last executing test programs: 6.721540499s ago: executing program 1 (id=6046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 6.545323913s ago: executing program 1 (id=6049): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012", 0x33}], 0x1}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x6, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d000000181100000c3af2d823403040b93d17d624d2cde836435a0d67a3e5daaee9f2081a031ceefd0932dc3752ccb3a6ccefe7265132ccdb2571083e42f495e5579c6b023468", @ANYRES32=r3, @ANYRESHEX=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="c3a4b1791c90e8589562b8ae8782ef56ca9da12311ec115d9c163d872dfd1052f2aba539c9c2989bf295"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x5, 0x0, 0xfea5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xeff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x200, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x2}, {0x3}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x54}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r7}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b78d2a3c8e0a088d0000011eb71dc1a6e85a5f398951535eccffc5b3ec1566d5a4e00aaa35713cc61fc50b2bf89c3cf2548487111f8feced5469306d200208576fcc1f1c638b808fbb0f427036e42e7ee245bda8c9ceed8390986a78b7e9fb53a49ba499153de3d410b23e"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38) socketpair(0x2b, 0x4, 0x73, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000500000002000000000000070000000025ff000000000200000f0200000001000000f500000001010000030000000800000003cd19f9b116983407000000000804000000005f618e"], &(0x7f0000000100)=""/149, 0x5d, 0x95, 0x1}, 0x28) write$cgroup_subtree(r8, 0x0, 0xfe55) socket$kcm(0x10, 0x2, 0x0) 6.2178033s ago: executing program 1 (id=6055): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xa7, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) close(r2) 5.829416778s ago: executing program 1 (id=6058): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xa7, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5.612278492s ago: executing program 1 (id=6062): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000300000185000000860000008500000005000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x34}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x8) write$cgroup_int(r7, &(0x7f0000000100)=0x40, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) socketpair(0x28, 0x1, 0x7, &(0x7f0000000c80)) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 5.213237961s ago: executing program 1 (id=6068): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x2, 0xa, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xff, 0x88, &(0x7f0000000400)=""/136, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x5, 0x3, 0x6}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000b0000000080000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000200)=""/56}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1600000002000000ffffff7f0700000000120000", @ANYRES32=0x1, @ANYBLOB="9100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x18, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5e2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x4, 0x1, 0x4, 0x6, 0x431c2cfe586ea69c, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000b40)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x79dd3cd0c550a4e5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a40)={0x1, 0x7, 0x17f, 0x27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[r6], &(0x7f0000002ac0)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x7}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305828, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000700)={'veth1_to_bridge\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x1, 0x4, 0x3}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @call={0x85, 0x0, 0x0, 0x98}, @ldst={0x0, 0x3, 0x1, 0x8, 0x7, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x94, &(0x7f00000001c0)=""/148, 0x41100, 0x10, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x205, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x10, 0x5}, {0x2, 0x1, 0x1}, {0x1, 0x1, 0xd, 0x9}, {0x0, 0x4, 0xb, 0x7}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.962936298s ago: executing program 4 (id=6087): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff5f, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x45, &(0x7f0000000040)=r3, 0x4) 2.773431022s ago: executing program 4 (id=6090): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'batadv_slave_0\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'batadv_slave_0\x00', @random='\x00\x00\x00\x00\x00 '}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x8, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000010, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.480312588s ago: executing program 2 (id=6091): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x2, 0xa, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xff, 0x88, &(0x7f0000000400)=""/136, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x5, 0x3, 0x6}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000b0000000080000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000200)=""/56}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1600000002000000ffffff7f0700000000120000", @ANYRES32=0x1, @ANYBLOB="9100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x18, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5e2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x4, 0x1, 0x4, 0x6, 0x431c2cfe586ea69c, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000b40)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x79dd3cd0c550a4e5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a40)={0x1, 0x7, 0x17f, 0x27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[r6], &(0x7f0000002ac0)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x7}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305828, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000700)={'veth1_to_bridge\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x1, 0x4, 0x3}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @call={0x85, 0x0, 0x0, 0x98}, @ldst={0x0, 0x3, 0x1, 0x8, 0x7, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x94, &(0x7f00000001c0)=""/148, 0x41100, 0x10, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x205, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x10, 0x5}, {0x2, 0x1, 0x1}, {0x1, 0x1, 0xd, 0x9}, {0x0, 0x4, 0xb, 0x7}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.441915089s ago: executing program 3 (id=6092): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000900000b000f00000000000008020000000f00000005000085000200000800000000000000001000000800000004000000400000000c00000003000000090000000a00000000050000000300000000000000002e3e303030005f00"], &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0d, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="8700"/20, @ANYRES16=r0, @ANYBLOB='\x00'/27], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) socket$kcm(0x23, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_int(r5, &(0x7f0000000040), 0x1) 2.312895021s ago: executing program 0 (id=6093): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000900000b000f00000000000008020000000f00000005000085000200000800000000000000001000000800000004000000400000000c00000003000000090000000a00000000050000000300000000000000002e3e303030005f00"], &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) (fail_nth: 4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="8700"/20, @ANYRES16=r0, @ANYBLOB='\x00'/27], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) socket$kcm(0x23, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_int(r5, &(0x7f0000000040), 0x1) 2.155040675s ago: executing program 2 (id=6094): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000300000185000000860000008500000005000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x34}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x8) write$cgroup_int(r7, &(0x7f0000000100)=0x40, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) socketpair(0x28, 0x1, 0x7, &(0x7f0000000c80)) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 1.696123114s ago: executing program 3 (id=6096): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d38, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x200000a0, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0xac, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x2940, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xdf, 0x0, 0x0, 0xff, 0x0, 0x0, 0x88508, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x801, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x28, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c12110004607b21d8e5f0a3ab1773755a2947e3cd77d1584abada4a1e0526b6492f24d7362951bd6de9229ec3635a18e94c00", @ANYRES32, @ANYBLOB="000000000372a2000000000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfee1, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.695891605s ago: executing program 4 (id=6097): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xa7, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 1.667482225s ago: executing program 2 (id=6098): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff5f, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000040)=r2, 0x4) 1.616629596s ago: executing program 0 (id=6099): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x400002}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x800800, &(0x7f0000000280)="d4db88ddb429a68d7b22525d461bac6490b4a0ee90d8727a87a8fe62f65c664e5758eb4077a3a9dec21cd444e6445ab3e1ae5bec5604b578744571cb8a1c58d26574cc84260975ee9faa620b1a5296df65e350888ec1c4d5a1fe9e146851f72703f800717fede0985e100b8cbb8651b74b0cd002963f6082cbf4299d988bd6f31cf0ebc686b57b96abc64440e173e964d195c44875d9c34a9c1208841ad7ba513814670cb56d5636433b2ff4b553cfec9bb449270a3aad8e0130be101cb07b170486e0a8eb9e34f0a140b2217b05c713ceddd0cd3e1d185686e9ca1d37a9", 0xde, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)="31ce30dc430876a610171d10f0c5dd1efd891a5bbc841c6480204cef1a422b463d04f1c412444b3e67d39ac08091ae4223875c50ab85b2514abd67f86c652842dcfdda6c9ffbe2acc54c7fda243e339467e59c9c105213eee5ade7fb9e5c34ba048c48ef007099da7b3408a678") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x5, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x2}, 0x20, 0x1, 0x9, 0x5, 0x7, 0x4, 0x1, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x1}, 0x8) ioctl$TUNSETIFF(r3, 0xc0189436, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x80000001}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 826.877902ms ago: executing program 2 (id=6100): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xa7, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) close(r2) 826.287163ms ago: executing program 3 (id=6101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000040)=r2, 0x4) 803.893963ms ago: executing program 4 (id=6102): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012", 0x33}], 0x1}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x6, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d000000181100000c3af2d823403040b93d17d624d2cde836435a0d67a3e5daaee9f2081a031ceefd0932dc3752ccb3a6ccefe7265132ccdb2571083e42f495e5579c6b023468", @ANYRES32=r3, @ANYRESHEX=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="c3a4b1791c90e8589562b8ae8782ef56ca9da12311ec115d9c163d872dfd1052f2aba539c9c2989bf295"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x5, 0x0, 0xfea5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xeff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x200, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x2}, {0x3}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x54}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r7}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b78d2a3c8e0a088d0000011eb71dc1a6e85a5f398951535eccffc5b3ec1566d5a4e00aaa35713cc61fc50b2bf89c3cf2548487111f8feced5469306d200208576fcc1f1c638b808fbb0f427036e42e7ee245bda8c9ceed8390986a78b7e9fb53a49ba499153de3d410b23e"], 0x48) socketpair(0x2b, 0x4, 0x73, &(0x7f0000000380)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000500000002000000000000070000000025ff000000000200000f0200000001000000f500000001010000030000000800000003cd19f9b116983407000000000804000000005f618e"], &(0x7f0000000100)=""/149, 0x5d, 0x95, 0x1}, 0x28) write$cgroup_subtree(r8, 0x0, 0xfe55) socket$kcm(0x10, 0x2, 0x0) 749.575374ms ago: executing program 0 (id=6103): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffd, 0x1, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x7, 0x12) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b8700300000ff00000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000000140)="d8661035880157ca1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r4, r3, 0x0, r1}, 0x10) 600.272487ms ago: executing program 3 (id=6104): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x2, 0xa, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xff, 0x88, &(0x7f0000000400)=""/136, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x1, 0x5, 0x3, 0x6}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000b0000000080000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000200)=""/56}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1600000002000000ffffff7f0700000000120000", @ANYRES32=0x1, @ANYBLOB="9100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x18, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5e2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x4, 0x1, 0x4, 0x6, 0x431c2cfe586ea69c, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000b40)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x79dd3cd0c550a4e5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a40)={0x1, 0x7, 0x17f, 0x27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[r6], &(0x7f0000002ac0)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x7}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305828, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000700)={'veth1_to_bridge\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x1, 0x4, 0x3}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @call={0x85, 0x0, 0x0, 0x98}, @ldst={0x0, 0x3, 0x1, 0x8, 0x7, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x94, &(0x7f00000001c0)=""/148, 0x41100, 0x10, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x205, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x3, 0x10, 0x5}, {0x2, 0x1, 0x1}, {0x1, 0x1, 0xd, 0x9}, {0x0, 0x4, 0xb, 0x7}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 588.105668ms ago: executing program 4 (id=6105): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4e) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0xe) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12) r9 = perf_event_open(0x0, r6, 0x1000000010000000, 0xffffffffffffffff, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1000000}, 0x44) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) r11 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x18) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 556.233038ms ago: executing program 0 (id=6106): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3f, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 448.253881ms ago: executing program 2 (id=6107): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000900000b000f00000000000008020000000f00000005000085000200000800000000000000001000000800000004000000400000000c00000003000000090000000a00000000050000000300000000000000002e3e303030005f00"], &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002400)={r0, 0x20, &(0x7f00000023c0)={&(0x7f0000000740)=""/217, 0xd9, 0x0, &(0x7f00000013c0)=""/4096, 0x1000}}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="8700"/20, @ANYRES16=r1, @ANYBLOB='\x00'/27], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) socket$kcm(0x23, 0x5, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040), 0x1) 260.599034ms ago: executing program 0 (id=6108): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) write$cgroup_subtree(r1, 0x0, 0xfdef) write$cgroup_devices(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733d22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 259.977904ms ago: executing program 3 (id=6109): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff5f, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000040)=r2, 0x4) 89.345168ms ago: executing program 0 (id=6110): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) (fail_nth: 4) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 88.815718ms ago: executing program 3 (id=6111): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d38, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x200000a0, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0xac, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x2940, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xdf, 0x0, 0x0, 0xff, 0x0, 0x0, 0x88508, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x801, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x28, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c12110004607b21d8e5f0a3ab1773755a2947e3cd77d1584abada4a1e0526b6492f24d7362951bd6de9229ec3635a18e94c00", @ANYRES32, @ANYBLOB="000000000372a2000000000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfee1, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 38.130019ms ago: executing program 2 (id=6112): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xa7, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 0s ago: executing program 4 (id=6113): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000040)=r2, 0x4) kernel console output (not intermixed with test programs): a0 R15: 00007ffebfe9aee8 [ 843.754442][T20692] [ 843.812618][T20695] netlink: 'syz.4.5411': attribute type 2 has an invalid length. [ 843.863306][T20695] netlink: 'syz.4.5411': attribute type 2 has an invalid length. [ 843.897465][T20697] FAULT_INJECTION: forcing a failure. [ 843.897465][T20697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.913849][T20697] CPU: 0 PID: 20697 Comm: syz.2.5412 Not tainted syzkaller #0 [ 843.921382][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.931470][T20697] Call Trace: [ 843.934775][T20697] [ 843.937753][T20697] dump_stack_lvl+0x188/0x250 [ 843.942474][T20697] ? show_regs_print_info+0x20/0x20 [ 843.947714][T20697] ? load_image+0x410/0x410 [ 843.952262][T20697] ? __lock_acquire+0x7b50/0x7b50 [ 843.957338][T20697] should_fail+0x383/0x4b0 [ 843.961790][T20697] _copy_from_user+0x2e/0x170 [ 843.966504][T20697] map_update_elem+0x3b3/0x760 [ 843.971334][T20697] __sys_bpf+0x46b/0x6f0 [ 843.975612][T20697] ? bpf_link_show_fdinfo+0x380/0x380 [ 843.981038][T20697] __x64_sys_bpf+0x78/0x90 [ 843.985522][T20697] do_syscall_64+0x4c/0xa0 [ 843.989968][T20697] ? clear_bhb_loop+0x30/0x80 [ 843.994674][T20697] ? clear_bhb_loop+0x30/0x80 [ 843.999396][T20697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 844.005317][T20697] RIP: 0033:0x7f4c2694f159 [ 844.009754][T20697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.029387][T20697] RSP: 002b:00007f4c24ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 844.037835][T20697] RAX: ffffffffffffffda RBX: 00007f4c26bd6fa0 RCX: 00007f4c2694f159 [ 844.045833][T20697] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 844.053828][T20697] RBP: 00007f4c24ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 844.061824][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.069821][T20697] R13: 00007f4c26bd7038 R14: 00007f4c26bd6fa0 R15: 00007ffc0dc02dd8 [ 844.077839][T20697] [ 844.464567][T20722] syz_tun: tun_net_xmit 560 [ 844.605934][T20724] team0: Port device wlan1 added [ 844.653232][T20731] FAULT_INJECTION: forcing a failure. [ 844.653232][T20731] name failslab, interval 1, probability 0, space 0, times 0 [ 844.673022][T20731] CPU: 0 PID: 20731 Comm: syz.2.5422 Not tainted syzkaller #0 [ 844.680549][T20731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.690619][T20731] Call Trace: [ 844.693916][T20731] [ 844.696873][T20731] dump_stack_lvl+0x188/0x250 [ 844.701612][T20731] ? show_regs_print_info+0x20/0x20 [ 844.706857][T20731] ? load_image+0x410/0x410 [ 844.711407][T20731] ? __lock_acquire+0x7b50/0x7b50 [ 844.716467][T20731] ? ksys_write+0x1d4/0x260 [ 844.721032][T20731] should_fail+0x383/0x4b0 [ 844.725481][T20731] should_failslab+0x5/0x20 [ 844.730010][T20731] slab_pre_alloc_hook+0x51/0xc0 [ 844.734980][T20731] ? getname_flags+0xb7/0x4f0 [ 844.737211][T20723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.739680][T20731] kmem_cache_alloc+0x3d/0x280 [ 844.754349][T20731] getname_flags+0xb7/0x4f0 [ 844.758884][T20731] do_sys_openat2+0xdd/0x500 [ 844.763503][T20731] ? __lock_acquire+0x7b50/0x7b50 [ 844.768572][T20731] ? do_sys_open+0xe0/0xe0 [ 844.773057][T20731] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 844.779079][T20731] ? lock_chain_count+0x20/0x20 [ 844.784024][T20731] __x64_sys_openat+0x135/0x160 [ 844.788904][T20731] do_syscall_64+0x4c/0xa0 [ 844.793345][T20731] ? clear_bhb_loop+0x30/0x80 [ 844.798054][T20731] ? clear_bhb_loop+0x30/0x80 [ 844.802763][T20731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 844.808681][T20731] RIP: 0033:0x7f4c2690f98e [ 844.813129][T20731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 844.832843][T20726] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5421'. [ 844.832849][T20731] RSP: 002b:00007f4c24b85ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.850405][T20731] RAX: ffffffffffffffda RBX: 00007f4c24b866c0 RCX: 00007f4c2690f98e [ 844.858398][T20731] RDX: 0000000000000002 RSI: 00007f4c24b85f90 RDI: ffffffffffffff9c [ 844.866400][T20731] RBP: 00007f4c24b86090 R08: 0000000000000000 R09: 0000000000000000 [ 844.874403][T20731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.882414][T20731] R13: 00007f4c26bd7128 R14: 00007f4c26bd7090 R15: 00007ffc0dc02dd8 [ 844.882690][T20726] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 844.890424][T20731] [ 844.948885][T20726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.989487][T20735] pimreg1: tun_chr_ioctl cmd 2147767507 [ 845.311440][T20745] syz_tun: tun_net_xmit 568 [ 845.375258][T20749] FAULT_INJECTION: forcing a failure. [ 845.375258][T20749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.409963][T20749] CPU: 1 PID: 20749 Comm: syz.4.5429 Not tainted syzkaller #0 [ 845.417502][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.427585][T20749] Call Trace: [ 845.430895][T20749] [ 845.433859][T20749] dump_stack_lvl+0x188/0x250 [ 845.438634][T20749] ? show_regs_print_info+0x20/0x20 [ 845.443926][T20749] ? load_image+0x410/0x410 [ 845.448479][T20749] ? __lock_acquire+0x7b50/0x7b50 [ 845.453588][T20749] should_fail+0x383/0x4b0 [ 845.458061][T20749] _copy_from_user+0x2e/0x170 [ 845.462793][T20749] get_user_ifreq+0x67/0x170 [ 845.467444][T20749] sock_ioctl+0x61f/0x700 [ 845.471827][T20749] ? sock_poll+0x420/0x420 [ 845.476306][T20749] ? bpf_lsm_file_ioctl+0x5/0x10 [ 845.481270][T20749] ? security_file_ioctl+0x7c/0xa0 [ 845.486409][T20749] ? sock_poll+0x420/0x420 [ 845.490875][T20749] __se_sys_ioctl+0xfa/0x170 [ 845.495503][T20749] do_syscall_64+0x4c/0xa0 [ 845.499949][T20749] ? clear_bhb_loop+0x30/0x80 [ 845.504659][T20749] ? clear_bhb_loop+0x30/0x80 [ 845.509388][T20749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 845.515396][T20749] RIP: 0033:0x7f7136cda159 [ 845.519841][T20749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.539493][T20749] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.547963][T20749] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 845.555969][T20749] RDX: 0000200000000080 RSI: 00000000000089f5 RDI: 0000000000000004 [ 845.563979][T20749] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 845.571988][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.579996][T20749] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 845.588064][T20749] [ 846.161855][T20765] FAULT_INJECTION: forcing a failure. [ 846.161855][T20765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.241290][T20765] CPU: 1 PID: 20765 Comm: syz.4.5435 Not tainted syzkaller #0 [ 846.248837][T20765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.258924][T20765] Call Trace: [ 846.262217][T20765] [ 846.265165][T20765] dump_stack_lvl+0x188/0x250 [ 846.269876][T20765] ? show_regs_print_info+0x20/0x20 [ 846.275088][T20765] ? load_image+0x410/0x410 [ 846.279610][T20765] ? __lock_acquire+0x7b50/0x7b50 [ 846.284667][T20765] should_fail+0x383/0x4b0 [ 846.289112][T20765] _copy_from_user+0x2e/0x170 [ 846.293825][T20765] vmemdup_user+0xa4/0x170 [ 846.298260][T20765] map_lookup_elem+0x2c4/0x660 [ 846.303038][T20765] ? bpf_lsm_bpf+0x5/0x10 [ 846.307390][T20765] __sys_bpf+0x4c0/0x6f0 [ 846.311655][T20765] ? bpf_link_show_fdinfo+0x380/0x380 [ 846.317053][T20765] ? rcu_nmi_exit+0x6f/0xf0 [ 846.321603][T20765] __x64_sys_bpf+0x78/0x90 [ 846.326049][T20765] do_syscall_64+0x4c/0xa0 [ 846.330484][T20765] ? clear_bhb_loop+0x30/0x80 [ 846.335180][T20765] ? clear_bhb_loop+0x30/0x80 [ 846.339897][T20765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 846.345824][T20765] RIP: 0033:0x7f7136cda159 [ 846.350265][T20765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.369894][T20765] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.378343][T20765] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 846.386347][T20765] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 846.394342][T20765] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 846.402337][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.410343][T20765] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 846.418458][T20765] [ 846.688954][T20762] FAULT_INJECTION: forcing a failure. [ 846.688954][T20762] name failslab, interval 1, probability 0, space 0, times 0 [ 846.715361][T20762] CPU: 0 PID: 20762 Comm: syz.0.5433 Not tainted syzkaller #0 [ 846.722876][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.732966][T20762] Call Trace: [ 846.736276][T20762] [ 846.739236][T20762] dump_stack_lvl+0x188/0x250 [ 846.743944][T20762] ? show_regs_print_info+0x20/0x20 [ 846.749162][T20762] ? load_image+0x410/0x410 [ 846.753674][T20762] ? __might_sleep+0xf0/0xf0 [ 846.758284][T20762] ? __lock_acquire+0x7b50/0x7b50 [ 846.763329][T20762] ? lock_chain_count+0x20/0x20 [ 846.768217][T20762] should_fail+0x383/0x4b0 [ 846.772660][T20762] should_failslab+0x5/0x20 [ 846.777206][T20762] slab_pre_alloc_hook+0x51/0xc0 [ 846.782162][T20762] __kmalloc_node+0x6d/0x3a0 [ 846.786767][T20762] ? kvmalloc_node+0x84/0x130 [ 846.791465][T20762] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 846.797559][T20762] kvmalloc_node+0x84/0x130 [ 846.802075][T20762] bpf_local_storage_map_alloc+0x141/0x2e0 [ 846.807912][T20762] inode_storage_map_alloc+0x3e/0xe0 [ 846.813219][T20762] map_create+0x481/0x2330 [ 846.817675][T20762] ? bpf_lsm_bpf+0x5/0x10 [ 846.822029][T20762] __sys_bpf+0x30a/0x6f0 [ 846.826292][T20762] ? bpf_link_show_fdinfo+0x380/0x380 [ 846.831712][T20762] __x64_sys_bpf+0x78/0x90 [ 846.836148][T20762] do_syscall_64+0x4c/0xa0 [ 846.840584][T20762] ? clear_bhb_loop+0x30/0x80 [ 846.845269][T20762] ? clear_bhb_loop+0x30/0x80 [ 846.849964][T20762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 846.855877][T20762] RIP: 0033:0x7f4a7d7fa159 [ 846.860328][T20762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.879954][T20762] RSP: 002b:00007f4a7ba52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.888396][T20762] RAX: ffffffffffffffda RBX: 00007f4a7da81fa0 RCX: 00007f4a7d7fa159 [ 846.896379][T20762] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000000 [ 846.904378][T20762] RBP: 00007f4a7ba52090 R08: 0000000000000000 R09: 0000000000000000 [ 846.912457][T20762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.920471][T20762] R13: 00007f4a7da82038 R14: 00007f4a7da81fa0 R15: 00007ffebfe9aee8 [ 846.928480][T20762] [ 846.949832][T20775] validate_nla: 5 callbacks suppressed [ 846.949849][T20775] netlink: 'syz.1.5438': attribute type 2 has an invalid length. [ 847.028261][T20771] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5437'. [ 847.053347][T20771] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 847.091912][T20771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.110876][T20782] syz_tun: tun_net_xmit 86 [ 847.198725][T20785] syz_tun: tun_net_xmit 86 [ 848.050372][T20808] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5449'. [ 848.095624][T20808] netlink: 20624 bytes leftover after parsing attributes in process `syz.3.5449'. [ 848.137564][ C1] syz_tun: tun_net_xmit 86 [ 848.156324][T20808] tipc: Started in network mode [ 848.168884][T20808] tipc: Node identity d, cluster identity 46 [ 848.186008][T20808] tipc: Node number set to 13 [ 848.212668][ C0] syz_tun: tun_net_xmit 86 [ 848.222066][T20807] delete_channel: no stack [ 848.334346][T20817] FAULT_INJECTION: forcing a failure. [ 848.334346][T20817] name failslab, interval 1, probability 0, space 0, times 0 [ 848.387318][T20817] CPU: 0 PID: 20817 Comm: syz.1.5452 Not tainted syzkaller #0 [ 848.394834][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.404913][T20817] Call Trace: [ 848.408219][T20817] [ 848.411174][T20817] dump_stack_lvl+0x188/0x250 [ 848.415899][T20817] ? show_regs_print_info+0x20/0x20 [ 848.421235][T20817] ? load_image+0x410/0x410 [ 848.425795][T20817] ? __might_sleep+0xf0/0xf0 [ 848.430421][T20817] ? __lock_acquire+0x7b50/0x7b50 [ 848.435482][T20817] ? mark_lock+0x94/0x320 [ 848.439861][T20817] should_fail+0x383/0x4b0 [ 848.444316][T20817] should_failslab+0x5/0x20 [ 848.448843][T20817] slab_pre_alloc_hook+0x51/0xc0 [ 848.453821][T20817] kmem_cache_alloc_trace+0x47/0x290 [ 848.459143][T20817] ? find_css_set+0x9ca/0x1520 [ 848.464023][T20817] find_css_set+0x9ca/0x1520 [ 848.468635][T20817] ? find_inode_fast+0x3c2/0x3f0 [ 848.470643][T20819] netlink: 'syz.2.5453': attribute type 2 has an invalid length. [ 848.473604][T20817] ? cgroup_migrate_prepare_dst+0xc10/0xc10 [ 848.473721][T20817] ? mark_lock+0x94/0x320 [ 848.473756][T20817] cgroup_migrate_prepare_dst+0x114/0xc10 [ 848.473789][T20817] cgroup_attach_task+0x55d/0x830 [ 848.473813][T20817] ? cgroup_migrate_execute+0xff0/0xff0 [ 848.473833][T20817] ? _atomic_dec_and_lock+0x8f/0x110 [ 848.473930][T20817] ? cgroup_attach_permissions+0x397/0xaa0 [ 848.473960][T20817] ? revert_creds+0x176/0x240 [ 848.473985][T20817] __cgroup_procs_write+0x239/0x350 [ 848.474017][T20817] cgroup_threads_write+0x20/0x40 [ 848.474038][T20817] ? cgroup_threads_start+0x20/0x20 [ 848.474060][T20817] cgroup_file_write+0x2c4/0x670 [ 848.474082][T20817] ? read_lock_is_recursive+0x10/0x10 [ 848.474110][T20817] ? cgroup_seqfile_stop+0xd0/0xd0 [ 848.474145][T20817] ? cgroup_seqfile_stop+0xd0/0xd0 [ 848.474171][T20817] kernfs_fop_write_iter+0x3a8/0x500 [ 848.474202][T20817] vfs_write+0x748/0xd70 [ 848.474232][T20817] ? file_end_write+0x250/0x250 [ 848.474273][T20817] ? mutex_lock_nested+0x17/0x20 [ 848.474296][T20817] ? __fdget_pos+0x2bf/0x370 [ 848.474315][T20817] ? ksys_write+0x70/0x260 [ 848.474338][T20817] ksys_write+0x153/0x260 [ 848.474362][T20817] ? __ia32_sys_read+0x80/0x80 [ 848.474387][T20817] ? lockdep_hardirqs_on+0x94/0x140 [ 848.474415][T20817] do_syscall_64+0x4c/0xa0 [ 848.474434][T20817] ? clear_bhb_loop+0x30/0x80 [ 848.474455][T20817] ? clear_bhb_loop+0x30/0x80 [ 848.474479][T20817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 848.474501][T20817] RIP: 0033:0x7f71e4b26159 [ 848.474521][T20817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.474539][T20817] RSP: 002b:00007f71e2d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.474564][T20817] RAX: ffffffffffffffda RBX: 00007f71e4dadfa0 RCX: 00007f71e4b26159 [ 848.474580][T20817] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000006 [ 848.474594][T20817] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 848.474608][T20817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.474621][T20817] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 848.474654][T20817] [ 848.837400][T20822] netlink: 'syz.3.5454': attribute type 10 has an invalid length. [ 849.059063][T20822] team0: Port device wlan1 added [ 849.083514][T20824] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5455'. [ 849.102693][T20824] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 849.122055][T20820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.133332][T20824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 849.159840][T20829] netlink: 'syz.2.5453': attribute type 2 has an invalid length. [ 849.182632][ C1] syz_tun: tun_net_xmit 86 [ 849.252602][ C0] syz_tun: tun_net_xmit 86 [ 849.817472][T20849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 849.903811][T20849] syz_tun: tun_net_xmit 42 [ 850.016722][T20861] syz_tun: tun_net_xmit 86 [ 850.192689][T20864] netlink: 'syz.3.5469': attribute type 2 has an invalid length. [ 850.219913][T20864] netlink: 'syz.3.5469': attribute type 2 has an invalid length. [ 850.398827][T20867] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5471'. [ 850.411283][T20867] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 850.450372][T20867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.571877][T20874] netlink: 'syz.2.5474': attribute type 10 has an invalid length. [ 850.734459][T20874] team0: Port device wlan1 added [ 850.753055][T20880] netlink: 'syz.3.5478': attribute type 10 has an invalid length. [ 