last executing test programs: 3m19.759654437s ago: executing program 3 (id=477): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x202}, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 3m18.742697475s ago: executing program 3 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m18.540783607s ago: executing program 3 (id=492): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000001180)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="86fb5c871501464dac0112b1d1915ce93aeef203ffe22c44e04dc037e1f3de2f0996518e7333e7ff31ea3f665ca807364e8fbb03c8157795e053593d6395a6d1ef15057ddef0afad36e612ae4ed9cd8dfea34b05bc8c9ed0a073e1c37743c6499c8014938615fd6dcfebb0220bed5ed7d18a9af5d058e8bf02b0cb405940f5cb22b7aab597ff", @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x7, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x48, 0x0, 0x33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x74, 0x40, &(0x7f0000000240)="ced54b90c783730760b44e0f636d2efcab567de635d26d6bc84dad9742937556adc9da670fe46b7eeeba22de720a4603989eab5309f31ed7508434be047773a8a76b4ffb0048996b19d30ee443a34f7fa03a10aa153825b9972d8ab26fdfaf790fea5bf0b1e1b0b02a8c796ae933fc0a78540484", &(0x7f0000000140)=""/64, 0x9a8d, 0x0, 0x76, 0x1000, &(0x7f0000000400)="ccf0e0e304ee81191b6fe41cd2bc7acda31b788a3cd1db720ab5ac26dcf64e8e067e2a549ea50985925598d5e124d7e9a591568b624d474005b26942b81df3c242c0406440cb7fc0bbcc844dbb7dc0b4f507cb854df9a48d0b9991fb52f31640658087bbe8882d056bd7f2d94b6360420b5463051d46", &(0x7f0000003400)="f09178d1c0f83db1b9800aeb8443cb3c16a5688341ee22f35651bf29aa563b3c5f43adc27a50359fd4eb72fe80aa4207f6294c73af06cfb74e24a52b70fbb5f45e096b78f9bb1efad0644caaf26690f2e8667517393e0bcaf443d3f185fe200b6cdcedc876ee36dfee77d3151d42bb1a3ae96cbd970d992d415331483b91a4d2cb85cff3f8a651b3ab158b2cfd79b1c8541f9fdcf33db4321cc49fcd098d43c01517a1aaac3594c38c554f65d7a52c30cbecc0cbaacab1f1d80b9a16d11a06d1ca7da3b78764c5f552de95b64d219dee88de4f626fbb07b5dcc54fa2e0edef720cbe2c678ba44fa3c87277856424bdc1f0e8e2ccbc5cdf90c6239291fa16bb67548ea49202a7ac9d775603f098230356b1f835d5dfaa4516d1cc075650f4c872c529b16be3e35cc4cd19172980120f2e99bb2a16519fe2283c4476be82029157f1c88c36e7c6e629b7d8483ef5fd528d87eb6c2c3a862d4ba5487b4429f0b7fc91c039eae60e899c9278b7da52394d2f6ed90ae973cc6b1d14c0e53fde6bef535dce5ec36a61e7003c25beb036f6b48344d6cbd38c9751a5bc9f33627c81ae6fcccb9248835e8cb032655d0be7dd9b2803b967204be6453ed9c47a09fc052fdfa0aa9c39db9526a1a2babb4b405d9370bafd79ae30db6849dc071eb23c094ff9f5e5d30dbde587f796c0ca3e23f9085e572890e8e159486b1c53ae4861d62f726d17c5d81a4a625dba1bc1389b7fa810ff2a70c969eb4d3df403b85037d829b6bff3b152c8a1ed0557360dd2d611af94f713e42e2c97d96390526710ce0d1ea8c0940d1e2c910563aff82dffeb886d6949cb14ef962ad13b8dbdf58ec39715431e00bd2d247737e6cbb034ff88f52ccea1fa437ad80801e0ed51a161318e75ac721b9b853aa96c3f0887bf65e92172e57ca9410ec93a183624e2512fabebea128cb04ec58faa92220a084a26c90c7397d542e2cb868e2980f30556e30a07e80705f181de0e82c633b5acda984bb81f69c80d67334774c267f4d303f6dce5305ff58af07254828e145f67331c2cedd2a31895c1c74b7217a4bc368dd4cb67ba1e76f8d33c1e751dd4c06bb886ed8e07fa5f2ee26fa3cb3c3b6954319352a150738da3e2f72d2ee19f1b89ba0572d5c6b1950f56200dd057c9cba6d8eec0c683bb53237a70d37b3aa2d607d7cb358bcf0f91a360c97a0c22cc86428a2715a6efc2f7ed5e169742c8499290ad8db2c7edc73c53d59cd76a8e09b3d20784f35068f2f75365275e35cdcff9047a227441bc0e679d31ed251dd1a9847f4541677b7864ae08e029d4b063d00e6d21462cfd7972fef9dd894cbcf6386b854d7316810904580f2cc8da102abcf8aae0a81c573757e00fdbf5ab7a9fdbf49aecb9033b0b7d3727d0d2942f74ff8db3843aed90697435c15d7c0aa5274bb392caaf9dda5d9f6eabdd4426d8224a091a4274b16690bed7dd191f2364b4f6993b74b58b1d6da7a4fb67bd04ca6ddef524a072f0e6110b70075112d29578bda73a3cf60fc1cfbc97681d130595c8ee8a96e5fce8c824dae4e30c5bc91ce656f6854f39a264fd3d26567c7b14dc6adce7487a25a7beb7efed67b6c801e580bc4d4be1e565db7dadbaeda69e3ec570e640c0a5dd96a3e55f05dc8191be38995d226115493092ea7da274bb5e7e2b8181a1b27e30c9d5e4c130c3f87754a6ebf18e03fce4de42419772bc26020184a2c1e89f84d569434fabfe9b8905d1dcf0180d9a0c12369203aa737c95169e17baa862b300d5da762188267936990cad6599e2dee32f26d8a3f6258486ec279cc83254fdb893bc107133e1507764d3505816505ffe4c7c9a6e95af58bb28a1e99769a273d3c06dab8736b40b2faf32c73262b2f91b7c57204607956179a69461aad724da5668e3e165e751583068851d398525176ab8202ad1e6f1a6c2af0b3dc7a95f5d6b09c51f465018d33118dbcdc7f8314492cf5fe3f7e2859b46075154bb2c8d12bc110db36e968f3b8c19ae65a4195f3883804c550df9db7065fa2d4bd4ffa17b20033e366ba0f708c42cd993d7b898dbaf8ed990ba1cf07e823c91aeabcc097dea4859fe6c8f8d5694f0247825d13546fe64c2e83b9fabea1d88bd8053f3a06a47a469bb346fc03f27a7f5675052dbd09107a20a49707e740703250f2d9f4aa1ef020dd2a81dd433b8a171cf14c515c9420e195174fe0c51c030081aa3b3f14ea58b4e66a241c58c048e2dd7fb7928be5d84ddc4dfa6c6bf153633080dc0957cc9f3dd834cbcac5d6aee8af3424080d3932e9c5640a76743a0678c1b17f461bf78ebd7438e85dc8ae13764975a34510358d3c7cae9b42f0df7d19accb4d903a14ce4e131796fa02cd582fd60168ae8247bd9241349378519d17115962ec8f3431c8fdc1571f34fd1f5b433cfb0d23dc7d29d7e5213d67dde503f5281518fa785436656da753ad93dc96321f78a2979c46a90e798c3dc75ce163aceba1b0b313b2380f58121d4fdce4b33d1ed133e7143df0303e7e6b5f162f1a5d8be3d35140b93897ef6b135610c7803e703526e36bd5e16040e564bdfbdd33d76db1364711465cb14eb2e651619eccc423faca75d64ca3ba1ec7d5dea273f0464074e1d014f38931eea714540a89ef96659e0b1b6bb004fdf051f14ef005b23814604b47362240a9370a699bdb8a39eb309b6858910173313792d26ef7ffeb5f7d242e16a060f8883f9911c16e206134ee2ecfbe09902c58a76932347c4062beae1417b723a7dab42a93183bcaa313c2279391663c6fb3cbaadfb639a128001f2fa790f2fa8d197bcc5a32ba9aff72c0c197983d43a54a24a37f0037f9bac6b4dbdfad51f451ab8dd23183b35d57844552e521802e7c59f72d47a44b4bb6fd6027afc4462c8787ea6ecb4ba91471d396f88ddbeb58ecb38b077d510c4996c1a3813a1b3e34809b293cf5bec2106b715719ee4a273adf7b69bac48ab6f7828b4508ad94f34a1aa4d96324d11a50934f6d55b3e9c11cf346cb55a29ed9256da9e685aefb948acc40894f82b53a6be0e228823f447a8a1cdf2960c197eb5713d5b086eb2eb7ee8abb857bca7d42f9c6599b6bbf2b2f40d2b8df34b6ba0c88bec4c62a057db2c183a1b5ca38277aa8ce049d6334081b1b3911f2d22c24e05681a01825199c65c11be58396d9ad5dbb2d27f4933d8ed7c49e5984d2eca12887c9861a67ad238a18082f8c1f27c24201e36d4c3bd5d27aaa1437bce670c3db70ff98b8d8db46ce974fc5cce3ac8be6043988447f6cacd3a17fb482e792a7c8c2fc6704d4506bc0ef4e14c8a3f1f5b532af0478f72ecdf7d476a003dbc482056b1ed4fd94d14b2b8ad7bb2d1a7dd84ceef6eaad52587a89b67739760d5a491f1a90d1bdc8b4ca08db6a7f3aaea6f35811cd4d1509dbbfb314b93c75b032fe9b1bdc31c79d402b11ae518a806fa7d2de3818629896d85ccd84b2beb65fe1a0c9f6a3d521713a51af2f97233db114dbad85ba9d6bda7e1007a257f93fc0d5a3e77f96ce568ea2341dcd535d723e19624730ffc8aa71c0f5169fac5c70ebff7abec0fc64cad702257ec3241b7db2e99d12110ff91f2c291b43fb4cf65e5bdd31627e5a9ad67e705222dd68c25bd49d946ba6251a3bd11495e9d25967695e49e8fb99cfe4580ab91dd4e3b09f5c13ea9d34d24eb8c1378eeb5b43b01fac60d135aaff6743e058a470b2498ff472455f87ef5cff6437e2c6516997e4ded874ceb91403dc57124d16aea7014e61984158f35d80fe37ca4ba49022f59ef576b80fa33cfed360de5f1519f443bfe2797b6ef50ef68d234bb5e76765e129bb3544fa5eda60c36d6b363bdb96d8298c21db310c015d36013ae56afb6e92765278e05fedf11b3fa1131ad6129ac3e2e138c286001fc851cf5085d32cbe2a9c8cbe43d5f4c95b16b04f85a078e3915b31c84b593264752a97c07a023176518bf350346cf615c0e5d62314a9ebecd79d02c0967347da3082e7fe0a768b7d5bff5ba477f98dfafd464d4f556d7a6705b7dd0e42fb97a418c1c477958980e2733d356248c51314fe5859206e6b190363733c3ed43323378e6ca38fb63b1f2ad6813cdae3192af8eef5b84d032984f8b96da1b284f0a4bd5d8c20d68ef9fa4016b5c1592ae921c659e7f30c1aa7758f611a67a968bdb4e5dbf35c67fd1d1cfe6ae3c3be4e0d74602ddb8ab82cf102f24d9c56d5b32d373dc14b60bfb3b0b5921e119f997c144016922ef3d9ffbf73d6d911b1011fd3a7ffce6854aafeca9927540068a16bc1112bec0a296ca0b0e4cb0fb51cec6626a43ce1bdaf5717e26e0da6500191b9ec1339185a5c190acba1510d74c9b465001a8bc05e51b0a124b19e44d0dcd3a64a6ac770fee976904e8458c0a96189bdea30cefab5e0cf005a741a135228b90dbdaa68907d8c9b89cb0854068ebae85bd5d73424f777855979bf045069c1880c1595a182293321f0086dfc83a8dd01788774d12df9318951a913575220c6fffc6dec4e8d31e42b8f9cceee00b611d533b81df40502a93a8b0602b93f70c6c87a9e58b45d2fd3b51c7ddf567e6f56190dc5ecc15f92036d7e8e6aaae71c74cb946c413b0a286dbdd65267c6d07fb9d0e27f71d104d9e94f7e8fd26965de986900c30096d33f36a3c008cedce73689d41060d017a91f45ef441816c5f4caea61d6c4f115004f28e592f37946272271ecd2b5fd707f19853173f63a43d75ffdaa14530135bb71716c86b3cf85812609af59b65a2319405f7f49ccfcbef54d67b55fb2a39bd5aaf5766f893e1575452a741240222f83284df69dbb3159d009eeef5541eb9819fb2a8c3f455696a1632a680b43ffc6247a173d987b75b9ebef4d550b067272176b4886e6dc00190f3f2f09fb9412050041b979b5107f322b36185a9a46dd1c5c5e3317a59409662c6baf9afb9dd5e710f0af89e03b98b5e7bb4a492238cedbc707df0686f377140888def9bc39299ec73b0eeca7d0a27e8c91c8e4ca0435cbc907d603f6f41f3383dd77f116c5b8ec9a3fa733c0dd0739b0aaf4c7d184c0fde323c772d0471a54624b90ad9f0df2c260610edca658859757c6cbee0112cc8f9f62f374e0e7dd036588611d7dcc52df9e102c60372fdb1395e9d775607ad2462d42acf0203e880c641229dddc03ff855975021d58cd86d47576e6d45035793a79ef3148c24f0c3edea9ce53ff7fcdbbf67babcbb0e0d3ab678e36d0a2660b70c50df0b78c2cd436635d690b3f3bc56d38082a48e16ae6137b37f82cc7a5fca2829cdd3334cd7485c0d62e7420617b0213d3e38c9154a869cffdf3abb0813f680044129f924e382c5eb4ccc2c0a719ecc4f88120afaa5ac944df88db67a877a6d0ab569e8966bea3249e770cace8083ade72326109f9bd4eb44a95e29f6f8a060c6de4c3a19033759916c3f28dce56208fe69145f14af1f170e7072509d0490ceace1ed53f0e1f560711a7be5d82f3d16988a27204b35142d1fdf171d08e63260ed4c3ec78f60cc25a1fcde7d630828b557321e11847048cc75e73f092cd28ffc4725a9500d213be06e763b99a5da5e8540f10b54efc92e39ecc43d2a6f0a5892d67d8327f707654c1612d90870c8924b1247d4a7478ebc983db12c8cdd2d79b183d8e99d21f805b68a5ac0a6cf9c58fdac0937afe6617549fafc583b60c09950d3e5012d1e7eb59ccfa65feffb05763d21781bb1b1808240b9c09c7c9431921481d8f77fcbfb35a0863e9846f79ad87e89a151baf08a8d9e94000000000000", 0x6, 0x0, 0x6}, 0x50) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0d000000faffffffff010000070000000c8a00005819ba70fda5064fc88a0a3f0b9a1e57f4fd2aa19e6b7e841242d4f632a5ec07dd66284238d58f78297eac689901bd7d037c0d04b73febaecc54e4c7e0a6b6f154777df3e256935d55caa33ef5c2f5bae93cbdac45ee97bd0e31e677e9970581f740b2866de6938b5ffc4a17f4ce3df4d517d9ab90577c3edff5afe932397859fc9f5838d774a6b175d4b33bbd7074e8bb650f7ec4", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000050000000900"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRESOCT=r4], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r8, @ANYBLOB="00fa63c9e87c1af675b4a79a00000000000000008d437c03846d141756db2c7ce5c4052e75d2a141c5ddf9d15e357927a577fb88df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001180), 0x0, 0x4048054}, 0x93774a8665302fcc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 3m18.056796665s ago: executing program 3 (id=497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x25, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x9}, 0x1890a, 0x100003, 0x4, 0x0, 0x80, 0xffffffff, 0xfffc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x800) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m2.961474604s ago: executing program 32 (id=497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x25, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x9}, 0x1890a, 0x100003, 0x4, 0x0, 0x80, 0xffffffff, 0xfffc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x800) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m58.729059302s ago: executing program 2 (id=1159): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) 1m58.688348314s ago: executing program 2 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000400000080000000d6eae33d2b198c7722bff9e9d07fa4d688532f7e059eb82b4d085742b1ca10f25f5abd64dfbed87dfb8c8265b5c861c197040a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRESHEX=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f00000006c0)) close(r5) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="817f0000", 0x4}, {&(0x7f00000000c0)="0f36ed34", 0x4}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$kcm(0x28, 0x1, 0x0) recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10042) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5761, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r12, 0x1}, 0xc) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x8000) 1m58.110324158s ago: executing program 2 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000960018110000", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb9, 0xb9, 0x3, [@datasec={0xe, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x4b9e}, {0x3, 0x7, 0x3}, {0x4, 0x6, 0x9}, {0x4, 0xfffffffa, 0x7}, {0x2, 0x88, 0x100}, {0x5, 0x100, 0x9}], '6'}, @fwd={0x10}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0xb, 0x2}]}, @enum64={0x10, 0x3, 0x0, 0x13, 0x1, 0x8, [{0x9, 0x7, 0x42}, {0xc, 0x9, 0x75b}, {0x1, 0x2, 0xe}]}]}, {0x0, [0x61]}}, &(0x7f0000001340)=""/161, 0xd7, 0xa1, 0x0, 0x73}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x38, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf835, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd6}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x6, 0x151, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7a7, 0x58, &(0x7f00000003c0)=""/88, 0x41000, 0x45, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[r1, r0, r0, r0], &(0x7f0000001400)=[{0x4, 0x2, 0xe}, {0x2, 0x1, 0xa, 0xa}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x4, 0x10}, {0x4, 0x2, 0x9, 0x5}, {0x1, 0x5, 0xc, 0x9}], 0x10, 0xe7}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b8944578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000100000000000000000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb080000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eaf36e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m57.993036405s ago: executing program 2 (id=1169): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x21, &(0x7f0000000000), 0x10) 1m57.73804842s ago: executing program 2 (id=1171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) 1m57.496524404s ago: executing program 2 (id=1173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000045c547c2438a00d372309130a7c1248aada12e5d151b6860ba292420bf28be91ff13ba8cc7728d46680c06b59397aa92449be1b49996bbf620e05c1b4cecc08a98db936d18198398a4e953bb4f528e5adb543d5e84af8b1d9f08f0e2a69182ea35f4a6e5ebfb9dc460306e91a9067b4d326f5b6643925764b840c3b54c07ee5c91769333173d"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84080, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/mnt\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$TUNSETLINK(r1, 0x400454cd, 0x200) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.840489545s ago: executing program 33 (id=1173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000045c547c2438a00d372309130a7c1248aada12e5d151b6860ba292420bf28be91ff13ba8cc7728d46680c06b59397aa92449be1b49996bbf620e05c1b4cecc08a98db936d18198398a4e953bb4f528e5adb543d5e84af8b1d9f08f0e2a69182ea35f4a6e5ebfb9dc460306e91a9067b4d326f5b6643925764b840c3b54c07ee5c91769333173d"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84080, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/mnt\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$TUNSETLINK(r1, 0x400454cd, 0x200) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.925017268s ago: executing program 6 (id=2316): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x400, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x100000, 0xfffffffffffffffd, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) 3.830219338s ago: executing program 6 (id=2379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 3.563264263s ago: executing program 6 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x30, 0x8, 0x80, 0xfffff008}, {0x6, 0xc0, 0xff}]}) 3.223022593s ago: executing program 6 (id=2389): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x400, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x100000, 0xfffffffffffffffd, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) 2.013945433s ago: executing program 4 (id=2407): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0x2a, 0x2}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.90832689s ago: executing program 4 (id=2412): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 1.701060761s ago: executing program 5 (id=2416): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) 1.700592372s ago: executing program 1 (id=2418): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 1.700190131s ago: executing program 4 (id=2419): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a40)={r2, r0, 0x4}, 0x10) 1.609851887s ago: executing program 4 (id=2421): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1.532396192s ago: executing program 1 (id=2423): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcfffdff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 1.179822792s ago: executing program 1 (id=2425): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000c6f300008010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.120074926s ago: executing program 0 (id=2426): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000060400000000003e5451d55a8707"], &(0x7f0000001740)=""/228, 0x26, 0xe4, 0x1}, 0x28) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 992.277083ms ago: executing program 5 (id=2427): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'cpu'}]}, 0xb) 927.161186ms ago: executing program 1 (id=2428): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000c45e7c00000000000000180100002020702500000000002020207b1af8ff00000040bfa100c50607fc8056a6d0b5b03f000000000007010000f90003ffb702000008000000b70300000000000085000000060000a9069c6d78b08756eb15d2120ec583065b28afc84cb4d85be75f4d9faa1945557ba59f9ba722bc278f53a9e8162fc6792d1d8e"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8596, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r4, 0x1, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, 0x0, 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00123c00631177fbac14030a44079f03fe800000ff020000000000000000ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) 859.590601ms ago: executing program 0 (id=2429): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 733.263738ms ago: executing program 5 (id=2430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x229}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x18) 564.086708ms ago: executing program 4 (id=2431): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, 0x0, 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r1}, 0x38) 489.062762ms ago: executing program 0 (id=2432): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 462.884134ms ago: executing program 5 (id=2433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 424.099626ms ago: executing program 1 (id=2434): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xf16, 0x9}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) 325.046052ms ago: executing program 0 (id=2435): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095001800000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 267.588305ms ago: executing program 0 (id=2436): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x8, 0x7, 0x4, 0x7, 0x20, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 228.912317ms ago: executing program 5 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 168.90985ms ago: executing program 4 (id=2438): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x12, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x3, 0x6, 0x2, 0xb, 0xfffffffffffffffc, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x1020000, 0x0, 0x0, 0x0, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1ff38, 0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x6}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3f}], &(0x7f0000000040)='syzkaller\x00', 0x10, 0x93, &(0x7f0000000280)=""/147, 0x40f00, 0x2274c4337e49b72e, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x126, @value=r4}, 0x94) 144.920462ms ago: executing program 6 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 123.737233ms ago: executing program 1 (id=2440): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x9c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) getpid() bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 122.965263ms ago: executing program 0 (id=2450): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.809909ms ago: executing program 5 (id=2441): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x825, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 6 (id=2442): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xcc, 0x6, 0x6, 0x7, 0x0, 0x7fffffff, 0xd3751, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x1121c, 0xfffffffffffffffe, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.634'. [ 154.767728][ T6243] device batadv0 entered promiscuous mode [ 154.790120][ T6243] bridge0: port 3(batadv0) entered blocking state [ 154.802481][ T6243] bridge0: port 3(batadv0) entered disabled state [ 154.852391][ T4267] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 154.861659][ T4267] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 155.599000][ T6181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.231509][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 157.873407][ T6181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.939718][ T6181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.987508][ T6181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.304712][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 