] batadv0: entered promiscuous mode [ 170.712348][ T7177] bridge0: port 4(batadv0) entered blocking state [ 170.718875][ T7177] bridge0: port 4(batadv0) entered forwarding state [ 170.725393][ T7178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.441'. [ 170.790243][ T69] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 170.799601][ T69] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 170.849388][ T7183] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 170.869725][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'. [ 170.895520][ T7183] bridge0: port 3(team0) entered blocking state [ 170.901979][ T7183] bridge0: port 3(team0) entered forwarding state [ 170.914972][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.930566][ T7181] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 170.947808][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'. [ 171.003342][ T7184] FAULT_INJECTION: forcing a failure. [ 171.003342][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 171.045553][ T7184] CPU: 0 PID: 7184 Comm: syz.2.442 Not tainted syzkaller #0 [ 171.052888][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.062950][ T7184] Call Trace: [ 171.066237][ T7184] [ 171.069180][ T7184] dump_stack_lvl+0x18c/0x250 [ 171.073881][ T7184] ? show_regs_print_info+0x20/0x20 [ 171.079092][ T7184] ? load_image+0x420/0x420 [ 171.083607][ T7184] ? __might_sleep+0xe0/0xe0 [ 171.088210][ T7184] ? __lock_acquire+0x7d80/0x7d80 [ 171.093248][ T7184] should_fail_ex+0x394/0x4c0 [ 171.097942][ T7184] should_failslab+0x9/0x20 [ 171.102456][ T7184] slab_pre_alloc_hook+0x59/0x300 [ 171.107504][ T7184] ? tomoyo_encode+0x2ad/0x570 [ 171.112280][ T7184] ? tomoyo_encode+0x2ad/0x570 [ 171.117054][ T7184] __kmem_cache_alloc_node+0x53/0x250 [ 171.122444][ T7184] ? tomoyo_encode+0x2ad/0x570 [ 171.127220][ T7184] __kmalloc+0xa7/0x240 [ 171.131389][ T7184] tomoyo_encode+0x2ad/0x570 [ 171.135995][ T7184] tomoyo_realpath_from_path+0x57c/0x5c0 [ 171.141644][ T7184] ? tomoyo_domain+0xd6/0x120 [ 171.146340][ T7184] tomoyo_path_number_perm+0x248/0x5e0 [ 171.151811][ T7184] ? tomoyo_path_number_perm+0x217/0x5e0 [ 171.157455][ T7184] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 171.162934][ T7184] ? ksys_write+0x1d2/0x260 [ 171.167487][ T7184] ? __fget_files+0x28/0x460 [ 171.172101][ T7184] security_file_ioctl+0x70/0xa0 [ 171.177053][ T7184] __se_sys_ioctl+0x48/0x170 [ 171.181657][ T7184] do_syscall_64+0x55/0xb0 [ 171.186080][ T7184] ? clear_bhb_loop+0x40/0x90 [ 171.190762][ T7184] ? clear_bhb_loop+0x40/0x90 [ 171.195448][ T7184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.201358][ T7184] RIP: 0033:0x7f31bf39ce59 [ 171.205780][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.225392][ T7184] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.233818][ T7184] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 171.241796][ T7184] RDX: 0000200000000040 RSI: 00000000000089a2 RDI: 0000000000000008 [ 171.249774][ T7184] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 171.257763][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.265747][ T7184] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 171.273750][ T7184] [ 171.391222][ T7184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.398932][ T7185] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.442'. [ 171.494474][ T7188] bridge0: port 3(team0) entered disabled state [ 171.501994][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.511892][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.540160][ T7188] bridge0: entered allmulticast mode [ 172.164805][ T7203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.420223][ T7208] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.439'. [ 172.741687][ T7171] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 172.805014][ T7171] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 172.822414][ T7171] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.849719][ T7171] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 173.028146][ T7229] FAULT_INJECTION: forcing a failure. [ 173.028146][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.046984][ T7229] CPU: 0 PID: 7229 Comm: syz.1.457 Not tainted syzkaller #0 [ 173.054310][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.064384][ T7229] Call Trace: [ 173.067679][ T7229] [ 173.070605][ T7229] dump_stack_lvl+0x18c/0x250 [ 173.075300][ T7229] ? show_regs_print_info+0x20/0x20 [ 173.080496][ T7229] ? load_image+0x420/0x420 [ 173.084996][ T7229] ? __might_fault+0xaa/0x120 [ 173.089666][ T7229] ? __lock_acquire+0x7d80/0x7d80 [ 173.094692][ T7229] should_fail_ex+0x394/0x4c0 [ 173.099371][ T7229] _copy_from_user+0x2f/0xe0 [ 173.103959][ T7229] __sys_bpf+0x23e/0x890 [ 173.108208][ T7229] ? bpf_link_show_fdinfo+0x390/0x390 [ 173.113588][ T7229] ? lock_chain_count+0x20/0x20 [ 173.118447][ T7229] __x64_sys_bpf+0x7c/0x90 [ 173.122855][ T7229] do_syscall_64+0x55/0xb0 [ 173.127267][ T7229] ? clear_bhb_loop+0x40/0x90 [ 173.131938][ T7229] ? clear_bhb_loop+0x40/0x90 [ 173.136605][ T7229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.142494][ T7229] RIP: 0033:0x7f3472f9ce59 [ 173.146901][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.166500][ T7229] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.174907][ T7229] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 173.182868][ T7229] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 173.190829][ T7229] RBP: 00007f34711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.198790][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.206755][ T7229] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 173.214735][ T7229] [ 173.387759][ T7237] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.471068][ T7240] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 173.505542][ T7240] syzkaller1: linktype set to 769 [ 173.556567][ T7246] __nla_validate_parse: 4 callbacks suppressed [ 173.556585][ T7246] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.464'. [ 173.844485][ T7251] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.465'. [ 173.977993][ T7260] netlink: 'syz.3.466': attribute type 25 has an invalid length. [ 174.618294][ T7280] FAULT_INJECTION: forcing a failure. [ 174.618294][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 174.642564][ T7280] CPU: 0 PID: 7280 Comm: syz.0.474 Not tainted syzkaller #0 [ 174.649896][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.659958][ T7280] Call Trace: [ 174.663231][ T7280] [ 174.666154][ T7280] dump_stack_lvl+0x18c/0x250 [ 174.670842][ T7280] ? show_regs_print_info+0x20/0x20 [ 174.676063][ T7280] ? load_image+0x420/0x420 [ 174.680589][ T7280] ? __might_sleep+0xe0/0xe0 [ 174.685205][ T7280] ? __lock_acquire+0x7d80/0x7d80 [ 174.690250][ T7280] should_fail_ex+0x394/0x4c0 [ 174.694953][ T7280] should_failslab+0x9/0x20 [ 174.699479][ T7280] slab_pre_alloc_hook+0x59/0x300 [ 174.704524][ T7280] ? fib6_info_alloc+0x30/0xf0 [ 174.709286][ T7280] ? fib6_info_alloc+0x30/0xf0 [ 174.714043][ T7280] __kmem_cache_alloc_node+0x53/0x250 [ 174.719415][ T7280] ? fib6_info_alloc+0x30/0xf0 [ 174.724170][ T7280] __kmalloc+0xa7/0x240 [ 174.728325][ T7280] fib6_info_alloc+0x30/0xf0 [ 174.732909][ T7280] ip6_route_info_create+0x455/0x1260 [ 174.738283][ T7280] ? nla_find+0x138/0x150 [ 174.742606][ T7280] inet6_rtm_newroute+0x5bc/0x1d00 [ 174.747723][ T7280] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 174.753608][ T7280] ? verify_lock_unused+0x140/0x140 [ 174.758815][ T7280] ? rcu_is_watching+0x15/0xb0 [ 174.763574][ T7280] ? trace_contention_end+0x39/0xe0 [ 174.768788][ T7280] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 174.774671][ T7280] rtnetlink_rcv_msg+0x843/0xf90 [ 174.779607][ T7280] ? rtnetlink_rcv_msg+0x220/0xf90 [ 174.784723][ T7280] ? rtnetlink_bind+0x80/0x80 [ 174.789406][ T7280] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.795379][ T7280] ? lock_chain_count+0x20/0x20 [ 174.800223][ T7280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 174.805589][ T7280] ? lockdep_hardirqs_on+0x98/0x150 [ 174.810788][ T7280] ? __local_bh_enable_ip+0x13a/0x1c0 [ 174.816150][ T7280] ? _local_bh_enable+0xa0/0xa0 [ 174.820995][ T7280] ? __dev_queue_xmit+0x275/0x3630 [ 174.826102][ T7280] ? __dev_queue_xmit+0x1bc2/0x3630 [ 174.831300][ T7280] ? __dev_queue_xmit+0x275/0x3630 [ 174.836417][ T7280] ? ref_tracker_free+0x686/0x830 [ 174.841440][ T7280] netlink_rcv_skb+0x235/0x4c0 [ 174.846199][ T7280] ? rtnetlink_bind+0x80/0x80 [ 174.850888][ T7280] ? netlink_ack+0x1160/0x1160 [ 174.855667][ T7280] ? __lock_acquire+0x7d80/0x7d80 [ 174.860693][ T7280] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.865889][ T7280] netlink_unicast+0x7b1/0x930 [ 174.870655][ T7280] netlink_sendmsg+0x8d0/0xbf0 [ 174.875424][ T7280] ? netlink_getsockopt+0x590/0x590 [ 174.880622][ T7280] ? aa_sock_msg_perm+0x94/0x150 [ 174.885563][ T7280] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 174.890845][ T7280] ? security_socket_sendmsg+0x80/0xa0 [ 174.896296][ T7280] ? netlink_getsockopt+0x590/0x590 [ 174.901490][ T7280] ____sys_sendmsg+0x61b/0x980 [ 174.906257][ T7280] ? __asan_memset+0x22/0x40 [ 174.910842][ T7280] ? __sys_sendmsg_sock+0x30/0x30 [ 174.915858][ T7280] ? __import_iovec+0x3fa/0x850 [ 174.920707][ T7280] ? import_iovec+0x73/0xa0 [ 174.925206][ T7280] ___sys_sendmsg+0x2a6/0x360 [ 174.929879][ T7280] ? get_pid_task+0x20/0x1e0 [ 174.934468][ T7280] ? __sys_sendmsg+0x2b0/0x2b0 [ 174.939238][ T7280] ? __lock_acquire+0x7d80/0x7d80 [ 174.944274][ T7280] __se_sys_sendmsg+0x1d0/0x2c0 [ 174.949123][ T7280] ? __x64_sys_sendmsg+0x80/0x80 [ 174.954069][ T7280] ? lockdep_hardirqs_on+0x98/0x150 [ 174.959284][ T7280] do_syscall_64+0x55/0xb0 [ 174.963694][ T7280] ? clear_bhb_loop+0x40/0x90 [ 174.968370][ T7280] ? clear_bhb_loop+0x40/0x90 [ 174.973041][ T7280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.978949][ T7280] RIP: 0033:0x7ff44db9ce59 [ 174.983364][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.002968][ T7280] RSP: 002b:00007ff44ea75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.011380][ T7280] RAX: ffffffffffffffda RBX: 00007ff44de15fa0 RCX: 00007ff44db9ce59 [ 175.019349][ T7280] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 