850.773687][T20872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.919258][T20880] team0: Device wg1 is of different type [ 850.932492][ C1] syz_tun: tun_net_xmit 42 [ 851.061019][T20885] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5480'. [ 851.098535][T20888] syz_tun: tun_net_xmit 86 [ 851.102950][ C1] syz_tun: tun_net_xmit 86 [ 851.116755][T20893] FAULT_INJECTION: forcing a failure. [ 851.116755][T20893] name failslab, interval 1, probability 0, space 0, times 0 [ 851.134877][T20893] CPU: 1 PID: 20893 Comm: syz.3.5483 Not tainted syzkaller #0 [ 851.142369][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.152458][T20893] Call Trace: [ 851.155755][T20893] [ 851.158722][T20893] dump_stack_lvl+0x188/0x250 [ 851.163435][T20893] ? show_regs_print_info+0x20/0x20 [ 851.168658][T20893] ? load_image+0x410/0x410 [ 851.173205][T20893] ? __might_sleep+0xf0/0xf0 [ 851.177836][T20893] ? __lock_acquire+0x7b50/0x7b50 [ 851.182893][T20893] ? verify_lock_unused+0x140/0x140 [ 851.188129][T20893] should_fail+0x383/0x4b0 [ 851.192568][T20893] should_failslab+0x5/0x20 [ 851.197083][T20893] slab_pre_alloc_hook+0x51/0xc0 [ 851.202037][T20893] ? __d_alloc+0x27/0x6d0 [ 851.206471][T20893] kmem_cache_alloc+0x3d/0x280 [ 851.211268][T20893] __d_alloc+0x27/0x6d0 [ 851.215458][T20893] ? d_alloc_pseudo+0xe/0x70 [ 851.220075][T20893] d_alloc_pseudo+0x19/0x70 [ 851.224624][T20893] alloc_file_pseudo+0xe0/0x200 [ 851.229503][T20893] ? alloc_empty_file_noaccount+0x80/0x80 [ 851.235253][T20893] ? _raw_spin_unlock+0x24/0x40 [ 851.240125][T20893] ? alloc_fd+0x59e/0x650 [ 851.244483][T20893] __anon_inode_getfd+0x26b/0x3d0 [ 851.249611][T20893] ? anon_inode_getfd+0x40/0x40 [ 851.254486][T20893] ? bpf_lsm_bpf_map+0x5/0x10 [ 851.259196][T20893] map_create+0x1a62/0x2330 [ 851.263727][T20893] ? bpf_lsm_bpf+0x5/0x10 [ 851.268082][T20893] __sys_bpf+0x30a/0x6f0 [ 851.272357][T20893] ? bpf_link_show_fdinfo+0x380/0x380 [ 851.277778][T20893] __x64_sys_bpf+0x78/0x90 [ 851.282217][T20893] do_syscall_64+0x4c/0xa0 [ 851.286652][T20893] ? clear_bhb_loop+0x30/0x80 [ 851.291358][T20893] ? clear_bhb_loop+0x30/0x80 [ 851.296067][T20893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.301988][T20893] RIP: 0033:0x7f532967a159 [ 851.306425][T20893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.326055][T20893] RSP: 002b:00007f53278d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.334599][T20893] RAX: ffffffffffffffda RBX: 00007f5329901fa0 RCX: 00007f532967a159 [ 851.342586][T20893] RDX: 0000000000000048 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 851.350572][T20893] RBP: 00007f53278d2090 R08: 0000000000000000 R09: 0000000000000000 [ 851.358662][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.366659][T20893] R13: 00007f5329902038 R14: 00007f5329901fa0 R15: 00007fff70f55f08 [ 851.374670][T20893] [ 851.502791][T20899] netlink: 'syz.1.5484': attribute type 2 has an invalid length. [ 851.529151][T20899] netlink: 'syz.1.5484': attribute type 2 has an invalid length. [ 851.642445][T20905] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5486'. [ 851.662277][T20905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 851.749489][T20905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.972475][ C1] syz_tun: tun_net_xmit 42 [ 852.059320][T20926] netlink: 'syz.1.5492': attribute type 10 has an invalid length. [ 852.120772][T20928] FAULT_INJECTION: forcing a failure. [ 852.120772][T20928] name failslab, interval 1, probability 0, space 0, times 0 [ 852.133189][ C0] syz_tun: tun_net_xmit 86 [ 852.134927][ C1] syz_tun: tun_net_xmit 86 [ 852.153124][T20928] CPU: 1 PID: 20928 Comm: syz.4.5495 Not tainted syzkaller #0 [ 852.160642][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.170729][T20928] Call Trace: [ 852.174030][T20928] [ 852.176993][T20928] dump_stack_lvl+0x188/0x250 [ 852.181701][T20928] ? show_regs_print_info+0x20/0x20 [ 852.186931][T20928] ? load_image+0x410/0x410 [ 852.191474][T20928] ? __might_sleep+0xf0/0xf0 [ 852.196101][T20928] ? __lock_acquire+0x7b50/0x7b50 [ 852.201182][T20928] ? rcu_lock_release+0x9/0x20 [ 852.205980][T20928] should_fail+0x383/0x4b0 [ 852.210433][T20928] should_failslab+0x5/0x20 [ 852.214972][T20928] slab_pre_alloc_hook+0x51/0xc0 [ 852.219936][T20928] ? __d_alloc+0x27/0x6d0 [ 852.224297][T20928] kmem_cache_alloc+0x3d/0x280 [ 852.229093][T20928] __d_alloc+0x27/0x6d0 [ 852.233275][T20928] ? d_alloc_pseudo+0xe/0x70 [ 852.237903][T20928] d_alloc_pseudo+0x19/0x70 [ 852.242436][T20928] alloc_file_pseudo+0xe0/0x200 [ 852.247327][T20928] ? alloc_empty_file_noaccount+0x80/0x80 [ 852.253086][T20928] anon_inode_getfile+0xc1/0x1a0 [ 852.258055][T20928] __se_sys_perf_event_open+0xc02/0x1bb0 [ 852.263729][T20928] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 852.269411][T20928] ? lockdep_hardirqs_on+0x94/0x140 [ 852.274629][T20928] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 852.280461][T20928] do_syscall_64+0x4c/0xa0 [ 852.284922][T20928] ? clear_bhb_loop+0x30/0x80 [ 852.289624][T20928] ? clear_bhb_loop+0x30/0x80 [ 852.294322][T20928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 852.300251][T20928] RIP: 0033:0x7f7136cda159 [ 852.304705][T20928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.324383][T20928] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 852.332924][T20928] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 852.340922][T20928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 852.348915][T20928] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 852.356908][T20928] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 852.364916][T20928] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 852.372929][T20928] [ 852.507277][T20934] syz_tun: tun_net_xmit 86 [ 852.532312][T20926] team0: Port device wlan1 added [ 852.617393][T20925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.681255][T20938] netlink: 'syz.4.5499': attribute type 2 has an invalid length. [ 852.768142][T20938] netlink: 'syz.4.5499': attribute type 2 has an invalid length. [ 852.846309][T20948] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5504'. [ 852.898522][T20947] netlink: 'syz.2.5505': attribute type 2 has an invalid length. [ 853.012861][ C1] syz_tun: tun_net_xmit 42 [ 853.129250][T20954] netlink: 'syz.4.5507': attribute type 9 has an invalid length. [ 853.140033][T20958] FAULT_INJECTION: forcing a failure. [ 853.140033][T20958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.162550][T20958] CPU: 1 PID: 20958 Comm: syz.3.5509 Not tainted syzkaller #0 [ 853.170144][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.173058][ C0] syz_tun: tun_net_xmit 86 [ 853.180244][T20958] Call Trace: [ 853.180258][T20958] [ 853.180279][T20958] dump_stack_lvl+0x188/0x250 [ 853.180328][T20958] ? show_regs_print_info+0x20/0x20 [ 853.197893][T20954] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5507'. [ 853.201021][T20958] ? load_image+0x410/0x410 [ 853.201106][T20958] ? __lock_acquire+0x7b50/0x7b50 [ 853.220033][T20958] should_fail+0x383/0x4b0 [ 853.224541][T20958] _copy_from_user+0x2e/0x170 [ 853.229332][T20958] perf_copy_attr+0x167/0x820 [ 853.234090][T20958] __se_sys_perf_event_open+0xf5/0x1bb0 [ 853.239721][T20958] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 853.245462][T20958] ? lockdep_hardirqs_on+0x94/0x140 [ 853.250711][T20958] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 853.256414][T20958] do_syscall_64+0x4c/0xa0 [ 853.260884][T20958] ? clear_bhb_loop+0x30/0x80 [ 853.265616][T20958] ? clear_bhb_loop+0x30/0x80 [ 853.270364][T20958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 853.276308][T20958] RIP: 0033:0x7f532967a159 [ 853.280779][T20958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.300427][T20958] RSP: 002b:00007f53278d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 853.308922][T20958] RAX: ffffffffffffffda RBX: 00007f5329901fa0 RCX: 00007f532967a159 [ 853.316931][T20958] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: 0000200000000800 [ 853.324983][T20958] RBP: 00007f53278d2090 R08: 0000000000000001 R09: 0000000000000000 [ 853.332993][T20958] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 853.341005][T20958] R13: 00007f5329902038 R14: 00007f5329901fa0 R15: 00007fff70f55f08 [ 853.349043][T20958] [ 853.583562][ C1] syz_tun: tun_net_xmit 86 [ 853.594896][T20964] syz_tun: tun_net_xmit 86 [ 853.917338][T20982] netlink: 'syz.3.5518': attribute type 2 has an invalid length. [ 853.964717][T20982] netlink: 'syz.3.5518': attribute type 2 has an invalid length. [ 854.053262][ C1] syz_tun: tun_net_xmit 42 [ 854.248931][T20988] FAULT_INJECTION: forcing a failure. [ 854.248931][T20988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.295300][T20988] CPU: 1 PID: 20988 Comm: syz.3.5519 Not tainted syzkaller #0 [ 854.302826][T20988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.312932][T20988] Call Trace: [ 854.316331][T20988] [ 854.319292][T20988] dump_stack_lvl+0x188/0x250 [ 854.324005][T20988] ? show_regs_print_info+0x20/0x20 [ 854.329237][T20988] ? load_image+0x410/0x410 [ 854.333781][T20988] ? __lock_acquire+0x7b50/0x7b50 [ 854.338848][T20988] should_fail+0x383/0x4b0 [ 854.343299][T20988] _copy_from_user+0x2e/0x170 [ 854.348013][T20988] ___sys_recvmsg+0x173/0x5c0 [ 854.352730][T20988] ? __sys_recvmsg+0x280/0x280 [ 854.357533][T20988] ? ktime_get+0x7b/0x270 [ 854.361992][T20988] ? __fget_files+0x402/0x470 [ 854.366718][T20988] __x64_sys_recvmsg+0x201/0x2d0 [ 854.371735][T20988] ? ___sys_recvmsg+0x5c0/0x5c0 [ 854.376633][T20988] ? syscall_enter_from_user_mode+0x2a/0x70 [ 854.382572][T20988] do_syscall_64+0x4c/0xa0 [ 854.387025][T20988] ? clear_bhb_loop+0x30/0x80 [ 854.391755][T20988] ? clear_bhb_loop+0x30/0x80 [ 854.396459][T20988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 854.402414][T20988] RIP: 0033:0x7f532967a159 [ 854.406850][T20988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.426498][T20988] RSP: 002b:00007f53278d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 854.434949][T20988] RAX: ffffffffffffffda RBX: 00007f5329901fa0 RCX: 00007f532967a159 [ 854.442944][T20988] RDX: 0000000000002082 RSI: 0000200000000300 RDI: 0000000000000005 [ 854.450941][T20988] RBP: 00007f53278d2090 R08: 0000000000000000 R09: 0000000000000000 [ 854.458947][T20988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.466967][T20988] R13: 00007f5329902038 R14: 00007f5329901fa0 R15: 00007fff70f55f08 [ 854.475206][T20988] [ 854.625922][ C1] syz_tun: tun_net_xmit 86 [ 854.633557][ C1] syz_tun: tun_net_xmit 86 [ 855.102619][ C1] syz_tun: tun_net_xmit 42 [ 855.655662][ C1] syz_tun: tun_net_xmit 86 [ 856.669746][T21001] netlink: 'syz.0.5522': attribute type 10 has an invalid length. [ 856.694255][T21001] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5522'. [ 856.856923][T21016] syz_tun: tun_net_xmit 86 [ 856.880093][T21007] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 857.098265][T21026] netlink: 'syz.0.5529': attribute type 2 has an invalid length. [ 857.175307][T21030] syz_tun: tun_net_xmit 86 [ 857.249390][T21026] netlink: 'syz.0.5529': attribute type 2 has an invalid length. [ 857.536795][T21040] FAULT_INJECTION: forcing a failure. [ 857.536795][T21040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.601393][T21043] syz_tun: tun_net_xmit 86 [ 857.649779][T21040] CPU: 1 PID: 21040 Comm: syz.2.5536 Not tainted syzkaller #0 [ 857.657302][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.667383][T21040] Call Trace: [ 857.670696][T21040] [ 857.673654][T21040] dump_stack_lvl+0x188/0x250 [ 857.678372][T21040] ? show_regs_print_info+0x20/0x20 [ 857.683616][T21040] ? load_image+0x410/0x410 [ 857.688166][T21040] ? __lock_acquire+0x7b50/0x7b50 [ 857.693234][T21040] should_fail+0x383/0x4b0 [ 857.697688][T21040] _copy_from_user+0x2e/0x170 [ 857.702425][T21040] iovec_from_user+0x142/0x370 [ 857.707224][T21040] __import_iovec+0x70/0x490 [ 857.711862][T21040] import_iovec+0x6f/0xa0 [ 857.716222][T21040] ___sys_sendmsg+0x1fd/0x2e0 [ 857.720946][T21040] ? __sys_sendmsg+0x290/0x290 [ 857.725765][T21040] ? trace_event_raw_event_lock+0x250/0x250 [ 857.731849][T21040] __se_sys_sendmsg+0x1b7/0x2a0 [ 857.736733][T21040] ? __x64_sys_sendmsg+0x80/0x80 [ 857.741701][T21040] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 857.747734][T21040] ? lockdep_hardirqs_on+0x94/0x140 [ 857.752951][T21040] do_syscall_64+0x4c/0xa0 [ 857.757387][T21040] ? clear_bhb_loop+0x30/0x80 [ 857.762114][T21040] ? clear_bhb_loop+0x30/0x80 [ 857.766942][T21040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 857.772879][T21040] RIP: 0033:0x7f4c2694f159 [ 857.777314][T21040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.797057][T21040] RSP: 002b:00007f4c24ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.805583][T21040] RAX: ffffffffffffffda RBX: 00007f4c26bd6fa0 RCX: 00007f4c2694f159 [ 857.813572][T21040] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 857.821742][T21040] RBP: 00007f4c24ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 857.829741][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.837732][T21040] R13: 00007f4c26bd7038 R14: 00007f4c26bd6fa0 R15: 00007ffc0dc02dd8 [ 857.845739][T21040] [ 857.874066][T21046] netlink: 'syz.1.5534': attribute type 9 has an invalid length. [ 857.881852][T21046] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5534'. [ 857.892574][ C1] syz_tun: tun_net_xmit 86 [ 858.214147][ C0] syz_tun: tun_net_xmit 86 [ 858.612555][ C1] syz_tun: tun_net_xmit 86 [ 858.690605][T21076] syz_tun: tun_net_xmit 86 [ 858.745175][T21077] netlink: 'syz.4.5543': attribute type 2 has an invalid length. [ 858.769392][T21079] netlink: 'syz.4.5543': attribute type 2 has an invalid length. [ 858.906533][T21081] netlink: 'syz.3.5546': attribute type 21 has an invalid length. [ 858.932497][ C1] syz_tun: tun_net_xmit 86 [ 858.969229][T21081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5546'. [ 859.253374][ C0] syz_tun: tun_net_xmit 86 [ 859.662567][ C1] syz_tun: tun_net_xmit 86 [ 859.735987][ C0] syz_tun: tun_net_xmit 86 [ 860.772630][ C0] syz_tun: tun_net_xmit 86 [ 861.965436][T21086] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5548'. [ 861.977405][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 861.990941][T21086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.088173][T21094] syz_tun: tun_net_xmit 42 [ 862.096579][T21096] syz_tun: tun_net_xmit 86 [ 862.131725][T21093] netlink: 'syz.3.5550': attribute type 9 has an invalid length. [ 862.146025][T21093] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5550'. [ 862.177116][T21099] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5553'. [ 862.341001][T21104] netlink: 'syz.4.5554': attribute type 10 has an invalid length. [ 862.370851][T21104] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5554'. [ 862.410838][T21108] FAULT_INJECTION: forcing a failure. [ 862.410838][T21108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.438607][T21108] CPU: 0 PID: 21108 Comm: syz.2.5555 Not tainted syzkaller #0 [ 862.446128][T21108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.456212][T21108] Call Trace: [ 862.459515][T21108] [ 862.462492][T21108] dump_stack_lvl+0x188/0x250 [ 862.467202][T21108] ? show_regs_print_info+0x20/0x20 [ 862.472421][T21108] ? load_image+0x410/0x410 [ 862.476974][T21108] ? __lock_acquire+0x7b50/0x7b50 [ 862.482051][T21108] should_fail+0x383/0x4b0 [ 862.486510][T21108] _copy_from_user+0x2e/0x170 [ 862.491219][T21108] iovec_from_user+0x142/0x370 [ 862.496012][T21108] __import_iovec+0x70/0x490 [ 862.500636][T21108] import_iovec+0x6f/0xa0 [ 862.504985][T21108] ___sys_sendmsg+0x1fd/0x2e0 [ 862.509709][T21108] ? __sys_sendmsg+0x290/0x290 [ 862.514587][T21108] __se_sys_sendmsg+0x1b7/0x2a0 [ 862.519460][T21108] ? __x64_sys_sendmsg+0x80/0x80 [ 862.524412][T21108] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 862.530539][T21108] ? lockdep_hardirqs_on+0x94/0x140 [ 862.535805][T21108] do_syscall_64+0x4c/0xa0 [ 862.540253][T21108] ? clear_bhb_loop+0x30/0x80 [ 862.544946][T21108] ? clear_bhb_loop+0x30/0x80 [ 862.549652][T21108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 862.555565][T21108] RIP: 0033:0x7f4c2694f159 [ 862.560007][T21108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.579749][T21108] RSP: 002b:00007f4c24ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.588184][T21108] RAX: ffffffffffffffda RBX: 00007f4c26bd6fa0 RCX: 00007f4c2694f159 [ 862.596170][T21108] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000a [ 862.604159][T21108] RBP: 00007f4c24ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 862.612157][T21108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.620137][T21108] R13: 00007f4c26bd7038 R14: 00007f4c26bd6fa0 R15: 00007ffc0dc02dd8 [ 862.628150][T21108] [ 