158.667963][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.806924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.865602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.887957][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.950524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.012043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.061303][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.068753][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.134460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.148842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.230208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.303172][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.310468][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.398399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.423504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.473596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.538767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.609517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.656390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.723643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.752064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.823122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.831882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.856584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.870674][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.036490][ T6340] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 160.113200][ T6341] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 160.191097][ T6341] team0: Device ipvlan1 failed to register rx_handler [ 160.375017][ T4241] Bluetooth: hci5: command 0x0419 tx timeout [ 160.550440][ T6353] netlink: 156 bytes leftover after parsing attributes in process `syz.4.671'. [ 160.606930][ T6361] netlink: 'syz.4.671': attribute type 16 has an invalid length. [ 160.649461][ T6361] netlink: 156 bytes leftover after parsing attributes in process `syz.4.671'. [ 161.154922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.178987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.205213][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.529349][ T6378] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 161.835552][ T6378] team0: Device ipvlan1 failed to register rx_handler [ 162.231061][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.439885][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.513088][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.538732][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.650385][ T6407] netlink: 12671 bytes leftover after parsing attributes in process `syz.0.689'. [ 162.677304][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.700286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.736484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.756584][ T6181] device veth0_vlan entered promiscuous mode [ 162.903105][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.972011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.998166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.018122][ T6181] device veth1_vlan entered promiscuous mode [ 163.137473][ T6417] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 163.349957][ T6417] team0: Device ipvlan1 failed to register rx_handler [ 163.739851][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.748756][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.766854][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.776812][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.804804][ T6427] netlink: 'syz.4.697': attribute type 27 has an invalid length. [ 163.846435][ T6181] device veth0_macvtap entered promiscuous mode [ 163.881145][ T6181] device veth1_macvtap entered promiscuous mode [ 163.975486][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.012896][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.052399][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.063462][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.073696][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.096523][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.114978][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.130138][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.152541][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.168313][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.177685][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.187574][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.202733][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.214766][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.229904][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.241257][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.252819][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.263983][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.274571][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.285640][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.305200][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.319353][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.331367][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.341303][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.352647][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.384084][ T6181] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.421276][ T6181] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.445531][ T6181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.461468][ T6181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.732509][ T6459] netlink: 'syz.0.704': attribute type 39 has an invalid length. [ 164.928782][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.957162][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.025340][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.077762][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.131577][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.227940][ T6473] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 165.288791][ T6473] team0: Device ipvlan1 failed to register rx_handler [ 165.451515][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.643108][ T6489] netlink: 'syz.1.714': attribute type 10 has an invalid length. [ 165.819001][ T6491] netlink: 'syz.0.715': attribute type 27 has an invalid length. [ 165.852976][ T6491] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 166.053142][ T6504] netlink: 'syz.5.718': attribute type 39 has an invalid length. [ 166.089197][ T6504] device veth0_macvtap left promiscuous mode [ 166.101359][ T6510] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.107928][ T6510] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.431709][ T6524] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 166.843352][ T6524] team0: Device ipvlan1 failed to register rx_handler [ 167.521818][ T154] device hsr_slave_0 left promiscuous mode [ 167.562884][ T154] device hsr_slave_1 left promiscuous mode [ 167.612655][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.626728][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.679698][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.705269][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.739055][ T154] device bridge_slave_1 left promiscuous mode [ 167.765441][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.808958][ T154] device bridge_slave_0 left promiscuous mode [ 167.829060][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.906303][ T154] device veth1_macvtap left promiscuous mode [ 167.913198][ T154] device veth0_macvtap left promiscuous mode [ 167.919822][ T154] device veth1_vlan left promiscuous mode [ 167.945335][ T154] device veth0_vlan left promiscuous mode [ 168.390436][ T154] team0 (unregistering): Port device team_slave_1 removed [ 168.410574][ T154] team0 (unregistering): Port device team_slave_0 removed [ 168.428718][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.527000][ T154] bond0 (unregistering): Released all slaves [ 168.583314][ T6582] netlink: 'syz.2.737': attribute type 39 has an invalid length. [ 168.597482][ T6582] device veth0_macvtap left promiscuous mode [ 168.616187][ T6584] netlink: 'syz.0.739': attribute type 16 has an invalid length. [ 168.628863][ T6584] netlink: 168 bytes leftover after parsing attributes in process `syz.0.739'. [ 168.918754][ T6619] netlink: 'syz.2.745': attribute type 16 has an invalid length. [ 168.987472][ T6619] netlink: 'syz.2.745': attribute type 7 has an invalid length. [ 169.070169][ T6619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.745'. [ 169.136634][ T6632] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.746'. [ 169.233360][ T6632] openvswitch: netlink: IP tunnel dst address not specified [ 169.277378][ T6639] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.751'. [ 169.318436][ T6642] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 169.467537][ T6642] team0: Device ipvlan1 failed to register rx_handler [ 169.580021][ T6643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.751'. [ 169.800386][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.756'. [ 169.945200][ T6665] syz.4.757 (6665) used obsolete PPPIOCDETACH ioctl [ 170.137144][ T6676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.761'. [ 170.374966][ T6678] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.760'. [ 172.101606][ T6724] validate_nla: 5 callbacks suppressed [ 172.101737][ T6724] netlink: 'syz.4.774': attribute type 9 has an invalid length. [ 172.290037][ T6736] netlink: 'syz.1.776': attribute type 10 has an invalid length. [ 172.308816][ T6724] netlink: 150900 bytes leftover after parsing attributes in process `syz.4.774'. [ 172.325266][ T6736] team0: Device ipvlan1 failed to register rx_handler [ 172.445172][ T6739] FAULT_INJECTION: forcing a failure. [ 172.445172][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 172.511406][ T6739] CPU: 0 PID: 6739 Comm: syz.5.778 Not tainted syzkaller #0 [ 172.518898][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.529019][ T6739] Call Trace: [ 172.532351][ T6739] [ 172.535370][ T6739] dump_stack_lvl+0x188/0x250 [ 172.540219][ T6739] ? show_regs_print_info+0x20/0x20 [ 172.545480][ T6739] ? load_image+0x400/0x400 [ 172.550113][ T6739] should_fail+0x38c/0x4c0 [ 172.554635][ T6739] should_failslab+0x5/0x20 [ 172.559301][ T6739] slab_pre_alloc_hook+0x51/0xc0 [ 172.564313][ T6739] ? skb_clone+0x1bd/0x350 [ 172.568793][ T6739] kmem_cache_alloc+0x3d/0x290 [ 172.573729][ T6739] skb_clone+0x1bd/0x350 [ 172.578046][ T6739] __netlink_deliver_tap+0x3cd/0x7c0 [ 172.583455][ T6739] netlink_deliver_tap+0x16c/0x180 [ 172.588624][ T6739] __netlink_sendskb+0x4b/0x90 [ 172.593450][ T6739] netlink_dump+0x945/0xcf0 [ 172.598071][ T6739] ? netlink_lookup+0x1d0/0x1d0 [ 172.602997][ T6739] ? genl_start+0x2e3/0x4a0 [ 172.607583][ T6739] __netlink_dump_start+0x523/0x700 [ 172.612908][ T6739] genl_rcv_msg+0xa1d/0xf90 [ 172.617520][ T6739] ? genl_bind+0x380/0x380 [ 172.622108][ T6739] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 172.627988][ T6739] ? perf_trace_lock_acquire+0x340/0x3e0 [ 172.633708][ T6739] ? genl_rcv_msg+0xf90/0xf90 [ 172.638438][ T6739] ? genl_start+0x4a0/0x4a0 [ 172.643140][ T6739] ? genl_lock_dumpit+0x90/0x90 [ 172.648101][ T6739] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 172.655109][ T6739] ? dev_queue_xmit+0x20/0x20 [ 172.659943][ T6739] ? batadv_frag_check_entry+0xb0/0xb0 [ 172.665504][ T6739] netlink_rcv_skb+0x1f5/0x440 [ 172.670336][ T6739] ? genl_bind+0x380/0x380 [ 172.674824][ T6739] ? netlink_ack+0xb50/0xb50 [ 172.679484][ T6739] ? __lock_acquire+0x7d10/0x7d10 [ 172.684585][ T6739] ? down_read+0x1aa/0x2e0 [ 172.689068][ T6739] genl_rcv+0x24/0x40 [ 172.693111][ T6739] netlink_unicast+0x774/0x920 [ 172.697972][ T6739] netlink_sendmsg+0x8ba/0xbe0 [ 172.702822][ T6739] ? netlink_getsockopt+0x570/0x570 [ 172.708082][ T6739] ? aa_sock_msg_perm+0x94/0x150 [ 172.713227][ T6739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 172.718566][ T6739] ? security_socket_sendmsg+0x7c/0xa0 [ 172.724089][ T6739] ? netlink_getsockopt+0x570/0x570 [ 172.729338][ T6739] ____sys_sendmsg+0x5b7/0x8f0 [ 172.734205][ T6739] ? __sys_sendmsg_sock+0x30/0x30 [ 172.739330][ T6739] ? import_iovec+0x6f/0xa0 [ 172.743950][ T6739] ___sys_sendmsg+0x236/0x2e0 [ 172.748727][ T6739] ? __sys_sendmsg+0x2a0/0x2a0 [ 172.753885][ T6739] __se_sys_sendmsg+0x1af/0x290 [ 172.758814][ T6739] ? __x64_sys_sendmsg+0x80/0x80 [ 172.763802][ T6739] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 172.769893][ T6739] ? lockdep_hardirqs_on+0x94/0x140 [ 172.775162][ T6739] do_syscall_64+0x4c/0xa0 [ 172.779753][ T6739] ? clear_bhb_loop+0x30/0x80 [ 172.784692][ T6739] ? clear_bhb_loop+0x30/0x80 [ 172.789589][ T6739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.795622][ T6739] RIP: 0033:0x7fde38b7bcb9 [ 172.800124][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.819794][ T6739] RSP: 002b:00007fde36dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.828432][ T6739] RAX: ffffffffffffffda RBX: 00007fde38df6fa0 RCX: 00007fde38b7bcb9 [ 172.836498][ T6739] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 172.844530][ T6739] RBP: 00007fde36dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.852560][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.860630][ T6739] R13: 00007fde38df7038 R14: 00007fde38df6fa0 R15: 00007ffc809e8098 [ 172.868815][ T6739] [ 173.178359][ T6749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.780'. [ 173.725736][ T6764] netlink: 'syz.0.784': attribute type 39 has an invalid length. [ 173.837757][ T6773] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 173.925886][ T6773] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.788'. [ 174.002862][ T6773] netlink: 9 bytes leftover after parsing attributes in process `syz.1.788'. [ 174.124262][ T6781] delete_channel: no stack [ 174.608961][ T6797] netlink: 148 bytes leftover after parsing attributes in process `syz.2.795'. [ 174.700212][ T6806] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 174.753172][ T6806] team0: Device ipvlan1 failed to register rx_handler [ 174.965935][ T6816] netlink: 'syz.0.799': attribute type 39 has an invalid length. [ 175.000871][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.802'. [ 175.300873][ T6819] device bridge_slave_0 left promiscuous mode [ 175.322720][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.141284][ T6854] netlink: 399 bytes leftover after parsing attributes in process `syz.2.807'. [ 176.594630][ T6881] netlink: 'syz.4.816': attribute type 39 has an invalid length. [ 176.632790][ T6882] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 176.669217][ T6882] team0: Device ipvlan1 failed to register rx_handler [ 176.855470][ T6890] FAULT_INJECTION: forcing a failure. [ 176.855470][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 176.918617][ T6890] CPU: 1 PID: 6890 Comm: syz.4.818 Not tainted syzkaller #0 [ 176.925974][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.936183][ T6890] Call Trace: [ 176.939497][ T6890] [ 176.942459][ T6890] dump_stack_lvl+0x188/0x250 [ 176.947188][ T6890] ? show_regs_print_info+0x20/0x20 [ 176.952602][ T6890] ? load_image+0x400/0x400 [ 176.957151][ T6890] ? __might_sleep+0xf0/0xf0 [ 176.963863][ T6890] ? __lock_acquire+0x7d10/0x7d10 [ 176.968952][ T6890] should_fail+0x38c/0x4c0 [ 176.973435][ T6890] should_failslab+0x5/0x20 [ 176.977977][ T6890] slab_pre_alloc_hook+0x51/0xc0 [ 176.983149][ T6890] __kmalloc_node_track_caller+0x68/0x3a0 [ 176.989350][ T6890] ? netlink_sendmsg+0x654/0xbe0 [ 176.994430][ T6890] ? kmem_cache_alloc_node+0x162/0x2d0 [ 176.999969][ T6890] ? __alloc_skb+0xf4/0x750 [ 177.004517][ T6890] ? netlink_sendmsg+0x654/0xbe0 [ 177.009502][ T6890] __alloc_skb+0x22c/0x750 [ 177.014065][ T6890] netlink_sendmsg+0x654/0xbe0 [ 177.019058][ T6890] ? netlink_getsockopt+0x570/0x570 [ 177.024302][ T6890] ? aa_sock_msg_perm+0x94/0x150 [ 177.029284][ T6890] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 177.034607][ T6890] ? security_socket_sendmsg+0x7c/0xa0 [ 177.040376][ T6890] ? netlink_getsockopt+0x570/0x570 [ 177.045729][ T6890] ____sys_sendmsg+0x5b7/0x8f0 [ 177.050631][ T6890] ? __sys_sendmsg_sock+0x30/0x30 [ 177.055714][ T6890] ? import_iovec+0x6f/0xa0 [ 177.060258][ T6890] ___sys_sendmsg+0x236/0x2e0 [ 177.065154][ T6890] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.069973][ T6890] ? vfs_write+0x8b2/0xd60 [ 177.074452][ T6890] __se_sys_sendmsg+0x1af/0x290 [ 177.079573][ T6890] ? __x64_sys_sendmsg+0x80/0x80 [ 177.084639][ T6890] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 177.090684][ T6890] ? lockdep_hardirqs_on+0x94/0x140 [ 177.095931][ T6890] do_syscall_64+0x4c/0xa0 [ 177.100383][ T6890] ? clear_bhb_loop+0x30/0x80 [ 177.105093][ T6890] ? clear_bhb_loop+0x30/0x80 [ 177.109887][ T6890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.115897][ T6890] RIP: 0033:0x7f19c2068cb9 [ 177.120373][ T6890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.140489][ T6890] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.149254][ T6890] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 177.157458][ T6890] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 177.165469][ T6890] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.173487][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.181492][ T6890] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 177.189522][ T6890] [ 177.598189][ T6910] netlink: 'syz.5.824': attribute type 21 has an invalid length. [ 177.633182][ T6910] netlink: 'syz.5.824': attribute type 6 has an invalid length. [ 177.640916][ T6910] netlink: 132 bytes leftover after parsing attributes in process `syz.5.824'. [ 177.745590][ T6928] FAULT_INJECTION: forcing a failure. [ 177.745590][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.793010][ T6928] CPU: 0 PID: 6928 Comm: syz.0.829 Not tainted syzkaller #0 [ 177.800482][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.810579][ T6928] Call Trace: [ 177.814135][ T6928] [ 177.817119][ T6928] dump_stack_lvl+0x188/0x250 [ 177.821852][ T6928] ? show_regs_print_info+0x20/0x20 [ 177.827117][ T6928] ? load_image+0x400/0x400 [ 177.831675][ T6928] ? __lock_acquire+0x7d10/0x7d10 [ 177.836758][ T6928] ? perf_trace_lock_acquire+0xed/0x3e0 [ 177.842384][ T6928] should_fail+0x38c/0x4c0 [ 177.846869][ T6928] _copy_from_user+0x2e/0x170 [ 177.851646][ T6928] iovec_from_user+0x142/0x370 [ 177.856465][ T6928] __import_iovec+0x70/0x490 [ 177.861366][ T6928] import_iovec+0x6f/0xa0 [ 177.865752][ T6928] ___sys_sendmsg+0x1fd/0x2e0 [ 177.870485][ T6928] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.875312][ T6928] ? trace_event_raw_event_lock+0x270/0x270 [ 177.881287][ T6928] ? vfs_write+0x8b2/0xd60 [ 177.885785][ T6928] __se_sys_sendmsg+0x1af/0x290 [ 177.890695][ T6928] ? __x64_sys_sendmsg+0x80/0x80 [ 177.895683][ T6928] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 177.901810][ T6928] ? lockdep_hardirqs_on+0x94/0x140 [ 177.907051][ T6928] do_syscall_64+0x4c/0xa0 [ 177.911496][ T6928] ? clear_bhb_loop+0x30/0x80 [ 177.916197][ T6928] ? clear_bhb_loop+0x30/0x80 [ 177.920901][ T6928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.926905][ T6928] RIP: 0033:0x7f55e3aafcb9 [ 177.931358][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.951242][ T6928] RSP: 002b:00007f55e1d0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.959713][ T6928] RAX: ffffffffffffffda RBX: 00007f55e3d2afa0 RCX: 00007f55e3aafcb9 [ 177.967708][ T6928] RDX: 000000000000afe6 RSI: 0000200000000380 RDI: 0000000000000003 [ 177.975711][ T6928] RBP: 00007f55e1d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 177.983709][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.991705][ T6928] R13: 00007f55e3d2b038 R14: 00007f55e3d2afa0 R15: 00007ffed69b2cb8 [ 177.999726][ T6928] [ 178.857781][ T6964] netlink: 'syz.1.839': attribute type 4 has an invalid length. [ 179.149227][ T6994] netlink: 'syz.4.847': attribute type 21 has an invalid length. [ 179.198718][ T7003] netlink: 'syz.5.848': attribute type 29 has an invalid length. [ 179.213866][ T6994] netlink: 'syz.4.847': attribute type 6 has an invalid length. [ 179.244596][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.847'. [ 179.304937][ T7003] netlink: 'syz.5.848': attribute type 29 has an invalid length. [ 179.356276][ T7006] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.850'. [ 181.124785][ T7054] FAULT_INJECTION: forcing a failure. [ 181.124785][ T7054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.181930][ T7054] CPU: 0 PID: 7054 Comm: syz.4.861 Not tainted syzkaller #0 [ 181.189295][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.199393][ T7054] Call Trace: [ 181.202706][ T7054] [ 181.205668][ T7054] dump_stack_lvl+0x188/0x250 [ 181.210389][ T7054] ? show_regs_print_info+0x20/0x20 [ 181.215630][ T7054] ? load_image+0x400/0x400 [ 181.220188][ T7054] ? __lock_acquire+0x7d10/0x7d10 [ 181.225525][ T7054] ? __alloc_skb+0x473/0x750 [ 181.230166][ T7054] should_fail+0x38c/0x4c0 [ 181.234637][ T7054] _copy_from_iter+0x22e/0x1170 [ 181.239533][ T7054] ? __lock_acquire+0x7d10/0x7d10 [ 181.244723][ T7054] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 181.250145][ T7054] ? __virt_addr_valid+0x3c6/0x470 [ 181.255303][ T7054] ? __phys_addr_symbol+0x2b/0x70 [ 181.260369][ T7054] ? __check_object_size+0x30c/0x410 [ 181.265873][ T7054] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 181.271650][ T7054] ? skb_put+0x117/0x210 [ 181.275943][ T7054] tun_get_user+0xaf9/0x3a70 [ 181.280633][ T7054] ? tun_ring_recv+0xc40/0xc40 [ 181.285450][ T7054] ? rcu_lock_release+0x5/0x20 [ 181.290267][ T7054] ? __lock_acquire+0x7d10/0x7d10 [ 181.295352][ T7054] tun_chr_write_iter+0x112/0x1e0 [ 181.300424][ T7054] vfs_write+0x745/0xd60 [ 181.304820][ T7054] ? file_end_write+0x250/0x250 [ 181.309776][ T7054] ? __fget_files+0x40f/0x480 [ 181.314616][ T7054] ? __fdget_pos+0x1e2/0x370 [ 181.319249][ T7054] ? ksys_write+0x71/0x260 [ 181.323810][ T7054] ksys_write+0x152/0x260 [ 181.328243][ T7054] ? __ia32_sys_read+0x80/0x80 [ 181.333200][ T7054] ? lockdep_hardirqs_on+0x94/0x140 [ 181.338470][ T7054] do_syscall_64+0x4c/0xa0 [ 181.342960][ T7054] ? clear_bhb_loop+0x30/0x80 [ 181.347679][ T7054] ? clear_bhb_loop+0x30/0x80 [ 181.352415][ T7054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.358480][ T7054] RIP: 0033:0x7f19c2068cb9 [ 