last executing test programs: 1m6.695092247s ago: executing program 2 (id=1919): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00002010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 1m6.513578915s ago: executing program 2 (id=1921): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400002f0088ca", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.35138571s ago: executing program 2 (id=1928): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000003a000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20) 1m5.35094918s ago: executing program 0 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x8, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000200004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000778f374c39b60100"/27, @ANYRES32=0x0, @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r3}, 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="560a0000000000006110ac000000000095000f0008000000"], &(0x7f0000000600)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x804) perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x5, 0x2, 0x3, 0xff, 0x0, 0x7, 0x10, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff8000, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x4100, 0x3, 0x1a99, 0x3, 0x4, 0xec000000, 0x1ff, 0x0, 0x6, 0x0, 0x2470}, 0xffffffffffffffff, 0x4, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m5.258921514s ago: executing program 1 (id=1930): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4112, 0x1010}, {&(0x7f0000000940)=""/4113, 0x1011}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000100)=""/32, 0x20}], 0x7}, 0x20) (async) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4112, 0x1010}, {&(0x7f0000000940)=""/4113, 0x1011}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000100)=""/32, 0x20}], 0x7}, 0x20) 1m5.186922167s ago: executing program 2 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r4, r7, 0x1e, 0x0, 0x0, @void, @value=r3}, 0x20) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="4e2c4ecb"], 0x6a) close(0x3) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000), 0x0, 0xfffffff6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) 1m5.148754719s ago: executing program 3 (id=1932): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x61122, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1c042, 0x10000, 0x9e4, 0x9, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x42) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x61, 0x9f, 0x4, 0x0, 0x1000000000006, 0x4ab, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x7, 0x6, 0x400, 0x8, 0x8, 0x0, 0x100, 0x0, 0x201}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001c00)={r0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000"], 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00200000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000184000000400000000000000000000009500000000000000950000000000000095003600000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0xfffffffc, 0x0, 0xfffffffc}, 0x10}, 0x94) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) 1m5.023001765s ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x4000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.958467948s ago: executing program 0 (id=1934): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000503600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e73ca1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4004012) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) close(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01002300000000000000240000002400000000000000000000000000000200000000000000000000000a00000000f0ff00000000000b00"/69], &(0x7f0000000040)=""/132, 0x3e, 0x84, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01002300000000000000240000002400000000000000000000000000000200000000000000000000000a00000000f0ff00000000000b00"/69], &(0x7f0000000040)=""/132, 0x3e, 0x84, 0x1}, 0x20) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES64, @ANYBLOB="1e0746765962ffffff0000000000000000000000000000004eb648dd9b2100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d79604c0ad250cb93af5fb826b04a043f7b400923b9bfdf57e93871e7ffbc22605e3850042c7deed1bc500a800000000000000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m4.92323884s ago: executing program 1 (id=1935): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102857880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75d0df449393aaf7c449", 0x163}, {&(0x7f0000002180)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0db9afb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35cdfd70fd677bcd396b37c60e439693dcb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac8b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e06f835663a496857fb6320e5ee9086f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc74", 0xbc4}], 0x2}, 0x0) 1m4.800758126s ago: executing program 1 (id=1936): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000004400000020"], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000f3ffffffffffffff00000000180100002000000000002020207baaf8ff00000000bda106000000000a47010000f8ffffffb702000008000000b703000000696c6c250000000000202020db1af8ff5100000069e4df551ba2ff81caff973268bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000000000000000000000000000004e0000000000"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0xc3200, 0xc, '\x00', 0x0, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x8, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000003c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00001800"], 0xfe33) gettid() gettid() socket$kcm(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r8}, 0x8) 1m4.659329402s ago: executing program 3 (id=1937): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3020, 0x4, 0x9, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x7, 0x9b, 0x0, 0x8000, 0xa0381, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0x111a32, 0x9, 0x5, 0xd, 0x3, 0x7, 0xd, 0x0, 0xd5, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b000000000000004351bb3d26412fa22df0bc7ae0bbcb702e4cb71f57f73cd843f8f496212c08483e817df02ec1c50af481579fae6118dedf62ac6abb82f65c1b4fe70f20eabf6b811358884f4ee4ad65b006e5b637bd98a9e7fcf528d51e67a7cd5f95182f028a38d8d16bd22ee468c1e25f8b3c953cd82ad76177891db21e53da56e48ed2dabe5ca107bb79e565bee3d7104aedcb77d03a3b45d88d39", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7d, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075cfeffff7f00000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @random="0135014030d9"}) 1m4.395284085s ago: executing program 0 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000070000000071117200000000008510001202000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1m4.043990271s ago: executing program 0 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socket$kcm(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m1.976174239s ago: executing program 3 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m1.96547257s ago: executing program 1 (id=1941): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) mkdirat$cgroup(r4, &(0x7f0000000240)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x98}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getpid() (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xac}, [], {0x95, 0x0, 0xf}}, &(0x7f0000000600)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), 0x0}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x804) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x26}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m1.926763651s ago: executing program 0 (id=1942): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x241, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0, 0x300}, 0x20040010) 1m1.823257066s ago: executing program 2 (id=1943): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x8, 0x2000002}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000100)=r2, 0x4) 1m1.687559033s ago: executing program 3 (id=1944): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0x163}, {&(0x7f0000002180)="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", 0xbc4}], 0x2}, 0x0) 1m1.637888895s ago: executing program 0 (id=1945): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x61122, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1c042, 0x10000, 0x9e4, 0x9, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x42) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x61, 0x9f, 0x4, 0x0, 0x1000000000006, 0x4ab, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x7, 0x6, 0x400, 0x8, 0x8, 0x0, 0x100, 0x0, 0x201}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001c00)={r0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000"], 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00200000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000184000000400000000000000000000009500000000000000950000000000000095003600000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0xfffffffc, 0x0, 0xfffffffc}, 0x10}, 0x94) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) 59.159042502s ago: executing program 3 (id=1946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff000000000083"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, r1, 0x2f, 0x2028, 0x4}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) 55.052015065s ago: executing program 1 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x62b}], 0x1}, 0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xb, 0x12, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0xc, 0x22a8f46bd4a9ffe0, 0xb, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x7fff, 0xdf, &(0x7f0000000900)=""/223, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x8, 0x80000000, 0x4ad7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd31b}, 0x94) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x400}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x1, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb3", 0x38}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd, 0x0, 0x8, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xffbfffff, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000820800000600000001090200", @ANYRES32=0x1, @ANYBLOB="8800eeffffff00e7fffffffbffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000d73814a29a4392ee006b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRESDEC=r6, @ANYBLOB="0008b3e25b88883ecc1dce731004eed80000000000b7080000000000007b8af8fedd000000000000000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000954294ab8837016be3e2d5445c7cc5be8f2be07bf693c9acf4e52706430d3987014a4698e79d62534dac36863e97fee8817c0bb220f5b030"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'batadv_slave_1\x00', 0x200}) 55.051542315s ago: executing program 3 (id=1948): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000008000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec00000fe02009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 55.051062035s ago: executing program 2 (id=1949): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000800)}, {&(0x7f0000000a00)}, {0x0}, {&(0x7f0000000c40)="6f7cadc9cdf848023fa0ae6c3a86aa14c568909e875271ec38171adabd6df4acd6c8621ec578aa806ddd403f82356448358f3ac93d39cb8c303532c7f05ea57a61afb895", 0x44}], 0x4}, 0x20000040) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="4c50d846a8d6712b43031e709a68414e4c5de34a363c612fb68870be7dbe1214891b882b717a11c9d2ffa562383c8f2a08834ad32df5dbd5755b1156e9430285c8ed062dc152d6413cfb196baccd0b14c95ee0973ce190d65d060254bbbe1d41e94d25147c34feee6d1e93eff11b5344292897c9930fc5c1c46ffc1adcb64807b6eabf5bc014d85097b8627b06691ef6ae1445896ffc46f8dd0f9f4dbff41a954c5dad8ef2ae895aa947401618d47178582574d08bcc3ff164d20bf9a7bac8eb5e5ddfcbaa334cd95f1aef652605cc676ab15b885f0181bc8a6df591", 0xdc}, {&(0x7f0000000380)="c1b910f5f84625205340368c11646a0d0a1d66ea8130a1ea5e3b3ded915a90ad56fe93a4eb03a7efbe1fae1e5b7b29015cfd4d8bd116c3604559683f77be35bdbe80246d520368f2ef77b2cf1a51db483843b5e63ef85f47fbb477ba4472d853d41949790c7a5fdf3f2e0faddeea6c336063264a900fa57462d047f5cce7a7ab9baba309c380b9ab580637fe1901871e21622acfb6a37fb092ce4e97e76290df378e18681474dcc032592b6503c918013bdffd", 0xb3}, {&(0x7f0000000480)="de9befddf7c91ed8f12c80c0491101265030b306cef13ce2a5ee3bcc27093937598cf03fc9a96b882150cd15fbe67e1ea899b463dc423b667358eef252e699c54df395168d673a18770b7760ba4d93d7d45c15754405c0663ed9e82cb93919ca29863dcabbdd", 0x66}, {&(0x7f0000000600)}, {&(0x7f0000000700)}], 0x5}, 0x4040000) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000040082ff6a76000010000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x25, 0x1, 0x0) write$cgroup_subtree(r9, 0x0, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000050a10000000000000029e93ba2a262", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x20) r11 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x6419599304258992) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x4}, 0x38) 562.85µs ago: executing program 32 (id=1945): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x61122, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1c042, 0x10000, 0x9e4, 0x9, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x42) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x61, 0x9f, 0x4, 0x0, 0x1000000000006, 0x4ab, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x7, 0x6, 0x400, 0x8, 0x8, 0x0, 0x100, 0x0, 0x201}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001c00)={r0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000"], 0x0, 0x2a}, 0x28) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00200000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000184000000400000000000000000000009500000000000000950000000000000095003600000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0xfffffffc, 0x0, 0xfffffffc}, 0x10}, 0x94) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) 269.27µs ago: executing program 33 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x62b}], 0x1}, 0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xb, 0x12, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0xc, 0x22a8f46bd4a9ffe0, 0xb, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x7fff, 0xdf, &(0x7f0000000900)=""/223, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x8, 0x80000000, 0x4ad7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd31b}, 0x94) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x400}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x1, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb3", 0x38}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd, 0x0, 0x8, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xffbfffff, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000820800000600000001090200", @ANYRES32=0x1, @ANYBLOB="8800eeffffff00e7fffffffbffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000d73814a29a4392ee006b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRESDEC=r6, @ANYBLOB="0008b3e25b88883ecc1dce731004eed80000000000b7080000000000007b8af8fedd000000000000000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000954294ab8837016be3e2d5445c7cc5be8f2be07bf693c9acf4e52706430d3987014a4698e79d62534dac36863e97fee8817c0bb220f5b030"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'batadv_slave_1\x00', 0x200}) 79.15µs ago: executing program 34 (id=1949): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000800)}, {&(0x7f0000000a00)}, {0x0}, {&(0x7f0000000c40)="6f7cadc9cdf848023fa0ae6c3a86aa14c568909e875271ec38171adabd6df4acd6c8621ec578aa806ddd403f82356448358f3ac93d39cb8c303532c7f05ea57a61afb895", 0x44}], 0x4}, 0x20000040) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="4c50d846a8d6712b43031e709a68414e4c5de34a363c612fb68870be7dbe1214891b882b717a11c9d2ffa562383c8f2a08834ad32df5dbd5755b1156e9430285c8ed062dc152d6413cfb196baccd0b14c95ee0973ce190d65d060254bbbe1d41e94d25147c34feee6d1e93eff11b5344292897c9930fc5c1c46ffc1adcb64807b6eabf5bc014d85097b8627b06691ef6ae1445896ffc46f8dd0f9f4dbff41a954c5dad8ef2ae895aa947401618d47178582574d08bcc3ff164d20bf9a7bac8eb5e5ddfcbaa334cd95f1aef652605cc676ab15b885f0181bc8a6df591", 0xdc}, {&(0x7f0000000380)="c1b910f5f84625205340368c11646a0d0a1d66ea8130a1ea5e3b3ded915a90ad56fe93a4eb03a7efbe1fae1e5b7b29015cfd4d8bd116c3604559683f77be35bdbe80246d520368f2ef77b2cf1a51db483843b5e63ef85f47fbb477ba4472d853d41949790c7a5fdf3f2e0faddeea6c336063264a900fa57462d047f5cce7a7ab9baba309c380b9ab580637fe1901871e21622acfb6a37fb092ce4e97e76290df378e18681474dcc032592b6503c918013bdffd", 0xb3}, {&(0x7f0000000480)="de9befddf7c91ed8f12c80c0491101265030b306cef13ce2a5ee3bcc27093937598cf03fc9a96b882150cd15fbe67e1ea899b463dc423b667358eef252e699c54df395168d673a18770b7760ba4d93d7d45c15754405c0663ed9e82cb93919ca29863dcabbdd", 0x66}, {&(0x7f0000000600)}, {&(0x7f0000000700)}], 0x5}, 0x4040000) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000040082ff6a76000010000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x25, 0x1, 0x0) write$cgroup_subtree(r9, 0x0, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000050a10000000000000029e93ba2a262", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x20) r11 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x6419599304258992) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x4}, 0x38) 0s ago: executing program 35 (id=1948): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000008000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec00000fe02009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 8347] syzkaller0: entered