862.765489][T21114] syz_tun: tun_net_xmit 86 [ 862.990948][T21118] netlink: 'syz.4.5559': attribute type 2 has an invalid length. [ 863.048124][T21118] netlink: 'syz.4.5559': attribute type 2 has an invalid length. [ 863.092537][ C0] syz_tun: tun_net_xmit 42 [ 863.172582][ C0] syz_tun: tun_net_xmit 86 [ 863.361903][T21125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5562'. [ 863.392764][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.426532][T21125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.539421][T21135] FAULT_INJECTION: forcing a failure. [ 863.539421][T21135] name failslab, interval 1, probability 0, space 0, times 0 [ 863.682445][T21135] CPU: 1 PID: 21135 Comm: syz.1.5565 Not tainted syzkaller #0 [ 863.689985][T21135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.700097][T21135] Call Trace: [ 863.703419][T21135] [ 863.706386][T21135] dump_stack_lvl+0x188/0x250 [ 863.711135][T21135] ? show_regs_print_info+0x20/0x20 [ 863.716392][T21135] ? load_image+0x410/0x410 [ 863.720971][T21135] ? __might_sleep+0xf0/0xf0 [ 863.725662][T21135] ? __lock_acquire+0x7b50/0x7b50 [ 863.730760][T21135] should_fail+0x383/0x4b0 [ 863.735253][T21135] should_failslab+0x5/0x20 [ 863.739892][T21135] slab_pre_alloc_hook+0x51/0xc0 [ 863.744901][T21135] ? sk_prot_alloc+0x57/0x210 [ 863.749661][T21135] kmem_cache_alloc+0x3d/0x280 [ 863.754494][T21135] sk_prot_alloc+0x57/0x210 [ 863.759042][T21135] ? sk_alloc+0x1d/0x310 [ 863.763355][T21135] sk_alloc+0x2f/0x310 [ 863.767477][T21135] ? inet_create+0x702/0xee0 [ 863.772164][T21135] inet_create+0x71e/0xee0 [ 863.776684][T21135] __sock_create+0x473/0x910 [ 863.781469][T21135] __sys_socket+0xe2/0x170 [ 863.785944][T21135] __x64_sys_socket+0x76/0x80 [ 863.790682][T21135] do_syscall_64+0x4c/0xa0 [ 863.795228][T21135] ? clear_bhb_loop+0x30/0x80 [ 863.799954][T21135] ? clear_bhb_loop+0x30/0x80 [ 863.804752][T21135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 863.810697][T21135] RIP: 0033:0x7f71e4b26159 [ 863.815163][T21135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.834814][T21135] RSP: 002b:00007f71e2d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 863.843274][T21135] RAX: ffffffffffffffda RBX: 00007f71e4dadfa0 RCX: 00007f71e4b26159 [ 863.851271][T21135] RDX: 0000000000000106 RSI: 0200000000000001 RDI: 0000000000000002 [ 863.859273][T21135] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 863.867308][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.875320][T21135] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 863.883398][T21135] [ 863.887252][ C1] syz_tun: tun_net_xmit 86 [ 863.954131][T21137] syz_tun: tun_net_xmit 86 [ 864.136378][ C0] syz_tun: tun_net_xmit 42 [ 864.217915][ C0] syz_tun: tun_net_xmit 86 [ 864.285936][T21145] syz_tun: tun_net_xmit 42 [ 864.932542][ C1] syz_tun: tun_net_xmit 86 [ 865.022698][ C1] syz_tun: tun_net_xmit 86 [ 865.332532][ C0] syz_tun: tun_net_xmit 42 [ 866.052591][ C1] syz_tun: tun_net_xmit 86 [ 866.372609][ C0] syz_tun: tun_net_xmit 42 [ 866.584745][T21157] syz_tun: tun_net_xmit 86 [ 866.748391][T21159] netlink: 'syz.2.5571': attribute type 2 has an invalid length. [ 866.770962][T21161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5573'. [ 866.783054][T21161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5573'. [ 866.793989][T21159] netlink: 'syz.2.5571': attribute type 2 has an invalid length. [ 866.820343][T21164] netlink: 'syz.3.5572': attribute type 21 has an invalid length. [ 866.879772][T21164] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5572'. [ 866.903696][T21169] syz_tun: tun_net_xmit 86 [ 867.178141][T21175] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5578'. [ 867.199458][T21173] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5577'. [ 867.224023][T21175] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 867.233467][T21173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.275909][T21173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.537734][T21186] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5582'. [ 867.617177][T21186] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 867.662608][ C1] syz_tun: tun_net_xmit 86 [ 867.741758][T21194] syz_tun: tun_net_xmit 86 [ 867.983159][ C1] syz_tun: tun_net_xmit 86 [ 868.084396][T21198] netlink: 'syz.0.5588': attribute type 29 has an invalid length. [ 868.141361][T21198] netlink: 'syz.0.5588': attribute type 29 has an invalid length. [ 868.220766][T21198] netlink: 'syz.0.5588': attribute type 29 has an invalid length. [ 868.692654][ C1] syz_tun: tun_net_xmit 86 [ 868.772565][ C0] syz_tun: tun_net_xmit 86 [ 869.012669][ C1] syz_tun: tun_net_xmit 86 [ 869.818702][ C0] syz_tun: tun_net_xmit 86 [ 869.975270][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.981691][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.642027][T21215] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5593'. [ 870.705826][T21215] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 870.871516][T21219] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5596'. [ 870.902912][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 870.997641][T21219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.139798][T21230] syz_tun: tun_net_xmit 86 [ 871.396427][T21252] syz_tun: tun_net_xmit 86 [ 871.461492][T21244] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5604'. [ 871.531757][T21244] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 871.596776][T21259] FAULT_INJECTION: forcing a failure. [ 871.596776][T21259] name failslab, interval 1, probability 0, space 0, times 0 [ 871.642250][T21259] CPU: 0 PID: 21259 Comm: syz.4.5607 Not tainted syzkaller #0 [ 871.649787][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.659873][T21259] Call Trace: [ 871.663176][T21259] [ 871.666132][T21259] dump_stack_lvl+0x188/0x250 [ 871.670876][T21259] ? show_regs_print_info+0x20/0x20 [ 871.676114][T21259] ? load_image+0x410/0x410 [ 871.680669][T21259] should_fail+0x383/0x4b0 [ 871.685130][T21259] should_failslab+0x5/0x20 [ 871.691403][T21259] slab_pre_alloc_hook+0x51/0xc0 [ 871.696373][T21259] ? __build_skb+0x26/0x2e0 [ 871.700915][T21259] kmem_cache_alloc+0x3d/0x280 [ 871.705724][T21259] __build_skb+0x26/0x2e0 [ 871.710095][T21259] build_skb+0x1e/0x160 [ 871.714285][T21259] __tun_build_skb+0x32/0x240 [ 871.719002][T21259] tun_get_user+0x1a0e/0x3b60 [ 871.723731][T21259] ? tun_ring_recv+0xc90/0xc90 [ 871.728537][T21259] ? rcu_lock_release+0x5/0x20 [ 871.733350][T21259] ? __lock_acquire+0x7b50/0x7b50 [ 871.738429][T21259] tun_chr_write_iter+0x112/0x1e0 [ 871.743486][T21259] vfs_write+0x748/0xd70 [ 871.747767][T21259] ? file_end_write+0x250/0x250 [ 871.752651][T21259] ? __fget_files+0x402/0x470 [ 871.757381][T21259] ? __fdget_pos+0x1e2/0x370 [ 871.762000][T21259] ? ksys_write+0x70/0x260 [ 871.766453][T21259] ksys_write+0x153/0x260 [ 871.770935][T21259] ? __ia32_sys_read+0x80/0x80 [ 871.775744][T21259] ? lockdep_hardirqs_on+0x94/0x140 [ 871.780995][T21259] do_syscall_64+0x4c/0xa0 [ 871.785427][T21259] ? clear_bhb_loop+0x30/0x80 [ 871.790274][T21259] ? clear_bhb_loop+0x30/0x80 [ 871.795004][T21259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 871.800920][T21259] RIP: 0033:0x7f7136cda159 [ 871.805389][T21259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.825022][T21259] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.833481][T21259] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 871.841465][T21259] RDX: 0000000000000017 RSI: 0000200000000040 RDI: 00000000000000c8 [ 871.849452][T21259] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 871.857475][T21259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.865561][T21259] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 871.873581][T21259] [ 871.920444][T21264] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5608'. [ 871.935130][T21264] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 872.014497][T21269] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.5607'. [ 872.051970][T21268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5609'. [ 872.068735][T21268] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5609'. [ 872.212551][ C1] syz_tun: tun_net_xmit 86 [ 872.267913][T21275] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5612'. [ 872.295320][T21282] netlink: 'syz.4.5614': attribute type 4 has an invalid length. [ 872.326046][T21275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 872.333765][T21282] netlink: 'syz.4.5614': attribute type 3 has an invalid length. [ 872.345290][T21282] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.5614'. [ 872.380183][T21275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.407508][T21286] netlink: 'syz.4.5614': attribute type 20 has an invalid length. [ 872.462529][ C1] syz_tun: tun_net_xmit 86 [ 872.599110][T21291] FAULT_INJECTION: forcing a failure. [ 872.599110][T21291] name failslab, interval 1, probability 0, space 0, times 0 [ 872.684978][T21296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 872.705056][ T1111] syz_tun: tun_net_xmit 42 [ 872.713702][T21291] CPU: 1 PID: 21291 Comm: syz.1.5616 Not tainted syzkaller #0 [ 872.721208][T21291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.731283][T21291] Call Trace: [ 872.734583][T21291] [ 872.737542][T21291] dump_stack_lvl+0x188/0x250 [ 872.742266][T21291] ? show_regs_print_info+0x20/0x20 [ 872.747507][T21291] ? load_image+0x410/0x410 [ 872.752044][T21291] ? __might_sleep+0xf0/0xf0 [ 872.757303][T21291] ? __lock_acquire+0x7b50/0x7b50 [ 872.762371][T21291] should_fail+0x383/0x4b0 [ 872.766831][T21291] should_failslab+0x5/0x20 [ 872.771365][T21291] slab_pre_alloc_hook+0x51/0xc0 [ 872.776345][T21291] __kmalloc_node_track_caller+0x68/0x3a0 [ 872.782103][T21291] ? netlink_sendmsg+0x654/0xbe0 [ 872.786794][T21294] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5619'. [ 872.787084][T21291] ? __alloc_skb+0xf4/0x750 [ 872.787111][T21291] ? netlink_sendmsg+0x654/0xbe0 [ 872.787139][T21291] __alloc_skb+0x22c/0x750 [ 872.787174][T21291] netlink_sendmsg+0x654/0xbe0 [ 872.815374][T21291] ? netlink_getsockopt+0x570/0x570 [ 872.820616][T21291] ? aa_sock_msg_perm+0x94/0x150 [ 872.825599][T21291] ? apparmor_socket_sendmsg+0x88/0x230 [ 872.829179][T21294] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 872.831607][T21291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 872.831641][T21291] ? security_socket_sendmsg+0x7c/0xa0 [ 872.831668][T21291] ? netlink_getsockopt+0x570/0x570 [ 872.831697][T21291] ____sys_sendmsg+0x5be/0x8f0 [ 872.831732][T21291] ? __sys_sendmsg_sock+0x30/0x30 [ 872.865476][T21291] ? import_iovec+0x6f/0xa0 [ 872.870022][T21291] ___sys_sendmsg+0x236/0x2e0 [ 872.874756][T21291] ? __sys_sendmsg+0x290/0x290 [ 872.879588][T21291] __se_sys_sendmsg+0x1b7/0x2a0 [ 872.884477][T21291] ? __x64_sys_sendmsg+0x80/0x80 [ 872.889445][T21291] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 872.895504][T21291] ? lockdep_hardirqs_on+0x94/0x140 [ 872.900758][T21291] do_syscall_64+0x4c/0xa0 [ 872.905197][T21291] ? clear_bhb_loop+0x30/0x80 [ 872.909904][T21291] ? clear_bhb_loop+0x30/0x80 [ 872.914617][T21291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 872.920537][T21291] RIP: 0033:0x7f71e4b26159 [ 872.924984][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.944614][T21291] RSP: 002b:00007f71e2d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.953068][T21291] RAX: ffffffffffffffda RBX: 00007f71e4dadfa0 RCX: 00007f71e4b26159 [ 872.961074][T21291] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 872.969082][T21291] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 872.977092][T21291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.985112][T21291] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 872.993138][T21291] [ 873.262532][ C1] syz_tun: tun_net_xmit 86 [ 873.492571][ C1] syz_tun: tun_net_xmit 86 [ 873.667806][T21319] FAULT_INJECTION: forcing a failure. [ 873.667806][T21319] name failslab, interval 1, probability 0, space 0, times 0 [ 873.722442][T21319] CPU: 0 PID: 21319 Comm: syz.0.5625 Not tainted syzkaller #0 [ 873.729962][T21319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 873.740067][T21319] Call Trace: [ 873.743370][T21319] [ 873.746319][T21319] dump_stack_lvl+0x188/0x250 [ 873.751090][T21319] ? show_regs_print_info+0x20/0x20 [ 873.756321][T21319] ? load_image+0x410/0x410 [ 873.760852][T21319] ? __lock_acquire+0x7b50/0x7b50 [ 873.766043][T21319] should_fail+0x383/0x4b0 [ 873.770499][T21319] should_failslab+0x5/0x20 [ 873.775025][T21319] slab_pre_alloc_hook+0x51/0xc0 [ 873.779983][T21319] __kmalloc_node+0x6d/0x3a0 [ 873.784596][T21319] ? kvmalloc_node+0x84/0x130 [ 873.789304][T21319] kvmalloc_node+0x84/0x130 [ 873.793926][T21319] btf_new_fd+0x1e2/0x910 [ 873.798299][T21319] __sys_bpf+0x58c/0x6f0 [ 873.802577][T21319] ? bpf_link_show_fdinfo+0x380/0x380 [ 873.807978][T21319] ? rcu_nmi_exit+0x6f/0xf0 [ 873.812530][T21319] __x64_sys_bpf+0x78/0x90 [ 873.816997][T21319] do_syscall_64+0x4c/0xa0 [ 873.821438][T21319] ? clear_bhb_loop+0x30/0x80 [ 873.826133][T21319] ? clear_bhb_loop+0x30/0x80 [ 873.830839][T21319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 873.836761][T21319] RIP: 0033:0x7f4a7d7fa159 [ 873.841206][T21319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.860845][T21319] RSP: 002b:00007f4a7ba52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 873.869398][T21319] RAX: ffffffffffffffda RBX: 00007f4a7da81fa0 RCX: 00007f4a7d7fa159 [ 873.877417][T21319] RDX: 0000000000000028 RSI: 0000200000004680 RDI: 0000000000000012 [ 873.885415][T21319] RBP: 00007f4a7ba52090 R08: 0000000000000000 R09: 0000000000000000 [ 873.893563][T21319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.901555][T21319] R13: 00007f4a7da82038 R14: 00007f4a7da81fa0 R15: 00007ffebfe9aee8 [ 873.909575][T21319] [ 873.912984][ C0] syz_tun: tun_net_xmit 42 [ 874.168363][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 874.219853][T21323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.586869][T21344] syz_tun: tun_net_xmit 86 [ 874.625156][T21345] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 874.932513][ C0] syz_tun: tun_net_xmit 42 [ 875.652584][ C0] syz_tun: tun_net_xmit 86 [ 876.506831][T21358] __nla_validate_parse: 4 callbacks suppressed [ 876.506861][T21358] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5638'. [ 876.531220][T21354] syz_tun: tun_net_xmit 86 [ 876.647778][T21363] syz_tun: tun_net_xmit 86 [ 876.693592][ C0] syz_tun: tun_net_xmit 86 [ 876.937014][T21373] syz_tun: tun_net_xmit 86 [ 877.279143][T21396] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5643'. [ 877.359273][T21396] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5643'. [ 877.445415][T21399] sctp: [Deprecated]: syz.1.5644 (pid 21399) Use of int in max_burst socket option deprecated. [ 877.445415][T21399] Use struct sctp_assoc_value instead [ 877.572637][ C1] syz_tun: tun_net_xmit 86 [ 877.662607][ C1] syz_tun: tun_net_xmit 86 [ 877.683332][T21405] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5647'. [ 877.702552][T21405] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 877.903195][T21422] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.5651'. [ 877.931101][T21422] netlink: del zone limit has 8 unknown bytes [ 877.972559][ C0] syz_tun: tun_net_xmit 86 [ 878.612690][ C1] syz_tun: tun_net_xmit 86 [ 878.702624][ C1] syz_tun: tun_net_xmit 86 [ 879.012530][ C0] syz_tun: tun_net_xmit 86 [ 880.320646][T21443] syz_tun: tun_net_xmit 86 [ 880.523681][T21453] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5664'. [ 880.581114][T21453] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 880.601350][T21454] sctp: [Deprecated]: syz.2.5662 (pid 21454) Use of int in max_burst socket option deprecated. [ 880.601350][T21454] Use struct sctp_assoc_value instead [ 881.068312][T21481] syz_tun: tun_net_xmit 86 [ 881.332543][ C0] syz_tun: tun_net_xmit 86 [ 882.132654][ C0] syz_tun: tun_net_xmit 86 [ 882.372567][ C0] syz_tun: tun_net_xmit 86 [ 883.172613][ C0] syz_tun: tun_net_xmit 86 [ 883.661145][T21488] FAULT_INJECTION: forcing a failure. [ 883.661145][T21488] name failslab, interval 1, probability 0, space 0, times 0 [ 883.695440][T21491] FAULT_INJECTION: forcing a failure. [ 883.695440][T21491] name failslab, interval 1, probability 0, space 0, times 0 [ 883.738046][T21491] CPU: 1 PID: 21491 Comm: syz.3.5677 Not tainted syzkaller #0 [ 883.745842][T21491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.755946][T21491] Call Trace: [ 883.759268][T21491] [ 883.762232][T21491] dump_stack_lvl+0x188/0x250 [ 883.766965][T21491] ? show_regs_print_info+0x20/0x20 [ 883.772206][T21491] ? load_image+0x410/0x410 [ 883.776754][T21491] ? __might_sleep+0xf0/0xf0 [ 