181.363023][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.382673][ T7054] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.391167][ T7054] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 181.399226][ T7054] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 181.407248][ T7054] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 181.415260][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.423363][ T7054] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 181.431401][ T7054] [ 181.647220][ T7063] netlink: 'syz.0.862': attribute type 21 has an invalid length. [ 181.706105][ T7063] netlink: 'syz.0.862': attribute type 6 has an invalid length. [ 181.746066][ T7063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.862'. [ 181.818121][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'. [ 181.970985][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.187805][ T7066] device bridge_slave_0 left promiscuous mode [ 182.196467][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.431961][ T7073] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 182.450933][ T7073] team0: Device ipvlan1 failed to register rx_handler [ 182.706761][ T7091] netlink: 'syz.0.871': attribute type 39 has an invalid length. [ 183.066687][ T7105] netlink: 399 bytes leftover after parsing attributes in process `syz.0.875'. [ 183.549989][ T7118] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.880'. [ 183.842835][ T7124] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 183.918508][ T7124] team0: Device ipvlan1 failed to register rx_handler [ 184.031953][ T7130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.884'. [ 184.161724][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.314171][ T7130] device bridge_slave_0 left promiscuous mode [ 184.330989][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.611847][ T7135] netlink: 'syz.1.886': attribute type 39 has an invalid length. [ 184.893156][ T7165] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 184.992800][ T7169] netlink: 399 bytes leftover after parsing attributes in process `syz.4.895'. [ 185.406078][ T7165] team0: Device ipvlan1 failed to register rx_handler [ 186.234903][ T7192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.902'. [ 186.657380][ T7199] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 187.380610][ T7228] netlink: 'syz.2.910': attribute type 39 has an invalid length. [ 188.458750][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.926'. [ 189.018107][ T7302] netlink: 'syz.0.931': attribute type 23 has an invalid length. [ 189.700609][ T7313] netlink: 'syz.5.934': attribute type 21 has an invalid length. [ 190.152304][ T7326] pimreg: tun_chr_ioctl cmd 21531 [ 190.715908][ T7348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.943'. [ 190.823072][ T7357] netlink: 'syz.0.944': attribute type 10 has an invalid length. [ 190.862958][ T7357] team0: Device ipvlan1 failed to register rx_handler [ 191.342520][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 191.357131][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 191.376723][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 191.402655][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 191.593611][ T7360] netlink: 144 bytes leftover after parsing attributes in process `syz.1.948'. [ 192.281072][ T7389] netlink: 'syz.5.958': attribute type 10 has an invalid length. [ 192.458535][ T7389] team0: Device ipvlan1 failed to register rx_handler [ 194.167029][ T7404] netlink: 'syz.5.961': attribute type 10 has an invalid length. [ 194.200090][ T7404] team0: Device ipvlan1 failed to register rx_handler [ 194.387795][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394426][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.730503][ T7434] FAULT_INJECTION: forcing a failure. [ 195.730503][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.758657][ T7429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.964'. [ 195.816257][ T7434] CPU: 0 PID: 7434 Comm: syz.5.963 Not tainted syzkaller #0 [ 195.823623][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.833713][ T7434] Call Trace: [ 195.837035][ T7434] [ 195.839988][ T7434] dump_stack_lvl+0x188/0x250 [ 195.844691][ T7434] ? show_regs_print_info+0x20/0x20 [ 195.849909][ T7434] ? load_image+0x400/0x400 [ 195.854445][ T7434] ? __lock_acquire+0x7d10/0x7d10 [ 195.859507][ T7434] should_fail+0x38c/0x4c0 [ 195.863961][ T7434] _copy_to_user+0x2e/0x130 [ 195.868632][ T7434] simple_read_from_buffer+0xe3/0x150 [ 195.874044][ T7434] proc_fail_nth_read+0x1a6/0x220 [ 195.879094][ T7434] ? proc_fault_inject_write+0x310/0x310 [ 195.884951][ T7434] ? fsnotify_perm+0x254/0x560 [ 195.889736][ T7434] ? proc_fault_inject_write+0x310/0x310 [ 195.895390][ T7434] vfs_read+0x301/0xd60 [ 195.899576][ T7434] ? kernel_read+0x1e0/0x1e0 [ 195.904189][ T7434] ? __fget_files+0x40f/0x480 [ 195.908893][ T7434] ? mutex_lock_nested+0x17/0x20 [ 195.913849][ T7434] ? __fdget_pos+0x2bf/0x370 [ 195.918459][ T7434] ? ksys_read+0x71/0x260 [ 195.922808][ T7434] ksys_read+0x152/0x260 [ 195.927071][ T7434] ? vfs_write+0xd60/0xd60 [ 195.931515][ T7434] ? lockdep_hardirqs_on+0x94/0x140 [ 195.936736][ T7434] do_syscall_64+0x4c/0xa0 [ 195.941280][ T7434] ? clear_bhb_loop+0x30/0x80 [ 195.945976][ T7434] ? clear_bhb_loop+0x30/0x80 [ 195.950680][ T7434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.956602][ T7434] RIP: 0033:0x7fde38b3c58e [ 195.961043][ T7434] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.980673][ T7434] RSP: 002b:00007fde36d94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.989204][ T7434] RAX: ffffffffffffffda RBX: 00007fde36d956c0 RCX: 00007fde38b3c58e [ 195.997195][ T7434] RDX: 000000000000000f RSI: 00007fde36d950a0 RDI: 0000000000000008 [ 196.005187][ T7434] RBP: 00007fde36d95090 R08: 0000000000000000 R09: 0000000000000000 [ 196.013181][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.021365][ T7434] R13: 00007fde38df7218 R14: 00007fde38df7180 R15: 00007ffc809e8098 [ 196.029397][ T7434] [ 196.579285][ T7467] netlink: 'syz.1.974': attribute type 39 has an invalid length. [ 196.889390][ T7480] mac80211_hwsim hwsim17 »»»»»»: renamed from wlan0 [ 196.926130][ T7476] netlink: 'syz.0.977': attribute type 21 has an invalid length. [ 196.937646][ T7476] netlink: 'syz.0.977': attribute type 6 has an invalid length. [ 196.950267][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.977'. [ 196.962511][ T7470] netlink: 14 bytes leftover after parsing attributes in process `syz.5.975'. [ 196.978290][ T7484] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 196.996991][ T7484] team0: Device ipvlan1 failed to register rx_handler [ 197.078397][ T7483] netlink: 14 bytes leftover after parsing attributes in process `syz.4.979'. [ 197.300802][ T7490] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 197.444088][ T7490] team0: Device ipvlan1 failed to register rx_handler [ 198.110388][ T7501] netlink: 'syz.4.984': attribute type 10 has an invalid length. [ 198.332567][ T7526] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 198.383000][ T7526] bridge0: port 3(batadv0) entered disabled state [ 198.389822][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.501202][ T7526] bridge0: port 3(batadv0) entered blocking state [ 198.507810][ T7526] bridge0: port 3(batadv0) entered forwarding state [ 198.514713][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.521920][ T7526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.558019][ T7526] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 198.574337][ T7529] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 198.689788][ T7529] team0: Device ipvlan1 failed to register rx_handler [ 198.941985][ T7537] netlink: 'syz.4.991': attribute type 39 has an invalid length. [ 199.397647][ T7577] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 199.526859][ T7577] team0: Device ipvlan1 failed to register rx_handler [ 199.770628][ T7592] netlink: 'syz.2.1007': attribute type 29 has an invalid length. [ 199.842630][ T7591] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 199.974796][ T7591] team0: Device ipvlan1 failed to register rx_handler [ 200.112933][ T7592] netlink: 'syz.2.1007': attribute type 29 has an invalid length. [ 200.145706][ T7602] netlink: 'syz.0.1010': attribute type 39 has an invalid length. [ 201.469161][ T7644] netlink: 1735 bytes leftover after parsing attributes in process `syz.2.1024'. [ 201.566511][ T7655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1027'. [ 201.740016][ T7660] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.166415][ T7707] netlink: 1735 bytes leftover after parsing attributes in process `syz.4.1040'. [ 203.419659][ T7736] netlink: 'syz.1.1047': attribute type 16 has an invalid length. [ 203.489651][ T7736] netlink: 'syz.1.1047': attribute type 3 has an invalid length. [ 203.513007][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1047'. [ 203.705995][ T7751] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.742985][ T7751] IPv6: Can't replace route, no match found [ 203.975498][ T4302] wlan1: Trigger new scan to find an IBSS to join [ 204.361692][ T7771] netlink: 'syz.1.1059': attribute type 4 has an invalid length. [ 204.502787][ T7771] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1059'. [ 204.745735][ T3560] udevd[3560]: worker [6688] terminated by signal 33 (Unknown signal 33) [ 204.787087][ T3560] udevd[3560]: worker [6688] failed while handling '/devices/virtual/block/loop4' [ 205.377547][ T7804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1068'. [ 205.402651][ T7804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1068'. [ 205.434072][ T7804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1068'. [ 205.907997][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 206.097420][ T7820] źë: port 1(ip6gretap0) entered blocking state [ 206.105839][ T7820] źë: port 1(ip6gretap0) entered disabled state [ 206.149382][ T7820] device ip6gretap0 entered promiscuous mode [ 206.299467][ T7832] netlink: 1735 bytes leftover after parsing attributes in process `syz.4.1077'. [ 206.516536][ T7844] IPv6: Can't replace route, no match found [ 206.914248][ T7873] netlink: 1735 bytes leftover after parsing attributes in process `syz.2.1093'. [ 207.281874][ T7886] źë: port 1(ip6gretap0) entered blocking state [ 207.302442][ T7886] źë: port 1(ip6gretap0) entered disabled state [ 207.352961][ T7886] device ip6gretap0 entered promiscuous mode [ 207.496522][ T7890] netlink: 'syz.5.1098': attribute type 3 has an invalid length. [ 207.532598][ T7890] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1098'. [ 207.550630][ T7899] netlink: 'syz.5.1098': attribute type 2 has an invalid length. [ 207.574715][ T7905] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 207.592270][ T7899] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1098'. [ 207.631001][ T7905] team0: Device veth1_vlan failed to register rx_handler [ 207.727832][ T7910] FAULT_INJECTION: forcing