175.027314][ T7280] RBP: 00007ff44ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 175.035276][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.043239][ T7280] R13: 00007ff44de16038 R14: 00007ff44de15fa0 R15: 00007ffd05c5d088 [ 175.051233][ T7280] [ 175.128097][ T7292] FAULT_INJECTION: forcing a failure. [ 175.128097][ T7292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.145522][ T7292] CPU: 0 PID: 7292 Comm: syz.3.477 Not tainted syzkaller #0 [ 175.152852][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.162912][ T7292] Call Trace: [ 175.166185][ T7292] [ 175.169102][ T7292] dump_stack_lvl+0x18c/0x250 [ 175.173775][ T7292] ? show_regs_print_info+0x20/0x20 [ 175.178959][ T7292] ? load_image+0x420/0x420 [ 175.182905][ T7293] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 175.183445][ T7292] ? __lock_acquire+0x7d80/0x7d80 [ 175.194274][ T7292] ? snprintf+0xe9/0x140 [ 175.198530][ T7292] should_fail_ex+0x394/0x4c0 [ 175.203237][ T7292] _copy_to_user+0x2f/0xa0 [ 175.207680][ T7292] simple_read_from_buffer+0xe7/0x150 [ 175.213081][ T7292] proc_fail_nth_read+0x1e8/0x260 [ 175.214471][ T7293] syzkaller1: linktype set to 769 [ 175.218122][ T7292] ? proc_fault_inject_write+0x360/0x360 [ 175.228783][ T7292] ? fsnotify_perm+0x271/0x5e0 [ 175.233562][ T7292] ? proc_fault_inject_write+0x360/0x360 [ 175.239220][ T7292] vfs_read+0x298/0x990 [ 175.243409][ T7292] ? kernel_read+0x1e0/0x1e0 [ 175.248011][ T7292] ? __fget_files+0x28/0x460 [ 175.252604][ T7292] ? __fget_files+0x3fc/0x460 [ 175.257293][ T7292] ? __fdget_pos+0x2a3/0x330 [ 175.261878][ T7292] ? ksys_read+0x74/0x260 [ 175.266192][ T7292] ksys_read+0x151/0x260 [ 175.270439][ T7292] ? vfs_write+0x9a0/0x9a0 [ 175.274881][ T7292] ? lockdep_hardirqs_on+0x98/0x150 [ 175.280094][ T7292] do_syscall_64+0x55/0xb0 [ 175.284517][ T7292] ? clear_bhb_loop+0x40/0x90 [ 175.289182][ T7292] ? clear_bhb_loop+0x40/0x90 [ 175.293845][ T7292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.299726][ T7292] RIP: 0033:0x7f276eb5d68e [ 175.304138][ T7292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.323753][ T7292] RSP: 002b:00007f276fae4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.332164][ T7292] RAX: ffffffffffffffda RBX: 00007f276fae56c0 RCX: 00007f276eb5d68e [ 175.340151][ T7292] RDX: 000000000000000f RSI: 00007f276fae50a0 RDI: 0000000000000005 [ 175.348128][ T7292] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.356103][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.364086][ T7292] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 175.372110][ T7292] [ 175.836930][ T7311] FAULT_INJECTION: forcing a failure. [ 175.836930][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.865995][ T7311] CPU: 0 PID: 7311 Comm: syz.0.484 Not tainted syzkaller #0 [ 175.873332][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.883397][ T7311] Call Trace: [ 175.886669][ T7311] [ 175.889590][ T7311] dump_stack_lvl+0x18c/0x250 [ 175.894264][ T7311] ? show_regs_print_info+0x20/0x20 [ 175.899454][ T7311] ? load_image+0x420/0x420 [ 175.903948][ T7311] ? __lock_acquire+0x7d80/0x7d80 [ 175.908963][ T7311] ? snprintf+0xe9/0x140 [ 175.913198][ T7311] should_fail_ex+0x394/0x4c0 [ 175.917870][ T7311] _copy_to_user+0x2f/0xa0 [ 175.922289][ T7311] simple_read_from_buffer+0xe7/0x150 [ 175.927688][ T7311] proc_fail_nth_read+0x1e8/0x260 [ 175.932730][ T7311] ? proc_fault_inject_write+0x360/0x360 [ 175.938367][ T7311] ? fsnotify_perm+0x271/0x5e0 [ 175.943124][ T7311] ? proc_fault_inject_write+0x360/0x360 [ 175.948750][ T7311] vfs_read+0x298/0x990 [ 175.952908][ T7311] ? kernel_read+0x1e0/0x1e0 [ 175.957488][ T7311] ? __fget_files+0x28/0x460 [ 175.962070][ T7311] ? __fget_files+0x3fc/0x460 [ 175.966741][ T7311] ? __fdget_pos+0x2a3/0x330 [ 175.971329][ T7311] ? ksys_read+0x74/0x260 [ 175.975680][ T7311] ksys_read+0x151/0x260 [ 175.979933][ T7311] ? vfs_write+0x9a0/0x9a0 [ 175.984369][ T7311] do_syscall_64+0x55/0xb0 [ 175.988805][ T7311] ? clear_bhb_loop+0x40/0x90 [ 175.993487][ T7311] ? clear_bhb_loop+0x40/0x90 [ 175.998151][ T7311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.004035][ T7311] RIP: 0033:0x7ff44db5d68e [ 176.008439][ T7311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.028047][ T7311] RSP: 002b:00007ff44ea74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.036453][ T7311] RAX: ffffffffffffffda RBX: 00007ff44ea756c0 RCX: 00007ff44db5d68e [ 176.044412][ T7311] RDX: 000000000000000f RSI: 00007ff44ea750a0 RDI: 000000000000000c [ 176.052370][ T7311] RBP: 00007ff44ea75090 R08: 0000000000000000 R09: 0000000000000000 [ 176.060331][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.068292][ T7311] R13: 00007ff44de16038 R14: 00007ff44de15fa0 R15: 00007ffd05c5d088 [ 176.076283][ T7311] [ 176.177427][ T7324] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.489'. [ 176.193919][ T7323] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.488'. [ 176.760726][ T7329] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 176.777022][ T7329] syzkaller1: linktype set to 769 [ 177.286518][ T7348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.716451][ T7363] FAULT_INJECTION: forcing a failure. [ 177.716451][ T7363] name failslab, interval 1, probability 0, space 0, times 0 [ 177.771645][ T7363] CPU: 0 PID: 7363 Comm: syz.2.503 Not tainted syzkaller #0 [ 177.778990][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.789055][ T7363] Call Trace: [ 177.792349][ T7363] [ 177.795290][ T7363] dump_stack_lvl+0x18c/0x250 [ 177.799991][ T7363] ? show_regs_print_info+0x20/0x20 [ 177.805202][ T7363] ? load_image+0x420/0x420 [ 177.809718][ T7363] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 177.815713][ T7363] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 177.822926][ T7363] ? lock_chain_count+0x20/0x20 [ 177.827803][ T7363] should_fail_ex+0x394/0x4c0 [ 177.832509][ T7363] should_failslab+0x9/0x20 [ 177.837027][ T7363] slab_pre_alloc_hook+0x59/0x300 [ 177.842067][ T7363] ? addr_event+0xc3/0x470 [ 177.846499][ T7363] ? addr_event+0xc3/0x470 [ 177.850929][ T7363] __kmem_cache_alloc_node+0x53/0x250 [ 177.856320][ T7363] ? addr_event+0xc3/0x470 [ 177.860845][ T7363] kmalloc_trace+0x2a/0xe0 [ 177.865292][ T7363] addr_event+0xc3/0x470 [ 177.869565][ T7363] inetaddr_event+0xf0/0x150 [ 177.874177][ T7363] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 177.880800][ T7363] notifier_call_chain+0x18f/0x380 [ 177.885943][ T7363] blocking_notifier_call_chain+0x6a/0x90 [ 177.891681][ T7363] __inet_insert_ifa+0x9c8/0xbd0 [ 177.896647][ T7363] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.902834][ T7363] ? inet_rcu_free_ifa+0xc0/0xc0 [ 177.907813][ T7363] devinet_ioctl+0x1417/0x1d70 [ 177.912609][ T7363] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 177.917735][ T7363] ? _copy_from_user+0xa5/0xe0 [ 177.922517][ T7363] ? get_user_ifreq+0x12b/0x180 [ 177.927384][ T7363] inet_ioctl+0x42b/0x560 [ 177.931732][ T7363] ? tomoyo_path_number_perm+0x217/0x5e0 [ 177.937378][ T7363] ? inet_shutdown+0x370/0x370 [ 177.942155][ T7363] ? slab_free_freelist_hook+0x130/0x1a0 [ 177.947810][ T7363] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 177.953456][ T7363] ? __kmem_cache_free+0xba/0x1f0 [ 177.958510][ T7363] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 177.963992][ T7363] sock_do_ioctl+0xfc/0x310 [ 177.968512][ T7363] ? sock_show_fdinfo+0xb0/0xb0 [ 177.973399][ T7363] sock_ioctl+0x5be/0x7e0 [ 177.977749][ T7363] ? sock_poll+0x3e0/0x3e0 [ 177.982193][ T7363] ? bpf_lsm_file_ioctl+0x9/0x10 [ 177.987141][ T7363] ? security_file_ioctl+0x80/0xa0 [ 177.992264][ T7363] ? sock_poll+0x3e0/0x3e0 [ 177.996694][ T7363] __se_sys_ioctl+0xfd/0x170 [ 178.001300][ T7363] do_syscall_64+0x55/0xb0 [ 178.005731][ T7363] ? clear_bhb_loop+0x40/0x90 [ 178.010419][ T7363] ? clear_bhb_loop+0x40/0x90 [ 178.015112][ T7363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.021017][ T7363] RIP: 0033:0x7f31bf39ce59 [ 178.025443][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.045059][ T7363] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.053488][ T7363] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 178.061469][ T7363] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 000000000000000c [ 178.069451][ T7363] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 178.077433][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.085415][ T7363] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 178.093416][ T7363] [ 178.562052][ T7371] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 178.597678][ T7371] syzkaller1: linktype set to 769 [ 178.860395][ T7394] FAULT_INJECTION: forcing a failure. [ 178.860395][ T7394] name failslab, interval 1, probability 0, space 0, times 0 [ 178.891584][ T7394] CPU: 1 PID: 7394 Comm: syz.2.514 Not tainted syzkaller #0 [ 178.898922][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.899774][ T7392] FAULT_INJECTION: forcing a failure. [ 178.899774][ T7392] name failslab, interval 1, probability 0, space 0, times 0 [ 178.908968][ T7394] Call Trace: [ 178.908977][ T7394] [ 178.908985][ T7394] dump_stack_lvl+0x18c/0x250 [ 178.909012][ T7394] ? show_regs_print_info+0x20/0x20 [ 178.909033][ T7394] ? load_image+0x420/0x420 [ 178.909053][ T7394] ? __might_sleep+0xe0/0xe0 [ 178.909075][ T7394] ? __lock_acquire+0x7d80/0x7d80 [ 178.909100][ T7394] should_fail_ex+0x394/0x4c0 [ 178.909129][ T7394] should_failslab+0x9/0x20 [ 178.909152][ T7394] slab_pre_alloc_hook+0x59/0x300 [ 178.909175][ T7394] ? __lock_acquire+0x7d80/0x7d80 [ 178.909196][ T7394] kmem_cache_alloc_node+0x5e/0x310 [ 178.909225][ T7394] ? __alloc_skb+0x103/0x2c0 [ 178.909249][ T7394] __alloc_skb+0x103/0x2c0 [ 178.909273][ T7394] netlink_sendmsg+0x66a/0xbf0 [ 178.989924][ T7394] ? netlink_getsockopt+0x590/0x590 [ 178.995124][ T7394] ? aa_sock_msg_perm+0x94/0x150 [ 179.000057][ T7394] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 179.005341][ T7394] ? security_socket_sendmsg+0x80/0xa0 [ 179.010792][ T7394] ? netlink_getsockopt+0x590/0x590 [ 179.015986][ T7394] ____sys_sendmsg+0x61b/0x980 [ 179.020748][ T7394] ? __asan_memset+0x22/0x40 [ 179.025333][ T7394] ? __sys_sendmsg_sock+0x30/0x30 [ 179.030347][ T7394] ? __import_iovec+0x5f2/0x850 [ 179.035200][ T7394] ? import_iovec+0x73/0xa0 [ 179.039697][ T7394] ___sys_sendmsg+0x2a6/0x360 [ 179.044368][ T7394] ? get_pid_task+0x20/0x1e0 [ 179.048957][ T7394] ? __sys_sendmsg+0x2b0/0x2b0 [ 179.053728][ T7394] ? __lock_acquire+0x7d80/0x7d80 [ 179.058768][ T7394] __se_sys_sendmsg+0x1d0/0x2c0 [ 179.063614][ T7394] ? __x64_sys_sendmsg+0x80/0x80 [ 179.068564][ T7394] ? lockdep_hardirqs_on+0x98/0x150 [ 179.073768][ T7394] do_syscall_64+0x55/0xb0 [ 179.078178][ T7394] ? clear_bhb_loop+0x40/0x90 [ 179.082851][ T7394] ? clear_bhb_loop+0x40/0x90 [ 179.087520][ T7394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.093409][ T7394] RIP: 0033:0x7f31bf39ce59 [ 179.097816][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.117412][ T7394] RSP: 002b:00007f31c0337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.125820][ T7394] RAX: ffffffffffffffda RBX: 00007f31bf615fa0 RCX: 00007f31bf39ce59 [ 179.133786][ T7394] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 179.141748][ T7394] RBP: 00007f31c0337090 R08: 0000000000000000 R09: 0000000000000000 [ 179.149714][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.157675][ T7394] R13: 00007f31bf616038 R14: 00007f31bf615fa0 R15: 00007ffccaa61be8 [ 179.165651][ T7394] [ 179.198881][ T7392] CPU: 0 PID: 7392 Comm: syz.1.513 Not tainted syzkaller #0 [ 179.206216][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.216294][ T7392] Call Trace: [ 179.219583][ T7392] [ 179.222523][ T7392] dump_stack_lvl+0x18c/0x250 [ 179.227227][ T7392] ? show_regs_print_info+0x20/0x20 [ 179.232446][ T7392] ? load_image+0x420/0x420 [ 179.236957][ T7392] should_fail_ex+0x394/0x4c0 [ 179.241635][ T7392] should_failslab+0x9/0x20 [ 179.246139][ T7392] slab_pre_alloc_hook+0x59/0x300 [ 179.251172][ T7392] kmem_cache_alloc+0x5a/0x2c0 [ 179.255944][ T7392] ? slab_build_skb+0x28/0x3e0 [ 179.260705][ T7392] slab_build_skb+0x28/0x3e0 [ 179.265293][ T7392] bpf_prog_test_run_skb+0x38f/0x18f0 [ 179.270662][ T7392] ? __fget_files+0x28/0x460 [ 179.275253][ T7392] ? __fget_files+0x3fc/0x460 [ 179.279930][ T7392] ? cpu_online+0x60/0x60 [ 179.284257][ T7392] bpf_prog_test_run+0x31f/0x390 [ 179.289189][ T7392] __sys_bpf+0x49d/0x890 [ 179.293445][ T7392] ? bpf_link_show_fdinfo+0x390/0x390 [ 179.298820][ T7392] ? lock_chain_count+0x20/0x20 [ 179.303678][ T7392] __x64_sys_bpf+0x7c/0x90 [ 179.308089][ T7392] do_syscall_64+0x55/0xb0 [ 179.312498][ T7392] ? clear_bhb_loop+0x40/0x90 [ 179.317164][ T7392] ? clear_bhb_loop+0x40/0x90 [ 179.321833][ T7392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.327722][ T7392] RIP: 0033:0x7f3472f9ce59 [ 179.332131][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.351734][ T7392] RSP: 002b:00007f34711f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.360139][ T7392] RAX: ffffffffffffffda RBX: 00007f3473215fa0 RCX: 00007f3472f9ce59 [ 179.368104][ T7392] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 179.376063][ T7392] RBP: 00007f34711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.384026][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.391985][ T7392] R13: 00007f3473216038 R14: 00007f3473215fa0 R15: 00007fffc7ca62b8 [ 179.399960][ T7392] [ 179.484671][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 179.485253][ T7398] netlink: 'syz.0.516': attribute type 3 has an invalid length. [ 179.520972][ T7398] netlink: 'syz.0.516': attribute type 6 has an invalid length. [ 179.530899][ T7398] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.516'. [ 179.763633][ T7412] netlink: 'syz.0.521': attribute type 39 has an invalid length. [ 183.063277][ T7434] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 183.075632][ T7434] syzkaller1: linktype set to 769 [ 183.151180][ T7438] netlink: 'syz.1.527': attribute type 39 has an invalid length. [ 184.429352][ T7475] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.541'. [ 184.848268][ T7483] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.544'. [ 185.009585][ T7489] FAULT_INJECTION: forcing a failure. [ 185.009585][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 185.022678][ T7489] CPU: 0 PID: 7489 Comm: syz.3.547 Not tainted syzkaller #0 [ 185.029990][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.040065][ T7489] Call Trace: [ 185.043360][ T7489] [ 185.046309][ T7489] dump_stack_lvl+0x18c/0x250 [ 185.051021][ T7489] ? show_regs_print_info+0x20/0x20 [ 185.056246][ T7489] ? load_image+0x420/0x420 [ 185.060771][ T7489] ? __lock_acquire+0x7d80/0x7d80 [ 185.065808][ T7489] should_fail_ex+0x394/0x4c0 [ 185.070482][ T7489] should_failslab+0x9/0x20 [ 185.074978][ T7489] slab_pre_alloc_hook+0x59/0x300 [ 185.079992][ T7489] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 185.085366][ T7489] __kmem_cache_alloc_node+0x53/0x250 [ 185.090763][ T7489] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 185.096146][ T7489] kmalloc_trace+0x2a/0xe0 [ 185.100564][ T7489] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 185.105761][ T7489] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 185.110950][ T7489] ? verify_lock_unused+0x140/0x140 [ 185.116157][ T7489] ? mark_lock+0x94/0x320 [ 185.120482][ T7489] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 185.126457][ T7489] ? lock_chain_count+0x20/0x20 [ 185.131305][ T7489] ? tcp_set_state+0x6c0/0x6c0 [ 185.136078][ T7489] tcp_sendmsg+0x2f/0x50 [ 185.140315][ T7489] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 185.145506][ T7489] ____sys_sendmsg+0x61b/0x980 [ 185.150269][ T7489] ? __asan_memset+0x22/0x40 [ 185.154855][ T7489] ? __sys_sendmsg_sock+0x30/0x30 [ 185.159872][ T7489] ? __import_iovec+0x3fa/0x850 [ 185.164721][ T7489] ? import_iovec+0x73/0xa0 [ 185.169218][ T7489] ___sys_sendmsg+0x2a6/0x360 [ 185.173888][ T7489] ? get_pid_task+0x20/0x1e0 [ 185.178475][ T7489] ? __sys_sendmsg+0x2b0/0x2b0 [ 185.183252][ T7489] ? __lock_acquire+0x7d80/0x7d80 [ 185.188288][ T7489] __se_sys_sendmsg+0x1d0/0x2c0 [ 185.193135][ T7489] ? __x64_sys_sendmsg+0x80/0x80 [ 185.198077][ T7489] ? lockdep_hardirqs_on+0x98/0x150 [ 185.203280][ T7489] do_syscall_64+0x55/0xb0 [ 185.207689][ T7489] ? clear_bhb_loop+0x40/0x90 [ 185.212355][ T7489] ? clear_bhb_loop+0x40/0x90 [ 185.217041][ T7489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.222950][ T7489] RIP: 0033:0x7f276eb9ce59 [ 185.227363][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.246973][ T7489] RSP: 002b:00007f276fae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.255385][ T7489] RAX: ffffffffffffffda RBX: 00007f276ee15fa0 RCX: 00007f276eb9ce59 [ 185.263358][ T7489] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.271326][ T7489] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 185.279293][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.287259][ T7489] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 185.295237][ T7489] [ 185.817493][ T7512] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 185.832709][ T7512] netlink: 'syz.2.555': attribute type 6 has an invalid length. [ 185.840926][ T7512] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.555'. [ 186.814259][ T7536] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 186.924187][ T7536] nlmon0: entered promiscuous mode [ 186.944353][ T7536] nlmon0: entered allmulticast mode [ 186.966705][ T7536] team0: Device nlmon0 is of different type [ 187.306241][ T7550] netlink: 'syz.2.564': attribute type 153 has an invalid length. [ 187.315549][ T7550] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.564'. [ 189.823863][ T7551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.564'. Stopping sshd: stopped /usr/sbin/sshd (pid 5539) OK Stopping crond: stopped /usr/sbin/crond (pid 5519) OK [ 190.573495][ T7580] netlink: 'syz.1.571': attribute type 10 has an invalid length. Stopping dhcpcd... [ 190.657356][ T7580] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 190.673287][ T7580] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 190.694913][ T7580] team0: Port device wlan1 added stopped /sbin/dhcpcd (pid 5438) [ 190.985880][ T7600] netlink: 'syz.1.575': attribute type 153 has an invalid length. [ 191.036851][ T7600] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.575'. Stopping network: [ 191.199917][ T7609] FAULT_INJECTION: forcing a failure. [ 191.199917][ T7609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.222189][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.575'. [ 191.271320][ T7609] CPU: 1 PID: 7609 Comm: syz.3.577 Not tainted syzkaller #0 [ 191.278656][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.288728][ T7609] Call Trace: [ 191.292019][ T7609] [ 191.294964][ T7609] dump_stack_lvl+0x18c/0x250 [ 191.299667][ T7609] ? show_regs_print_info+0x20/0x20 [ 191.304888][ T7609] ? load_image+0x420/0x420 [ 191.309411][ T7609] ? __might_fault+0xaa/0x120 [ 191.314112][ T7609] ? __lock_acquire+0x7d80/0x7d80 [ 191.319166][ T7609] should_fail_ex+0x394/0x4c0 [ 191.323875][ T7609] _copy_from_iter+0x1cd/0x1290 [ 191.328756][ T7609] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 191.334156][ T7609] ? copyout_mc+0x70/0x70 [ 191.338515][ T7609] ? __virt_addr_valid+0x10c/0x380 [ 191.343654][ T7609] ? __virt_addr_valid+0x10c/0x380 [ 191.348789][ T7609] ? __virt_addr_valid+0x10c/0x380 [ 191.353924][ T7609] ? __check_object_size+0x4fc/0xa40 [ 191.359228][ T7609] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 191.364976][ T7609] ? skb_put+0x112/0x210 [ 191.369248][ T7609] tun_get_user+0xbc2/0x3d40 [ 191.373873][ T7609] ? aa_file_perm+0x11b/0xee0 [ 191.378573][ T7609] ? aa_file_perm+0x3e3/0xee0 [ 191.383276][ T7609] ? rcu_read_unlock+0xa0/0xa0 [ 191.388076][ T7609] ? tun_get+0x1c/0x2e0 [ 191.392256][ T7609] ? __lock_acquire+0x7d80/0x7d80 [ 191.397303][ T7609] ? tun_get+0x1c/0x2e0 [ 191.401491][ T7609] tun_chr_write_iter+0x119/0x200 [ 191.406551][ T7609] vfs_write+0x474/0x9a0 [ 191.410822][ T7609] ? file_end_write+0x250/0x250 [ 191.415695][ T7609] ? __fget_files+0x3fc/0x460 [ 191.420395][ T7609] ? __fdget_pos+0x1d8/0x330 [ 191.425005][ T7609] ? ksys_write+0x74/0x260 [ 191.429440][ T7609] ksys_write+0x151/0x260 [ 191.433795][ T7609] ? __ia32_sys_read+0x90/0x90 [ 191.438590][ T7609] ? lockdep_hardirqs_on+0x98/0x150 [ 191.443821][ T7609] do_syscall_64+0x55/0xb0 [ 191.448259][ T7609] ? clear_bhb_loop+0x40/0x90 [ 191.452955][ T7609] ? clear_bhb_loop+0x40/0x90 [ 191.457653][ T7609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.463572][ T7609] RIP: 0033:0x7f276eb9ce59 [ 191.468003][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.487645][ T7609] RSP: 002b:00007f276fae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.496078][ T7609] RAX: ffffffffffffffda RBX: 00007f276ee15fa0 RCX: 00007f276eb9ce59 [ 191.504061][ T7609] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 191.512040][ T7609] RBP: 00007f276fae5090 R08: 0000000000000000 R09: 0000000000000000 [ 191.520018][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.527997][ T7609] R13: 00007f276ee16038 R14: 00007f276ee15fa0 R15: 00007fff1b9d3b58 [ 191.535998][ T7609] [ 191.569902][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 191.576343][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 191.590142][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 191.596488][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 192.008143][ T7631] ipvlan1: entered promiscuous mode [ 192.028107][ T7631] ipvlan1: entered allmulticast mode [ 192.039514][ T7631] veth0_vlan: entered allmulticast mode [ 194.338807][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345529][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 OK [ 194.741662][ T7647] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.586'. [ 194.791279][ T7647] netlink: 10 bytes leftover after parsing attributes in process `syz.2.586'. Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5126) OK acpid: exiting [ 199.242949][ T7731] netlink: 'syz.2.606': attribute type 153 has an invalid length. [ 199.254771][ T7731] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.606'. [ 199.370875][ T7735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.606'. umount: can't remount debugfs read-only [ 199.906106][ T7742] syzkaller0: entered promiscuous mode [ 199.911880][ T7742] syzkaller0: entered allmulticast mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.181 closed by remote host. [ 202.912117][ T3000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 203.017915][ T3000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.076237][ T3000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.143794][ T3000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.905715][ T3000] [ 203.908071][ T3000] ====================================================== [ 203.915066][ T3000] WARNING: possible circular locking dependency detected [ 203.922076][ T3000] syzkaller #0 Not tainted [ 203.926467][ T3000] ------------------------------------------------------ [ 203.933464][ T3000] kworker/u4:11/3000 is trying to acquire lock: [ 203.939687][ T3000] ffff888030734d80 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 203.949268][ T3000] [ 203.949268][ T3000] but task is already holding lock: [ 203.956613][ T3000] ffff88802f790768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 203.966950][ T3000] [ 203.966950][ T3000] which lock already depends on the new lock. [ 203.966950][ T3000] [ 203.977335][ T3000] [ 203.977335][ T3000] the existing dependency chain (in reverse order) is: [ 203.986332][ T3000] [ 203.986332][ T3000] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 203.994048][ T3000] __mutex_lock+0x135/0xc80 [ 203.999063][ T3000] ieee80211_open+0x144/0x200 [ 204.004251][ T3000] __dev_open+0x2cb/0x430 [ 204.009117][ T3000] dev_open+0xab/0x190 [ 204.013693][ T3000] team_add_slave+0x709/0x2880 [ 204.018977][ T3000] do_setlink+0xcde/0x3f40 [ 204.023914][ T3000] rtnl_newlink+0x1848/0x2170 [ 204.029103][ T3000] rtnetlink_rcv_msg+0x843/0xf90 [ 204.034553][ T3000] netlink_rcv_skb+0x235/0x4c0 [ 204.039825][ T3000] netlink_unicast+0x7b1/0x930 [ 204.045098][ T3000] netlink_sendmsg+0x8d0/0xbf0 [ 204.050370][ T3000] ____sys_sendmsg+0x61b/0x980 [ 204.055641][ T3000] ___sys_sendmsg+0x2a6/0x360 [ 204.060827][ T3000] __se_sys_sendmsg+0x1d0/0x2c0 [ 204.066186][ T3000] do_syscall_64+0x55/0xb0 [ 204.071115][ T3000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.077524][ T3000] [ 204.077524][ T3000] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 204.085681][ T3000] __lock_acquire+0x37ef/0x7d80 [ 204.091044][ T3000] lock_acquire+0x19e/0x420 [ 204.096053][ T3000] __mutex_lock+0x135/0xc80 [ 204.101065][ T3000] team_del_slave+0x31/0x1b0 [ 204.106168][ T3000] team_device_event+0x297/0xa30 [ 204.111614][ T3000] notifier_call_chain+0x18f/0x380 [ 204.117230][ T3000] unregister_netdevice_many_notify+0x1037/0x1910 [ 204.124158][ T3000] unregister_netdevice_queue+0x2e9/0x330 [ 204.130384][ T3000] _cfg80211_unregister_wdev+0x16d/0x580 [ 204.136525][ T3000] ieee80211_remove_interfaces+0x4b3/0x690 [ 204.142844][ T3000] ieee80211_unregister_hw+0x5d/0x2a0 [ 204.148721][ T3000] mac80211_hwsim_del_radio+0x289/0x480 [ 204.154777][ T3000] hwsim_exit_net+0x58d/0x650 [ 204.159961][ T3000] cleanup_net+0x707/0xbb0 [ 204.164883][ T3000] process_scheduled_works+0xa60/0x1600 [ 204.170936][ T3000] worker_thread+0xa5e/0xfe0 [ 204.176031][ T3000] kthread+0x2fa/0x390 [ 204.180605][ T3000] ret_from_fork+0x48/0x80 [ 