883.781384][T21491] ? __lock_acquire+0x7b50/0x7b50 [ 883.786472][T21491] should_fail+0x383/0x4b0 [ 883.791280][T21491] should_failslab+0x5/0x20 [ 883.795888][T21491] slab_pre_alloc_hook+0x51/0xc0 [ 883.800874][T21491] __kmalloc+0x6b/0x340 [ 883.805159][T21491] ? sk_prot_alloc+0xe7/0x210 [ 883.809886][T21491] sk_prot_alloc+0xe7/0x210 [ 883.814442][T21491] ? sk_alloc+0x1d/0x310 [ 883.818726][T21491] sk_alloc+0x2f/0x310 [ 883.822940][T21491] bpf_prog_test_run_skb+0x23c/0x1190 [ 883.828367][T21491] ? __fget_files+0x402/0x470 [ 883.833144][T21491] ? cpu_online+0x60/0x60 [ 883.837513][T21491] bpf_prog_test_run+0x31c/0x390 [ 883.842511][T21491] __sys_bpf+0x5a5/0x6f0 [ 883.846939][T21491] ? bpf_link_show_fdinfo+0x380/0x380 [ 883.852383][T21491] __x64_sys_bpf+0x78/0x90 [ 883.856846][T21491] do_syscall_64+0x4c/0xa0 [ 883.861306][T21491] ? clear_bhb_loop+0x30/0x80 [ 883.866024][T21491] ? clear_bhb_loop+0x30/0x80 [ 883.870773][T21491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 883.876712][T21491] RIP: 0033:0x7f532967a159 [ 883.881177][T21491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.900853][T21491] RSP: 002b:00007f53278d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 883.909331][T21491] RAX: ffffffffffffffda RBX: 00007f5329901fa0 RCX: 00007f532967a159 [ 883.917336][T21491] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 883.925334][T21491] RBP: 00007f53278d2090 R08: 0000000000000000 R09: 0000000000000000 [ 883.933517][T21491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.941551][T21491] R13: 00007f5329902038 R14: 00007f5329901fa0 R15: 00007fff70f55f08 [ 883.949577][T21491] [ 883.972550][T21488] CPU: 1 PID: 21488 Comm: syz.4.5675 Not tainted syzkaller #0 [ 883.980160][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.990354][T21488] Call Trace: [ 883.993669][T21488] [ 883.996634][T21488] dump_stack_lvl+0x188/0x250 [ 884.001362][T21488] ? show_regs_print_info+0x20/0x20 [ 884.006696][T21488] ? load_image+0x410/0x410 [ 884.011247][T21488] ? __might_sleep+0xf0/0xf0 [ 884.015959][T21488] ? __lock_acquire+0x7b50/0x7b50 [ 884.021040][T21488] should_fail+0x383/0x4b0 [ 884.023469][T21497] syz_tun: tun_net_xmit 86 [ 884.025504][T21488] should_failslab+0x5/0x20 [ 884.025532][T21488] slab_pre_alloc_hook+0x51/0xc0 [ 884.039445][T21488] __kmalloc+0x6b/0x340 [ 884.043643][T21488] ? security_task_alloc+0x42/0x130 [ 884.048887][T21488] security_task_alloc+0x42/0x130 [ 884.053972][T21488] copy_process+0x1610/0x3e70 [ 884.058718][T21488] ? __pidfd_prepare+0x140/0x140 [ 884.063704][T21488] ? verify_lock_unused+0x140/0x140 [ 884.069096][T21488] kernel_clone+0x23f/0x990 [ 884.073659][T21488] ? __lock_acquire+0x7b50/0x7b50 [ 884.078728][T21488] ? vfs_write+0xaa6/0xd70 [ 884.083192][T21488] ? create_io_thread+0x180/0x180 [ 884.088274][T21488] __x64_sys_clone+0x19a/0x210 [ 884.093078][T21488] ? __ia32_sys_vfork+0x130/0x130 [ 884.098140][T21488] ? lockdep_hardirqs_on+0x94/0x140 [ 884.103370][T21488] do_syscall_64+0x4c/0xa0 [ 884.107807][T21488] ? clear_bhb_loop+0x30/0x80 [ 884.112508][T21488] ? clear_bhb_loop+0x30/0x80 [ 884.117213][T21488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 884.123213][T21488] RIP: 0033:0x7f7136cda159 [ 884.128084][T21488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.147889][T21488] RSP: 002b:00007f7134f10fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 884.156338][T21488] RAX: ffffffffffffffda RBX: 00007f7136f62090 RCX: 00007f7136cda159 [ 884.164329][T21488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 884.172323][T21488] RBP: 00007f7134f11090 R08: 0000000000000000 R09: 0000000000000000 [ 884.180323][T21488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 884.188312][T21488] R13: 00007f7136f62128 R14: 00007f7136f62090 R15: 00007ffeb0a0bc98 [ 884.196325][T21488] [ 884.358400][T21503] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5680'. [ 884.398747][T21503] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 884.460686][T21508] sctp: [Deprecated]: syz.4.5682 (pid 21508) Use of int in max_burst socket option deprecated. [ 884.460686][T21508] Use struct sctp_assoc_value instead [ 884.654785][T21515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5685'. [ 884.665837][T21515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 884.743527][T21515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.092604][ C0] syz_tun: tun_net_xmit 86 [ 885.196132][T21535] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5692'. [ 885.235339][T21535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 885.290785][T21535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.392048][T21542] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5695'. [ 885.511069][T21542] netlink: 'syz.0.5695': attribute type 10 has an invalid length. [ 886.132722][ C0] syz_tun: tun_net_xmit 86 [ 888.030584][T21542] device geneve0 entered promiscuous mode [ 888.181153][T21548] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5697'. [ 888.193524][T21550] sctp: [Deprecated]: syz.3.5696 (pid 21550) Use of int in max_burst socket option deprecated. [ 888.193524][T21550] Use struct sctp_assoc_value instead [ 888.280844][T21548] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 888.400877][T21555] FAULT_INJECTION: forcing a failure. [ 888.400877][T21555] name failslab, interval 1, probability 0, space 0, times 0 [ 888.432097][T21555] CPU: 0 PID: 21555 Comm: syz.1.5698 Not tainted syzkaller #0 [ 888.439628][T21555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.449721][T21555] Call Trace: [ 888.453012][T21555] [ 888.455954][T21555] dump_stack_lvl+0x188/0x250 [ 888.460655][T21555] ? show_regs_print_info+0x20/0x20 [ 888.465874][T21555] ? load_image+0x410/0x410 [ 888.470411][T21555] ? __might_sleep+0xf0/0xf0 [ 888.475460][T21555] ? __lock_acquire+0x7b50/0x7b50 [ 888.480505][T21555] should_fail+0x383/0x4b0 [ 888.484948][T21555] should_failslab+0x5/0x20 [ 888.489471][T21555] slab_pre_alloc_hook+0x51/0xc0 [ 888.494428][T21555] __kmalloc_node+0x6d/0x3a0 [ 888.499123][T21555] ? kvmalloc_node+0x84/0x130 [ 888.503815][T21555] ? __might_fault+0xb3/0x110 [ 888.508608][T21555] kvmalloc_node+0x84/0x130 [ 888.513128][T21555] map_update_elem+0x52f/0x760 [ 888.517919][T21555] __sys_bpf+0x46b/0x6f0 [ 888.522416][T21555] ? bpf_link_show_fdinfo+0x380/0x380 [ 888.527839][T21555] __x64_sys_bpf+0x78/0x90 [ 888.532278][T21555] do_syscall_64+0x4c/0xa0 [ 888.536740][T21555] ? clear_bhb_loop+0x30/0x80 [ 888.541430][T21555] ? clear_bhb_loop+0x30/0x80 [ 888.546118][T21555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.552045][T21555] RIP: 0033:0x7f71e4b26159 [ 888.556487][T21555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.576115][T21555] RSP: 002b:00007f71e2d5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 888.584550][T21555] RAX: ffffffffffffffda RBX: 00007f71e4dae090 RCX: 00007f71e4b26159 [ 888.592539][T21555] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 888.600613][T21555] RBP: 00007f71e2d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 888.608635][T21555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.616625][T21555] R13: 00007f71e4dae128 R14: 00007f71e4dae090 R15: 00007ffe35d0d8f8 [ 888.624633][T21555] [ 888.739084][T21562] syz_tun: tun_net_xmit 86 [ 889.025246][T21577] syz_tun: tun_net_xmit 86 [ 889.115570][T21569] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5703'. [ 889.152722][T21569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.228390][T21569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.822752][ C1] syz_tun: tun_net_xmit 86 [ 890.062589][ C1] syz_tun: tun_net_xmit 86 [ 890.862638][ C1] syz_tun: tun_net_xmit 86 [ 891.102716][ C1] syz_tun: tun_net_xmit 86 [ 892.224075][T21588] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5710'. [ 892.262597][T21586] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5720'. [ 892.271751][T21586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 892.302487][T21586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.320599][T21595] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5711'. [ 892.585048][T21605] syz_tun: tun_net_xmit 86 [ 892.715196][T21615] FAULT_INJECTION: forcing a failure. [ 892.715196][T21615] name failslab, interval 1, probability 0, space 0, times 0 [ 892.750244][T21615] CPU: 0 PID: 21615 Comm: syz.0.5716 Not tainted syzkaller #0 [ 892.757779][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.767941][T21615] Call Trace: [ 892.771245][T21615] [ 892.774202][T21615] dump_stack_lvl+0x188/0x250 [ 892.778920][T21615] ? lockdep_hardirqs_on+0x94/0x140 [ 892.784148][T21615] ? show_regs_print_info+0x20/0x20 [ 892.789390][T21615] ? audit_tree_destroy_watch+0x20/0x20 [ 892.795060][T21615] should_fail+0x383/0x4b0 [ 892.799517][T21615] should_failslab+0x5/0x20 [ 892.804048][T21615] slab_pre_alloc_hook+0x51/0xc0 [ 892.809107][T21615] ? __alloc_file+0x25/0x240 [ 892.813733][T21615] kmem_cache_alloc+0x3d/0x280 [ 892.818533][T21615] __alloc_file+0x25/0x240 [ 892.822994][T21615] alloc_empty_file+0x90/0x180 [ 892.827796][T21615] alloc_file+0x5c/0x510 [ 892.832065][T21615] ? do_raw_spin_unlock+0x11d/0x230 [ 892.837299][T21615] alloc_file_pseudo+0x180/0x200 [ 892.842268][T21615] ? alloc_empty_file_noaccount+0x80/0x80 [ 892.848022][T21615] ? find_get_context+0x4c7/0xa40 [ 892.853084][T21615] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 892.858673][T21615] anon_inode_getfile+0xc1/0x1a0 [ 892.863644][T21615] __se_sys_perf_event_open+0xc02/0x1bb0 [ 892.869344][T21615] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 892.875107][T21615] ? syscall_enter_from_user_mode+0x2a/0x70 [ 892.881022][T21615] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 892.886769][T21615] do_syscall_64+0x4c/0xa0 [ 892.891214][T21615] ? clear_bhb_loop+0x30/0x80 [ 892.895919][T21615] ? clear_bhb_loop+0x30/0x80 [ 892.900732][T21615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 892.906672][T21615] RIP: 0033:0x7f4a7d7fa159 [ 892.911120][T21615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.930752][T21615] RSP: 002b:00007f4a7ba31028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 892.939191][T21615] RAX: ffffffffffffffda RBX: 00007f4a7da82090 RCX: 00007f4a7d7fa159 [ 892.947363][T21615] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 892.955366][T21615] RBP: 00007f4a7ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 892.963358][T21615] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 892.971364][T21615] R13: 00007f4a7da82128 R14: 00007f4a7da82090 R15: 00007ffebfe9aee8 [ 892.979385][T21615] [ 893.058408][T21611] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5716'. [ 893.103026][T21619] netlink: 'syz.3.5718': attribute type 4 has an invalid length. [ 893.111255][T21619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5718'. [ 893.271292][T21623] syz_tun: tun_net_xmit 86 [ 893.417557][T21633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5727'. [ 893.522994][T21633] netlink: 'syz.1.5727': attribute type 10 has an invalid length. [ 893.548984][T21633] device geneve0 entered promiscuous mode [ 893.653062][ C1] syz_tun: tun_net_xmit 86 [ 894.292758][ C0] syz_tun: tun_net_xmit 86 [ 894.692599][ C1] syz_tun: tun_net_xmit 86 [ 895.332646][ C0] syz_tun: tun_net_xmit 86 [ 895.803742][T21647] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5729'. [ 895.814853][T21647] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 895.842044][T21647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.859656][T21652] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5731'. [ 898.535491][T21683] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5744'. [ 898.553480][T21683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 898.567077][T21683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.610873][T21693] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5746'. [ 898.769906][T21704] FAULT_INJECTION: forcing a failure. [ 898.769906][T21704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.812647][T21704] CPU: 0 PID: 21704 Comm: syz.0.5750 Not tainted syzkaller #0 [ 898.820177][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.830257][T21704] Call Trace: [ 898.833605][T21704] [ 898.836567][T21704] dump_stack_lvl+0x188/0x250 [ 898.841372][T21704] ? show_regs_print_info+0x20/0x20 [ 898.846611][T21704] ? load_image+0x410/0x410 [ 898.851428][T21704] should_fail+0x383/0x4b0 [ 898.852682][T21711] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5750'. [ 898.855889][T21704] _copy_to_user+0x2e/0x130 [ 898.855923][T21704] simple_read_from_buffer+0xe3/0x150 [ 898.874849][T21704] proc_fail_nth_read+0x1a6/0x220 [ 898.879907][T21704] ? proc_fault_inject_write+0x310/0x310 [ 898.885581][T21704] ? fsnotify_perm+0x1b6/0x560 [ 898.890381][T21704] ? fsnotify_perm+0x254/0x560 [ 898.895180][T21704] ? proc_fault_inject_write+0x310/0x310 [ 898.900855][T21704] vfs_read+0x2ff/0xd50 [ 898.905059][T21704] ? __lock_acquire+0x7b50/0x7b50 [ 898.910130][T21704] ? kernel_read+0x1e0/0x1e0 [ 898.914777][T21704] ? mutex_lock_nested+0x17/0x20 [ 898.919756][T21704] ? __fdget_pos+0x2bf/0x370 [ 898.924382][T21704] ? ksys_read+0x70/0x260 [ 898.928751][T21704] ksys_read+0x153/0x260 [ 898.933023][T21704] ? vfs_write+0xd70/0xd70 [ 898.937472][T21704] ? lockdep_hardirqs_on+0x94/0x140 [ 898.942729][T21704] do_syscall_64+0x4c/0xa0 [ 898.947189][T21704] ? clear_bhb_loop+0x30/0x80 [ 898.951898][T21704] ? clear_bhb_loop+0x30/0x80 [ 898.956611][T21704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 898.962540][T21704] RIP: 0033:0x7f4a7d7ba98e [ 898.966989][T21704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 898.986628][T21704] RSP: 002b:00007f4a7ba51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 898.995085][T21704] RAX: ffffffffffffffda RBX: 00007f4a7ba526c0 RCX: 00007f4a7d7ba98e [ 899.003091][T21704] RDX: 000000000000000f RSI: 00007f4a7ba520a0 RDI: 0000000000000008 [ 899.011091][T21704] RBP: 00007f4a7ba52090 R08: 0000000000000000 R09: 0000000000000000 [ 899.019092][T21704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.027094][T21704] R13: 00007f4a7da82038 R14: 00007f4a7da81fa0 R15: 00007ffebfe9aee8 [ 899.035107][T21704] [ 899.381093][T21728] syz_tun: tun_net_xmit 86 [ 899.806675][T21737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5762'. [ 899.816984][T21737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 899.854601][T21737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 900.462527][ C1] syz_tun: tun_net_xmit 86 [ 901.492547][ C1] syz_tun: tun_net_xmit 86 [ 902.163087][T21760] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5766'. [ 902.220985][T21766] FAULT_INJECTION: forcing a failure. [ 902.220985][T21766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.248383][T21766] CPU: 0 PID: 21766 Comm: syz.4.5770 Not tainted syzkaller #0 [ 902.257009][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.273774][T21766] Call Trace: [ 902.277506][T21766] [ 902.282033][T21766] dump_stack_lvl+0x188/0x250 [ 902.287326][T21766] ? show_regs_print_info+0x20/0x20 [ 902.292757][T21766] ? load_image+0x410/0x410 [ 902.297880][T21766] ? __lock_acquire+0x7b50/0x7b50 [ 902.304293][T21766] ? full_name_hash+0x19/0xe0 [ 902.310044][T21766] should_fail+0x383/0x4b0 [ 902.314947][T21766] _copy_from_user+0x2e/0x170 [ 902.320585][T21766] dev_ethtool+0xd7/0xff0 [ 902.325911][T21766] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 902.332462][T21766] ? mutex_lock_io_nested+0x60/0x60 [ 902.337720][T21766] ? __lock_acquire+0x7b50/0x7b50 [ 902.342784][T21766] ? full_name_hash+0x8e/0xe0 [ 902.347511][T21766] dev_ioctl+0x457/0xe30 [ 902.351897][T21766] ? _copy_from_user+0x111/0x170 [ 902.356982][T21766] sock_do_ioctl+0x245/0x320 [ 902.361610][T21766] ? sock_show_fdinfo+0xb0/0xb0 [ 902.366897][T21766] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 902.373017][T21766] sock_ioctl+0x48a/0x700 [ 902.377388][T21766] ? sock_poll+0x420/0x420 [ 902.381850][T21766] ? bpf_lsm_file_ioctl+0x5/0x10 [ 902.386814][T21766] ? security_file_ioctl+0x7c/0xa0 [ 902.391961][T21766] ? sock_poll+0x420/0x420 [ 902.396444][T21766] __se_sys_ioctl+0xfa/0x170 [ 902.401074][T21766] do_syscall_64+0x4c/0xa0 [ 902.405534][T21766] ? clear_bhb_loop+0x30/0x80 [ 902.410254][T21766] ? clear_bhb_loop+0x30/0x80 [ 902.414964][T21766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 902.420889][T21766] RIP: 0033:0x7f7136cda159 [ 902.425342][T21766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.444976][T21766] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.453421][T21766] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 902.461432][T21766] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 902.469436][T21766] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 