a failure. [ 207.727832][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.743375][ T7910] CPU: 0 PID: 7910 Comm: syz.0.1107 Not tainted syzkaller #0 [ 207.750820][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.761020][ T7910] Call Trace: [ 207.764333][ T7910] [ 207.767289][ T7910] dump_stack_lvl+0x188/0x250 [ 207.772001][ T7910] ? show_regs_print_info+0x20/0x20 [ 207.777233][ T7910] ? load_image+0x400/0x400 [ 207.781785][ T7910] ? __lock_acquire+0x7d10/0x7d10 [ 207.786859][ T7910] ? perf_trace_lock_acquire+0xed/0x3e0 [ 207.792460][ T7910] should_fail+0x38c/0x4c0 [ 207.796960][ T7910] _copy_from_user+0x2e/0x170 [ 207.801677][ T7910] __copy_msghdr_from_user+0xc9/0x630 [ 207.807084][ T7910] ? verify_lock_unused+0x140/0x140 [ 207.812325][ T7910] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 207.817670][ T7910] ___sys_sendmsg+0x19a/0x2e0 [ 207.822489][ T7910] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.827328][ T7910] __se_sys_sendmsg+0x1af/0x290 [ 207.832213][ T7910] ? __x64_sys_sendmsg+0x80/0x80 [ 207.837264][ T7910] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.843374][ T7910] ? lockdep_hardirqs_on+0x94/0x140 [ 207.848613][ T7910] do_syscall_64+0x4c/0xa0 [ 207.853078][ T7910] ? clear_bhb_loop+0x30/0x80 [ 207.857798][ T7910] ? clear_bhb_loop+0x30/0x80 [ 207.862515][ T7910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.868447][ T7910] RIP: 0033:0x7f55e3aafcb9 [ 207.873068][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.892753][ T7910] RSP: 002b:00007f55e1d0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.901224][ T7910] RAX: ffffffffffffffda RBX: 00007f55e3d2afa0 RCX: 00007f55e3aafcb9 [ 207.909232][ T7910] RDX: 0000000004000850 RSI: 0000200000000600 RDI: 0000000000000003 [ 207.917237][ T7910] RBP: 00007f55e1d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.925244][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.933252][ T7910] R13: 00007f55e3d2b038 R14: 00007f55e3d2afa0 R15: 00007ffed69b2cb8 [ 207.941275][ T7910] [ 208.053772][ T7915] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 208.100528][ T7915] team0: Device veth1_vlan failed to register rx_handler [ 208.113895][ T7918] FAULT_INJECTION: forcing a failure. [ 208.113895][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 208.147773][ T7918] CPU: 0 PID: 7918 Comm: syz.1.1119 Not tainted syzkaller #0 [ 208.155237][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.165346][ T7918] Call Trace: [ 208.168674][ T7918] [ 208.171649][ T7918] dump_stack_lvl+0x188/0x250 [ 208.176400][ T7918] ? show_regs_print_info+0x20/0x20 [ 208.181654][ T7918] ? load_image+0x400/0x400 [ 208.186230][ T7918] ? __might_sleep+0xf0/0xf0 [ 208.190870][ T7918] ? __lock_acquire+0x7d10/0x7d10 [ 208.195948][ T7918] ? netlink_insert+0xe95/0x11f0 [ 208.201337][ T7918] should_fail+0x38c/0x4c0 [ 208.205873][ T7918] should_failslab+0x5/0x20 [ 208.210425][ T7918] slab_pre_alloc_hook+0x51/0xc0 [ 208.215430][ T7918] kmem_cache_alloc_node+0x47/0x2d0 [ 208.220798][ T7918] ? __alloc_skb+0xf4/0x750 [ 208.225411][ T7918] __alloc_skb+0xf4/0x750 [ 208.229821][ T7918] netlink_sendmsg+0x654/0xbe0 [ 208.234786][ T7918] ? netlink_getsockopt+0x570/0x570 [ 208.240050][ T7918] ? aa_sock_msg_perm+0x94/0x150 [ 208.245051][ T7918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 208.250407][ T7918] ? security_socket_sendmsg+0x7c/0xa0 [ 208.255927][ T7918] ? netlink_getsockopt+0x570/0x570 [ 208.261176][ T7918] ____sys_sendmsg+0x5b7/0x8f0 [ 208.266020][ T7918] ? __sys_sendmsg_sock+0x30/0x30 [ 208.271131][ T7918] ? import_iovec+0x6f/0xa0 [ 208.275705][ T7918] ___sys_sendmsg+0x236/0x2e0 [ 208.280512][ T7918] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.285441][ T7918] ? trace_event_raw_event_lock+0x270/0x270 [ 208.291483][ T7918] ? vfs_write+0x8b2/0xd60 [ 208.296042][ T7918] __se_sys_sendmsg+0x1af/0x290 [ 208.300961][ T7918] ? __x64_sys_sendmsg+0x80/0x80 [ 208.305951][ T7918] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 208.312032][ T7918] ? lockdep_hardirqs_on+0x94/0x140 [ 208.317327][ T7918] do_syscall_64+0x4c/0xa0 [ 208.322021][ T7918] ? clear_bhb_loop+0x30/0x80 [ 208.326801][ T7918] ? clear_bhb_loop+0x30/0x80 [ 208.331540][ T7918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.337512][ T7918] RIP: 0033:0x7fe1d83a8cb9 [ 208.341977][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.361629][ T7918] RSP: 002b:00007fe1d6604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.370107][ T7918] RAX: ffffffffffffffda RBX: 00007fe1d8623fa0 RCX: 00007fe1d83a8cb9 [ 208.378167][ T7918] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 208.386200][ T7918] RBP: 00007fe1d6604090 R08: 0000000000000000 R09: 0000000000000000 [ 208.394223][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.402593][ T7918] R13: 00007fe1d8624038 R14: 00007fe1d8623fa0 R15: 00007fff773388e8 [ 208.410798][ T7918] [ 208.981559][ T7931] device syzkaller0 entered promiscuous mode [ 209.013542][ T154] wlan1: Trigger new scan to find an IBSS to join [ 209.046333][ T7936] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.064568][ T7943] netlink: 'syz.4.1114': attribute type 39 has an invalid length. [ 209.380878][ T7956] netlink: 'syz.2.1116': attribute type 4 has an invalid length. [ 209.461498][ T7956] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1116'. [ 209.516061][ T7961] źë: port 1(ip6gretap0) entered blocking state [ 209.588742][ T7961] źë: port 1(ip6gretap0) entered disabled state [ 209.613712][ T7961] device ip6gretap0 entered promiscuous mode [ 209.917282][ T4507] wlan1: Creating new IBSS network, BSSID ae:6d:a0:97:f5:7c [ 210.359663][ T7974] device syzkaller0 entered promiscuous mode [ 210.592067][ T7986] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 210.601051][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1129'. [ 210.807963][ T7986] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 210.850959][ T7999] netlink: 'syz.2.1132': attribute type 39 has an invalid length. [ 212.933063][ T154] wlan1: Trigger new scan to find an IBSS to join [ 214.021141][ T8022] FAULT_INJECTION: forcing a failure. [ 214.021141][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 214.046827][ T8022] CPU: 0 PID: 8022 Comm: syz.4.1140 Not tainted syzkaller #0 [ 214.054271][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.064470][ T8022] Call Trace: [ 214.067788][ T8022] [ 214.070751][ T8022] dump_stack_lvl+0x188/0x250 [ 214.075489][ T8022] ? show_regs_print_info+0x20/0x20 [ 214.080742][ T8022] ? load_image+0x400/0x400 [ 214.085302][ T8022] ? __might_sleep+0xf0/0xf0 [ 214.089940][ T8022] ? __lock_acquire+0x7d10/0x7d10 [ 214.095017][ T8022] ? verify_lock_unused+0x140/0x140 [ 214.100284][ T8022] should_fail+0x38c/0x4c0 [ 214.104762][ T8022] should_failslab+0x5/0x20 [ 214.109314][ T8022] slab_pre_alloc_hook+0x51/0xc0 [ 214.114401][ T8022] __kmalloc+0x6b/0x330 [ 214.118592][ T8022] ? bpf_test_init+0xf8/0x1b0 [ 214.123438][ T8022] bpf_test_init+0xf8/0x1b0 [ 214.127982][ T8022] bpf_prog_test_run_xdp+0x1cb/0x920 [ 214.133313][ T8022] ? dev_put+0x70/0x70 [ 214.137430][ T8022] ? dev_put+0x70/0x70 [ 214.141539][ T8022] bpf_prog_test_run+0x31e/0x390 [ 214.146526][ T8022] __sys_bpf+0x5a5/0x6f0 [ 214.150813][ T8022] ? bpf_link_show_fdinfo+0x380/0x380 [ 214.156245][ T8022] ? vtime_user_exit+0x2c8/0x3e0 [ 214.161239][ T8022] __x64_sys_bpf+0x78/0x90 [ 214.165707][ T8022] do_syscall_64+0x4c/0xa0 [ 214.170330][ T8022] ? clear_bhb_loop+0x30/0x80 [ 214.175048][ T8022] ? clear_bhb_loop+0x30/0x80 [ 214.179778][ T8022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.185706][ T8022] RIP: 0033:0x7f19c2068cb9 [ 214.190154][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.209803][ T8022] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.218266][ T8022] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 214.226384][ T8022] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 214.234583][ T8022] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 214.242608][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.250635][ T8022] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 214.258665][ T8022] [ 214.276861][ T8023] netlink: 'syz.1.1138': attribute type 19 has an invalid length. [ 214.311192][ T8023] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1138'. [ 214.412735][ T8033] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1143'. [ 214.426579][ T8031] netlink: 'syz.5.1142': attribute type 12 has an invalid length. [ 214.444981][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1142'. [ 214.551989][ T8042] netlink: 'syz.2.1147': attribute type 16 has an invalid length. [ 214.567365][ T8042] netlink: 'syz.2.1147': attribute type 3 has an invalid length. [ 214.577391][ T8042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1147'. [ 214.703975][ T8036] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 214.885853][ T8036] device batadv0 left promiscuous mode [ 214.923673][ T8036] bridge0: port 3(batadv0) entered disabled state [ 215.100506][ T8061] netlink: 'syz.5.1150': attribute type 39 has an invalid length. [ 215.197892][ T8066] netlink: 'syz.4.1153': attribute type 39 has an invalid length. [ 215.534853][ T8083] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 215.552282][ T8083] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1158'. [ 215.604157][ T8081] netlink: 'syz.5.1157': attribute type 10 has an invalid length. [ 215.628275][ T8081] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1157'. [ 215.661047][ T8081] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.786466][ T8091] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 215.848478][ T8091] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1161'. [ 215.991021][ T8105] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1165'. [ 216.476240][ T8125] FAULT_INJECTION: forcing a failure. [ 216.476240][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.520933][ T8125] CPU: 1 PID: 8125 Comm: syz.5.1170 Not tainted syzkaller #0 [ 216.528383][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.538481][ T8125] Call Trace: [ 216.541804][ T8125] [ 216.544773][ T8125] dump_stack_lvl+0x188/0x250 [ 216.549489][ T8125] ? show_regs_print_info+0x20/0x20 [ 216.554731][ T8125] ? load_image+0x400/0x400 [ 216.559281][ T8125] ? __lock_acquire+0x7d10/0x7d10 [ 216.564344][ T8125] ? aa_sk_perm+0x910/0x910 [ 216.568891][ T8125] should_fail+0x38c/0x4c0 [ 216.573400][ T8125] _copy_from_user+0x2e/0x170 [ 216.578116][ T8125] sock_setsockopt+0x2e5/0x24c0 [ 216.583015][ T8125] ? __sock_set_mark+0x150/0x150 [ 216.588095][ T8125] ? __lock_acquire+0x7d10/0x7d10 [ 216.593308][ T8125] ? aa_sk_perm+0x7dc/0x910 [ 216.597873][ T8125] ? aa_af_perm+0x340/0x340 [ 216.602435][ T8125] ? __fget_files+0x40f/0x480 [ 216.607175][ T8125] ? aa_sock_opt_perm+0x74/0x100 [ 216.612165][ T8125] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 216.617760][ T8125] ? security_socket_setsockopt+0x7a/0xa0 [ 216.623563][ T8125] __sys_setsockopt+0x2f6/0x3d0 [ 