promiscuous mode [ 208.617629][ T8347] syzkaller0: entered allmulticast mode [ 208.660627][ T8360] veth1_to_bond: entered allmulticast mode [ 208.802222][ T8367] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.854'. [ 210.246330][ T8374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.858'. [ 210.637693][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.493982][ T8390] IPv6: Can't replace route, no match found [ 211.698026][ T8399] FAULT_INJECTION: forcing a failure. [ 211.698026][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 211.713639][ T8399] CPU: 0 PID: 8399 Comm: syz.0.867 Not tainted syzkaller #0 [ 211.720975][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.731043][ T8399] Call Trace: [ 211.734338][ T8399] [ 211.737284][ T8399] dump_stack_lvl+0x18c/0x250 [ 211.741987][ T8399] ? show_regs_print_info+0x20/0x20 [ 211.747205][ T8399] ? load_image+0x420/0x420 [ 211.756202][ T8399] ? __might_sleep+0xe0/0xe0 [ 211.760832][ T8399] ? __lock_acquire+0x7d80/0x7d80 [ 211.765943][ T8399] should_fail_ex+0x394/0x4c0 [ 211.770674][ T8399] should_failslab+0x9/0x20 [ 211.775215][ T8399] slab_pre_alloc_hook+0x59/0x300 [ 211.780271][ T8399] ? __lock_acquire+0x7d80/0x7d80 [ 211.785333][ T8399] kmem_cache_alloc+0x5a/0x2c0 [ 211.790118][ T8399] ? security_file_alloc+0x34/0x120 [ 211.795346][ T8399] security_file_alloc+0x34/0x120 [ 211.800398][ T8399] init_file+0x94/0x1f0 [ 211.804577][ T8399] alloc_empty_file+0xb7/0x1d0 [ 211.809361][ T8399] path_openat+0x120/0x3270 [ 211.813902][ T8399] ? perf_trace_lock+0xfc/0x3b0 [ 211.818768][ T8399] ? __x64_sys_openat+0x139/0x160 [ 211.823811][ T8399] ? do_syscall_64+0x55/0xb0 [ 211.828426][ T8399] ? verify_lock_unused+0x140/0x140 [ 211.833645][ T8399] ? do_filp_open+0x430/0x430 [ 211.838338][ T8399] ? perf_trace_lock+0xfc/0x3b0 [ 211.843221][ T8399] do_filp_open+0x1f2/0x430 [ 211.847742][ T8399] ? vfs_tmpfile+0x620/0x620 [ 211.852369][ T8399] ? _raw_spin_unlock+0x28/0x40 [ 211.857233][ T8399] ? alloc_fd+0x590/0x640 [ 211.861598][ T8399] do_sys_openat2+0x134/0x1d0 [ 211.866308][ T8399] ? do_sys_open+0xe0/0xe0 [ 211.870747][ T8399] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.876750][ T8399] ? lock_chain_count+0x20/0x20 [ 211.881622][ T8399] __x64_sys_openat+0x139/0x160 [ 211.886496][ T8399] do_syscall_64+0x55/0xb0 [ 211.890930][ T8399] ? clear_bhb_loop+0x40/0x90 [ 211.895623][ T8399] ? clear_bhb_loop+0x40/0x90 [ 211.900318][ T8399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.906234][ T8399] RIP: 0033:0x7fdd1455e98e [ 211.910671][ T8399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.930307][ T8399] RSP: 002b:00007fdd154f4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.938759][ T8399] RAX: ffffffffffffffda RBX: 00007fdd154f56c0 RCX: 00007fdd1455e98e [ 211.946760][ T8399] RDX: 0000000000000000 RSI: 00007fdd154f4f90 RDI: ffffffffffffff9c [ 211.954761][ T8399] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 211.962759][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.970756][ T8399] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 211.978764][ T8399] [ 213.550461][ T8418] Ù: renamed from bond_slave_1 [ 215.139302][ T8433] syzkaller0: entered promiscuous mode [ 215.154922][ T8433] syzkaller0: entered allmulticast mode [ 218.785617][ T8447] netlink: 'syz.1.884': attribute type 6 has an invalid length. [ 218.793308][ T8447] netlink: 140 bytes leftover after parsing attributes in process `syz.1.884'. [ 219.050385][ T8452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.887'. [ 219.093198][ T8452] debugfs: Directory 'ô!ôÿ' with parent 'ieee80211' already present! [ 219.467850][ T8460] raw_sendmsg: syz.1.890 forgot to set AF_INET. Fix it! [ 219.675067][ T8464] netlink: 'syz.1.892': attribute type 21 has an invalid length. [ 219.858792][ T8472] netlink: 'syz.0.886': attribute type 21 has an invalid length. [ 219.876156][ T8472] netlink: 'syz.0.886': attribute type 7 has an invalid length. [ 220.785148][ T8495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.898'. [ 220.939338][ T8495] hsr_slave_0: left promiscuous mode [ 221.161187][ T8495] nr0: port 1(hsr0) entered disabled state [ 221.297455][ T8503] FAULT_INJECTION: forcing a failure. [ 221.297455][ T8503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.327051][ T8503] CPU: 0 PID: 8503 Comm: syz.0.902 Not tainted syzkaller #0 [ 221.334408][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.344498][ T8503] Call Trace: [ 221.347810][ T8503] [ 221.350771][ T8503] dump_stack_lvl+0x18c/0x250 [ 221.355487][ T8503] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.361679][ T8503] ? show_regs_print_info+0x20/0x20 [ 221.366913][ T8503] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.373119][ T8503] should_fail_ex+0x394/0x4c0 [ 221.377838][ T8503] _copy_to_user+0x2f/0xa0 [ 221.382295][ T8503] bpf_test_finish+0x25a/0x650 [ 221.387099][ T8503] ? dst_hold+0x70/0x70 [ 221.391294][ T8503] ? convert_skb_to___skb+0x420/0x420 [ 221.396717][ T8503] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 221.402134][ T8503] ? __lock_acquire+0x7d80/0x7d80 [ 221.407206][ T8503] ? dev_put+0x80/0x80 [ 221.411324][ T8503] ? dev_put+0x80/0x80 [ 221.415432][ T8503] bpf_prog_test_run+0x31f/0x390 [ 221.420406][ T8503] __sys_bpf+0x49d/0x890 [ 221.424675][ T8503] ? read_tsc+0x9/0x20 [ 221.428776][ T8503] ? bpf_link_show_fdinfo+0x560/0x560 [ 221.434192][ T8503] ? lock_chain_count+0x20/0x20 [ 221.439071][ T8503] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 221.445091][ T8503] __x64_sys_bpf+0x7c/0x90 [ 221.449539][ T8503] do_syscall_64+0x55/0xb0 [ 221.453986][ T8503] ? clear_bhb_loop+0x40/0x90 [ 221.458701][ T8503] ? clear_bhb_loop+0x40/0x90 [ 221.463424][ T8503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.469353][ T8503] RIP: 0033:0x7fdd1459e159 [ 221.473797][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.493434][ T8503] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.501884][ T8503] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 221.509891][ T8503] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 221.517894][ T8503] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 221.525891][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.533884][ T8503] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 221.541890][ T8503] [ 221.641318][ T8495] hsr0 (unregistering): left allmulticast mode [ 221.653990][ T8495] hsr0 (unregistering): left promiscuous mode [ 221.673325][ T8495] nr0: port 1(hsr0) entered disabled state [ 221.974196][ T8514] netlink: 144 bytes leftover after parsing attributes in process `syz.3.904'. [ 222.005388][ T8514] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 222.412099][ T8528] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.908'. [ 222.432214][ T8528] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.908'. [ 222.567603][ T8533] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.908'. [ 222.594501][ T8533] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.908'. [ 224.800852][ T8543] syzkaller0: entered promiscuous mode [ 224.806605][ T8543] syzkaller0: entered allmulticast mode [ 224.853300][ T8546] FAULT_INJECTION: forcing a failure. [ 224.853300][ T8546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.869267][ T8546] CPU: 0 PID: 8546 Comm: syz.0.913 Not tainted syzkaller #0 [ 224.876591][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.886655][ T8546] Call Trace: [ 224.889931][ T8546] [ 224.892856][ T8546] dump_stack_lvl+0x18c/0x250 [ 224.897629][ T8546] ? show_regs_print_info+0x20/0x20 [ 224.902829][ T8546] ? load_image+0x420/0x420 [ 224.907334][ T8546] ? __might_fault+0xaa/0x120 [ 224.912027][ T8546] ? __lock_acquire+0x7d80/0x7d80 [ 224.917058][ T8546] should_fail_ex+0x394/0x4c0 [ 224.921763][ T8546] _copy_to_user+0x2f/0xa0 [ 224.926197][ T8546] bpf_test_finish+0x4e7/0x650 [ 224.930984][ T8546] ? bpf_test_run+0x174/0x870 [ 224.935678][ T8546] ? convert_skb_to___skb+0x420/0x420 [ 224.941080][ T8546] ? slab_build_skb+0x25a/0x3e0 [ 224.945952][ T8546] bpf_prog_test_run_skb+0x1135/0x18f0 [ 224.951440][ T8546] ? cpu_online+0x60/0x60 [ 224.955780][ T8546] bpf_prog_test_run+0x31f/0x390 [ 224.960739][ T8546] __sys_bpf+0x49d/0x890 [ 224.965005][ T8546] ? bpf_link_show_fdinfo+0x560/0x560 [ 224.970389][ T8546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.976561][ T8546] __x64_sys_bpf+0x7c/0x90 [ 224.980983][ T8546] do_syscall_64+0x55/0xb0 [ 224.985399][ T8546] ? clear_bhb_loop+0x40/0x90 [ 224.990081][ T8546] ? clear_bhb_loop+0x40/0x90 [ 224.994756][ T8546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.000656][ T8546] RIP: 0033:0x7fdd1459e159 [ 225.005074][ T8546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.024682][ T8546] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.033096][ T8546] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 225.041066][ T8546] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 225.049031][ T8546] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 225.056997][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.064965][ T8546] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 225.072961][ T8546] [ 225.949535][ T8573] FAULT_INJECTION: forcing a failure. [ 225.949535][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 225.962832][ T8573] CPU: 0 PID: 8573 Comm: syz.0.922 Not tainted syzkaller #0 [ 225.970137][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.980206][ T8573] Call Trace: [ 225.983488][ T8573] [ 225.986424][ T8573] dump_stack_lvl+0x18c/0x250 [ 225.991098][ T8573] ? show_regs_print_info+0x20/0x20 [ 225.996291][ T8573] ? load_image+0x420/0x420 [ 226.000811][ T8573] ? fib_rules_unregister+0x330/0x330 [ 226.006175][ T8573] should_fail_ex+0x394/0x4c0 [ 226.010851][ T8573] should_failslab+0x9/0x20 [ 226.015366][ T8573] slab_pre_alloc_hook+0x59/0x300 [ 226.020407][ T8573] ? find_exception+0x175/0xa30 [ 226.025279][ T8573] kmem_cache_alloc+0x5a/0x2c0 [ 226.030047][ T8573] ? dst_alloc+0x105/0x170 [ 226.034467][ T8573] dst_alloc+0x105/0x170 [ 226.038711][ T8573] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 226.044782][ T8573] ? ip_route_output_key_hash+0x13d/0x330 [ 226.050503][ T8573] ip_route_output_key_hash+0x1f3/0x330 [ 226.056049][ T8573] ? ip_route_input_rcu+0x3120/0x3120 [ 226.061422][ T8573] ? mark_lock+0x94/0x320 [ 226.065759][ T8573] ip_route_output_flow+0x2a/0x150 [ 226.070878][ T8573] sctp_v4_get_dst+0x3e8/0x11d0 [ 226.075744][ T8573] ? sctp_v4_xmit+0xd10/0xd10 [ 226.080424][ T8573] ? rcu_force_quiescent_state+0x220/0x220 [ 226.086229][ T8573] ? _raw_spin_unlock+0x40/0x40 [ 226.091076][ T8573] ? dst_release+0x121/0x1a0 [ 226.095678][ T8573] sctp_transport_pmtu+0x126/0x580 [ 226.100786][ T8573] sctp_transport_route+0x183/0x2b0 [ 226.105985][ T8573] sctp_assoc_add_peer+0x6db/0x1440 [ 226.111187][ T8573] sctp_connect_new_asoc+0x323/0x6a0 [ 226.116472][ T8573] ? __sctp_connect+0xd80/0xd80 [ 226.121315][ T8573] ? __local_bh_enable_ip+0x13a/0x1c0 [ 226.126695][ T8573] ? _local_bh_enable+0xa0/0xa0 [ 226.131545][ T8573] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 226.137351][ T8573] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 226.143242][ T8573] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 226.148792][ T8573] ? security_sctp_bind_connect+0x89/0xb0 [ 226.154509][ T8573] sctp_sendmsg+0x1519/0x27b0 [ 226.159193][ T8573] ? sctp_getsockopt+0xb60/0xb60 [ 226.164219][ T8573] ? aa_af_perm+0x330/0x330 [ 226.168722][ T8573] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 226.175137][ T8573] ? sock_rps_record_flow+0x19/0x3f0 [ 226.180415][ T8573] ? inet_sendmsg+0x7e/0x2a0 [ 226.184995][ T8573] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 226.190294][ T8573] ? inet_send_prepare+0x250/0x250 [ 226.195397][ T8573] ____sys_sendmsg+0x61b/0x980 [ 226.200163][ T8573] ? __asan_memset+0x22/0x40 [ 226.204793][ T8573] ? __sys_sendmsg_sock+0x30/0x30 [ 226.209840][ T8573] ? __import_iovec+0x5f2/0x850 [ 226.214697][ T8573] ? import_iovec+0x73/0xa0 [ 226.219204][ T8573] ___sys_sendmsg+0x2a6/0x360 [ 226.223882][ T8573] ? __sys_sendmsg+0x2b0/0x2b0 [ 226.228674][ T8573] ? trace_call_bpf+0xc3/0x6c0 [ 226.233464][ T8573] __se_sys_sendmsg+0x1d0/0x2c0 [ 226.238351][ T8573] ? perf_trace_preemptirq_template+0x269/0x330 [ 226.244611][ T8573] ? __x64_sys_sendmsg+0x80/0x80 [ 226.249651][ T8573] ? lockdep_hardirqs_on+0x98/0x150 [ 226.254856][ T8573] do_syscall_64+0x55/0xb0 [ 226.259269][ T8573] ? clear_bhb_loop+0x40/0x90 [ 226.263943][ T8573] ? clear_bhb_loop+0x40/0x90 [ 226.268621][ T8573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.274510][ T8573] RIP: 0033:0x7fdd1459e159 [ 226.278921][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.298614][ T8573] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.307026][ T8573] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 226.315007][ T8573] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000006 [ 226.323077][ T8573] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 226.331069][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.339051][ T8573] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 226.347035][ T8573] [ 227.464897][ T8576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.615548][ T8581] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 227.636182][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.925'. [ 227.666307][ T8581] veth0_vlan: left promiscuous mode [ 227.672589][ T8581] veth0_vlan: entered promiscuous mode [ 227.693293][ T8581] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 227.746060][ T8583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.926'. [ 227.876925][ T8583] bond0 (unregistering): (slave 30): Releasing backup interface [ 227.931571][ T8583] bond0 (unregistering): (slave 5@0Ù): Releasing backup interface [ 227.953828][ T8583] bond0 (unregistering): Released all slaves [ 228.390173][ T8597] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.932'. [ 228.665674][ T8602] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.934'. [ 228.723750][ T8602] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 228.997937][ T8602] team0: Port device wlan1 added [ 229.352728][ T8616] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 229.372847][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'. [ 229.390036][ T8616] bridge0: port 3(veth0_vlan) entered blocking state [ 229.398142][ T8616] bridge0: port 3(veth0_vlan) entered disabled state [ 229.414853][ T8616] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 230.703424][ T8641] netlink: 'syz.1.946': attribute type 39 has an invalid length. [ 230.787533][ T8641] hsr_slave_1 (unregistering): left promiscuous mode [ 231.748216][ T8668] delete_channel: no stack [ 231.766726][ T8668] delete_channel: no stack [ 232.041953][ T8671] netlink: 'syz.0.954': attribute type 21 has an invalid length. [ 232.071690][ T8671] netlink: 'syz.0.954': attribute type 7 has an invalid length. [ 232.236809][ T8678] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 232.258261][ T8678] netlink: 152 bytes leftover after parsing attributes in process `syz.0.958'. [ 232.423323][ T8684] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.960'. [ 232.524632][ T8684] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 233.340107][ T8703] delete_channel: no stack [ 234.187914][ T8732] netlink: 188 bytes leftover after parsing attributes in process `syz.3.976'. [ 234.839172][ T8745] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 234.863524][ T8745] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.979'. [ 235.253928][ T8759] syzkaller0: entered promiscuous mode [ 235.260955][ T8759] syzkaller0: entered allmulticast mode [ 237.728315][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.989'. [ 237.737807][ T8772] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 237.745863][ T8772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.989'. [ 237.758727][ T8772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.799676][ T8775] netlink: 'syz.2.989': attribute type 12 has an invalid length. [ 237.812782][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.989'. [ 238.627218][ T8823] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1003'. [ 238.735769][ T8828] netlink: 'syz.2.1004': attribute type 9 has an invalid length. [ 238.764974][ T8828] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1004'. [ 238.818265][ T8832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1006'. [ 239.289414][ T8842] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1011'. [ 239.688803][ T8861] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1018'. [ 239.771208][ T8865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1018'. [ 240.970952][ T8885] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1025'. [ 242.038196][ T8917] netlink: 'syz.2.1037': attribute type 21 has an invalid length. [ 242.089280][ T8917] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 242.219655][ T8922] netlink: 'syz.1.1039': attribute type 27 has an invalid length. [ 242.262489][ T8922] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1039'. [ 242.305099][ T8927] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 242.471101][ T8932] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.1043'. [ 244.308061][ T8963] ¥: port 1(team0) entered blocking state [ 244.314025][ T8963] ¥: port 1(team0) entered disabled state [ 244.666352][ T8974] syzkaller0: entered promiscuous mode [ 244.671871][ T8974] syzkaller0: entered allmulticast mode [ 246.019867][ T9004] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1065'. [ 247.469884][ T8987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.477161][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 247.484467][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 247.491772][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 247.724349][ T8991] syzkaller0: entered promiscuous mode [ 247.784201][ T8991] syzkaller0: entered allmulticast mode [ 249.435021][ T9022] netlink: 'syz.1.1072': attribute type 21 has an invalid length. [ 249.442878][ T9022] netlink: 'syz.1.1072': attribute type 7 has an invalid length. [ 249.591292][ T9027] netlink: 'syz.3.1074': attribute type 8 has an invalid length. [ 249.602859][ T9027] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1074'. [ 249.623659][ T9029] netlink: 'syz.3.1074': attribute type 23 has an invalid length. [ 249.652710][ T9029] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1074'. [ 250.554269][ T9046] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1081'. [ 250.984297][ T9062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1090'. [ 251.036394][ T9062] FAULT_INJECTION: forcing a failure. [ 251.036394][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 251.071443][ T9062] CPU: 1 PID: 9062 Comm: syz.1.1090 Not tainted syzkaller #0 [ 251.078890][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.088988][ T9062] Call Trace: [ 251.092304][ T9062] [ 251.095274][ T9062] dump_stack_lvl+0x18c/0x250 [ 251.100001][ T9062] ? show_regs_print_info+0x20/0x20 [ 251.105246][ T9062] ? load_image+0x420/0x420 [ 251.109805][ T9062] ? __might_sleep+0xe0/0xe0 [ 251.114435][ T9062] ? __lock_acquire+0x7d80/0x7d80 [ 251.119516][ T9062] should_fail_ex+0x394/0x4c0 [ 251.124253][ T9062] should_failslab+0x9/0x20 [ 251.128808][ T9062] slab_pre_alloc_hook+0x59/0x300 [ 251.133876][ T9062] ? lockdep_hardirqs_on+0x98/0x150 [ 251.139089][ T9062] kmem_cache_alloc_node+0x5e/0x310 [ 251.144297][ T9062] ? __alloc_skb+0x103/0x2c0 [ 251.148906][ T9062] __alloc_skb+0x103/0x2c0 [ 251.153339][ T9062] netlink_ack+0x377/0x1160 [ 251.157886][ T9062] ? __dev_queue_xmit+0x272/0x37e0 [ 251.163030][ T9062] ? netlink_dump+0xec0/0xec0 [ 251.167717][ T9062] ? perf_trace_lock+0xfc/0x3b0 [ 251.172588][ T9062] netlink_rcv_skb+0x2b3/0x4c0 [ 251.177359][ T9062] ? rtnetlink_bind+0x80/0x80 [ 251.182048][ T9062] ? netlink_ack+0x1160/0x1160 [ 251.186832][ T9062] ? __lock_acquire+0x7d80/0x7d80 [ 251.191882][ T9062] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.197095][ T9062] netlink_unicast+0x7b1/0x930 [ 251.201877][ T9062] netlink_sendmsg+0x8d0/0xbf0 [ 251.206660][ T9062] ? netlink_getsockopt+0x590/0x590 [ 251.211866][ T9062] ? apparmor_socket_sendmsg+0x8e/0x330 [ 251.217421][ T9062] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.222713][ T9062] ? security_socket_sendmsg+0x80/0xa0 [ 251.228174][ T9062] ? netlink_getsockopt+0x590/0x590 [ 251.233383][ T9062] ____sys_sendmsg+0x61b/0x980 [ 251.238165][ T9062] ? __asan_memset+0x22/0x40 [ 251.242763][ T9062] ? __sys_sendmsg_sock+0x30/0x30 [ 251.247796][ T9062] ? __import_iovec+0x5f2/0x850 [ 251.252669][ T9062] ? import_iovec+0x73/0xa0 [ 251.257184][ T9062] ___sys_sendmsg+0x2a6/0x360 [ 251.261875][ T9062] ? __sys_sendmsg+0x2b0/0x2b0 [ 251.266672][ T9062] ? __lock_acquire+0x7d80/0x7d80 [ 251.271733][ T9062] __se_sys_sendmsg+0x1d0/0x2c0 [ 251.276601][ T9062] ? __x64_sys_sendmsg+0x80/0x80 [ 251.281570][ T9062] ? lockdep_hardirqs_on+0x98/0x150 [ 251.286781][ T9062] do_syscall_64+0x55/0xb0 [ 251.291213][ T9062] ? clear_bhb_loop+0x40/0x90 [ 251.295901][ T9062] ? clear_bhb_loop+0x40/0x90 [ 251.300583][ T9062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.306487][ T9062] RIP: 0033:0x7fcba4f9e159 [ 251.310908][ T9062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.330531][ T9062] RSP: 002b:00007fcba5ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.338966][ T9062] RAX: ffffffffffffffda RBX: 00007fcba5225fa0 RCX: 00007fcba4f9e159 [ 251.346941][ T9062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 251.354923][ T9062] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 251.362895][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.370981][ T9062] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 251.378977][ T9062] [ 251.469501][ T9071] FAULT_INJECTION: forcing a failure. [ 251.469501][ T9071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.494505][ T9071] CPU: 1 PID: 9071 Comm: syz.2.1094 Not tainted syzkaller #0 [ 251.501936][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.512017][ T9071] Call Trace: [ 251.515318][ T9071] [ 251.518267][ T9071] dump_stack_lvl+0x18c/0x250 [ 251.522980][ T9071] ? show_regs_print_info+0x20/0x20 [ 251.528199][ T9071] ? load_image+0x420/0x420 [ 251.532707][ T9071] ? __might_fault+0xaa/0x120 [ 251.537382][ T9071] ? __lock_acquire+0x7d80/0x7d80 [ 251.542409][ T9071] should_fail_ex+0x394/0x4c0 [ 251.547087][ T9071] _copy_from_iter+0x1cd/0x1290 [ 251.551934][ T9071] ? rep_movs_alternative+0x4a/0x90 [ 251.557160][ T9071] ? copyout_mc+0x70/0x70 [ 251.561695][ T9071] ? copyout_mc+0x70/0x70 [ 251.566045][ T9071] ? __virt_addr_valid+0x10c/0x380 [ 251.571164][ T9071] ? page_copy_sane+0x16a/0x270 [ 251.576022][ T9071] copy_page_from_iter+0x7b/0x100 [ 251.581104][ T9071] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 251.586921][ T9071] tun_get_user+0xc99/0x3d30 [ 251.591530][ T9071] ? trace_event_raw_event_lock+0x240/0x240 [ 251.597450][ T9071] ? aa_file_perm+0x3e3/0xee0 [ 251.602118][ T9071] ? rcu_read_unlock+0xa0/0xa0 [ 251.606886][ T9071] ? tun_get+0x1c/0x2e0 [ 251.611125][ T9071] ? __lock_acquire+0x7d80/0x7d80 [ 251.616150][ T9071] ? tun_get+0x1c/0x2e0 [ 251.620307][ T9071] tun_chr_write_iter+0x119/0x200 [ 251.625334][ T9071] vfs_write+0x474/0x9a0 [ 251.629587][ T9071] ? file_end_write+0x250/0x250 [ 251.634469][ T9071] ? __fget_files+0x3fc/0x460 [ 251.639193][ T9071] ? __fdget_pos+0x1d8/0x330 [ 251.643811][ T9071] ? ksys_write+0x74/0x260 [ 251.648252][ T9071] ksys_write+0x151/0x260 [ 251.652606][ T9071] ? __ia32_sys_read+0x90/0x90 [ 251.657393][ T9071] ? lockdep_hardirqs_on+0x98/0x150 [ 251.662601][ T9071] do_syscall_64+0x55/0xb0 [ 251.667025][ T9071] ? clear_bhb_loop+0x40/0x90 [ 251.671710][ T9071] ? clear_bhb_loop+0x40/0x90 [ 251.676408][ T9071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.682309][ T9071] RIP: 0033:0x7fa77c59e159 [ 251.686732][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.706352][ T9071] RSP: 002b:00007fa77d444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.714774][ T9071] RAX: ffffffffffffffda RBX: 00007fa77c825fa0 RCX: 00007fa77c59e159 [ 251.722770][ T9071] RDX: 000000000000fdef RSI: 0000200000000480 RDI: 00000000000000c8 [ 251.730747][ T9071] RBP: 00007fa77d444090 R08: 0000000000000000 R09: 0000000000000000 [ 251.738729][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.746704][ T9071] R13: 00007fa77c826038 R14: 00007fa77c825fa0 R15: 00007fffe38f03e8 [ 251.754697][ T9071] [ 253.616542][ T9083] netlink: 'syz.1.1098': attribute type 21 has an invalid length. [ 253.624418][ T9083] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1098'. [ 253.633829][ T9083] netlink: 'syz.1.1098': attribute type 4 has an invalid length. [ 253.642099][ T9089] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 253.670272][ T9089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'. [ 253.698774][ T9089] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 254.037100][ T9099] netlink: 'syz.1.1103': attribute type 9 has an invalid length. [ 254.072860][ T9099] netlink: 'syz.1.1103': attribute type 23 has an invalid length. [ 254.090320][ T9099] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.1103'. [ 254.211947][ T9105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'. [ 254.229174][ T9105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'. [ 254.808264][ T9121] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1111'. [ 255.181007][ T9128] syzkaller0: entered promiscuous mode [ 255.195721][ T9128] syzkaller0: entered allmulticast mode [ 255.923910][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.930658][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.752868][ T9143] netlink: 'syz.3.1119': attribute type 2 has an invalid length. [ 258.760908][ T9152] netlink: 'syz.2.1123': attribute type 2 has an invalid length. [ 258.770615][ T9153] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 258.794054][ T9153] team0: left allmulticast mode [ 258.799058][ T9153] team_slave_1: left allmulticast mode [ 258.804554][ T9153] team0: left promiscuous mode [ 258.811425][ T9153] team_slave_1: left promiscuous mode [ 258.817301][ T9153] macvlan1: left promiscuous mode [ 258.823095][ T9153] ¥: port 1(team0) entered disabled state [ 258.996892][ T9163] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1126'. [ 259.525644][ T9179] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1133'. [ 259.947508][ T9196] FAULT_INJECTION: forcing a failure. [ 259.947508][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 259.960328][ T9196] CPU: 0 PID: 9196 Comm: syz.1.1139 Not tainted syzkaller #0 [ 259.967733][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.977811][ T9196] Call Trace: [ 259.981109][ T9196] [ 259.984052][ T9196] dump_stack_lvl+0x18c/0x250 [ 259.988746][ T9196] ? show_regs_print_info+0x20/0x20 [ 259.993956][ T9196] ? load_image+0x420/0x420 [ 259.998471][ T9196] should_fail_ex+0x394/0x4c0 [ 260.003156][ T9196] should_failslab+0x9/0x20 [ 260.007699][ T9196] slab_pre_alloc_hook+0x59/0x300 [ 260.012732][ T9196] kmem_cache_alloc+0x5a/0x2c0 [ 260.017497][ T9196] ? skb_clone+0x1eb/0x370 [ 260.021921][ T9196] skb_clone+0x1eb/0x370 [ 260.026168][ T9196] bpf_clone_redirect+0x16d/0x4a0 [ 260.031289][ T9196] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 260.036745][ T9196] ? perf_event_mmap+0x540/0x1600 [ 260.041773][ T9196] ? perf_trace_preemptirq_template+0x269/0x330 [ 260.048017][ T9196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 260.053995][ T9196] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 260.059278][ T9196] ? lock_chain_count+0x20/0x20 [ 260.064124][ T9196] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 260.070375][ T9196] ? __local_bh_disable_ip+0x108/0x1a0 [ 260.075834][ T9196] ? __cant_sleep+0x220/0x220 [ 260.080508][ T9196] ? __local_bh_enable_ip+0x13a/0x1c0 [ 260.085875][ T9196] ? _local_bh_enable+0xa0/0xa0 [ 260.090724][ T9196] ? bpf_test_timer_continue+0x135/0x380 [ 260.096361][ T9196] ? bpf_test_run+0x174/0x870 [ 260.101144][ T9196] bpf_test_run+0x2df/0x870 [ 260.105683][ T9196] ? bpf_test_run+0x174/0x870 [ 260.110391][ T9196] ? dst_hold+0x70/0x70 [ 260.114558][ T9196] ? eth_get_headlen+0x210/0x210 [ 260.119505][ T9196] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 260.124913][ T9196] ? cpu_online+0x60/0x60 [ 260.129254][ T9196] bpf_prog_test_run+0x31f/0x390 [ 260.134197][ T9196] __sys_bpf+0x49d/0x890 [ 260.138453][ T9196] ? bpf_link_show_fdinfo+0x560/0x560 [ 260.143853][ T9196] ? lock_chain_count+0x20/0x20 [ 260.148718][ T9196] __x64_sys_bpf+0x7c/0x90 [ 260.153138][ T9196] do_syscall_64+0x55/0xb0 [ 260.157557][ T9196] ? clear_bhb_loop+0x40/0x90 [ 260.162238][ T9196] ? clear_bhb_loop+0x40/0x90 [ 260.166921][ T9196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.172816][ T9196] RIP: 0033:0x7fcba4f9e159 [ 260.177256][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.196862][ T9196] RSP: 002b:00007fcba5ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.205274][ T9196] RAX: ffffffffffffffda RBX: 00007fcba5225fa0 RCX: 00007fcba4f9e159 [ 260.213241][ T9196] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 260.221207][ T9196] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 260.229171][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.237134][ T9196] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 260.245117][ T9196] [ 260.462441][ T9204] netlink: 'syz.2.1143': attribute type 39 has an invalid length. [ 260.717726][ T9209] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1145'. [ 262.132147][ T9253] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1159'. [ 262.844050][ T9268] netlink: 'syz.0.1166': attribute type 21 has an invalid length. [ 262.852283][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1166'. [ 264.153943][ T9305] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1180'. [ 264.313107][ T9310] netlink: 'syz.2.1183': attribute type 13 has an invalid length. [ 264.340981][ T9310] netlink: 'syz.2.1183': attribute type 58 has an invalid length. [ 264.352234][ T9310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1183'. [ 264.951230][ T9325] netlink: 'syz.2.1189': attribute type 29 has an invalid length. [ 264.975267][ T9325] netlink: 'syz.2.1189': attribute type 29 has an invalid length. [ 266.858129][ T9370] netlink: 'syz.1.1205': attribute type 3 has an invalid length. [ 266.874495][ T9368] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 266.897714][ T9368] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 266.915365][ T9370] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1205'. [ 267.468643][ T9382] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 267.478902][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1209'. [ 267.490706][ T9382] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 267.509624][ T9382] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.554155][ T9382] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 267.918840][ T9389] Ÿë: port 1(ip6gretap0) entered blocking state [ 267.926493][ T9389] Ÿë: port 1(ip6gretap0) entered disabled state [ 267.934153][ T9389] ip6gretap0: entered allmulticast mode [ 267.952686][ T9389] ip6gretap0: entered promiscuous mode [ 268.395214][ T9398] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1215'. [ 268.422309][ T9402] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1215'. [ 269.133230][ T9417] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1221'. [ 269.419070][ T9426] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 269.438902][ T9426] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 269.452401][ T9426] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 269.467154][ T9426] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 269.615167][ T9428] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1226'. [ 269.663732][ T9428] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.1226'. [ 269.674475][ T9428] tipc: Started in network mode [ 269.680748][ T9428] tipc: Node identity b, cluster identity 57 [ 269.689178][ T9428] tipc: Node number set to 11 [ 269.694542][ T9429] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 270.051996][ T9440] netlink: 'syz.1.1230': attribute type 15 has an invalid length. [ 270.074922][ T9440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1230'. [ 270.102514][ T9443] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 270.112668][ T9443] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 270.157266][ T9446] netlink: 'syz.2.1233': attribute type 3 has an invalid length. [ 270.165809][ T9446] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1233'. [ 270.508348][ T9454] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 270.967690][ T9454] team0 (unregistering): Port device team_slave_0 removed [ 270.997910][ T9454] team0 (unregistering): Port device team_slave_1 removed [ 271.217093][ T9466] FAULT_INJECTION: forcing a failure. [ 271.217093][ T9466] name failslab, interval 1, probability 0, space 0, times 0 [ 271.231802][ T9466] CPU: 0 PID: 9466 Comm: syz.1.1241 Not tainted syzkaller #0 [ 271.239246][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.249351][ T9466] Call Trace: [ 271.252668][ T9466] [ 271.255635][ T9466] dump_stack_lvl+0x18c/0x250 [ 271.260373][ T9466] ? show_regs_print_info+0x20/0x20 [ 271.265623][ T9466] ? load_image+0x420/0x420 [ 271.270179][ T9466] ? __lock_acquire+0x7d80/0x7d80 [ 271.275262][ T9466] should_fail_ex+0x394/0x4c0 [ 271.279997][ T9466] should_failslab+0x9/0x20 [ 271.284537][ T9466] slab_pre_alloc_hook+0x59/0x300 [ 271.289624][ T9466] kmem_cache_alloc+0x5a/0x2c0 [ 271.294428][ T9466] ? alloc_empty_file+0x9e/0x1d0 [ 271.299419][ T9466] alloc_empty_file+0x9e/0x1d0 [ 271.304221][ T9466] path_openat+0x120/0x3270 [ 271.308764][ T9466] ? trace_call_bpf+0xc3/0x6c0 [ 271.313622][ T9466] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 271.319479][ T9466] ? verify_lock_unused+0x140/0x140 [ 271.324718][ T9466] ? do_filp_open+0x430/0x430 [ 271.329462][ T9466] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 271.336122][ T9466] do_filp_open+0x1f2/0x430 [ 271.340684][ T9466] ? vfs_tmpfile+0x620/0x620 [ 271.345382][ T9466] ? _raw_spin_unlock+0x28/0x40 [ 271.350271][ T9466] ? alloc_fd+0x590/0x640 [ 271.354672][ T9466] do_sys_openat2+0x134/0x1d0 [ 271.359391][ T9466] ? perf_trace_preemptirq_template+0x269/0x330 [ 271.365687][ T9466] ? do_sys_open+0xe0/0xe0 [ 271.370147][ T9466] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.376174][ T9466] ? lock_chain_count+0x20/0x20 [ 271.381083][ T9466] __x64_sys_openat+0x139/0x160 [ 271.385990][ T9466] do_syscall_64+0x55/0xb0 [ 271.390446][ T9466] ? clear_bhb_loop+0x40/0x90 [ 271.395164][ T9466] ? clear_bhb_loop+0x40/0x90 [ 271.399895][ T9466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.405830][ T9466] RIP: 0033:0x7fcba4f5e98e [ 271.410285][ T9466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.429933][ T9466] RSP: 002b:00007fcba5ef3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.438391][ T9466] RAX: ffffffffffffffda RBX: 00007fcba5ef46c0 RCX: 00007fcba4f5e98e [ 271.446400][ T9466] RDX: 0000000000000000 RSI: 00007fcba5ef3f90 RDI: ffffffffffffff9c [ 271.454402][ T9466] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.462405][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.470410][ T9466] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 271.478467][ T9466] [ 272.265789][ T9481] netlink: 'syz.1.1247': attribute type 27 has an invalid length. [ 272.331455][ T9481] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 272.349792][ T9481] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1247'. [ 272.817260][ T9486] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1248'. [ 274.456697][ T9513] validate_nla: 6 callbacks suppressed [ 274.456708][ T9513] netlink: 'syz.2.1253': attribute type 27 has an invalid length. [ 275.373585][ T9519] netlink: 'syz.3.1257': attribute type 21 has an invalid length. [ 275.404083][ T9519] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1257'. [ 275.428808][ T9519] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 275.463311][ T9519] macvlan1: entered allmulticast mode [ 275.517003][ T9519] veth1_vlan: entered allmulticast mode [ 275.540500][ T9519] team0: Port device macvlan1 added [ 275.547595][ T9521] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 275.767749][ T9525] Ÿë: port 1(ip6gretap0) entered blocking state [ 275.781435][ T9525] Ÿë: port 1(ip6gretap0) entered disabled state [ 275.789609][ T9525] ip6gretap0: entered allmulticast mode [ 275.806906][ T9525] ip6gretap0: entered promiscuous mode [ 275.930735][ T9528] syzkaller0: entered promiscuous mode [ 275.940139][ T9528] syzkaller0: entered allmulticast mode [ 278.364418][ T9556] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 278.375342][ T9558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'. [ 278.504612][ T9566] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 278.614139][ T9571] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1274'. [ 278.684126][ T9571] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 278.734243][ T9576] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 278.764095][ T9576] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 278.794005][ T9578] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 278.839127][ T9576] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 279.090831][ T9573] FAULT_INJECTION: forcing a failure. [ 279.090831][ T9573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.123131][ T9573] CPU: 1 PID: 9573 Comm: syz.0.1273 Not tainted syzkaller #0 [ 279.130562][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.140989][ T9573] Call Trace: [ 279.144284][ T9573] [ 279.147245][ T9573] dump_stack_lvl+0x18c/0x250 [ 279.151953][ T9573] ? show_regs_print_info+0x20/0x20 [ 279.157189][ T9573] ? load_image+0x420/0x420 [ 279.161722][ T9573] ? __might_fault+0xaa/0x120 [ 279.166424][ T9573] ? __lock_acquire+0x7d80/0x7d80 [ 279.171491][ T9573] should_fail_ex+0x394/0x4c0 [ 279.176205][ T9573] _copy_to_user+0x2f/0xa0 [ 279.180643][ T9573] bpf_test_finish+0x25a/0x650 [ 279.185442][ T9573] ? dst_hold+0x70/0x70 [ 279.189628][ T9573] ? convert_skb_to___skb+0x420/0x420 [ 279.195031][ T9573] ? bpf_prog_change_xdp+0x12/0x30 [ 279.200181][ T9573] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 279.205592][ T9573] ? __lock_acquire+0x7d80/0x7d80 [ 279.210650][ T9573] ? dev_put+0x80/0x80 [ 279.214752][ T9573] ? bpf_prog_test_run+0x313/0x390 [ 279.219892][ T9573] ? dev_put+0x80/0x80 [ 279.223988][ T9573] bpf_prog_test_run+0x31f/0x390 [ 279.228950][ T9573] __sys_bpf+0x49d/0x890 [ 279.233219][ T9573] ? bpf_link_show_fdinfo+0x560/0x560 [ 279.238622][ T9573] ? lock_chain_count+0x20/0x20 [ 279.243490][ T9573] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 279.249497][ T9573] __x64_sys_bpf+0x7c/0x90 [ 279.253930][ T9573] do_syscall_64+0x55/0xb0 [ 279.258366][ T9573] ? clear_bhb_loop+0x40/0x90 [ 279.263065][ T9573] ? clear_bhb_loop+0x40/0x90 [ 279.267763][ T9573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.273673][ T9573] RIP: 0033:0x7fdd1459e159 [ 279.278104][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.297748][ T9573] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.306182][ T9573] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 279.314167][ T9573] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 279.322148][ T9573] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 279.330132][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.338477][ T9573] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 279.346487][ T9573] [ 280.071242][ T9578] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 280.385626][ T9595] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 280.390704][ T9589] Ÿë: port 1(ip6gretap0) entered blocking state [ 280.406926][ T9595] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1279'. [ 280.409752][ T9589] Ÿë: port 1(ip6gretap0) entered disabled state [ 280.428375][ T9589] ip6gretap0: entered allmulticast mode [ 280.439154][ T9589] ip6gretap0: entered promiscuous mode [ 280.459088][ T9594] netlink: 'syz.3.1280': attribute type 4 has an invalid length. [ 280.736287][ T9599] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1282'. [ 280.746274][ T9599] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 281.108716][ T9608] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 281.115386][ T9608] pim6reg0: ignored: set checksum disabled [ 281.482055][ T9622] netlink: 'syz.2.1293': attribute type 4 has an invalid length. [ 282.147102][ T9641] FAULT_INJECTION: forcing a failure. [ 282.147102][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.176089][ T9639] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1301'. [ 282.176290][ T9641] CPU: 0 PID: 9641 Comm: syz.3.1299 Not tainted syzkaller #0 [ 282.192469][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.202554][ T9641] Call Trace: [ 282.205952][ T9641] [ 282.208908][ T9641] dump_stack_lvl+0x18c/0x250 [ 282.213623][ T9641] ? show_regs_print_info+0x20/0x20 [ 282.218852][ T9641] ? load_image+0x420/0x420 [ 282.223645][ T9641] ? __might_fault+0xaa/0x120 [ 282.228344][ T9641] ? __lock_acquire+0x7d80/0x7d80 [ 282.233400][ T9641] should_fail_ex+0x394/0x4c0 [ 282.238114][ T9641] _copy_from_iter+0x1cd/0x1290 [ 282.242998][ T9641] ? rep_movs_alternative+0x4a/0x90 [ 282.248216][ T9641] ? copyout_mc+0x70/0x70 [ 282.252560][ T9641] ? copyout_mc+0x70/0x70 [ 282.256895][ T9641] ? __virt_addr_valid+0x10c/0x380 [ 282.262015][ T9641] ? page_copy_sane+0x4e/0x270 [ 282.266783][ T9641] copy_page_from_iter+0x7b/0x100 [ 282.271814][ T9641] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 282.277630][ T9641] tun_get_user+0xc99/0x3d30 [ 282.282233][ T9641] ? aa_file_perm+0x3e3/0xee0 [ 282.286916][ T9641] ? rcu_read_unlock+0xa0/0xa0 [ 282.291690][ T9641] ? tun_get+0x1c/0x2e0 [ 282.295846][ T9641] ? __lock_acquire+0x7d80/0x7d80 [ 282.300878][ T9641] ? tun_get+0x1c/0x2e0 [ 282.305041][ T9641] tun_chr_write_iter+0x119/0x200 [ 282.310071][ T9641] vfs_write+0x474/0x9a0 [ 282.314354][ T9641] ? file_end_write+0x250/0x250 [ 282.319213][ T9641] ? __fget_files+0x3fc/0x460 [ 282.323897][ T9641] ? __fdget_pos+0x1d8/0x330 [ 282.328487][ T9641] ? ksys_write+0x74/0x260 [ 282.332908][ T9641] ksys_write+0x151/0x260 [ 282.337245][ T9641] ? __ia32_sys_read+0x90/0x90 [ 282.342016][ T9641] ? lockdep_hardirqs_on+0x98/0x150 [ 282.347217][ T9641] do_syscall_64+0x55/0xb0 [ 282.351632][ T9641] ? clear_bhb_loop+0x40/0x90 [ 282.356311][ T9641] ? clear_bhb_loop+0x40/0x90 [ 282.360990][ T9641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.366885][ T9641] RIP: 0033:0x7f2634d9e159 [ 282.371301][ T9641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.390908][ T9641] RSP: 002b:00007f2635d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.399504][ T9641] RAX: ffffffffffffffda RBX: 00007f2635025fa0 RCX: 00007f2634d9e159 [ 282.407474][ T9641] RDX: 000000000000fdef RSI: 0000200000000480 RDI: 00000000000000c8 [ 282.415443][ T9641] RBP: 00007f2635d57090 R08: 0000000000000000 R09: 0000000000000000 [ 282.423409][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.431378][ T9641] R13: 00007f2635026038 R14: 00007f2635025fa0 R15: 00007ffcb0430f28 [ 282.439363][ T9641] [ 282.507560][ T9643] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1302'. [ 283.332407][ T9659] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 283.341223][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 283.352371][ T9659] bridge0: port 3(veth0_vlan) entered blocking state [ 283.360365][ T9659] bridge0: port 3(veth0_vlan) entered disabled state [ 283.368883][ T9659] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 284.998699][ T9669] netlink: 'syz.0.1309': attribute type 4 has an invalid length. [ 285.467221][ T9687] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1320'. [ 285.508195][ T9689] C: renamed from team_slave_0 [ 285.549082][ T9689] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 285.575946][ T9689] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1321'. [ 285.594639][ T9689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.784069][ T9695] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1324'. [ 286.683442][ T5784] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 286.743646][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1335'. [ 286.799612][ T9726] syzkaller0: entered promiscuous mode [ 286.810752][ T9726] syzkaller0: entered allmulticast mode [ 286.823209][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1335'. [ 286.853961][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1335'. [ 286.882667][ T9725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1335'. [ 287.219441][ T9735] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1338'. [ 289.462298][ T9746] netlink: 'syz.0.1341': attribute type 5 has an invalid length. [ 289.488129][ T9750] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1342'. [ 290.062521][ T9772] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 290.093682][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1350'. [ 290.118440][ T9772] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 290.688353][ T9772] team0: Port device geneve1 added [ 292.003742][ T9808] netlink: 'syz.2.1362': attribute type 11 has an invalid length. [ 292.031890][ T9808] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1362'. [ 292.769843][ T9826] syz.0.1369[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.770102][ T9826] syz.0.1369[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.874225][ T9826] netlink: 'syz.0.1369': attribute type 6 has an invalid length. [ 293.084256][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 293.795551][ T9856] netlink: 'syz.2.1382': attribute type 21 has an invalid length. [ 295.063524][ T9903] syz.2.1399[9903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.066195][ T9903] syz.2.1399[9903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.172102][ T9903] netlink: 'syz.2.1399': attribute type 6 has an invalid length. [ 295.683090][ T9927] netlink: 'syz.0.1407': attribute type 10 has an invalid length. [ 295.693501][ T9925] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1408'. [ 296.002638][ T9939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1411'. [ 296.070059][ T9943] syz.3.1414[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.070350][ T9943] syz.3.1414[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.106129][ T9945] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1422'. [ 296.229581][ T9947] netlink: 'syz.1.1415': attribute type 25 has an invalid length. [ 296.230478][ T9943] netlink: 'syz.3.1414': attribute type 6 has an invalid length. [ 296.239797][ T9947] netlink: 'syz.1.1415': attribute type 25 has an invalid length. [ 297.537455][ T9987] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1430'. [ 297.601765][ T9987] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 297.655214][ T9987] CPU: 0 PID: 9987 Comm: syz.3.1430 Not tainted syzkaller #0 [ 297.662682][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.672797][ T9987] Call Trace: [ 297.676129][ T9987] [ 297.679115][ T9987] dump_stack_lvl+0x18c/0x250 [ 297.683881][ T9987] ? show_regs_print_info+0x20/0x20 [ 297.689145][ T9987] ? load_image+0x420/0x420 [ 297.693766][ T9987] sysfs_warn_dup+0x8e/0xa0 [ 297.698333][ T9987] sysfs_do_create_link_sd+0xc0/0x110 [ 297.703778][ T9987] device_add_class_symlinks+0x1cf/0x240 [ 297.709491][ T9987] device_add+0x4f9/0xc40 [ 297.713899][ T9987] wiphy_register+0x1d99/0x2ac0 [ 297.718891][ T9987] ? cfg80211_event_work+0x40/0x40 [ 297.724065][ T9987] ? minstrel_ht_alloc+0x88a/0x990 [ 297.729274][ T9987] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 297.735421][ T9987] ieee80211_register_hw+0x2dd8/0x3b30 [ 297.740990][ T9987] ? ieee80211_register_hw+0xfb1/0x3b30 [ 297.746636][ T9987] ? ieee80211_tasklet_handler+0x20/0x20 [ 297.752334][ T9987] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 297.758303][ T9987] ? __debug_object_init+0xec/0x450 [ 297.763585][ T9987] ? __asan_memset+0x22/0x40 [ 297.768250][ T9987] ? __hrtimer_init+0x189/0x270 [ 297.773193][ T9987] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 297.779061][ T9987] ? mac80211_hwsim_free+0x220/0x220 [ 297.784411][ T9987] ? rcu_is_watching+0x15/0xb0 [ 297.789240][ T9987] ? kstrndup+0xbd/0x140 [ 297.793582][ T9987] hwsim_new_radio_nl+0xdad/0x1a70 [ 297.798789][ T9987] ? __nla_validate+0x50/0x50 [ 297.803586][ T9987] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 297.810032][ T9987] ? __nla_parse+0x40/0x50 [ 297.814534][ T9987] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 297.820970][ T9987] genl_family_rcv_msg_doit+0x21a/0x310 [ 297.826608][ T9987] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 297.832600][ T9987] ? bpf_lsm_capable+0x9/0x10 [ 297.837332][ T9987] ? security_capable+0x89/0xb0 [ 297.842279][ T9987] genl_rcv_msg+0x611/0x7a0 [ 297.846883][ T9987] ? genl_bind+0x360/0x360 [ 297.851368][ T9987] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 297.857770][ T9987] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 297.864415][ T9987] netlink_rcv_skb+0x235/0x4c0 [ 297.869225][ T9987] ? genl_bind+0x360/0x360 [ 297.873715][ T9987] ? netlink_ack+0x1160/0x1160 [ 297.878583][ T9987] ? __lock_acquire+0x7d80/0x7d80 [ 297.883720][ T9987] ? down_read+0x1ac/0x2e0 [ 297.888216][ T9987] genl_rcv+0x28/0x40 [ 297.892266][ T9987] netlink_unicast+0x7b1/0x930 [ 297.897151][ T9987] netlink_sendmsg+0x8d0/0xbf0 [ 297.902012][ T9987] ? netlink_getsockopt+0x590/0x590 [ 297.907270][ T9987] ? apparmor_socket_sendmsg+0x8e/0x330 [ 297.912876][ T9987] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.918198][ T9987] ? security_socket_sendmsg+0x80/0xa0 [ 297.923725][ T9987] ? netlink_getsockopt+0x590/0x590 [ 297.928993][ T9987] ____sys_sendmsg+0x61b/0x980 [ 297.933852][ T9987] ? __asan_memset+0x22/0x40 [ 297.938517][ T9987] ? __sys_sendmsg_sock+0x30/0x30 [ 297.943610][ T9987] ? __import_iovec+0x5f2/0x850 [ 297.948548][ T9987] ? import_iovec+0x73/0xa0 [ 297.953142][ T9987] ___sys_sendmsg+0x2a6/0x360 [ 297.957914][ T9987] ? __sys_sendmsg+0x2b0/0x2b0 [ 297.962956][ T9987] __se_sys_sendmsg+0x1d0/0x2c0 [ 297.967889][ T9987] ? __x64_sys_sendmsg+0x80/0x80 [ 297.972900][ T9987] ? lockdep_hardirqs_on+0x98/0x150 [ 297.978163][ T9987] do_syscall_64+0x55/0xb0 [ 297.982640][ T9987] ? clear_bhb_loop+0x40/0x90 [ 297.987382][ T9987] ? clear_bhb_loop+0x40/0x90 [ 297.992143][ T9987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.998102][ T9987] RIP: 0033:0x7f2634d9e159 [ 298.002573][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.022239][ T9987] RSP: 002b:00007f2635d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.030718][ T9987] RAX: ffffffffffffffda RBX: 00007f2635026090 RCX: 00007f2634d9e159 [ 298.038744][ T9987] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 298.046766][ T9987] RBP: 00007f2634e3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.054788][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.062813][ T9987] R13: 00007f2635026128 R14: 00007f2635026090 R15: 00007ffcb0430f28 [ 298.070851][ T9987] [ 298.685319][T10003] netlink: 'syz.3.1437': attribute type 39 has an invalid length. [ 298.728431][T10003] delete_channel: no stack [ 298.733036][T10003] delete_channel: no stack [ 298.801019][T10007] netlink: 'syz.3.1437': attribute type 39 has an invalid length. [ 298.875223][T10003] delete_channel: no stack [ 298.923321][T10003] delete_channel: no stack [ 298.976801][T10014] netlink: 'syz.1.1438': attribute type 25 has an invalid length. [ 299.018206][T10014] netlink: 'syz.1.1438': attribute type 25 has an invalid length. [ 299.348833][T10020] FAULT_INJECTION: forcing a failure. [ 299.348833][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 299.397773][T10020] CPU: 1 PID: 10020 Comm: syz.1.1440 Not tainted syzkaller #0 [ 299.405297][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.415377][T10020] Call Trace: [ 299.418672][T10020] [ 299.421616][T10020] dump_stack_lvl+0x18c/0x250 [ 299.426316][T10020] ? show_regs_print_info+0x20/0x20 [ 299.431533][T10020] ? load_image+0x420/0x420 [ 299.436060][T10020] ? __lock_acquire+0x7d80/0x7d80 [ 299.441102][T10020] ? __asan_memset+0x22/0x40 [ 299.445718][T10020] should_fail_ex+0x394/0x4c0 [ 299.450428][T10020] should_failslab+0x9/0x20 [ 299.454964][T10020] slab_pre_alloc_hook+0x59/0x300 [ 299.460021][T10020] kmem_cache_alloc+0x5a/0x2c0 [ 299.464808][T10020] ? security_inode_alloc+0x34/0x110 [ 299.470124][T10020] security_inode_alloc+0x34/0x110 [ 299.475264][T10020] inode_init_always+0x914/0xc90 [ 299.480224][T10020] new_inode_pseudo+0x95/0x1d0 [ 299.485011][T10020] __ns_get_path+0x249/0x5f0 [ 299.489633][T10020] ns_get_path+0x54/0x90 [ 299.493980][T10020] proc_ns_get_link+0x16c/0x2d0 [ 299.498862][T10020] ? proc_ns_instantiate+0xf0/0xf0 [ 299.504002][T10020] ? try_to_unlazy+0x33e/0x5c0 [ 299.508792][T10020] ? proc_ns_instantiate+0xf0/0xf0 [ 299.513928][T10020] pick_link+0x666/0xdd0 [ 299.518210][T10020] step_into+0xc18/0xee0 [ 299.522481][T10020] ? pid_revalidate+0x22/0x260 [ 299.527274][T10020] ? set_root+0x3a0/0x3a0 [ 299.531630][T10020] ? pid_revalidate+0x20d/0x260 [ 299.536503][T10020] ? lookup_fast+0x494/0x4c0 [ 299.541113][T10020] path_openat+0x1656/0x3270 [ 299.545746][T10020] ? do_sys_openat2+0xda/0x1d0 [ 299.550527][T10020] ? __x64_sys_openat+0x139/0x160 [ 299.555575][T10020] ? verify_lock_unused+0x140/0x140 [ 299.560797][T10020] ? do_filp_open+0x430/0x430 [ 299.565518][T10020] do_filp_open+0x1f2/0x430 [ 299.570048][T10020] ? vfs_tmpfile+0x620/0x620 [ 299.574687][T10020] ? _raw_spin_unlock+0x28/0x40 [ 299.579561][T10020] ? alloc_fd+0x590/0x640 [ 299.583926][T10020] do_sys_openat2+0x134/0x1d0 [ 299.588644][T10020] ? do_sys_open+0xe0/0xe0 [ 299.593093][T10020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 299.599099][T10020] ? srcu_init_notifier_head+0x90/0x90 [ 299.604594][T10020] ? lock_chain_count+0x20/0x20 [ 299.609516][T10020] __x64_sys_openat+0x139/0x160 [ 299.614407][T10020] do_syscall_64+0x55/0xb0 [ 299.618844][T10020] ? clear_bhb_loop+0x40/0x90 [ 299.623544][T10020] ? clear_bhb_loop+0x40/0x90 [ 299.628248][T10020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.634160][T10020] RIP: 0033:0x7fcba4f5e98e [ 299.638686][T10020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.658322][T10020] RSP: 002b:00007fcba5ef3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.666803][T10020] RAX: ffffffffffffffda RBX: 00007fcba5ef46c0 RCX: 00007fcba4f5e98e [ 299.674798][T10020] RDX: 0000000000000000 RSI: 00007fcba5ef3f90 RDI: ffffffffffffff9c [ 299.682794][T10020] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 299.690789][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.698782][T10020] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 299.706795][T10020] [ 300.848616][T10052] syzkaller0: entered promiscuous mode [ 300.924698][T10052] syzkaller0: entered allmulticast mode [ 303.445859][T10067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.348067][T10072] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1451'. [ 305.377802][T10069] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 305.416295][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1451'. [ 305.437674][T10069] dummy0: entered promiscuous mode [ 305.443172][T10069] dummy0: entered allmulticast mode [ 305.449899][T10069] bridge0: port 3(dummy0) entered blocking state [ 305.457985][T10069] bridge0: port 3(dummy0) entered disabled state [ 305.469222][T10069] bridge0: port 3(dummy0) entered blocking state [ 305.475896][T10069] bridge0: port 3(dummy0) entered forwarding state [ 305.487971][T10087] netlink: 'syz.0.1456': attribute type 21 has an invalid length. [ 305.498380][T10087] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 305.525098][T10097] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1460'. [ 305.548837][T10097] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1460'. [ 305.561612][T10096] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1460'. [ 305.598477][T10098] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1460'. [ 305.707550][T10100] wlan0: mtu greater than device maximum [ 305.923551][T10107] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1466'. [ 306.426042][T10126] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 306.735321][T10133] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 306.798133][T10132] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1473'. [ 306.845609][T10132] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1473'. [ 307.079990][T10137] netlink: 'syz.2.1475': attribute type 10 has an invalid length. [ 307.310421][T10137] veth1_vlan: left allmulticast mode [ 307.982393][T10155] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1480'. [ 309.328076][T10175] syzkaller0: entered promiscuous mode [ 309.370955][T10175] syzkaller0: entered allmulticast mode [ 310.148160][T10203] netlink: 'syz.2.1506': attribute type 3 has an invalid length. [ 310.156403][T10203] netlink: 'syz.2.1506': attribute type 5 has an invalid length. [ 310.611226][T10216] netlink: 'syz.2.1502': attribute type 27 has an invalid length. [ 310.630975][T10216] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 310.651281][T10216] __nla_validate_parse: 1 callbacks suppressed [ 310.651340][T10216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1502'. [ 311.574544][T10220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1504'. [ 311.708744][T10222] syzkaller0: entered promiscuous mode [ 311.729830][T10222] syzkaller0: entered allmulticast mode [ 311.843341][T10233] netlink: 'syz.0.1516': attribute type 21 has an invalid length. [ 311.852407][T10233] netlink: 'syz.0.1516': attribute type 7 has an invalid length. [ 312.746668][T10244] netlink: 'syz.0.1512': attribute type 12 has an invalid length. [ 312.760949][T10244] netlink: 'syz.0.1512': attribute type 11 has an invalid length. [ 312.781062][T10244] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.1512'. [ 315.828532][T10256] syzkaller0: entered promiscuous mode [ 315.834048][T10256] syzkaller0: entered allmulticast mode [ 315.842291][T10264] netlink: 'syz.0.1519': attribute type 64 has an invalid length. [ 317.338422][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.351298][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.603690][T10272] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 317.612592][T10272] veth1_vlan: left allmulticast mode [ 317.705141][T10291] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 317.806141][T10295] netlink: 'syz.1.1529': attribute type 25 has an invalid length. [ 317.836075][T10295] netlink: 'syz.1.1529': attribute type 25 has an invalid length. [ 317.915238][T10297] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1531'. [ 317.934661][T10297] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.957041][T10297] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 318.270204][T10308] FAULT_INJECTION: forcing a failure. [ 318.270204][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 318.311673][T10308] CPU: 1 PID: 10308 Comm: syz.2.1536 Not tainted syzkaller #0 [ 318.319190][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.329261][T10308] Call Trace: [ 318.332538][T10308] [ 318.335466][T10308] dump_stack_lvl+0x18c/0x250 [ 318.340146][T10308] ? show_regs_print_info+0x20/0x20 [ 318.345342][T10308] ? load_image+0x420/0x420 [ 318.349847][T10308] ? __might_sleep+0xe0/0xe0 [ 318.354434][T10308] ? __lock_acquire+0x7d80/0x7d80 [ 318.359547][T10308] should_fail_ex+0x394/0x4c0 [ 318.364228][T10308] should_failslab+0x9/0x20 [ 318.368733][T10308] slab_pre_alloc_hook+0x59/0x300 [ 318.373767][T10308] kmem_cache_alloc_node+0x5e/0x310 [ 318.378967][T10308] ? __alloc_skb+0x103/0x2c0 [ 318.383559][T10308] __alloc_skb+0x103/0x2c0 [ 318.387979][T10308] _sctp_make_chunk+0x5b/0x430 [ 318.392745][T10308] sctp_make_datafrag_empty+0x12b/0x240 [ 318.398289][T10308] ? sctp_make_ecne+0x350/0x350 [ 318.403136][T10308] ? sctp_auth_send_cid+0x69/0x250 [ 318.408245][T10308] sctp_datamsg_from_user+0x72e/0xee0 [ 318.413628][T10308] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 318.418931][T10308] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 318.424733][T10308] ? __sctp_connect+0xd80/0xd80 [ 318.429584][T10308] ? __local_bh_enable_ip+0x13a/0x1c0 [ 318.434950][T10308] ? _local_bh_enable+0xa0/0xa0 [ 318.439797][T10308] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 318.445623][T10308] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 318.451431][T10308] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 318.456978][T10308] ? security_sctp_bind_connect+0x89/0xb0 [ 318.462702][T10308] sctp_sendmsg+0x1afa/0x27b0 [ 318.467396][T10308] ? sctp_getsockopt+0xb60/0xb60 [ 318.472342][T10308] ? aa_af_perm+0x330/0x330 [ 318.476848][T10308] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 318.483266][T10308] ? sock_rps_record_flow+0x19/0x3f0 [ 318.488549][T10308] ? inet_sendmsg+0x7e/0x2a0 [ 318.493131][T10308] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.498412][T10308] ? inet_send_prepare+0x250/0x250 [ 318.503518][T10308] ____sys_sendmsg+0x61b/0x980 [ 318.508289][T10308] ? __asan_memset+0x22/0x40 [ 318.512878][T10308] ? __sys_sendmsg_sock+0x30/0x30 [ 318.517900][T10308] ? __import_iovec+0x5f2/0x850 [ 318.522756][T10308] ? import_iovec+0x73/0xa0 [ 318.527259][T10308] ___sys_sendmsg+0x2a6/0x360 [ 318.531931][T10308] ? get_pid_task+0x20/0x1e0 [ 318.536527][T10308] ? __sys_sendmsg+0x2b0/0x2b0 [ 318.541308][T10308] ? __lock_acquire+0x7d80/0x7d80 [ 318.546366][T10308] __se_sys_sendmsg+0x1d0/0x2c0 [ 318.551209][T10308] ? perf_trace_preemptirq_template+0x269/0x330 [ 318.557451][T10308] ? __x64_sys_sendmsg+0x80/0x80 [ 318.562398][T10308] ? lockdep_hardirqs_on+0x98/0x150 [ 318.567598][T10308] do_syscall_64+0x55/0xb0 [ 318.572018][T10308] ? clear_bhb_loop+0x40/0x90 [ 318.576702][T10308] ? clear_bhb_loop+0x40/0x90 [ 318.581375][T10308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.587267][T10308] RIP: 0033:0x7fa77c59e159 [ 318.591681][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.611279][T10308] RSP: 002b:00007fa77d444028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.619694][T10308] RAX: ffffffffffffffda RBX: 00007fa77c825fa0 RCX: 00007fa77c59e159 [ 318.627658][T10308] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000006 [ 318.635625][T10308] RBP: 00007fa77d444090 R08: 0000000000000000 R09: 0000000000000000 [ 318.643590][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.651553][T10308] R13: 00007fa77c826038 R14: 00007fa77c825fa0 R15: 00007fffe38f03e8 [ 318.659548][T10308] [ 318.839219][T10316] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 318.852706][T10316] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1539'. [ 318.878035][T10315] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 318.907424][T10316] netlink: 'syz.2.1539': attribute type 27 has an invalid length. [ 318.923350][T10315] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1539'. [ 318.924205][T10316] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1539'. [ 318.938033][T10317] netlink: 'syz.2.1539': attribute type 27 has an invalid length. [ 318.955928][T10317] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1539'. [ 321.184727][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1548'. [ 321.194471][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1548'. [ 321.217177][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1548'. [ 321.340999][T10343] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1547'. [ 322.112790][T10376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1559'. [ 322.837242][T10401] netlink: 'syz.1.1570': attribute type 9 has an invalid length. [ 323.472593][T10411] netlink: 'syz.0.1573': attribute type 39 has an invalid length. [ 323.543951][T10413] FAULT_INJECTION: forcing a failure. [ 323.543951][T10413] name failslab, interval 1, probability 0, space 0, times 0 [ 323.556762][T10413] CPU: 1 PID: 10413 Comm: syz.1.1574 Not tainted syzkaller #0 [ 323.564243][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.574318][T10413] Call Trace: [ 323.577613][T10413] [ 323.580552][T10413] dump_stack_lvl+0x18c/0x250 [ 323.585255][T10413] ? show_regs_print_info+0x20/0x20 [ 323.590477][T10413] ? load_image+0x420/0x420 [ 323.595017][T10413] should_fail_ex+0x394/0x4c0 [ 323.599720][T10413] should_failslab+0x9/0x20 [ 323.604247][T10413] slab_pre_alloc_hook+0x59/0x300 [ 323.609315][T10413] kmem_cache_alloc+0x5a/0x2c0 [ 323.614112][T10413] ? skb_clone+0x1eb/0x370 [ 323.618541][T10413] skb_clone+0x1eb/0x370 [ 323.622797][T10413] bpf_clone_redirect+0x16d/0x4a0 [ 323.627835][T10413] ? perf_trace_preemptirq_template+0x269/0x330 [ 323.634089][T10413] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 323.639547][T10413] ? perf_event_mmap+0x540/0x1600 [ 323.644568][T10413] ? lock_chain_count+0x20/0x20 [ 323.649419][T10413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.655579][T10413] ? lockdep_hardirqs_on+0x98/0x150 [ 323.660775][T10413] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 323.666057][T10413] ? bpf_test_run+0x174/0x870 [ 323.670738][T10413] ? __local_bh_disable_ip+0x108/0x1a0 [ 323.676193][T10413] ? __cant_sleep+0x220/0x220 [ 323.680868][T10413] ? _local_bh_enable+0xa0/0xa0 [ 323.685714][T10413] ? bpf_test_timer_continue+0x135/0x380 [ 323.691361][T10413] ? bpf_test_run+0x174/0x870 [ 323.696058][T10413] bpf_test_run+0x2df/0x870 [ 323.700567][T10413] ? bpf_test_run+0x174/0x870 [ 323.705245][T10413] ? dst_hold+0x70/0x70 [ 323.709401][T10413] ? eth_get_headlen+0x210/0x210 [ 323.714339][T10413] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 323.719730][T10413] ? cpu_online+0x60/0x60 [ 323.724056][T10413] bpf_prog_test_run+0x31f/0x390 [ 323.729006][T10413] __sys_bpf+0x49d/0x890 [ 323.733268][T10413] ? bpf_link_show_fdinfo+0x560/0x560 [ 323.738655][T10413] ? lock_chain_count+0x20/0x20 [ 323.743508][T10413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.749503][T10413] __x64_sys_bpf+0x7c/0x90 [ 323.753928][T10413] do_syscall_64+0x55/0xb0 [ 323.758351][T10413] ? clear_bhb_loop+0x40/0x90 [ 323.763029][T10413] ? clear_bhb_loop+0x40/0x90 [ 323.767710][T10413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.773609][T10413] RIP: 0033:0x7fcba4f9e159 [ 323.778024][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.797629][T10413] RSP: 002b:00007fcba5ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.806039][T10413] RAX: ffffffffffffffda RBX: 00007fcba5225fa0 RCX: 00007fcba4f9e159 [ 323.814007][T10413] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 323.821978][T10413] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 323.829943][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.837923][T10413] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 323.846006][T10413] [ 323.978403][T10418] syzkaller0: entered promiscuous mode [ 323.983960][T10418] syzkaller0: entered allmulticast mode [ 324.040248][T10421] __nla_validate_parse: 5 callbacks suppressed [ 324.040264][T10421] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1577'. [ 324.178326][T10427] netlink: 'syz.1.1579': attribute type 13 has an invalid length. [ 324.193335][T10427] netlink: 'syz.1.1579': attribute type 58 has an invalid length. [ 324.203646][T10427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1579'. [ 325.973826][T10438] FAULT_INJECTION: forcing a failure. [ 325.973826][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 325.986534][T10438] CPU: 1 PID: 10438 Comm: syz.1.1584 Not tainted syzkaller #0 [ 325.994018][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.004075][T10438] Call Trace: [ 326.007368][T10438] [ 326.010300][T10438] dump_stack_lvl+0x18c/0x250 [ 326.014975][T10438] ? show_regs_print_info+0x20/0x20 [ 326.020165][T10438] ? load_image+0x420/0x420 [ 326.024662][T10438] should_fail_ex+0x394/0x4c0 [ 326.029338][T10438] should_failslab+0x9/0x20 [ 326.033834][T10438] slab_pre_alloc_hook+0x59/0x300 [ 326.038854][T10438] kmem_cache_alloc+0x5a/0x2c0 [ 326.043606][T10438] ? skb_clone+0x1eb/0x370 [ 326.048020][T10438] skb_clone+0x1eb/0x370 [ 326.052279][T10438] bpf_clone_redirect+0x16d/0x4a0 [ 326.057326][T10438] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 326.062792][T10438] ? perf_event_mmap+0x540/0x1600 [ 326.067839][T10438] ? perf_trace_preemptirq_template+0x269/0x330 [ 326.074095][T10438] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 326.080073][T10438] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 326.085352][T10438] ? lock_chain_count+0x20/0x20 [ 326.090194][T10438] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 326.096442][T10438] ? __local_bh_disable_ip+0x108/0x1a0 [ 326.101897][T10438] ? __cant_sleep+0x220/0x220 [ 326.106575][T10438] ? __local_bh_enable_ip+0x13a/0x1c0 [ 326.111951][T10438] ? _local_bh_enable+0xa0/0xa0 [ 326.116808][T10438] ? bpf_test_timer_continue+0x135/0x380 [ 326.122437][T10438] ? bpf_test_run+0x174/0x870 [ 326.127110][T10438] bpf_test_run+0x2df/0x870 [ 326.131618][T10438] ? bpf_test_run+0x174/0x870 [ 326.136294][T10438] ? dst_hold+0x70/0x70 [ 326.140447][T10438] ? eth_get_headlen+0x210/0x210 [ 326.145388][T10438] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 326.150806][T10438] ? cpu_online+0x60/0x60 [ 326.155131][T10438] bpf_prog_test_run+0x31f/0x390 [ 326.160066][T10438] __sys_bpf+0x49d/0x890 [ 326.164304][T10438] ? bpf_link_show_fdinfo+0x560/0x560 [ 326.169686][T10438] ? lock_chain_count+0x20/0x20 [ 326.174540][T10438] __x64_sys_bpf+0x7c/0x90 [ 326.178955][T10438] do_syscall_64+0x55/0xb0 [ 326.183367][T10438] ? clear_bhb_loop+0x40/0x90 [ 326.188043][T10438] ? clear_bhb_loop+0x40/0x90 [ 326.192717][T10438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.198609][T10438] RIP: 