902.477434][T21766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.485437][T21766] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 902.493493][T21766] [ 902.610305][T21769] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5782'. [ 902.636253][T21769] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 902.637258][T21774] syz_tun: tun_net_xmit 86 [ 903.652567][ C0] syz_tun: tun_net_xmit 86 [ 904.633055][T21790] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5789'. [ 904.645494][T21790] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 904.692645][ C0] syz_tun: tun_net_xmit 86 [ 904.789929][T21796] IPv6: pim6reg1: Disabled Multicast RS [ 904.855709][T21794] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5777'. [ 904.867168][T21794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 904.925318][T21794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.116533][T21816] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5787'. [ 907.133839][T21816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 907.172107][T21816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.195600][T21823] netlink: 'syz.0.5791': attribute type 21 has an invalid length. [ 907.217499][T21823] netlink: 'syz.0.5791': attribute type 2 has an invalid length. [ 907.240879][T21823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5791'. [ 907.331657][T21831] syz_tun: tun_net_xmit 14 [ 907.520236][T21836] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5795'. [ 907.575406][T21836] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 907.921178][T21856] syz_tun: tun_net_xmit 86 [ 908.063874][T21859] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5805'. [ 908.080577][T21859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 908.111687][T21859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.387664][T21867] FAULT_INJECTION: forcing a failure. [ 908.387664][T21867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.402710][T21867] CPU: 1 PID: 21867 Comm: syz.1.5809 Not tainted syzkaller #0 [ 908.410299][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.420390][T21867] Call Trace: [ 908.423685][T21867] [ 908.426633][T21867] dump_stack_lvl+0x188/0x250 [ 908.431345][T21867] ? show_regs_print_info+0x20/0x20 [ 908.436570][T21867] ? load_image+0x410/0x410 [ 908.441126][T21867] ? __lock_acquire+0x7b50/0x7b50 [ 908.446297][T21867] should_fail+0x383/0x4b0 [ 908.450750][T21867] _copy_to_user+0x2e/0x130 [ 908.455313][T21867] simple_read_from_buffer+0xe3/0x150 [ 908.460721][T21867] proc_fail_nth_read+0x1a6/0x220 [ 908.465774][T21867] ? proc_fault_inject_write+0x310/0x310 [ 908.471480][T21867] ? fsnotify_perm+0x254/0x560 [ 908.476296][T21867] ? proc_fault_inject_write+0x310/0x310 [ 908.481980][T21867] vfs_read+0x2ff/0xd50 [ 908.486164][T21867] ? __lock_acquire+0x7b50/0x7b50 [ 908.491241][T21867] ? kernel_read+0x1e0/0x1e0 [ 908.495885][T21867] ? mutex_lock_nested+0x17/0x20 [ 908.500863][T21867] ? __fdget_pos+0x2bf/0x370 [ 908.505486][T21867] ? ksys_read+0x70/0x260 [ 908.509858][T21867] ksys_read+0x153/0x260 [ 908.514131][T21867] ? vfs_write+0xd70/0xd70 [ 908.518582][T21867] ? lockdep_hardirqs_on+0x94/0x140 [ 908.523843][T21867] do_syscall_64+0x4c/0xa0 [ 908.528300][T21867] ? clear_bhb_loop+0x30/0x80 [ 908.533002][T21867] ? clear_bhb_loop+0x30/0x80 [ 908.537713][T21867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 908.543634][T21867] RIP: 0033:0x7f71e4ae698e [ 908.548067][T21867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.567690][T21867] RSP: 002b:00007f71e2d7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.576138][T21867] RAX: ffffffffffffffda RBX: 00007f71e2d7e6c0 RCX: 00007f71e4ae698e [ 908.584156][T21867] RDX: 000000000000000f RSI: 00007f71e2d7e0a0 RDI: 0000000000000004 [ 908.592164][T21867] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 908.600174][T21867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.608176][T21867] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 908.616208][T21867] [ 908.932613][ C1] syz_tun: tun_net_xmit 86 [ 909.972650][ C1] syz_tun: tun_net_xmit 86 [ 910.415429][T21874] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5812'. [ 910.427514][T21874] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 910.756113][T21893] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5819'. [ 910.776653][T21893] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 910.864527][T21893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.905112][T21901] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5821'. [ 910.923527][T21898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5821'. [ 911.065237][T21904] syz_tun: tun_net_xmit 86 [ 911.070009][T21905] syz.1.5822[21905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.070341][T21905] syz.1.5822[21905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 912.132652][ C1] syz_tun: tun_net_xmit 86 [ 913.172568][ C1] syz_tun: tun_net_xmit 86 [ 914.247470][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5835'. [ 914.305797][T21941] FAULT_INJECTION: forcing a failure. [ 914.305797][T21941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.327301][T21941] CPU: 0 PID: 21941 Comm: syz.0.5836 Not tainted syzkaller #0 [ 914.334840][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.344943][T21941] Call Trace: [ 914.348268][T21941] [ 914.351238][T21941] dump_stack_lvl+0x188/0x250 [ 914.355969][T21941] ? show_regs_print_info+0x20/0x20 [ 914.361250][T21941] ? load_image+0x410/0x410 [ 914.365820][T21941] ? __lock_acquire+0x7b50/0x7b50 [ 914.370907][T21941] ? __rwlock_init+0x140/0x140 [ 914.375743][T21941] should_fail+0x383/0x4b0 [ 914.380227][T21941] _copy_from_user+0x2e/0x170 [ 914.384970][T21941] dev_ethtool+0xd7/0xff0 [ 914.389378][T21941] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 914.395678][T21941] ? mutex_lock_io_nested+0x60/0x60 [ 914.400923][T21941] ? __lock_acquire+0x7b50/0x7b50 [ 914.405994][T21941] ? full_name_hash+0x8e/0xe0 [ 914.410736][T21941] dev_ioctl+0x457/0xe30 [ 914.415035][T21941] ? _copy_from_user+0x111/0x170 [ 914.420013][T21941] sock_do_ioctl+0x245/0x320 [ 914.424675][T21941] ? sock_show_fdinfo+0xb0/0xb0 [ 914.429599][T21941] sock_ioctl+0x48a/0x700 [ 914.433970][T21941] ? sock_poll+0x420/0x420 [ 914.438450][T21941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 914.443429][T21941] ? security_file_ioctl+0x7c/0xa0 [ 914.448574][T21941] ? sock_poll+0x420/0x420 [ 914.453044][T21941] __se_sys_ioctl+0xfa/0x170 [ 914.457691][T21941] do_syscall_64+0x4c/0xa0 [ 914.462144][T21941] ? clear_bhb_loop+0x30/0x80 [ 914.466878][T21941] ? clear_bhb_loop+0x30/0x80 [ 914.471601][T21941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 914.477547][T21941] RIP: 0033:0x7f4a7d7fa159 [ 914.482006][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.501656][T21941] RSP: 002b:00007f4a7ba52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.510102][T21941] RAX: ffffffffffffffda RBX: 00007f4a7da81fa0 RCX: 00007f4a7d7fa159 [ 914.518097][T21941] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 914.526326][T21941] RBP: 00007f4a7ba52090 R08: 0000000000000000 R09: 0000000000000000 [ 914.534370][T21941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.542375][T21941] R13: 00007f4a7da82038 R14: 00007f4a7da81fa0 R15: 00007ffebfe9aee8 [ 914.550423][T21941] [ 914.576714][T21948] syz_tun: tun_net_xmit 86 [ 914.661708][T21945] device syzkaller0 entered promiscuous mode [ 914.830733][T21954] FAULT_INJECTION: forcing a failure. [ 914.830733][T21954] name failslab, interval 1, probability 0, space 0, times 0 [ 914.889648][T21957] netlink: 'syz.4.5843': attribute type 2 has an invalid length. [ 914.901727][T21954] CPU: 0 PID: 21954 Comm: syz.1.5852 Not tainted syzkaller #0 [ 914.909241][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.919333][T21954] Call Trace: [ 914.922636][T21954] [ 914.925591][T21954] dump_stack_lvl+0x188/0x250 [ 914.930315][T21954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 914.936512][T21954] ? show_regs_print_info+0x20/0x20 [ 914.941747][T21954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 914.947955][T21954] should_fail+0x383/0x4b0 [ 914.952412][T21954] should_failslab+0x5/0x20 [ 914.956950][T21954] slab_pre_alloc_hook+0x51/0xc0 [ 914.961939][T21954] __kmalloc_node_track_caller+0x68/0x3a0 [ 914.967687][T21954] ? netlink_sendmsg+0x654/0xbe0 [ 914.972658][T21954] ? __alloc_skb+0xf4/0x750 [ 914.977191][T21954] ? netlink_sendmsg+0x654/0xbe0 [ 914.982192][T21954] __alloc_skb+0x22c/0x750 [ 914.986636][T21954] netlink_sendmsg+0x654/0xbe0 [ 914.991447][T21954] ? netlink_getsockopt+0x570/0x570 [ 914.996676][T21954] ? aa_sock_msg_perm+0x94/0x150 [ 915.001647][T21954] ? apparmor_socket_sendmsg+0x88/0x230 [ 915.007231][T21954] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 915.012542][T21954] ? security_socket_sendmsg+0x7c/0xa0 [ 915.018034][T21954] ? netlink_getsockopt+0x570/0x570 [ 915.023264][T21954] ____sys_sendmsg+0x5be/0x8f0 [ 915.028079][T21954] ? __sys_sendmsg_sock+0x30/0x30 [ 915.033130][T21954] ? import_iovec+0x6f/0xa0 [ 915.037663][T21954] ___sys_sendmsg+0x236/0x2e0 [ 915.042378][T21954] ? __sys_sendmsg+0x290/0x290 [ 915.047189][T21954] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 915.052966][T21954] __se_sys_sendmsg+0x1b7/0x2a0 [ 915.057971][T21954] ? __x64_sys_sendmsg+0x80/0x80 [ 915.062953][T21954] ? syscall_enter_from_user_mode+0x2a/0x70 [ 915.068904][T21954] do_syscall_64+0x4c/0xa0 [ 915.073335][T21954] ? clear_bhb_loop+0x30/0x80 [ 915.078035][T21954] ? clear_bhb_loop+0x30/0x80 [ 915.083600][T21954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 915.089645][T21954] RIP: 0033:0x7f71e4b26159 [ 915.094091][T21954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.113721][T21954] RSP: 002b:00007f71e2d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.122182][T21954] RAX: ffffffffffffffda RBX: 00007f71e4dadfa0 RCX: 00007f71e4b26159 [ 915.130189][T21954] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000004 [ 915.138183][T21954] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 915.146172][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.154169][T21954] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 915.162173][T21954] [ 915.171833][T21957] netlink: 'syz.4.5843': attribute type 2 has an invalid length. [ 915.286231][T21961] syz.3.5841[21961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.286582][T21961] syz.3.5841[21961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.653800][ C0] syz_tun: tun_net_xmit 86 [ 916.692593][ C0] syz_tun: tun_net_xmit 86 [ 917.961948][T21995] netlink: 'syz.0.5859': attribute type 2 has an invalid length. [ 918.040982][T21997] netlink: 'syz.0.5859': attribute type 2 has an invalid length. [ 918.370062][T22008] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5863'. [ 918.432918][T22011] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5863'. [ 918.509467][T22010] syz.4.5864[22010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.509724][T22010] syz.4.5864[22010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.441560][T22014] FAULT_INJECTION: forcing a failure. [ 919.441560][T22014] name failslab, interval 1, probability 0, space 0, times 0 [ 919.472073][T22014] CPU: 1 PID: 22014 Comm: syz.4.5865 Not tainted syzkaller #0 [ 919.479562][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.489640][T22014] Call Trace: [ 919.492934][T22014] [ 919.495892][T22014] dump_stack_lvl+0x188/0x250 [ 919.500608][T22014] ? show_regs_print_info+0x20/0x20 [ 919.505836][T22014] ? load_image+0x410/0x410 [ 919.510383][T22014] ? __might_sleep+0xf0/0xf0 [ 919.515002][T22014] ? __lock_acquire+0x7b50/0x7b50 [ 919.520059][T22014] should_fail+0x383/0x4b0 [ 919.524499][T22014] should_failslab+0x5/0x20 [ 919.529035][T22014] slab_pre_alloc_hook+0x51/0xc0 [ 919.534012][T22014] __kmalloc_node_track_caller+0x68/0x3a0 [ 919.539763][T22014] ? netlink_sendmsg+0x654/0xbe0 [ 919.544736][T22014] ? __alloc_skb+0xf4/0x750 [ 919.549265][T22014] ? netlink_sendmsg+0x654/0xbe0 [ 919.554244][T22014] __alloc_skb+0x22c/0x750 [ 919.558695][T22014] netlink_sendmsg+0x654/0xbe0 [ 919.563500][T22014] ? netlink_getsockopt+0x570/0x570 [ 919.568827][T22014] ? aa_sock_msg_perm+0x94/0x150 [ 919.573905][T22014] ? apparmor_socket_sendmsg+0x88/0x230 [ 919.579487][T22014] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 919.584806][T22014] ? security_socket_sendmsg+0x7c/0xa0 [ 919.590305][T22014] ? netlink_getsockopt+0x570/0x570 [ 919.595544][T22014] ____sys_sendmsg+0x5be/0x8f0 [ 919.600369][T22014] ? __sys_sendmsg_sock+0x30/0x30 [ 919.605436][T22014] ? import_iovec+0x6f/0xa0 [ 919.609969][T22014] ___sys_sendmsg+0x236/0x2e0 [ 919.614674][T22014] ? __sys_sendmsg+0x290/0x290 [ 919.619496][T22014] __se_sys_sendmsg+0x1b7/0x2a0 [ 919.624383][T22014] ? __x64_sys_sendmsg+0x80/0x80 [ 919.629377][T22014] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 919.635409][T22014] ? lockdep_hardirqs_on+0x94/0x140 [ 919.640732][T22014] do_syscall_64+0x4c/0xa0 [ 919.645180][T22014] ? clear_bhb_loop+0x30/0x80 [ 919.649890][T22014] ? clear_bhb_loop+0x30/0x80 [ 919.654601][T22014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 919.660521][T22014] RIP: 0033:0x7f7136cda159 [ 919.664968][T22014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.684703][T22014] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.693140][T22014] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 919.701132][T22014] RDX: 0000000000000000 RSI: 0000200000003540 RDI: 0000000000000005 [ 919.709126][T22014] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 919.717124][T22014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.725119][T22014] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 919.733223][T22014] [ 921.074751][T22024] FAULT_INJECTION: forcing a failure. [ 921.074751][T22024] name failslab, interval 1, probability 0, space 0, times 0 [ 921.114591][T22019] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5867'. [ 921.147875][T22024] CPU: 0 PID: 22024 Comm: syz.1.5870 Not tainted syzkaller #0 [ 921.155387][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.158947][T22019] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 921.165463][T22024] Call Trace: [ 921.165474][T22024] [ 921.165485][T22024] dump_stack_lvl+0x188/0x250 [ 921.165515][T22024] ? lockdep_hardirqs_on+0x94/0x140 [ 921.165541][T22024] ? show_regs_print_info+0x20/0x20 [ 921.165577][T22024] ? audit_tree_destroy_watch+0x20/0x20 [ 921.165605][T22024] should_fail+0x383/0x4b0 [ 921.165634][T22024] should_failslab+0x5/0x20 [ 921.208360][T22024] slab_pre_alloc_hook+0x51/0xc0 [ 921.213352][T22024] ? security_file_alloc+0x30/0x110 [ 921.218619][T22024] kmem_cache_alloc+0x3d/0x280 [ 921.223412][T22024] ? rcu_is_watching+0x11/0xa0 [ 921.228201][T22024] security_file_alloc+0x30/0x110 [ 921.233253][T22024] __alloc_file+0xc2/0x240 [ 921.237710][T22024] alloc_empty_file+0x90/0x180 [ 921.242511][T22024] path_openat+0x11c/0x2fb0 [ 921.247044][T22024] ? __lock_acquire+0x13dc/0x7b50 [ 921.252101][T22024] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 921.257863][T22024] ? mark_lock+0x94/0x320 [ 921.262229][T22024] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 921.268249][T22024] ? lock_chain_count+0x20/0x20 [ 921.273134][T22024] ? do_filp_open+0x400/0x400 [ 921.277843][T22024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 921.284026][T22024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 921.290210][T22024] ? lockdep_hardirqs_on+0x94/0x140 [ 921.295442][T22024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 921.301639][T22024] do_filp_open+0x1df/0x400 [ 921.306194][T22024] ? vfs_tmpfile+0x300/0x300 [ 921.310854][T22024] ? _raw_spin_unlock+0x24/0x40 [ 921.315733][T22024] ? alloc_fd+0x59e/0x650 [ 921.320134][T22024] do_sys_openat2+0x14b/0x500 [ 921.324843][T22024] ? do_sys_open+0xe0/0xe0 [ 921.329314][T22024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 921.335507][T22024] __x64_sys_openat+0x135/0x160 [ 921.340380][T22024] do_syscall_64+0x4c/0xa0 [ 921.344815][T22024] ? clear_bhb_loop+0x30/0x80 [ 921.349611][T22024] ? clear_bhb_loop+0x30/0x80 [ 921.354320][T22024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 921.360242][T22024] RIP: 0033:0x7f71e4ae698e [ 921.364684][T22024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 921.384349][T22024] RSP: 002b:00007f71e2d7dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.392811][T22024] RAX: ffffffffffffffda RBX: 00007f71e2d7e6c0 RCX: 00007f71e4ae698e [ 921.400808][T22024] RDX: 0000000000000002 RSI: 00007f71e2d7df90 RDI: ffffffffffffff9c [ 921.408810][T22024] RBP: 00007f71e2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 921.416808][T22024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.424805][T22024] R13: 