204.185528][ T3000] ret_from_fork_asm+0x11/0x20 [ 204.190800][ T3000] [ 204.190800][ T3000] other info that might help us debug this: [ 204.190800][ T3000] [ 204.201007][ T3000] Possible unsafe locking scenario: [ 204.201007][ T3000] [ 204.208436][ T3000] CPU0 CPU1 [ 204.213784][ T3000] ---- ---- [ 204.219129][ T3000] lock(&rdev->wiphy.mtx); [ 204.223619][ T3000] lock(team->team_lock_key#3); [ 204.231065][ T3000] lock(&rdev->wiphy.mtx); [ 204.238074][ T3000] lock(team->team_lock_key#3); [ 204.243000][ T3000] [ 204.243000][ T3000] *** DEADLOCK *** [ 204.243000][ T3000] [ 204.251128][ T3000] 5 locks held by kworker/u4:11/3000: [ 204.256478][ T3000] #0: ffff88801a250938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 204.267340][ T3000] #1: ffffc9000c197d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 204.277850][ T3000] #2: ffffffff8e3b2e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 204.287234][ T3000] #3: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 204.297050][ T3000] #4: ffff88802f790768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 204.307823][ T3000] [ 204.307823][ T3000] stack backtrace: [ 204.313694][ T3000] CPU: 1 PID: 3000 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 204.321309][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.331356][ T3000] Workqueue: netns cleanup_net [ 204.336119][ T3000] Call Trace: [ 204.339386][ T3000] [ 204.342306][ T3000] dump_stack_lvl+0x18c/0x250 [ 204.346974][ T3000] ? load_image+0x420/0x420 [ 204.351470][ T3000] ? show_regs_print_info+0x20/0x20 [ 204.356659][ T3000] ? print_circular_bug+0x12b/0x1a0 [ 204.361847][ T3000] check_noncircular+0x2fc/0x400 [ 204.366777][ T3000] ? print_deadlock_bug+0x5d0/0x5d0 [ 204.371970][ T3000] ? lockdep_lock+0xf5/0x230 [ 204.376550][ T3000] ? _find_first_zero_bit+0xd6/0x100 [ 204.381827][ T3000] __lock_acquire+0x37ef/0x7d80 [ 204.386673][ T3000] ? verify_lock_unused+0x140/0x140 [ 204.391858][ T3000] ? verify_lock_unused+0x140/0x140 [ 204.397042][ T3000] ? __up_read+0x2b8/0x6b0 [ 204.401444][ T3000] lock_acquire+0x19e/0x420 [ 204.405940][ T3000] ? team_del_slave+0x31/0x1b0 [ 204.410691][ T3000] ? __might_sleep+0xe0/0xe0 [ 204.415271][ T3000] ? read_lock_is_recursive+0x20/0x20 [ 204.420634][ T3000] __mutex_lock+0x135/0xc80 [ 204.425127][ T3000] ? team_del_slave+0x31/0x1b0 [ 204.429879][ T3000] ? __mutex_lock+0x30d/0xc80 [ 204.434544][ T3000] ? team_del_slave+0x31/0x1b0 [ 204.439293][ T3000] ? mutex_lock_nested+0x20/0x20 [ 204.444221][ T3000] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 204.449843][ T3000] team_del_slave+0x31/0x1b0 [ 204.454420][ T3000] team_device_event+0x297/0xa30 [ 204.459346][ T3000] notifier_call_chain+0x18f/0x380 [ 204.464449][ T3000] unregister_netdevice_many_notify+0x1037/0x1910 [ 204.470854][ T3000] ? unregister_netdevice_many+0x20/0x20 [ 204.476478][ T3000] ? kernfs_remove_by_name_ns+0x117/0x150 [ 204.482185][ T3000] ? __lock_acquire+0x7d80/0x7d80 [ 204.487207][ T3000] unregister_netdevice_queue+0x2e9/0x330 [ 204.492914][ T3000] ? list_netdevice+0x730/0x730 [ 204.497753][ T3000] ? kernfs_remove_by_name_ns+0x117/0x150 [ 204.503464][ T3000] _cfg80211_unregister_wdev+0x16d/0x580 [ 204.509086][ T3000] ieee80211_remove_interfaces+0x4b3/0x690 [ 204.514887][ T3000] ? ieee80211_do_stop+0x1df0/0x1df0 [ 204.520162][ T3000] ? rcu_is_watching+0x15/0xb0 [ 204.524920][ T3000] ieee80211_unregister_hw+0x5d/0x2a0 [ 204.530282][ T3000] mac80211_hwsim_del_radio+0x289/0x480 [ 204.535818][ T3000] ? rhashtable_remove_fast+0xc00/0xc00 [ 204.541353][ T3000] hwsim_exit_net+0x58d/0x650 [ 204.546023][ T3000] ? hwsim_init_net+0x90/0x90 [ 204.550688][ T3000] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 204.556485][ T3000] cleanup_net+0x707/0xbb0 [ 204.560891][ T3000] ? ops_free_list+0x3b0/0x3b0 [ 204.565641][ T3000] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.570827][ T3000] ? process_scheduled_works+0x975/0x1600 [ 204.576551][ T3000] ? process_scheduled_works+0x975/0x1600 [ 204.582314][ T3000] process_scheduled_works+0xa60/0x1600 [ 204.587862][ T3000] ? worker_attach_to_pool+0x370/0x370 [ 204.593312][ T3000] ? assign_work+0x3cc/0x5d0 [ 204.597894][ T3000] worker_thread+0xa5e/0xfe0 [ 204.602478][ T3000] ? _raw_spin_unlock+0x40/0x40 [ 204.607317][ T3000] ? __kthread_parkme+0x71/0x1c0 [ 204.612247][ T3000] kthread+0x2fa/0x390 [ 204.616301][ T3000] ? pr_cont_work+0x550/0x550 [ 204.620968][ T3000] ? kthread_blkcg+0xd0/0xd0 [ 204.625541][ T3000] ret_from_fork+0x48/0x80 [ 204.629945][ T3000] ? kthread_blkcg+0xd0/0xd0 [ 204.634519][ T3000] ret_from_fork_asm+0x11/0x20 [ 204.639275][ T3000] [ 204.653985][ T3000] mac80211_hwsim hwsim8 wlan1 (unregistering): left promiscuous mode [ 204.662432][ T3000] mac80211_hwsim hwsim8 wlan1 (unregistering): left allmulticast mode [ 204.672706][ T3000] team0: Port device wlan1 removed [ 204.683299][ T7768] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 204.691990][ T7768] ACPI: PM: Preparing to enter system sleep state S5 [ 204.699091][ T7768] kvm: exiting hardware virtualization [ 204.705873][ T7768] reboot: Power down serialport: VM disconnected.