0033:0x7fcba4f9e159 [ 326.203016][T10438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.222614][T10438] RSP: 002b:00007fcba5ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.231021][T10438] RAX: ffffffffffffffda RBX: 00007fcba5225fa0 RCX: 00007fcba4f9e159 [ 326.238984][T10438] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 326.246948][T10438] RBP: 00007fcba5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 326.254911][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.262874][T10438] R13: 00007fcba5226038 R14: 00007fcba5225fa0 R15: 00007ffc3a965268 [ 326.270855][T10438] [ 328.619866][T10484] netlink: 'syz.3.1601': attribute type 21 has an invalid length. [ 328.644845][T10484] netlink: 'syz.3.1601': attribute type 7 has an invalid length. [ 328.841536][T10490] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 328.870664][T10490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1604'. [ 329.086148][T10496] netlink: 'syz.1.1607': attribute type 25 has an invalid length. [ 329.105519][T10496] netlink: 'syz.1.1607': attribute type 25 has an invalid length. [ 330.060983][T10532] netlink: 'syz.0.1621': attribute type 9 has an invalid length. [ 330.093535][T10532] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1621'. [ 330.726280][T10558] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1634'. [ 331.562699][T10586] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1645'. [ 331.905578][T10597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1651'. [ 332.064813][T10607] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1656'. [ 332.345129][T10609] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1657'. [ 334.519951][T10652] FAULT_INJECTION: forcing a failure. [ 334.519951][T10652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.573652][T10652] CPU: 0 PID: 10652 Comm: syz.0.1673 Not tainted syzkaller #0 [ 334.581179][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.591241][T10652] Call Trace: [ 334.594516][T10652] [ 334.597440][T10652] dump_stack_lvl+0x18c/0x250 [ 334.602123][T10652] ? show_regs_print_info+0x20/0x20 [ 334.607320][T10652] ? load_image+0x420/0x420 [ 334.611823][T10652] ? __might_fault+0xaa/0x120 [ 334.616498][T10652] ? __lock_acquire+0x7d80/0x7d80 [ 334.621517][T10652] ? __virt_addr_valid+0x10c/0x380 [ 334.626630][T10652] should_fail_ex+0x394/0x4c0 [ 334.631317][T10652] _copy_to_user+0x2f/0xa0 [ 334.635730][T10652] __htab_map_lookup_and_delete_batch+0x1061/0x1400 [ 334.642353][T10652] ? jhash+0x740/0x740 [ 334.646424][T10652] ? __fdget+0x180/0x210 [ 334.650663][T10652] ? htab_lru_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 334.657770][T10652] bpf_map_do_batch+0x48c/0x600 [ 334.662616][T10652] ? bpf_lsm_key_free+0x10/0x10 [ 334.667468][T10652] __sys_bpf+0x78c/0x890 [ 334.671707][T10652] ? bpf_link_show_fdinfo+0x560/0x560 [ 334.677084][T10652] ? lock_chain_count+0x20/0x20 [ 334.681934][T10652] __x64_sys_bpf+0x7c/0x90 [ 334.686345][T10652] do_syscall_64+0x55/0xb0 [ 334.690761][T10652] ? clear_bhb_loop+0x40/0x90 [ 334.695432][T10652] ? clear_bhb_loop+0x40/0x90 [ 334.700102][T10652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.705992][T10652] RIP: 0033:0x7fdd1459e159 [ 334.710404][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.730003][T10652] RSP: 002b:00007fdd154d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.738413][T10652] RAX: ffffffffffffffda RBX: 00007fdd14826090 RCX: 00007fdd1459e159 [ 334.746375][T10652] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000019 [ 334.754340][T10652] RBP: 00007fdd154d4090 R08: 0000000000000000 R09: 0000000000000000 [ 334.762301][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.770264][T10652] R13: 00007fdd14826128 R14: 00007fdd14826090 R15: 00007ffd3b7384f8 [ 334.778238][T10652] [ 334.922767][T10661] FAULT_INJECTION: forcing a failure. [ 334.922767][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 334.935963][T10661] CPU: 1 PID: 10661 Comm: syz.0.1678 Not tainted syzkaller #0 [ 334.943459][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.953547][T10661] Call Trace: [ 334.956847][T10661] [ 334.959798][T10661] dump_stack_lvl+0x18c/0x250 [ 334.964503][T10661] ? show_regs_print_info+0x20/0x20 [ 334.969730][T10661] ? load_image+0x420/0x420 [ 334.974271][T10661] should_fail_ex+0x394/0x4c0 [ 334.978980][T10661] should_failslab+0x9/0x20 [ 334.983505][T10661] slab_pre_alloc_hook+0x59/0x300 [ 334.988558][T10661] ? proc_thread_self_get_link+0xfc/0x190 [ 334.994302][T10661] __kmem_cache_alloc_node+0x53/0x250 [ 334.999697][T10661] ? proc_thread_self_get_link+0xfc/0x190 [ 335.005417][T10661] kmalloc_trace+0x2a/0xe0 [ 335.009837][T10661] proc_thread_self_get_link+0xfc/0x190 [ 335.015387][T10661] ? proc_setup_thread_self+0x2c0/0x2c0 [ 335.020930][T10661] pick_link+0x6a8/0xdd0 [ 335.025179][T10661] step_into+0xc18/0xee0 [ 335.029425][T10661] ? set_root+0x3a0/0x3a0 [ 335.033754][T10661] ? lookup_fast+0x14a/0x4c0 [ 335.038340][T10661] ? security_inode_permission+0xb0/0xf0 [ 335.043974][T10661] link_path_walk+0x748/0xe40 [ 335.048665][T10661] ? handle_lookup_down+0x130/0x130 [ 335.053873][T10661] path_openat+0x291/0x3270 [ 335.058388][T10661] ? do_sys_openat2+0xda/0x1d0 [ 335.063148][T10661] ? __x64_sys_openat+0x139/0x160 [ 335.068184][T10661] ? verify_lock_unused+0x140/0x140 [ 335.073394][T10661] ? do_filp_open+0x430/0x430 [ 335.078084][T10661] do_filp_open+0x1f2/0x430 [ 335.082607][T10661] ? vfs_tmpfile+0x620/0x620 [ 335.087221][T10661] ? _raw_spin_unlock+0x28/0x40 [ 335.092064][T10661] ? alloc_fd+0x590/0x640 [ 335.096400][T10661] do_sys_openat2+0x134/0x1d0 [ 335.101077][T10661] ? do_sys_open+0xe0/0xe0 [ 335.105494][T10661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 335.111469][T10661] ? srcu_init_notifier_head+0x90/0x90 [ 335.116926][T10661] ? lock_chain_count+0x20/0x20 [ 335.121777][T10661] __x64_sys_openat+0x139/0x160 [ 335.126627][T10661] do_syscall_64+0x55/0xb0 [ 335.131064][T10661] ? clear_bhb_loop+0x40/0x90 [ 335.135739][T10661] ? clear_bhb_loop+0x40/0x90 [ 335.140417][T10661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.146310][T10661] RIP: 0033:0x7fdd1455e98e [ 335.150721][T10661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.170357][T10661] RSP: 002b:00007fdd154f4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.178780][T10661] RAX: ffffffffffffffda RBX: 00007fdd154f56c0 RCX: 00007fdd1455e98e [ 335.186749][T10661] RDX: 0000000000000000 RSI: 00007fdd154f4f90 RDI: ffffffffffffff9c [ 335.194712][T10661] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 335.202682][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.210647][T10661] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 335.218631][T10661] [ 335.391139][T10655] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1676'. [ 335.430950][T10655] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1676'. [ 335.449935][T10656] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1676'. [ 335.474970][T10671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.322515][T10696] delete_channel: no stack [ 336.835010][T10726] netlink: 'syz.1.1704': attribute type 21 has an invalid length. [ 336.854396][T10726] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 336.854421][T10716] can: request_module (can-proto-0) failed. [ 336.876764][T10725] syzkaller0: entered promiscuous mode [ 336.882296][T10725] syzkaller0: entered allmulticast mode [ 337.374426][T10743] netlink: 'syz.1.1712': attribute type 16 has an invalid length. [ 337.411845][T10743] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1712'. [ 338.478136][T10777] netlink: 'syz.2.1726': attribute type 10 has an invalid length. [ 338.683915][T10784] netlink: 'syz.1.1728': attribute type 10 has an invalid length. [ 338.830352][T10789] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1730'. [ 339.862156][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.898503][T10807] netlink: 'syz.1.1739': attribute type 25 has an invalid length. [ 339.912348][T10807] netlink: 'syz.1.1739': attribute type 25 has an invalid length. [ 340.381522][T10819] netlink: 'syz.2.1743': attribute type 21 has an invalid length. [ 340.395296][T10819] netlink: 'syz.2.1743': attribute type 6 has an invalid length. [ 340.403648][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1743'. [ 341.338919][T10841] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 341.347148][T10841] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1753'. [ 341.366146][T10845] FAULT_INJECTION: forcing a failure. [ 341.366146][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 341.378861][T10845] CPU: 1 PID: 10845 Comm: syz.0.1754 Not tainted syzkaller #0 [ 341.386341][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.396416][T10845] Call Trace: [ 341.399708][T10845] [ 341.402638][T10845] dump_stack_lvl+0x18c/0x250 [ 341.407316][T10845] ? __sys_bpf+0x49d/0x890 [ 341.411733][T10845] ? do_syscall_64+0x55/0xb0 [ 341.416321][T10845] ? show_regs_print_info+0x20/0x20 [ 341.421518][T10845] ? load_image+0x420/0x420 [ 341.426028][T10845] should_fail_ex+0x394/0x4c0 [ 341.430716][T10845] should_failslab+0x9/0x20 [ 341.435226][T10845] slab_pre_alloc_hook+0x59/0x300 [ 341.440251][T10845] ? lockdep_init_map_type+0x9c/0x8e0 [ 341.445616][T10845] ? nf_ct_ext_add+0x1ab/0x3e0 [ 341.450377][T10845] ? nf_ct_ext_add+0x1ab/0x3e0 [ 341.455133][T10845] __kmem_cache_alloc_node+0x53/0x250 [ 341.460505][T10845] ? nf_ct_ext_add+0x1ab/0x3e0 [ 341.465260][T10845] __kmalloc_node_track_caller+0xa4/0x230 [ 341.470980][T10845] krealloc+0x86/0x120 [ 341.475064][T10845] nf_ct_ext_add+0x1ab/0x3e0 [ 341.479667][T10845] init_conntrack+0x561/0xe20 [ 341.484355][T10845] ? early_drop+0x7f0/0x7f0 [ 341.488868][T10845] ? nf_conntrack_find_get+0x670/0x670 [ 341.494327][T10845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 341.499696][T10845] ? __siphash_unaligned+0x25c/0x3d0 [ 341.504980][T10845] nf_conntrack_in+0xc29/0x15b0 [ 341.509841][T10845] ? nf_ct_pernet+0x270/0x270 [ 341.514516][T10845] ? ipt_do_table+0x2c5/0x15c0 [ 341.519296][T10845] ? read_lock_is_recursive+0x20/0x20 [ 341.524697][T10845] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 341.530170][T10845] ? ipv4_conntrack_local+0x123/0x200 [ 341.535558][T10845] ? ipv4_conntrack_in+0x20/0x20 [ 341.540497][T10845] nf_hook_slow+0xbd/0x200 [ 341.544911][T10845] ? nf_hook+0x390/0x390 [ 341.549161][T10845] nf_hook+0x228/0x390 [ 341.553237][T10845] ? nf_hook+0xa2/0x390 [ 341.557386][T10845] ? __ip_local_out+0x5f0/0x5f0 [ 341.562234][T10845] ? nf_hook+0x390/0x390 [ 341.566469][T10845] ? dst_release+0x1a0/0x1a0 [ 341.571058][T10845] ? ip_fast_csum+0x1ee/0x2b0 [ 341.575727][T10845] __ip_local_out+0x4db/0x5f0 [ 341.580397][T10845] ? nf_hook+0x390/0x390 [ 341.584635][T10845] ip_local_out+0x2a/0x130 [ 341.589048][T10845] iptunnel_xmit+0x4d0/0x910 [ 341.593642][T10845] ip_tunnel_xmit+0x1d18/0x25b0 [ 341.598510][T10845] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 341.603534][T10845] ? validate_xmit_xfrm+0xbb/0x1340 [ 341.608733][T10845] ? skb_push+0x8e/0xe0 [ 341.612928][T10845] ipgre_xmit+0x7eb/0xb70 [ 341.617262][T10845] dev_hard_start_xmit+0x269/0x790 [ 341.622394][T10845] __dev_queue_xmit+0x1be8/0x37e0 [ 341.627422][T10845] ? __dev_queue_xmit+0x272/0x37e0 [ 341.632542][T10845] ? netdev_core_pick_tx+0x370/0x370 [ 341.637821][T10845] ? pskb_expand_head+0x17a/0x1150 [ 341.642934][T10845] ? pskb_expand_head+0x17a/0x1150 [ 341.648042][T10845] ? skb_release_data+0x1de/0x7f0 [ 341.653069][T10845] ? __bpf_redirect+0x4d1/0xdf0 [ 341.657914][T10845] __bpf_tx_skb+0x181/0x260 [ 341.662417][T10845] bpf_clone_redirect+0x315/0x4a0 [ 341.667442][T10845] bpf_prog_208b094576c80b22+0x5e/0x63 [ 341.672898][T10845] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 341.678872][T10845] ? __lock_acquire+0x7d80/0x7d80 [ 341.683889][T10845] ? lock_chain_count+0x20/0x20 [ 341.688736][T10845] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 341.694710][T10845] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 341.699995][T10845] ? lock_chain_count+0x20/0x20 [ 341.704836][T10845] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 341.711074][T10845] ? __local_bh_disable_ip+0x108/0x1a0 [ 341.716533][T10845] ? __cant_sleep+0x220/0x220 [ 341.721205][T10845] ? __local_bh_enable_ip+0x13a/0x1c0 [ 341.726599][T10845] ? _local_bh_enable+0xa0/0xa0 [ 341.731446][T10845] ? bpf_test_timer_continue+0x135/0x380 [ 341.737079][T10845] ? bpf_test_run+0x174/0x870 [ 341.741753][T10845] bpf_test_run+0x2df/0x870 [ 341.746264][T10845] ? bpf_test_run+0x174/0x870 [ 341.750942][T10845] ? dst_hold+0x70/0x70 [ 341.755097][T10845] ? eth_get_headlen+0x210/0x210 [ 341.760035][T10845] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 341.765420][T10845] ? cpu_online+0x60/0x60 [ 341.769744][T10845] bpf_prog_test_run+0x31f/0x390 [ 341.774679][T10845] __sys_bpf+0x49d/0x890 [ 341.778918][T10845] ? bpf_link_show_fdinfo+0x560/0x560 [ 341.784298][T10845] ? lock_chain_count+0x20/0x20 [ 341.789150][T10845] __x64_sys_bpf+0x7c/0x90 [ 341.793564][T10845] do_syscall_64+0x55/0xb0 [ 341.797975][T10845] ? clear_bhb_loop+0x40/0x90 [ 341.802645][T10845] ? clear_bhb_loop+0x40/0x90 [ 341.807321][T10845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.813211][T10845] RIP: 0033:0x7fdd1459e159 [ 341.817622][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.837227][T10845] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.845638][T10845] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 341.853606][T10845] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 341.861568][T10845] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.869536][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.877501][T10845] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 341.885479][T10845] [ 342.606219][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 342.661769][T10866] netlink: 'syz.3.1762': attribute type 21 has an invalid length. [ 342.763915][T10866] netlink: 'syz.3.1762': attribute type 7 has an invalid length. [ 342.920701][T10871] netlink: 'syz.2.1764': attribute type 7 has an invalid length. [ 343.476999][T10893] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1773'. [ 343.737336][T10899] netlink: 'syz.1.1775': attribute type 25 has an invalid length. [ 343.747499][T10899] netlink: 'syz.1.1775': attribute type 25 has an invalid length. [ 343.866458][T10899] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 343.901748][T10899] pim6reg0: ignored: set checksum disabled [ 346.359780][T10916] FAULT_INJECTION: forcing a failure. [ 346.359780][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 346.372497][T10916] CPU: 0 PID: 10916 Comm: syz.2.1779 Not tainted syzkaller #0 [ 346.379985][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.390153][T10916] Call Trace: [ 346.393462][T10916] [ 346.396412][T10916] dump_stack_lvl+0x18c/0x250 [ 346.401123][T10916] ? show_regs_print_info+0x20/0x20 [ 346.406352][T10916] ? load_image+0x420/0x420 [ 346.410893][T10916] should_fail_ex+0x394/0x4c0 [ 346.415601][T10916] should_failslab+0x9/0x20 [ 346.420125][T10916] slab_pre_alloc_hook+0x59/0x300 [ 346.425186][T10916] ? lockdep_init_map_type+0x9c/0x8e0 [ 346.430591][T10916] ? nf_ct_ext_add+0x1ab/0x3e0 [ 346.435384][T10916] ? nf_ct_ext_add+0x1ab/0x3e0 [ 346.440211][T10916] __kmem_cache_alloc_node+0x53/0x250 [ 346.445610][T10916] ? nf_ct_ext_add+0x1ab/0x3e0 [ 346.450384][T10916] __kmalloc_node_track_caller+0xa4/0x230 [ 346.456127][T10916] krealloc+0x86/0x120 [ 346.460220][T10916] nf_ct_ext_add+0x1ab/0x3e0 [ 346.464831][T10916] init_conntrack+0x561/0xe20 [ 346.469532][T10916] ? early_drop+0x7f0/0x7f0 [ 346.474055][T10916] ? nf_conntrack_find_get+0x670/0x670 [ 346.479529][T10916] ? __siphash_unaligned+0x25c/0x3d0 [ 346.484832][T10916] nf_conntrack_in+0xc29/0x15b0 [ 346.489730][T10916] ? nf_ct_pernet+0x270/0x270 [ 346.494510][T10916] ? ip6t_do_table+0x1cb/0x1570 [ 346.499384][T10916] ? ip6t_alloc_initial_table+0x640/0x640 [ 346.505128][T10916] ? ipv6_defrag+0x2d6/0x3a0 [ 346.509726][T10916] ? ipv4_conntrack_local+0x200/0x200 [ 346.515104][T10916] nf_hook_slow+0xbd/0x200 [ 346.519529][T10916] NF_HOOK+0x21d/0x3b0 [ 346.523602][T10916] ? sock_wfree+0x24f/0x600 [ 346.528111][T10916] ? ip6_rcv_core+0x1082/0x1700 [ 346.532974][T10916] ? net_zcopy_put_abort+0x90/0x90 [ 346.538093][T10916] ? NF_HOOK+0x9f/0x3b0 [ 346.542257][T10916] ? ip6_rcv_core+0x1700/0x1700 [ 346.547116][T10916] ? net_zcopy_put_abort+0x90/0x90 [ 346.552240][T10916] ? ip6_rcv_finish_core+0x420/0x420 [ 346.557532][T10916] __netif_receive_skb+0xcc/0x290 [ 346.562572][T10916] ? netif_receive_skb+0x106/0x720 [ 346.567717][T10916] netif_receive_skb+0x1bc/0x720 [ 346.572664][T10916] ? __bpf_trace_tasklet+0x160/0x160 [ 346.577961][T10916] ? enqueue_to_backlog+0xe90/0xe90 [ 346.583168][T10916] ? perf_trace_preemptirq_template+0xac/0x330 [ 346.589341][T10916] ? tun_rx_batched+0x186/0x790 [ 346.594210][T10916] tun_rx_batched+0x1df/0x790 [ 346.598901][T10916] ? pskb_may_pull+0xf0/0xf0 [ 346.603525][T10916] ? __local_bh_enable_ip+0x13a/0x1c0 [ 346.608909][T10916] ? lockdep_hardirqs_on+0x98/0x150 [ 346.614118][T10916] ? read_lock_is_recursive+0x20/0x20 [ 346.619500][T10916] ? __local_bh_enable_ip+0x13a/0x1c0 [ 346.624882][T10916] ? _local_bh_enable+0xa0/0xa0 [ 346.629738][T10916] ? skb_copy_datagram_from_iter+0x63c/0x6f0 [ 346.635737][T10916] tun_get_user+0x286c/0x3d30 [ 346.640439][T10916] ? tun_get_user+0x2488/0x3d30 [ 346.645303][T10916] ? aa_file_perm+0x3e3/0xee0 [ 