00007f71e4dae038 R14: 00007f71e4dadfa0 R15: 00007ffe35d0d8f8 [ 921.432820][T22024] [ 921.495032][T22019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.726870][T22035] syz_tun: tun_net_xmit 86 [ 922.782549][ C1] syz_tun: tun_net_xmit 86 [ 923.812658][ C1] syz_tun: tun_net_xmit 86 [ 924.471202][T22060] chnl_net:caif_netlink_parms(): no params data found [ 924.545599][T22060] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.555546][T22060] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.563832][T22060] device bridge_slave_0 entered promiscuous mode [ 924.573401][T22060] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.580680][T22060] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.589103][T22060] device bridge_slave_1 entered promiscuous mode [ 924.619922][T22060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.632044][T22060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.683072][T22060] team0: Port device team_slave_0 added [ 925.084219][T22060] team0: Port device team_slave_1 added [ 926.113075][T22060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.120110][T22060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.166705][T22060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.195089][T22060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.212477][T22060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.248401][T22060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.274937][T22077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5885'. [ 926.295360][T19198] Bluetooth: hci3: command 0x0409 tx timeout [ 926.321466][T22080] FAULT_INJECTION: forcing a failure. [ 926.321466][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 926.338468][T22077] netlink: 'syz.2.5885': attribute type 1 has an invalid length. [ 926.359561][T22080] CPU: 1 PID: 22080 Comm: syz.4.5887 Not tainted syzkaller #0 [ 926.364145][T22077] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5885'. [ 926.367070][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.367086][T22080] Call Trace: [ 926.367095][T22080] [ 926.367105][T22080] dump_stack_lvl+0x188/0x250 [ 926.367139][T22080] ? show_regs_print_info+0x20/0x20 [ 926.367167][T22080] ? load_image+0x410/0x410 [ 926.367197][T22080] ? __might_sleep+0xf0/0xf0 [ 926.382937][ T4239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.386150][T22080] ? __lock_acquire+0x7b50/0x7b50 [ 926.386186][T22080] should_fail+0x383/0x4b0 [ 926.431156][T22080] should_failslab+0x5/0x20 [ 926.435696][T22080] slab_pre_alloc_hook+0x51/0xc0 [ 926.440677][T22080] __kmalloc_node_track_caller+0x68/0x3a0 [ 926.446435][T22080] ? netlink_sendmsg+0x654/0xbe0 [ 926.451410][T22080] ? __alloc_skb+0xf4/0x750 [ 926.455948][T22080] ? netlink_sendmsg+0x654/0xbe0 [ 926.460925][T22080] __alloc_skb+0x22c/0x750 [ 926.465391][T22080] netlink_sendmsg+0x654/0xbe0 [ 926.470207][T22080] ? netlink_getsockopt+0x570/0x570 [ 926.475444][T22080] ? aa_sock_msg_perm+0x94/0x150 [ 926.480433][T22080] ? apparmor_socket_sendmsg+0x88/0x230 [ 926.486033][T22080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 926.491500][T22080] ? security_socket_sendmsg+0x7c/0xa0 [ 926.497000][T22080] ? netlink_getsockopt+0x570/0x570 [ 926.502250][T22080] ____sys_sendmsg+0x5be/0x8f0 [ 926.507057][T22080] ? __sys_sendmsg_sock+0x30/0x30 [ 926.512119][T22080] ? import_iovec+0x6f/0xa0 [ 926.516698][T22080] ___sys_sendmsg+0x236/0x2e0 [ 926.521431][T22080] ? __sys_sendmsg+0x290/0x290 [ 926.526252][T22080] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 926.532575][T22080] __se_sys_sendmsg+0x1b7/0x2a0 [ 926.537461][T22080] ? __x64_sys_sendmsg+0x80/0x80 [ 926.542441][T22080] ? syscall_enter_from_user_mode+0x2a/0x70 [ 926.548370][T22080] do_syscall_64+0x4c/0xa0 [ 926.552821][T22080] ? clear_bhb_loop+0x30/0x80 [ 926.557568][T22080] ? clear_bhb_loop+0x30/0x80 [ 926.562274][T22080] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 926.568196][T22080] RIP: 0033:0x7f7136cda159 [ 926.572644][T22080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.592373][T22080] RSP: 002b:00007f7134f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.600831][T22080] RAX: ffffffffffffffda RBX: 00007f7136f61fa0 RCX: 00007f7136cda159 [ 926.608840][T22080] RDX: 0000000000000000 RSI: 0000200000003540 RDI: 0000000000000004 [ 926.616985][T22080] RBP: 00007f7134f32090 R08: 0000000000000000 R09: 0000000000000000 [ 926.625072][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.633165][T22080] R13: 00007f7136f62038 R14: 00007f7136f61fa0 R15: 00007ffeb0a0bc98 [ 926.641187][T22080] [ 926.674741][T22060] device hsr_slave_0 entered promiscuous mode [ 926.696577][T22060] device hsr_slave_1 entered promiscuous mode [ 926.708909][T22060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.723014][T22060] Cannot create hsr debugfs directory [ 926.747744][ T4239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.372719][T20637] Bluetooth: hci3: command 0x041b tx timeout [ 928.576975][ T4239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.678709][T22095] syz_tun: tun_net_xmit 86 [ 928.725876][ T4239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.732643][ C1] syz_tun: tun_net_xmit 86 [ 930.452605][T19198] Bluetooth: hci3: command 0x040f tx timeout [ 930.772556][ C1] syz_tun: tun_net_xmit 86 [ 931.385599][T22104] netlink: 'syz.3.5897': attribute type 10 has an invalid length. [ 931.404620][T22104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.425274][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.431684][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.522647][T22104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.594866][T22104] device batadv_slave_0 entered promiscuous mode [ 931.604888][T22104] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 932.540287][T19198] Bluetooth: hci3: command 0x0419 tx timeout [ 936.828229][T22178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5917'. [ 936.893604][T22060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 936.911235][T22178] netlink: 'syz.1.5917': attribute type 1 has an invalid length. [ 936.949093][T22178] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5917'. [ 937.260783][T22060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 937.273401][T22193] syz_tun: tun_net_xmit 86 [ 938.302564][ C1] syz_tun: tun_net_xmit 86 [ 939.303014][T22060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 939.332487][ C1] syz_tun: tun_net_xmit 86 [ 939.347915][T22060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 939.811601][T22060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.898736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 939.911825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 939.961137][T22060] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.001569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 940.025444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 940.069216][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.076478][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.177321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 940.220513][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 940.239952][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 940.256681][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.263884][T13375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.352176][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 940.393651][T19830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 940.432510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 940.454168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 940.474440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 940.504722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 940.528702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 940.563472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 940.593244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 940.630031][T22060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.655239][T22060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 940.673639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 940.690254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.114229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 941.121758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 941.152201][T22060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.188208][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.201844][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.246790][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 941.267097][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.285308][T22060] device veth0_vlan entered promiscuous mode [ 941.307877][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.324599][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.355637][T22060] device veth1_vlan entered promiscuous mode [ 941.391824][T22060] device veth0_macvtap entered promiscuous mode [ 941.415454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 941.430827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 941.439824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 941.466870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.480479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.718530][T22060] device veth1_macvtap entered promiscuous mode [ 943.821466][T22271] syz_tun: tun_net_xmit 86 [ 943.894053][ T4239] device hsr_slave_0 left promiscuous mode [ 943.919622][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.959855][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.993269][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.016529][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.034307][ T4239] bridge0: port 3(bond0) entered disabled state [ 944.124368][ T4239] device bridge_slave_0 left promiscuous mode [ 944.137587][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.153864][ T4239] device veth1_macvtap left promiscuous mode [ 944.160238][ T4239] device veth0_macvtap left promiscuous mode [ 944.166544][ T4239] device veth1_vlan left promiscuous mode [ 944.174525][ T4239] device veth0_vlan left promiscuous mode [ 944.738503][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 944.769511][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 944.798567][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.809150][ T4239] device bond_slave_1 left promiscuous mode [ 944.843517][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.852771][ C0] syz_tun: tun_net_xmit 86 [ 944.862239][ T4239] device bond_slave_0 left promiscuous mode [ 944.881617][ T4239] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 944.983895][ T4239] bond0 (unregistering): Released all slaves [ 945.068059][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.079409][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.091403][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.102748][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.112977][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.123880][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.136674][T22060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.163960][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 945.174133][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 945.892581][ C0] syz_tun: tun_net_xmit 86 [ 946.891906][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.914698][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.930608][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.942510][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.952960][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.964794][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.977028][T22060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.994978][T22060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.007036][T22060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.036889][T22060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.048652][T22060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.057960][T22060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.067118][T22060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.082766][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 947.099246][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 947.343315][T22295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5948'. [ 947.366999][T22295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 947.437987][T22295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.518745][T13375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.540097][T13375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.554954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 947.673601][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.681472][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.733063][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 951.076695][T22348] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5967'. [ 951.109951][T22348] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 951.176536][T22348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.856316][T22403] device sit0 entered promiscuous mode [ 954.011202][T22410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5988'. [ 954.026002][T22410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 954.048542][T22410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.494968][T22449] netlink: 'syz.4.6007': attribute type 10 has an invalid length. [ 956.513618][T22449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6007'. [ 956.544059][T22449] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 956.675516][T22453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6018'. [ 956.689815][T22453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 956.715478][T22453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.735327][T22455] device sit0 entered promiscuous mode [ 956.869114][T22452] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6006'. [ 956.908888][T22452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 957.121295][T22452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 957.208819][T22465] FAULT_INJECTION: forcing a failure. [ 957.208819][T22465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.248212][T22465] CPU: 0 PID: 22465 Comm: syz.3.6010 Not tainted syzkaller #0 [ 957.256098][T22465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.266188][T22465] Call Trace: [ 957.269499][T22465] [ 957.272463][T22465] dump_stack_lvl+0x188/0x250 [ 957.277182][T22465] ? show_regs_print_info+0x20/0x20 [ 957.282521][T22465] ? load_image+0x410/0x410 [ 957.287069][T22465] ? __lock_acquire+0x7b50/0x7b50 [ 957.292158][T22465] should_fail+0x383/0x4b0 [ 957.296622][T22465] _copy_from_user+0x2e/0x170 [ 957.301453][T22465] iovec_from_user+0x142/0x370 [ 957.306267][T22465] __import_iovec+0x70/0x490 [ 957.310938][T22465] ? __lock_acquire+0x13dc/0x7b50 [ 957.316013][T22465] import_iovec+0x6f/0xa0 [ 957.320385][T22465] ___sys_sendmsg+0x1fd/0x2e0 [ 957.325223][T22465] ? __sys_sendmsg+0x290/0x290 [ 957.330083][T22465] __se_sys_sendmsg+0x1b7/0x2a0 [ 957.334980][T22465] ? __x64_sys_sendmsg+0x80/0x80 [ 957.339956][T22465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 957.345991][T22465] ? lockdep_hardirqs_on+0x94/0x140 [ 957.351240][T22465] do_syscall_64+0x4c/0xa0 [ 957.355694][T22465] ? clear_bhb_loop+0x30/0x80 [ 957.360416][T22465] ? clear_bhb_loop+0x30/0x80 [ 957.365140][T22465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 957.371077][T22465] RIP: 0033:0x7f532967a159 [ 957.375523][T22465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.395357][T22465] RSP: 002b:00007f53278d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.403826][T22465] RAX: ffffffffffffffda RBX: 00007f5329901fa0 RCX: 00007f532967a159 [ 957.412017][T22465] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 957.420034][T22465] RBP: 00007f53278d2090 R08: 0000000000000000 R09: 0000000000000000 [ 957.428151][T22465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.436162][T22465] R13: 00007f5329902038 R14: 00007f5329901fa0 R15: 00007fff70f55f08 [ 957.444191][T22465] [ 957.469386][T22469] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 957.579717][T22469] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 960.639240][T22487] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6021'. [ 960.657641][T22487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 960.686117][T22487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.844688][T22501] device sit0 entered promiscuous mode [ 961.111918][T22512] netlink: 'syz.0.6027': attribute type 2 has an invalid length. [ 961.155528][T22512] netlink: 'syz.0.6027': attribute type 2 has an invalid length. [ 961.467647][T22529] netlink: 'syz.1.6036': attribute type 2 has an invalid length. [ 961.519262][T22529] netlink: 'syz.1.6036': attribute type 8 has an invalid length. [ 961.549580][T22529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6036'. [ 963.943061][T22550] netlink: 'syz.1.6043': attribute type 2 has an invalid length. [ 963.963352][T22550] netlink: 'syz.1.6043': attribute type 2 has an invalid length. [ 964.716613][T22576] netlink: 'syz.4.6053': attribute type 2 has an invalid length. [ 964.726014][T22576] netlink: 'syz.4.6053': attribute type 8 has an invalid length. [ 964.735760][T22576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6053'. [ 964.873586][T22584] netlink: 'syz.4.6056': attribute type 2 has an invalid length. [ 964.893011][T22584] netlink: 'syz.4.6056': attribute type 2 has an invalid length. [ 965.515150][T22600] device syzkaller0 entered promiscuous mode [ 965.560978][T22603] netlink: 'syz.4.6063': attribute type 21 has an invalid length. [ 965.697703][T22618] netlink: 'syz.1.6068': attribute type 2 has an invalid length. [ 965.719045][T22618] netlink: 'syz.1.6068': attribute type 2 has an invalid length. [ 966.202664][T22629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6072'. [ 966.477638][T22636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6074'. [ 966.490640][T22636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 966.519724][T22636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 966.835351][T13372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.896689][T22631] chnl_net:caif_netlink_parms(): no params data found [ 966.955912][T13372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.081550][T13372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.108968][T22663] validate_nla: 2 callbacks suppressed [ 967.108983][T22663] netlink: 'syz.2.6080': attribute type 2 has an invalid length. [ 967.143051][T22665] netlink: 'syz.2.6080': attribute type 2 has an invalid length. [ 967.208234][T13372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.265720][T22668] syz_tun: tun_net_xmit 42 [ 967.298469][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.310632][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.348551][T22631] device bridge_slave_0 entered promiscuous mode [ 967.386762][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.412177][T22631] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.420729][T22631] device bridge_slave_1 entered promiscuous mode [ 967.603623][T22631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.657599][T22631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.803889][T22631] team0: Port device team_slave_0 added [ 967.816081][T22631] team0: Port device team_slave_1 added [ 967.974520][T22631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.981527][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.095900][T22631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.115976][T22686] netlink: 'syz.2.6086': attribute type 2 has an invalid length. [ 968.142651][T22686] netlink: 'syz.2.6086': attribute type 8 has an invalid length. [ 968.187737][T22686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6086'. [ 968.203113][T22631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.220366][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.255340][T22631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.281370][T22691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6088'. [ 968.292535][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 968.302427][ C1] syz_tun: tun_net_xmit 42 [ 968.317158][T22691] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 968.401952][T22691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 968.524157][T22708] netlink: 'syz.2.6091': attribute type 2 has an invalid length. [ 968.557765][T22713] netlink: 'syz.2.6091': attribute type 2 has an invalid length. [ 968.605471][T22719] FAULT_INJECTION: forcing a failure. [ 968.605471][T22719] name failslab, interval 1, probability 0, space 0, times 0 [ 968.652892][T22719] CPU: 0 PID: 22719 Comm: syz.0.6093 Not tainted syzkaller #0 [ 968.660421][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.670493][T22719] Call Trace: [ 968.673792][T22719] [ 968.676748][T22719] dump_stack_lvl+0x188/0x250 [ 968.681507][T22719] ? show_regs_print_info+0x20/0x20 [ 968.686749][T22719] ? load_image+0x410/0x410 [ 968.691295][T22719] ? __lock_acquire+0x7b50/0x7b50 [ 968.696357][T22719] ? rcu_is_watching+0x11/0xa0 [ 968.701171][T22719] should_fail+0x383/0x4b0 [ 968.705636][T22719] should_failslab+0x5/0x20 [ 968.710167][T22719] slab_pre_alloc_hook+0x51/0xc0 [ 968.715176][T22719] kmem_cache_alloc_trace+0x47/0x290 [ 968.720494][T22719] ? __sta_info_destroy_part2+0x247/0x3f0 [ 968.726352][T22719] __sta_info_destroy_part2+0x247/0x3f0 [ 968.731938][T22719] __sta_info_flush+0x3ad/0x460 [ 968.736838][T22719] ? sta_info_stop+0x30/0x30 [ 968.741513][T22719] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 968.747279][T22719] ieee80211_ibss_leave+0x21/0x120 [ 968.752439][T22719] __cfg80211_leave_ibss+0x1ce/0x3f0 [ 968.757831][T22719] cfg80211_leave_ibss+0x5a/0x70 [ 968.762814][T22719] cfg80211_change_iface+0x498/0xe10 [ 968.768217][T22719] __cfg80211_wext_siwmode+0x1c2/0x290 [ 968.773736][T22719] ? wext_ioctl_dispatch+0xaf/0x470 [ 968.778972][T22719] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 968.784756][T22719] ? apparmor_capable+0x12c/0x190 [ 968.789814][T22719] ? full_name_hash+0x8e/0xe0 [ 968.794532][T22719] ioctl_standard_call+0xc6/0x250 [ 968.799597][T22719] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 968.805266][T22719] ? __cfg80211_wext_giwfreq+0x770/0x770 [ 968.810928][T22719] wext_ioctl_dispatch+0x3da/0x470 [ 968.816067][T22719] ? wext_ioctl_dispatch+0x470/0x470 [ 968.821401][T22719] ? iw_handler_get_private+0x1e0/0x1e0 [ 968.826987][T22719] wext_handle_ioctl+0x114/0x1d0 [ 968.831979][T22719] ? call_commit_handler+0xf0/0xf0 [ 968.837144][T22719] sock_ioctl+0x143/0x700 [ 968.841514][T22719] ? sock_poll+0x420/0x420 [ 968.845982][T22719] ? bpf_lsm_file_ioctl+0x5/0x10 [ 968.850949][T22719] ? security_file_ioctl+0x7c/0xa0 [ 968.856104][T22719] ? sock_poll+0x420/0x420 [ 968.860556][T22719] __se_sys_ioctl+0xfa/0x170 [ 968.865177][T22719] do_syscall_64+0x4c/0xa0 [ 968.869616][T22719] ? clear_bhb_loop+0x30/0x80 [ 968.874333][T22719] ? clear_bhb_loop+0x30/0x80 [ 968.879056][T22719] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 968.884979][T22719] RIP: 0033:0x7f31c51de159 [ 968.889431][T22719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.909071][T22719] RSP: 002b:00007f31c3436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.917619][T22719] RAX: ffffffffffffffda RBX: 00007f31c5465fa0 RCX: 00007f31c51de159 [ 968.925619][T22719] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000007 [ 968.933620][T22719] RBP: 00007f31c3436090 R08: 0000000000000000 R09: 0000000000000000 [ 968.941613][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.949606][T22719] R13: 00007f31c5466038 R14: 00007f31c5465fa0 R15: 00007ffc1c239f18 [ 968.957621][T22719] [ 969.064569][T22631] device hsr_slave_0 entered promiscuous mode [ 969.166626][T22631] device hsr_slave_1 entered promiscuous mode [ 969.212495][T22631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.223863][T22631] Cannot create hsr debugfs directory [ 969.332640][ C1] syz_tun: tun_net_xmit 42 [ 969.489083][T22740] netlink: 'syz.0.6099': attribute type 10 has an invalid length. [ 969.505947][T22740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6099'. [ 969.588416][T22740] batman_adv: batadv0: Adding interface: vlan1 [ 969.611024][T22740] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.647272][T22740] batman_adv: batadv0: Interface activated: vlan1 [ 970.121051][T22756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6103'. [ 970.279191][T22763] netlink: 'syz.3.6104': attribute type 2 has an invalid length. [ 970.377158][T17845] Bluetooth: hci5: command 0x041b tx timeout [ 970.383285][ C1] syz_tun: tun_net_xmit 42 [ 970.403984][T22763] netlink: 'syz.3.6104': attribute type 2 has an invalid length. [ 970.475969][T13372] team0: Port device wlan1 removed [ 970.516257][T22767] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6105'. [ 970.554903][T22767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 970.593685][T22767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.737781][T22788] FAULT_INJECTION: forcing a failure. [ 970.737781][T22788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.813525][T13372] device hsr_slave_0 left promiscuous mode [ 970.821260][T22788] CPU: 1 PID: 22788 Comm: syz.0.6110 Not tainted syzkaller #0 [ 970.830100][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.841211][T22788] Call Trace: [ 970.844651][T22788] [ 970.847616][T22788] dump_stack_lvl+0x188/0x250 [ 970.852342][T22788] ? show_regs_print_info+0x20/0x20 [ 970.857662][T22788] ? load_image+0x410/0x410 [ 970.862228][T22788] ? __lock_acquire+0x7b50/0x7b50 [ 970.867302][T22788] should_fail+0x383/0x4b0 [ 970.871752][T22788] _copy_from_user+0x2e/0x170 [ 970.876462][T22788] kstrtouint_from_user+0xd3/0x220 [ 970.881611][T22788] ? kstrtol_from_user+0x2a0/0x2a0 [ 970.886769][T22788] proc_fail_nth_write+0x8b/0x200 [ 970.891913][T22788] ? proc_fail_nth_read+0x220/0x220 [ 970.897166][T22788] ? common_file_perm+0x171/0x1c0 [ 970.902233][T22788] ? proc_fail_nth_read+0x220/0x220 [ 970.907457][T22788] vfs_write+0x304/0xd70 [ 970.911738][T22788] ? file_end_write+0x250/0x250 [ 970.916732][T22788] ? mutex_lock_nested+0x17/0x20 [ 970.921711][T22788] ? __fdget_pos+0x2bf/0x370 [ 970.926337][T22788] ? ksys_write+0x70/0x260 [ 970.930789][T22788] ksys_write+0x153/0x260 [ 970.935142][T22788] ? __ia32_sys_read+0x80/0x80 [ 970.939928][T22788] ? lockdep_hardirqs_on+0x94/0x140 [ 970.945252][T22788] do_syscall_64+0x4c/0xa0 [ 970.949702][T22788] ? clear_bhb_loop+0x30/0x80 [ 970.954498][T22788] ? clear_bhb_loop+0x30/0x80 [ 970.959217][T22788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.965149][T22788] RIP: 0033:0x7f31c519e98e [ 970.969599][T22788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.989248][T22788] RSP: 002b:00007f31c3435fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 970.997699][T22788] RAX: ffffffffffffffda RBX: 00007f31c34366c0 RCX: 00007f31c519e98e [ 971.005708][T22788] RDX: 0000000000000001 RSI: 00007f31c34360a0 RDI: 0000000000000007 [ 971.013706][T22788] RBP: 00007f31c3436090 R08: 0000000000000000 R09: 0000000000000000 [ 971.021795][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.029789][T22788] R13: 00007f31c5466038 R14: 00007f31c5465fa0 R15: 00007ffc1c239f18 [ 971.038075][T22788] [ 971.043315][T13372] device hsr_slave_1 left promiscuous mode [ 971.060310][T22788] ------------[ cut here ]------------ [ 971.065922][T22788] WARNING: CPU: 0 PID: 22788 at kernel/events/core.c:6698 perf_pending_task+0x353/0x480 [ 971.075913][T22788] Modules linked in: [ 971.079851][T22788] CPU: 0 PID: 22788 Comm: syz.0.6110 Not tainted syzkaller #0 [ 971.087754][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.098765][T22788] RIP: 0010:perf_pending_task+0x353/0x480 [ 971.104643][T22788] Code: e8 32 41 de ff 84 db 75 10 e8 c9 3e de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 3e de ff e8 3c ac 65 ff eb e9 e8 ad 3e de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 971.124430][T22788] RSP: 0018:ffffc900039efd00 EFLAGS: 00010293 [ 971.130542][T22788] RAX: ffffffff819ad0f3 RBX: ffff8880790e4000 RCX: ffff88805b830000 [ 971.138609][T22788] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 971.146662][T22788] RBP: ffff8880790e3dd0 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 971.154728][T22788] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88805b830000 [ 971.162768][T22788] R13: ffff888059ca6958 R14: 0000000000000000 R15: 1ffff1100f21c7ba [ 971.170766][T22788] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 971.179867][T22788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.186568][T22788] CR2: 00007f31c524b528 CR3: 000000007688d000 CR4: 00000000003506f0 [ 971.194624][T22788] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 971.202670][T22788] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 971.210674][T22788] Call Trace: [ 971.213999][T22788] [ 971.216956][T22788] task_work_run+0x125/0x1a0 [ 971.221605][T22788] do_exit+0x635/0x2110 [ 971.225862][T22788] ? preempt_schedule+0xbc/0xd0 [ 971.230754][T22788] ? preempt_schedule+0xbc/0xd0 [ 971.235682][T22788] ? put_task_struct+0x80/0x80 [ 971.240486][T22788] ? lock_chain_count+0x20/0x20 [ 971.245533][T22788] do_group_exit+0x12c/0x2f0 [ 971.250170][T22788] __x64_sys_exit_group+0x3b/0x40 [ 971.255269][T22788] do_syscall_64+0x4c/0xa0 [ 971.259725][T22788] ? clear_bhb_loop+0x30/0x80 [ 971.264470][T22788] ? clear_bhb_loop+0x30/0x80 [ 971.269209][T22788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 971.275159][T22788] RIP: 0033:0x7f31c51de159 [ 971.279597][T22788] Code: Unable to access opcode bytes at RIP 0x7f31c51de12f. [ 971.287018][T22788] RSP: 002b:00007f31c3435f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 971.295508][T22788] RAX: ffffffffffffffda RBX: 00007f31c524b528 RCX: 00007f31c51de159 [ 971.303557][T22788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 971.311562][T22788] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f31c5466038 [ 971.319626][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.327679][T22788] R13: 00007f31c5466038 R14: 00007f31c5465fa0 R15: 00007ffc1c239f18 [ 971.335745][T22788] [ 971.338831][T22788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 971.346135][T22788] CPU: 0 PID: 22788 Comm: syz.0.6110 Not tainted syzkaller #0 [ 971.353616][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.363792][T22788] Call Trace: [ 971.367084][T22788] [ 971.370025][T22788] dump_stack_lvl+0x188/0x250 [ 971.374728][T22788] ? show_regs_print_info+0x20/0x20 [ 971.379965][T22788] ? load_image+0x410/0x410 [ 971.384503][T22788] panic+0x2f8/0x850 [ 971.388423][T22788] ? bpf_jit_dump+0xd0/0xd0 [ 971.392947][T22788] ? perf_pending_task+0x353/0x480 [ 971.398073][T22788] __warn+0x248/0x2b0 [ 971.402076][T22788] ? perf_pending_task+0x353/0x480 [ 971.407204][T22788] report_bug+0x1b9/0x2e0 [ 971.411559][T22788] handle_bug+0x3a/0x70 [ 971.415736][T22788] exc_invalid_op+0x16/0x40 [ 971.420271][T22788] asm_exc_invalid_op+0x16/0x20 [ 971.425133][T22788] RIP: 0010:perf_pending_task+0x353/0x480 [ 971.430860][T22788] Code: e8 32 41 de ff 84 db 75 10 e8 c9 3e de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 3e de ff e8 3c ac 65 ff eb e9 e8 ad 3e de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 971.442767][ C1] syz_tun: tun_net_xmit 42 [ 971.450470][T22788] RSP: 0018:ffffc900039efd00 EFLAGS: 00010293 [ 971.460972][T22788] RAX: ffffffff819ad0f3 RBX: ffff8880790e4000 RCX: ffff88805b830000 [ 971.470156][T22788] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 971.480484][T22788] RBP: ffff8880790e3dd0 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 971.496557][T22788] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88805b830000 [ 971.508642][T22788] R13: ffff888059ca6958 R14: 0000000000000000 R15: 1ffff1100f21c7ba [ 971.518314][T22788] ? perf_pending_task+0x353/0x480 [ 971.524203][T22788] task_work_run+0x125/0x1a0 [ 971.530364][T22788] do_exit+0x635/0x2110 [ 971.534561][T22788] ? preempt_schedule+0xbc/0xd0 [ 971.539436][T22788] ? preempt_schedule+0xbc/0xd0 [ 971.544324][T22788] ? put_task_struct+0x80/0x80 [ 971.549121][T22788] ? lock_chain_count+0x20/0x20 [ 971.553998][T22788] do_group_exit+0x12c/0x2f0 [ 971.558625][T22788] __x64_sys_exit_group+0x3b/0x40 [ 971.563666][T22788] do_syscall_64+0x4c/0xa0 [ 971.568098][T22788] ? clear_bhb_loop+0x30/0x80 [ 971.572785][T22788] ? clear_bhb_loop+0x30/0x80 [ 971.577487][T22788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 971.583394][T22788] RIP: 0033:0x7f31c51de159 [ 971.587823][T22788] Code: Unable to access opcode bytes at RIP 0x7f31c51de12f. [ 971.595279][T22788] RSP: 002b:00007f31c3435f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 971.603731][T22788] RAX: ffffffffffffffda RBX: 00007f31c524b528 RCX: 00007f31c51de159 [ 971.611716][T22788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 971.619701][T22788] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f31c5466038 [ 971.627682][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.635674][T22788] R13: 00007f31c5466038 R14: 00007f31c5465fa0 R15: 00007ffc1c239f18 [ 971.643674][T22788] [ 971.647033][T22788] Kernel Offset: disabled [ 971.651377][T22788] Rebooting in 86400 seconds..