346.649998][T10916] ? rcu_read_unlock+0xa0/0xa0 [ 346.654787][T10916] ? tun_get+0x1c/0x2e0 [ 346.658959][T10916] ? __lock_acquire+0x7d80/0x7d80 [ 346.664000][T10916] ? tun_get+0x1c/0x2e0 [ 346.668172][T10916] tun_chr_write_iter+0x119/0x200 [ 346.673220][T10916] vfs_write+0x474/0x9a0 [ 346.677479][T10916] ? file_end_write+0x250/0x250 [ 346.682352][T10916] ? __fget_files+0x3fc/0x460 [ 346.687049][T10916] ? __fdget_pos+0x1d8/0x330 [ 346.691651][T10916] ? ksys_write+0x74/0x260 [ 346.696085][T10916] ksys_write+0x151/0x260 [ 346.700431][T10916] ? __ia32_sys_read+0x90/0x90 [ 346.705214][T10916] ? lockdep_hardirqs_on+0x98/0x150 [ 346.710422][T10916] do_syscall_64+0x55/0xb0 [ 346.714849][T10916] ? clear_bhb_loop+0x40/0x90 [ 346.719538][T10916] ? clear_bhb_loop+0x40/0x90 [ 346.724226][T10916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.730129][T10916] RIP: 0033:0x7fa77c59e159 [ 346.734557][T10916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.754175][T10916] RSP: 002b:00007fa77d444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.762602][T10916] RAX: ffffffffffffffda RBX: 00007fa77c825fa0 RCX: 00007fa77c59e159 [ 346.770582][T10916] RDX: 000000000000fdef RSI: 0000200000000480 RDI: 00000000000000c8 [ 346.778560][T10916] RBP: 00007fa77d444090 R08: 0000000000000000 R09: 0000000000000000 [ 346.786539][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.794516][T10916] R13: 00007fa77c826038 R14: 00007fa77c825fa0 R15: 00007fffe38f03e8 [ 346.802513][T10916] [ 346.856813][T10920] netlink: 'syz.1.1781': attribute type 10 has an invalid length. [ 346.864994][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'. [ 346.874384][T10920] bridge0: port 4(veth0_vlan) entered blocking state [ 346.925068][T10920] bridge0: port 4(veth0_vlan) entered disabled state [ 346.949727][T10920] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 347.526743][T10937] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1788'. [ 347.617161][T10941] FAULT_INJECTION: forcing a failure. [ 347.617161][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 347.629865][T10941] CPU: 0 PID: 10941 Comm: syz.3.1787 Not tainted syzkaller #0 [ 347.637347][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.647424][T10941] Call Trace: [ 347.650719][T10941] [ 347.653670][T10941] dump_stack_lvl+0x18c/0x250 [ 347.658381][T10941] ? show_regs_print_info+0x20/0x20 [ 347.663605][T10941] ? load_image+0x420/0x420 [ 347.668137][T10941] ? netdev_core_pick_tx+0x370/0x370 [ 347.673447][T10941] should_fail_ex+0x394/0x4c0 [ 347.678166][T10941] should_failslab+0x9/0x20 [ 347.682696][T10941] slab_pre_alloc_hook+0x59/0x300 [ 347.687757][T10941] kmem_cache_alloc+0x5a/0x2c0 [ 347.692553][T10941] ? skb_clone+0x1eb/0x370 [ 347.697002][T10941] skb_clone+0x1eb/0x370 [ 347.701274][T10941] bpf_clone_redirect+0x16d/0x4a0 [ 347.706328][T10941] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 347.711815][T10941] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 347.717821][T10941] ? __lock_acquire+0x7d80/0x7d80 [ 347.722866][T10941] ? lock_chain_count+0x20/0x20 [ 347.727740][T10941] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 347.733743][T10941] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 347.739054][T10941] ? lock_chain_count+0x20/0x20 [ 347.743929][T10941] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 347.750210][T10941] ? __local_bh_disable_ip+0x108/0x1a0 [ 347.755690][T10941] ? __cant_sleep+0x220/0x220 [ 347.760401][T10941] ? __local_bh_enable_ip+0x13a/0x1c0 [ 347.765889][T10941] ? _local_bh_enable+0xa0/0xa0 [ 347.770770][T10941] ? bpf_test_timer_continue+0x135/0x380 [ 347.776436][T10941] ? bpf_test_run+0x174/0x870 [ 347.781145][T10941] bpf_test_run+0x2df/0x870 [ 347.785689][T10941] ? bpf_test_run+0x174/0x870 [ 347.790394][T10941] ? dst_hold+0x70/0x70 [ 347.794579][T10941] ? eth_get_headlen+0x210/0x210 [ 347.799552][T10941] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 347.804966][T10941] ? cpu_online+0x60/0x60 [ 347.809316][T10941] bpf_prog_test_run+0x31f/0x390 [ 347.814274][T10941] __sys_bpf+0x49d/0x890 [ 347.818538][T10941] ? bpf_link_show_fdinfo+0x560/0x560 [ 347.823945][T10941] ? lock_chain_count+0x20/0x20 [ 347.828824][T10941] __x64_sys_bpf+0x7c/0x90 [ 347.833260][T10941] do_syscall_64+0x55/0xb0 [ 347.837697][T10941] ? clear_bhb_loop+0x40/0x90 [ 347.842393][T10941] ? clear_bhb_loop+0x40/0x90 [ 347.847087][T10941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.852996][T10941] RIP: 0033:0x7f2634d9e159 [ 347.857421][T10941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.877046][T10941] RSP: 002b:00007f2635d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.885480][T10941] RAX: ffffffffffffffda RBX: 00007f2635025fa0 RCX: 00007f2634d9e159 [ 347.893459][T10941] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 347.901436][T10941] RBP: 00007f2635d57090 R08: 0000000000000000 R09: 0000000000000000 [ 347.909412][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.917399][T10941] R13: 00007f2635026038 R14: 00007f2635025fa0 R15: 00007ffcb0430f28 [ 347.925414][T10941] [ 348.146024][T10951] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1791'. [ 348.169569][T10951] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1791'. [ 348.193906][T10951] bridge_slave_1: default FDB implementation only supports local addresses [ 351.435380][T10972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 351.446700][T10972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 351.456798][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 351.476295][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 351.517322][T10963] netlink: 'syz.1.1798': attribute type 29 has an invalid length. [ 351.529008][T10963] netlink: 'syz.1.1798': attribute type 29 has an invalid length. [ 351.557339][T10963] netlink: 'syz.1.1798': attribute type 29 has an invalid length. [ 351.585293][T10963] netlink: 'syz.1.1798': attribute type 29 has an invalid length. [ 351.601669][T10963] netlink: 'syz.1.1798': attribute type 29 has an invalid length. [ 352.192365][T10997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1810'. [ 352.750594][T11016] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 352.771653][T11016] netlink: 'syz.0.1818': attribute type 7 has an invalid length. [ 353.117555][T11030] netlink: 'syz.1.1824': attribute type 4 has an invalid length. [ 353.179099][T11030] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1824'. [ 353.533709][T11046] netlink: 'syz.0.1831': attribute type 17 has an invalid length. [ 353.543632][T11046] netlink: 'syz.0.1831': attribute type 16 has an invalid length. [ 353.594840][T11046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1831'. [ 354.827884][T11095] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 355.378099][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1859'. [ 355.408761][T11118] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1861'. [ 355.804460][T11130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1863'. [ 355.836174][T11130] caif0: entered promiscuous mode [ 355.841267][T11130] caif0: entered allmulticast mode [ 355.853097][T11130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.903080][T11134] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1867'. [ 355.912994][T11135] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1867'. [ 356.816315][T11173] FAULT_INJECTION: forcing a failure. [ 356.816315][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.844678][T11173] CPU: 0 PID: 11173 Comm: syz.2.1881 Not tainted syzkaller #0 [ 356.852197][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.862253][T11173] Call Trace: [ 356.865532][T11173] [ 356.868462][T11173] dump_stack_lvl+0x18c/0x250 [ 356.873149][T11173] ? show_regs_print_info+0x20/0x20 [ 356.878373][T11173] ? load_image+0x420/0x420 [ 356.882890][T11173] ? __might_fault+0xaa/0x120 [ 356.887577][T11173] ? __lock_acquire+0x7d80/0x7d80 [ 356.892611][T11173] ? __virt_addr_valid+0x10c/0x380 [ 356.897733][T11173] should_fail_ex+0x394/0x4c0 [ 356.902419][T11173] _copy_to_user+0x2f/0xa0 [ 356.906837][T11173] __htab_map_lookup_and_delete_batch+0x10c8/0x1400 [ 356.913448][T11173] ? jhash+0x740/0x740 [ 356.917523][T11173] ? __fdget+0x180/0x210 [ 356.921764][T11173] ? htab_lru_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 356.928869][T11173] bpf_map_do_batch+0x48c/0x600 [ 356.933715][T11173] ? bpf_lsm_key_free+0x10/0x10 [ 356.938654][T11173] __sys_bpf+0x78c/0x890 [ 356.942925][T11173] ? bpf_link_show_fdinfo+0x560/0x560 [ 356.948319][T11173] ? lock_chain_count+0x20/0x20 [ 356.953183][T11173] __x64_sys_bpf+0x7c/0x90 [ 356.957605][T11173] do_syscall_64+0x55/0xb0 [ 356.962131][T11173] ? clear_bhb_loop+0x40/0x90 [ 356.966821][T11173] ? clear_bhb_loop+0x40/0x90 [ 356.971508][T11173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.977417][T11173] RIP: 0033:0x7fa77c59e159 [ 356.981844][T11173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.001457][T11173] RSP: 002b:00007fa77d423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.009873][T11173] RAX: ffffffffffffffda RBX: 00007fa77c826090 RCX: 00007fa77c59e159 [ 357.017928][T11173] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000019 [ 357.025901][T11173] RBP: 00007fa77d423090 R08: 0000000000000000 R09: 0000000000000000 [ 357.033869][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.041837][T11173] R13: 00007fa77c826128 R14: 00007fa77c826090 R15: 00007fffe38f03e8 [ 357.049834][T11173] [ 357.363464][T11183] FAULT_INJECTION: forcing a failure. [ 357.363464][T11183] name failslab, interval 1, probability 0, space 0, times 0 [ 357.390474][T11186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 357.410054][T11183] CPU: 0 PID: 11183 Comm: syz.0.1886 Not tainted syzkaller #0 [ 357.417577][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.427663][T11183] Call Trace: [ 357.430937][T11183] [ 357.433852][T11183] dump_stack_lvl+0x18c/0x250 [ 357.438557][T11183] ? show_regs_print_info+0x20/0x20 [ 357.443751][T11183] ? load_image+0x420/0x420 [ 357.448260][T11183] ? __lock_acquire+0x7d80/0x7d80 [ 357.453319][T11183] should_fail_ex+0x394/0x4c0 [ 357.458029][T11183] should_failslab+0x9/0x20 [ 357.462561][T11183] slab_pre_alloc_hook+0x59/0x300 [ 357.467636][T11183] kmem_cache_alloc_lru+0x4d/0x2b0 [ 357.472775][T11183] ? __d_alloc+0x31/0x710 [ 357.477118][T11183] ? inode_update_timestamps+0x600/0x600 [ 357.482827][T11183] __d_alloc+0x31/0x710 [ 357.486997][T11183] __ns_get_path+0x3b7/0x5f0 [ 357.491595][T11183] ns_get_path+0x54/0x90 [ 357.495844][T11183] proc_ns_get_link+0x16c/0x2d0 [ 357.500695][T11183] ? proc_ns_instantiate+0xf0/0xf0 [ 357.505814][T11183] ? try_to_unlazy+0x33e/0x5c0 [ 357.510581][T11183] ? proc_ns_instantiate+0xf0/0xf0 [ 357.515700][T11183] pick_link+0x666/0xdd0 [ 357.519954][T11183] step_into+0xc18/0xee0 [ 357.524203][T11183] ? pid_revalidate+0x22/0x260 [ 357.528968][T11183] ? set_root+0x3a0/0x3a0 [ 357.533298][T11183] ? pid_revalidate+0x20d/0x260 [ 357.538158][T11183] ? lookup_fast+0x494/0x4c0 [ 357.542748][T11183] path_openat+0x1656/0x3270 [ 357.547354][T11183] ? do_sys_openat2+0xda/0x1d0 [ 357.552119][T11183] ? __x64_sys_openat+0x139/0x160 [ 357.557148][T11183] ? verify_lock_unused+0x140/0x140 [ 357.562344][T11183] ? do_filp_open+0x430/0x430 [ 357.567034][T11183] do_filp_open+0x1f2/0x430 [ 357.571545][T11183] ? vfs_tmpfile+0x620/0x620 [ 357.576149][T11183] ? _raw_spin_unlock+0x28/0x40 [ 357.581001][T11183] ? alloc_fd+0x590/0x640 [ 357.585340][T11183] do_sys_openat2+0x134/0x1d0 [ 357.590021][T11183] ? do_sys_open+0xe0/0xe0 [ 357.594438][T11183] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 357.600423][T11183] ? srcu_init_notifier_head+0x90/0x90 [ 357.605887][T11183] ? lock_chain_count+0x20/0x20 [ 357.610740][T11183] __x64_sys_openat+0x139/0x160 [ 357.615608][T11183] do_syscall_64+0x55/0xb0 [ 357.620031][T11183] ? clear_bhb_loop+0x40/0x90 [ 357.624709][T11183] ? clear_bhb_loop+0x40/0x90 [ 357.629396][T11183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.635290][T11183] RIP: 0033:0x7fdd1455e98e [ 357.639706][T11183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.659324][T11183] RSP: 002b:00007fdd154f4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.667741][T11183] RAX: ffffffffffffffda RBX: 00007fdd154f56c0 RCX: 00007fdd1455e98e [ 357.675712][T11183] RDX: 0000000000000000 RSI: 00007fdd154f4f90 RDI: ffffffffffffff9c [ 357.683682][T11183] RBP: 00007fdd154f5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.691650][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.699620][T11183] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 357.707620][T11183] [ 357.970524][T11200] validate_nla: 3 callbacks suppressed [ 357.970542][T11200] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 358.025993][T11200] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 358.033905][T11200] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1893'. [ 358.070288][T11200] openvswitch: netlink: Message has 4 unknown bytes. [ 359.874908][T11240] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1907'. [ 360.052718][T11248] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 360.267453][T11252] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 360.897371][T11262] netlink: 35083 bytes leftover after parsing attributes in process `syz.3.1916'. [ 361.098262][T11272] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1918'. [ 361.542888][T11284] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 362.038709][T11284] veth0_vlan: left promiscuous mode [ 362.077004][T11284] veth0_vlan: entered promiscuous mode [ 362.112028][T11284] team0: Device veth0_vlan failed to register rx_handler [ 362.633536][T11298] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1932'. [ 362.675915][T11307] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 362.680945][T11300] syzkaller0: entered promiscuous mode [ 362.683817][T11307] netlink: 'syz.0.1934': attribute type 3 has an invalid length. [ 362.694287][T11300] syzkaller0: entered allmulticast mode [ 362.719492][T11307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1934'. [ 365.501036][T11316] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1936'. [ 365.511236][T11320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1937'. [ 365.682584][T11334] netlink: 'syz.1.1941': attribute type 21 has an invalid length. [ 368.567177][T11356] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1945'. [ 378.772172][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.778561][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.372275][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.382256][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.390173][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.398992][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.408431][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.415948][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.473721][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.486691][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.494580][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.503435][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.512873][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.520429][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.557560][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.568263][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.590685][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.602228][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.611225][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 413.618758][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.659341][ T5090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.671373][ T5090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.680017][ T5090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.692044][ T5090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.703214][ T5090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 413.714892][ T5090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.502233][T11366] chnl_net:caif_netlink_parms(): no params data found [ 414.553168][T11365] chnl_net:caif_netlink_parms(): no params data found [ 414.576304][T11368] chnl_net:caif_netlink_parms(): no params data found [ 414.594172][T11364] chnl_net:caif_netlink_parms(): no params data found [ 414.965769][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.972951][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.987978][T11366] bridge_slave_0: entered allmulticast mode [ 415.000080][T11366] bridge_slave_0: entered promiscuous mode [ 415.086688][T11365] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.093948][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.109700][T11365] bridge_slave_0: entered allmulticast mode [ 415.117531][T11365] bridge_slave_0: entered promiscuous mode [ 415.127944][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.141726][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.153631][T11366] bridge_slave_1: entered allmulticast mode [ 415.166977][T11366] bridge_slave_1: entered promiscuous mode [ 415.173773][T11364] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.193881][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.202676][T11364] bridge_slave_0: entered allmulticast mode [ 415.216495][T11364] bridge_slave_0: entered promiscuous mode [ 415.231857][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.241235][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.263959][T11368] bridge_slave_0: entered allmulticast mode [ 415.273036][T11368] bridge_slave_0: entered promiscuous mode [ 415.289139][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.304826][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.312357][T11368] bridge_slave_1: entered allmulticast mode [ 415.327591][T11368] bridge_slave_1: entered promiscuous mode [ 415.342918][T11365] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.353173][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.368495][T11365] bridge_slave_1: entered allmulticast mode [ 415.376342][T11365] bridge_slave_1: entered promiscuous mode [ 415.403691][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.416569][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.423829][T11364] bridge_slave_1: entered allmulticast mode [ 415.436695][T11364] bridge_slave_1: entered promiscuous mode [ 415.504878][ T5090] Bluetooth: hci4: command tx timeout [ 415.565022][ T5090] Bluetooth: hci5: command tx timeout [ 415.574453][T11366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.594338][T11368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.643063][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.652758][ T5090] Bluetooth: hci6: command tx timeout [ 415.671656][T11365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.693583][T11366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.708024][T11368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.746243][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.767590][T11365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.804924][ T5090] Bluetooth: hci7: command tx timeout [ 415.902619][T11368] team0: Port device team_slave_0 added [ 415.918635][T11368] team0: Port device team_slave_1 added [ 415.948916][T11365] team0: Port device team_slave_0 added [ 415.970660][T11365] team0: Port device team_slave_1 added [ 415.989984][T11366] team0: Port device team_slave_0 added [ 416.010619][T11366] team0: Port device team_slave_1 added [ 416.062105][T11364] team0: Port device team_slave_0 added [ 416.077527][T11364] team0: Port device team_slave_1 added [ 416.163712][T11368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.173293][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.205108][T11368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.264203][T11366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.281926][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.314749][T11366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.334058][T11368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.353613][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.390666][T11368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.411006][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.426810][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.465679][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.480302][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.494770][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.529112][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.549774][T11365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.561476][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.600197][T11365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.620467][T11366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.631056][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.666756][T11366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.564904][ T5090] Bluetooth: hci4: command tx timeout [ 417.644978][ T5090] Bluetooth: hci5: command tx timeout [ 417.856531][ T5090] Bluetooth: hci6: command tx timeout [ 417.885282][ T5090] Bluetooth: hci7: command tx timeout [ 419.655501][ T5090] Bluetooth: hci4: command tx timeout [ 419.735452][ T5090] Bluetooth: hci5: command tx timeout [ 420.974757][ T5090] Bluetooth: hci6: command tx timeout [ 420.980210][ T5090] Bluetooth: hci7: command tx timeout [ 421.725250][ T5788] Bluetooth: hci4: command tx timeout [ 421.805288][ T5788] Bluetooth: hci5: command tx timeout [ 423.006102][ T5788] Bluetooth: hci7: command tx timeout [ 423.011569][ T5788] Bluetooth: hci6: command tx timeout [ 442.403886][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.412010][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.825673][ T5090] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 473.835571][ T5090] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 473.843528][ T5090] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 473.851948][ T5090] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 473.859774][ T5090] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 473.875754][ T5090] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 473.928450][ T5788] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 473.938562][ T5788] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 473.946602][ T5788] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 473.954580][ T5788] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 473.962327][ T5788] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 473.972197][ T5788] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 474.062116][ T5090] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 474.072162][ T5090] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 474.082914][ T5090] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 474.092292][ T5090] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 474.100180][ T5090] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 474.107689][ T5090] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 474.211299][ T5090] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 474.220536][ T5090] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 474.228715][ T5090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 474.236969][ T5090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 474.255205][ T5090] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 474.264334][ T5090] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 475.964996][ T5090] Bluetooth: hci8: command tx timeout [ 476.051776][ T5090] Bluetooth: hci9: command tx timeout [ 476.205030][ T5090] Bluetooth: hci10: command tx timeout [ 476.374910][ T5090] Bluetooth: hci11: command tx timeout [ 478.044892][ T5090] Bluetooth: hci8: command tx timeout [ 478.124805][ T5090] Bluetooth: hci9: command tx timeout [ 478.284821][ T5090] Bluetooth: hci10: command tx timeout [ 478.445178][ T5090] Bluetooth: hci11: command tx timeout [ 480.124806][ T5090] Bluetooth: hci8: command tx timeout [ 480.204820][ T5090] Bluetooth: hci9: command tx timeout [ 480.364854][ T5090] Bluetooth: hci10: command tx timeout [ 480.535050][ T5090] Bluetooth: hci11: command tx timeout [ 482.204803][ T5090] Bluetooth: hci8: command tx timeout [ 482.284894][ T5090] Bluetooth: hci9: command tx timeout [ 482.446386][ T5090] Bluetooth: hci10: command tx timeout [ 482.605276][ T5090] Bluetooth: hci11: command tx timeout [ 503.873789][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.901055][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.432721][ T5784] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 534.443195][ T5784] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 534.451343][ T5784] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 534.464919][ T5784] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 534.473066][ T5784] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 534.484145][ T5784] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 534.491718][ T5784] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 534.500395][ T5784] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 534.507992][ T5784] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 534.540260][ T5090] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 534.548188][ T5090] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 534.555681][ T5090] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 534.646149][ T5788] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 534.656566][ T5788] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 534.665519][ T5788] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 534.675566][ T5788] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 534.684137][ T5788] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 534.692395][ T5788] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 534.791144][ T5090] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 534.800541][ T5090] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 534.809292][ T5090] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 534.817374][ T5090] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 534.834123][ T5090] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 534.842600][ T5090] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 536.605002][ T5788] Bluetooth: hci12: command tx timeout [ 536.612188][ T5090] Bluetooth: hci13: command tx timeout [ 536.765048][ T5090] Bluetooth: hci14: command tx timeout [ 536.884679][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 536.891427][ C0] rcu: 0-....: (10370 ticks this GP) idle=838c/1/0x4000000000000000 softirq=40284/40360 fqs=5247 [ 536.903079][ C0] rcu: hardirqs softirqs csw/system [ 536.909496][ C0] rcu: number: 1584080 212 0 [ 536.915921][ C0] rcu: cputime: 16752 35736 32 ==> 52520(ms) [ 536.923713][ C0] rcu: (t=10504 jiffies g=50521 q=3172 ncpus=2) [ 536.930035][ C0] CPU: 0 PID: 11347 Comm: syz.0.1945 Not tainted syzkaller #0 [ 536.937485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.947534][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 536.953426][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 7b 9b 2d 03 66 2e 0f 1f 84 00 00 00 00 00 [ 536.973027][ C0] RSP: 0018:ffffc900000074f8 EFLAGS: 00000246 [ 536.979088][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 536.987141][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 536.995106][ C0] RBP: 0000000000000000 R08: ffffc90000007467 R09: 1ffff92000000e8c [ 537.003070][ C0] R10: dffffc0000000000 R11: fffff52000000e8d R12: 0000000000000001 [ 537.011032][ C0] R13: 0000000000000001 R14: ffffffff8d22e988 R15: 0000000000000020 [ 537.019021][ C0] FS: 00007fdd154f56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 537.027943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.034525][ C0] CR2: 00007fd337c67697 CR3: 000000005e422000 CR4: 00000000003506f0 [ 537.042495][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.050458][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 537.058420][ C0] Call Trace: [ 537.061692][ C0] [ 537.064524][ C0] arch_irq_work_raise+0x68/0x70 [ 537.069466][ C0] irq_work_queue+0x99/0x140 [ 537.074054][ C0] __kfence_alloc+0x2a0/0x3d0 [ 537.078730][ C0] ? kfence_guarded_free+0x4b0/0x4b0 [ 537.084013][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 537.089731][ C0] ? mark_lock+0x94/0x320 [ 537.094063][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 537.100038][ C0] ? lock_chain_count+0x20/0x20 [ 537.104882][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.111032][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 537.116220][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.122375][ C0] ? should_failslab+0x9/0x20 [ 537.127043][ C0] ? slab_pre_alloc_hook+0x59/0x300 [ 537.132241][ C0] kmem_cache_alloc_node+0x299/0x310 [ 537.137521][ C0] ? kmalloc_reserve+0x95/0x240 [ 537.142367][ C0] kmalloc_reserve+0x95/0x240 [ 537.147038][ C0] __alloc_skb+0x138/0x2c0 [ 537.151446][ C0] skb_copy+0x126/0x700 [ 537.155608][ C0] mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 537.161665][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.167814][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.173964][ C0] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 537.179856][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 537.185658][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 537.191115][ C0] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 537.196656][ C0] __iterate_interfaces+0x225/0x4c0 [ 537.201847][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 537.208079][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 537.215268][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 537.221498][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 537.228519][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 537.233707][ C0] ? hw_scan_work+0xf10/0xf10 [ 537.238372][ C0] __hrtimer_run_queues+0x525/0xc10 [ 537.243579][ C0] ? hrtimer_interrupt+0x980/0x980 [ 537.248682][ C0] ? read_tsc+0x9/0x20 [ 537.252746][ C0] hrtimer_run_softirq+0x177/0x290 [ 537.257850][ C0] handle_softirqs+0x27d/0x820 [ 537.262603][ C0] ? read_tsc+0x9/0x20 [ 537.266661][ C0] ? ktime_get+0x24b/0x280 [ 537.271071][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 537.275824][ C0] ? do_softirq+0x1a0/0x1a0 [ 537.280317][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 537.285512][ C0] __irq_exit_rcu+0xd3/0x190 [ 537.290092][ C0] ? irq_exit_rcu+0x20/0x20 [ 537.294594][ C0] irq_exit_rcu+0x9/0x20 [ 537.298824][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 537.304445][ C0] [ 537.307367][ C0] [ 537.310288][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.316262][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 537.322058][ C0] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 537.341654][ C0] RSP: 0018:ffffc90003527760 EFLAGS: 00000286 [ 537.347713][ C0] RAX: 84a28f80ec8a9c00 RBX: 0000000000000000 RCX: 84a28f80ec8a9c00 [ 537.355680][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 537.363643][ C0] RBP: ffffc900035277b0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 537.371602][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: ffff88802c500000 [ 537.379568][ C0] R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 537.387546][ C0] __schedule+0x15b6/0x4660 [ 537.392069][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 537.399261][ C0] ? lock_chain_count+0x20/0x20 [ 537.404101][ C0] ? asan.module_dtor+0x20/0x20 [ 537.408949][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.415098][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 537.420292][ C0] ? preempt_schedule+0xc0/0xd0 [ 537.425137][ C0] preempt_schedule_common+0x82/0xc0 [ 537.430425][ C0] preempt_schedule+0xc0/0xd0 [ 537.435098][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 537.440723][ C0] ? event_function+0x300/0x300 [ 537.445573][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 537.451291][ C0] preempt_schedule_thunk+0x1a/0x30 [ 537.456483][ C0] ? smp_call_function_single+0x488/0x5a0 [ 537.462194][ C0] smp_call_function_single+0x48d/0x5a0 [ 537.467743][ C0] ? event_function+0x300/0x300 [ 537.472590][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 537.478736][ C0] ? event_function+0x300/0x300 [ 537.483590][ C0] perf_install_in_context+0x5bb/0x920 [ 537.489052][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 537.494159][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 537.500131][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 537.505328][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 537.510529][ C0] ? perf_event__header_size+0x165/0x220 [ 537.516166][ C0] __se_sys_perf_event_open+0x1818/0x1d40 [ 537.521884][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 537.527514][ C0] ? lock_chain_count+0x20/0x20 [ 537.532364][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 537.537643][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 537.543267][ C0] do_syscall_64+0x55/0xb0 [ 537.547696][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.552385][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.557067][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.562959][ C0] RIP: 0033:0x7fdd1459e159 [ 537.567379][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.586979][ C0] RSP: 002b:00007fdd154f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 537.595397][ C0] RAX: ffffffffffffffda RBX: 00007fdd14825fa0 RCX: 00007fdd1459e159 [ 537.603358][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 537.611317][ C0] RBP: 00007fdd1463506b R08: 0000000000000000 R09: 0000000000000000 [ 537.619276][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 537.627237][ C0] R13: 00007fdd14826038 R14: 00007fdd14825fa0 R15: 00007ffd3b7384f8 [ 537.635208][ C0] [ 537.654991][ T5090] Bluetooth: hci15: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.685226][ T5090] Bluetooth: hci13: command tx timeout [ 538.690779][ T5090] Bluetooth: hci12: command tx timeout [ 538.844874][T11437] Bluetooth: hci14: command tx timeout [ 539.724911][T11437] Bluetooth: hci15: command tx timeout [ 540.774441][T11437] Bluetooth: hci7: command 0x0406 tx timeout [ 540.780898][T11437] Bluetooth: hci4: command 0x0406 tx timeout [ 540.787744][T11437] Bluetooth: hci5: command 0x0406 tx timeout [ 540.793790][T11437] Bluetooth: hci6: command 0x0406 tx timeout [ 540.799883][T11437] Bluetooth: hci12: command tx timeout [ 540.805493][T11437] Bluetooth: hci13: command tx timeout [ 540.925049][T11438] Bluetooth: hci14: command tx timeout [ 541.804952][T11438] Bluetooth: hci15: command tx timeout [ 542.845009][T11436] Bluetooth: hci12: command tx timeout [ 542.850561][T11438] Bluetooth: hci13: command tx timeout [ 543.004803][T11438] Bluetooth: hci14: command tx timeout [ 543.884827][T11438] Bluetooth: hci15: command tx timeout