216.628463][ T8125] __x64_sys_setsockopt+0xb1/0xc0 [ 216.633612][ T8125] do_syscall_64+0x4c/0xa0 [ 216.638297][ T8125] ? clear_bhb_loop+0x30/0x80 [ 216.643011][ T8125] ? clear_bhb_loop+0x30/0x80 [ 216.647814][ T8125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.653854][ T8125] RIP: 0033:0x7fde38b7bcb9 [ 216.658360][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.678008][ T8125] RSP: 002b:00007fde36dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.686472][ T8125] RAX: ffffffffffffffda RBX: 00007fde38df6fa0 RCX: 00007fde38b7bcb9 [ 216.694488][ T8125] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000004 [ 216.702494][ T8125] RBP: 00007fde36dd7090 R08: 0000000000000004 R09: 0000000000000000 [ 216.710499][ T8125] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 216.718513][ T8125] R13: 00007fde38df7038 R14: 00007fde38df6fa0 R15: 00007ffc809e8098 [ 216.726542][ T8125] [ 216.935983][ T8133] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1174'. [ 216.985391][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.003231][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.030086][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.064471][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.441534][ T8145] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1176'. [ 218.234556][ T8158] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 218.289998][ T8158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.000192][ T154] wlan1: Trigger new scan to find an IBSS to join [ 220.458028][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 220.530079][ T8211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.627627][ T8220] device wlan0 entered promiscuous mode [ 220.701400][ T8223] validate_nla: 2 callbacks suppressed [ 220.701420][ T8223] netlink: 'syz.5.1198': attribute type 19 has an invalid length. [ 220.908478][ T8227] __nla_validate_parse: 2 callbacks suppressed [ 220.908502][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1199'. [ 221.081271][ T8231] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1200'. [ 221.147322][ T8229] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1201'. [ 221.160941][ T8235] netlink: 'syz.0.1202': attribute type 10 has an invalid length. [ 221.178166][ T8235] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1202'. [ 222.478982][ T8256] netlink: 'syz.0.1219': attribute type 9 has an invalid length. [ 222.536114][ T8256] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1219'. [ 222.844208][ T8269] FAULT_INJECTION: forcing a failure. [ 222.844208][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 222.857400][ T8269] CPU: 0 PID: 8269 Comm: syz.5.1210 Not tainted syzkaller #0 [ 222.864818][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.875131][ T8269] Call Trace: [ 222.878443][ T8269] [ 222.881399][ T8269] dump_stack_lvl+0x188/0x250 [ 222.886131][ T8269] ? lock_chain_count+0x20/0x20 [ 222.891098][ T8269] ? show_regs_print_info+0x20/0x20 [ 222.896338][ T8269] ? load_image+0x400/0x400 [ 222.900906][ T8269] ? sctp_get_port_local+0x332/0x1510 [ 222.906327][ T8269] should_fail+0x38c/0x4c0 [ 222.910790][ T8269] should_failslab+0x5/0x20 [ 222.915336][ T8269] slab_pre_alloc_hook+0x51/0xc0 [ 222.920317][ T8269] ? sctp_get_port_local+0x6fc/0x1510 [ 222.925755][ T8269] kmem_cache_alloc+0x3d/0x290 [ 222.930573][ T8269] sctp_get_port_local+0x6fc/0x1510 [ 222.935990][ T8269] ? __lock_acquire+0x7d10/0x7d10 [ 222.941065][ T8269] ? sctp_do_bind+0x990/0x990 [ 222.945792][ T8269] ? sctp_bind_addr_match+0x249/0x260 [ 222.951225][ T8269] sctp_do_bind+0x555/0x990 [ 222.955798][ T8269] sctp_connect_new_asoc+0x266/0x6a0 [ 222.961146][ T8269] ? __sctp_connect+0xd80/0xd80 [ 222.966163][ T8269] ? __local_bh_enable_ip+0x136/0x1c0 [ 222.971578][ T8269] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 222.977165][ T8269] ? security_sctp_bind_connect+0x85/0xb0 [ 222.982934][ T8269] sctp_sendmsg+0x158d/0x2900 [ 222.987671][ T8269] ? aa_sk_perm+0x7dc/0x910 [ 222.992215][ T8269] ? sctp_getsockopt+0x8a0/0x8a0 [ 222.997204][ T8269] ? aa_af_perm+0x340/0x340 [ 223.001744][ T8269] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 223.008201][ T8269] ? sock_rps_record_flow+0x17/0x3b0 [ 223.013624][ T8269] ? inet_sendmsg+0xe5/0x2f0 [ 223.018260][ T8269] ? inet_send_prepare+0x260/0x260 [ 223.023419][ T8269] ____sys_sendmsg+0x5b7/0x8f0 [ 223.028413][ T8269] ? __sys_sendmsg_sock+0x30/0x30 [ 223.033499][ T8269] ? import_iovec+0x6f/0xa0 [ 223.038086][ T8269] ___sys_sendmsg+0x236/0x2e0 [ 223.042832][ T8269] ? __sys_sendmsg+0x2a0/0x2a0 [ 223.047659][ T8269] ? vfs_write+0x8b2/0xd60 [ 223.052228][ T8269] __se_sys_sendmsg+0x1af/0x290 [ 223.057123][ T8269] ? __x64_sys_sendmsg+0x80/0x80 [ 223.062099][ T8269] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.068141][ T8269] ? lockdep_hardirqs_on+0x94/0x140 [ 223.073394][ T8269] do_syscall_64+0x4c/0xa0 [ 223.077846][ T8269] ? clear_bhb_loop+0x30/0x80 [ 223.082561][ T8269] ? clear_bhb_loop+0x30/0x80 [ 223.087282][ T8269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.093219][ T8269] RIP: 0033:0x7fde38b7bcb9 [ 223.097692][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.117342][ T8269] RSP: 002b:00007fde36dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.125903][ T8269] RAX: ffffffffffffffda RBX: 00007fde38df6fa0 RCX: 00007fde38b7bcb9 [ 223.133914][ T8269] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 223.142603][ T8269] RBP: 00007fde36dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 223.150701][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.158730][ T8269] R13: 00007fde38df7038 R14: 00007fde38df6fa0 R15: 00007ffc809e8098 [ 223.166764][ T8269] [ 223.181825][ T4267] wlan1: Trigger new scan to find an IBSS to join [ 223.461877][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 223.581017][ T8281] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.1214'. [ 223.879931][ T8288] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 224.307069][ T154] wlan1: Creating new IBSS network, BSSID c2:ce:ca:33:aa:cc [ 224.384554][ T8288] team0: Device ipvlan1 failed to register rx_handler [ 224.780674][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.894205][ T8298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.592878][ T8336] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1229'. [ 225.920664][ T8346] netlink: 134736 bytes leftover after parsing attributes in process `syz.5.1231'. [ 226.133875][ T8348] netlink: 'syz.5.1231': attribute type 10 has an invalid length. [ 226.830662][ T8348] team0: Device ipvlan1 failed to register rx_handler [ 227.163555][ T8376] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1240'. [ 227.449255][ T8381] FAULT_INJECTION: forcing a failure. [ 227.449255][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 227.613509][ T8381] CPU: 1 PID: 8381 Comm: syz.1.1242 Not tainted syzkaller #0 [ 227.621037][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.631162][ T8381] Call Trace: [ 227.634513][ T8381] [ 227.637531][ T8381] dump_stack_lvl+0x188/0x250 [ 227.642302][ T8381] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 227.648111][ T8381] ? show_regs_print_info+0x20/0x20 [ 227.653405][ T8381] ? load_image+0x400/0x400 [ 227.658119][ T8381] should_fail+0x38c/0x4c0 [ 227.662658][ T8381] should_failslab+0x5/0x20 [ 227.667324][ T8381] slab_pre_alloc_hook+0x51/0xc0 [ 227.672391][ T8381] ? skb_clone+0x1bd/0x350 [ 227.676884][ T8381] kmem_cache_alloc+0x3d/0x290 [ 227.681753][ T8381] skb_clone+0x1bd/0x350 [ 227.686103][ T8381] __netlink_deliver_tap+0x3cd/0x7c0 [ 227.691556][ T8381] netlink_deliver_tap+0x16c/0x180 [ 227.696760][ T8381] netlink_unicast+0x74f/0x920 [ 227.701689][ T8381] netlink_sendmsg+0x8ba/0xbe0 [ 227.706595][ T8381] ? netlink_getsockopt+0x570/0x570 [ 227.711895][ T8381] ? aa_sock_msg_perm+0x94/0x150 [ 227.716935][ T8381] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 227.722296][ T8381] ? security_socket_sendmsg+0x7c/0xa0 [ 227.727876][ T8381] ? netlink_getsockopt+0x570/0x570 [ 227.733160][ T8381] ____sys_sendmsg+0x5b7/0x8f0 [ 227.738081][ T8381] ? __sys_sendmsg_sock+0x30/0x30 [ 227.743253][ T8381] ? import_iovec+0x6f/0xa0 [ 227.747872][ T8381] ___sys_sendmsg+0x236/0x2e0 [ 227.752691][ T8381] ? __sys_sendmsg+0x2a0/0x2a0 [ 227.757621][ T8381] ? trace_event_raw_event_lock+0x270/0x270 [ 227.763680][ T8381] ? vfs_write+0x8b2/0xd60 [ 227.768333][ T8381] __se_sys_sendmsg+0x1af/0x290 [ 227.773312][ T8381] ? __x64_sys_sendmsg+0x80/0x80 [ 227.778336][ T8381] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.784510][ T8381] ? lockdep_hardirqs_on+0x94/0x140 [ 227.789823][ T8381] do_syscall_64+0x4c/0xa0 [ 227.794319][ T8381] ? clear_bhb_loop+0x30/0x80 [ 227.799077][ T8381] ? clear_bhb_loop+0x30/0x80 [ 227.803852][ T8381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.809831][ T8381] RIP: 0033:0x7fe1d83a8cb9 [ 227.814325][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.834018][ T8381] RSP: 002b:00007fe1d6604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.842496][ T8381] RAX: ffffffffffffffda RBX: 00007fe1d8623fa0 RCX: 00007fe1d83a8cb9 [ 227.850514][ T8381] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 000000000000000a [ 227.858528][ T8381] RBP: 00007fe1d6604090 R08: 0000000000000000 R09: 0000000000000000 [ 227.866544][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.874577][ T8381] R13: 00007fe1d8624038 R14: 00007fe1d8623fa0 R15: 00007fff773388e8 [ 227.882677][ T8381] [ 228.157237][ T8381] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 228.166834][ T8381] device hsr0 entered promiscuous mode [ 228.263087][ T8404] netlink: 'syz.4.1249': attribute type 10 has an invalid length. [ 228.324377][ T8410] FAULT_INJECTION: forcing a failure. [ 228.324377][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.350419][ T8404] device syz_tun entered promiscuous mode [ 228.403276][ T8410] CPU: 0 PID: 8410 Comm: syz.1.1252 Not tainted syzkaller #0 [ 228.410725][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.420836][ T8410] Call Trace: [ 228.424152][ T8410] [ 228.427110][ T8410] dump_stack_lvl+0x188/0x250 [ 228.431838][ T8410] ? show_regs_print_info+0x20/0x20 [ 228.437073][ T8410] ? load_image+0x400/0x400 [ 228.441627][ T8410] ? __lock_acquire+0x7d10/0x7d10 [ 228.446704][ T8410] should_fail+0x38c/0x4c0 [ 228.451170][ T8410] _copy_from_user+0x2e/0x170 [ 228.455890][ T8410] bpf_test_init+0x136/0x1b0 [ 228.460621][ T8410] bpf_prog_test_run_skb+0x181/0x1180 [ 228.466125][ T8410] ? __fget_files+0x40f/0x480 [ 228.470856][ T8410] ? cpu_online+0x60/0x60 [ 228.475226][ T8410] bpf_prog_test_run+0x31e/0x390 [ 228.480206][ T8410] __sys_bpf+0x5a5/0x6f0 [ 228.484493][ T8410] ? bpf_link_show_fdinfo+0x380/0x380 [ 228.489912][ T8410] ? vtime_user_exit+0x2c8/0x3e0 [ 228.494902][ T8410] __x64_sys_bpf+0x78/0x90 [ 228.499376][ T8410] do_syscall_64+0x4c/0xa0 [ 228.503828][ T8410] ? clear_bhb_loop+0x30/0x80 [ 228.508542][ T8410] ? clear_bhb_loop+0x30/0x80 [ 228.513259][ T8410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.519183][ T8410] RIP: 0033:0x7fe1d83a8cb9 [ 228.523637][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.543371][ T8410] RSP: 002b:00007fe1d6604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.551835][ T8410] RAX: ffffffffffffffda RBX: 00007fe1d8623fa0 RCX: 00007fe1d83a8cb9 [ 228.559847][ T8410] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 228.567854][ T8410] RBP: 00007fe1d6604090 R08: 0000000000000000 R09: 0000000000000000 [ 228.575900][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.583913][ T8410] R13: 00007fe1d8624038 R14: 00007fe1d8623fa0 R15: 00007fff773388e8 [ 228.591942][ T8410] [ 229.567725][ T8438] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.1260'. [ 229.781462][ T8438] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 229.965202][ T8448] netlink: 'syz.1.1263': attribute type 7 has an invalid length. [ 230.030319][ T8448] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 230.113979][ T8448] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1263'. [ 232.660404][ T8463] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.679127][ T8462] netlink: 'syz.5.1268': attribute type 39 has an invalid length. [ 232.813767][ T8464] team0: Port device team_slave_0 removed [ 232.867032][ T8464] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 233.688172][ T8486] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 233.701412][ T8486] bridge0: port 3(batadv0) entered disabled state [ 233.708150][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.953354][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 234.089815][ T8489] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 234.153190][ T8489] device macvlan0 entered promiscuous mode [ 234.378683][ T8507] netlink: 174280 bytes leftover after parsing attributes in process `syz.5.1281'. [ 234.530372][ T8517] netlink: 'syz.0.1282': attribute type 39 has an invalid length. [ 234.546885][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.591604][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.600433][ T8467] device bridge_slave_0 entered promiscuous mode [ 234.813231][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.820573][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.878887][ T8467] device bridge_slave_1 entered promiscuous mode [ 234.906615][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.919419][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.951491][ T8467] team0: Port device team_slave_0 added [ 235.003409][ T8467] team0: Port device team_slave_1 added [ 235.025458][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 235.088709][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.133521][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.302456][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.413953][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.489569][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.684464][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.885059][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 236.064393][ T8528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.257346][ T8467] device hsr_slave_0 entered promiscuous mode [ 236.308486][ T8467] device hsr_slave_1 entered promiscuous mode [ 236.368658][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.395841][ T8467] Cannot create hsr debugfs directory [ 236.405606][ T8545] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1293'. [ 236.526400][ T8541] device syzkaller0 entered promiscuous mode [ 237.092799][ T3831] Bluetooth: hci1: command 0x041b tx timeout [ 237.264397][ T8568] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1300'. [ 237.355402][ T8572] netlink: 'syz.0.1302': attribute type 3 has an invalid length. [ 237.387494][ T8572] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1302'. [ 237.405265][ T8467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.435303][ T8467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.463229][ T8467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.237640][ T8579] netlink: 'syz.1.1304': attribute type 39 has an invalid length. [ 238.376645][ T8574] netlink: 'syz.5.1303': attribute type 10 has an invalid length. [ 238.407277][ T8574] device macvlan0 entered promiscuous mode [ 238.460509][ T8574] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 238.492630][ T8467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.182914][ T3831] Bluetooth: hci1: command 0x040f tx timeout [ 239.197020][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.299030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.317840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.369940][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.408765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.445271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.495501][ T8620] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1313'. [ 239.508739][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.516056][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.545342][ T8624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1314'. [ 239.570718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.583747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.602113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.611152][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.618335][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.628601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.658384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.671996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.697972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.717089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.752645][ T3072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.801310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.819443][ T8629] netlink: 'syz.5.1315': attribute type 8 has an invalid length. [ 239.844079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.853804][ T8629] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1315'. [ 239.889414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.911230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.930852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.950833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.981905][ T8644] netlink: 169460 bytes leftover after parsing attributes in process `syz.1.1318'. [ 240.000725][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.080043][ T3072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.179960][ T8651] netlink: 'syz.4.1320': attribute type 39 has an invalid length. [ 240.277408][ T3072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.365686][ T3072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.644791][ T8674] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1326'. [ 240.819720][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.844339][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.862298][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 240.893233][ T8673] netlink: 'syz.1.1324': attribute type 3 has an invalid length. [ 240.924124][ T8673] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1324'. [ 240.954721][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.005494][ T8689] netlink: 'syz.5.1330': attribute type 10 has an invalid length. [ 241.050954][ T8689] team0: Device ipvlan1 failed to register rx_handler [ 241.262522][ T4241] Bluetooth: hci1: command 0x0419 tx timeout [ 242.372400][ T4507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.876713][ T3072] device ip6gretap0 left promiscuous mode [ 243.897425][ T3072] źë: port 1(ip6gretap0) entered disabled state [ 243.949494][ T8702] netlink: 'syz.5.1332': attribute type 39 has an invalid length. [ 244.204361][ T8717] FAULT_INJECTION: forcing a failure. [ 244.204361][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.275083][ T8717] CPU: 1 PID: 8717 Comm: syz.1.1336 Not tainted syzkaller #0 [ 244.282563][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.292664][ T8717] Call Trace: [ 244.295978][ T8717] [ 244.298944][ T8717] dump_stack_lvl+0x188/0x250 [ 244.303669][ T8717] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 244.309957][ T8717] ? show_regs_print_info+0x20/0x20 [ 244.315292][ T8717] ? load_image+0x400/0x400 [ 244.319862][ T8717] should_fail+0x38c/0x4c0 [ 244.324326][ T8717] _copy_from_user+0x2e/0x170 [ 244.329046][ T8717] __sys_bpf+0x26d/0x6f0 [ 244.333337][ T8717] ? bpf_link_show_fdinfo+0x380/0x380 [ 244.338775][ T8717] __x64_sys_bpf+0x78/0x90 [ 244.343238][ T8717] do_syscall_64+0x4c/0xa0 [ 244.347689][ T8717] ? clear_bhb_loop+0x30/0x80 [ 244.352424][ T8717] ? clear_bhb_loop+0x30/0x80 [ 244.357145][ T8717] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.363078][ T8717] RIP: 0033:0x7fe1d83a8cb9 [ 244.367534][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.387189][ T8717] RSP: 002b:00007fe1d6604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.395652][ T8717] RAX: ffffffffffffffda RBX: 00007fe1d8623fa0 RCX: 00007fe1d83a8cb9 [ 244.403676][ T8717] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 244.411690][ T8717] RBP: 00007fe1d6604090 R08: 0000000000000000 R09: 0000000000000000 [ 244.419698][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.428194][ T8717] R13: 00007fe1d8624038 R14: 00007fe1d8623fa0 R15: 00007fff773388e8 [ 244.436230][ T8717] [ 244.489409][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.499429][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.552708][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.578247][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.596468][ T8467] device veth0_vlan entered promiscuous mode [ 244.628550][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.639684][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.670117][ T8467] device veth1_vlan entered promiscuous mode [ 244.776295][ T8467] device veth0_macvtap entered promiscuous mode [ 244.814333][ T8737] FAULT_INJECTION: forcing a failure. [ 244.814333][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 244.828610][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.865090][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.884565][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.898918][ T8737] CPU: 0 PID: 8737 Comm: syz.0.1342 Not tainted syzkaller #0 [ 244.906393][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.916548][ T8737] Call Trace: [ 244.919970][ T8737] [ 244.922948][ T8737] dump_stack_lvl+0x188/0x250 [ 244.927695][ T8737] ? show_regs_print_info+0x20/0x20 [ 244.932959][ T8737] ? load_image+0x400/0x400 [ 244.937538][ T8737] ? __lock_acquire+0x7d10/0x7d10 [ 244.942631][ T8737] ? trace_event_raw_event_lock+0x270/0x270 [ 244.948596][ T8737] should_fail+0x38c/0x4c0 [ 244.953091][ T8737] should_failslab+0x5/0x20 [ 244.957640][ T8737] slab_pre_alloc_hook+0x51/0xc0 [ 244.962709][ T8737] ? sockfs_init_fs_context+0xa0/0xa0 [ 244.968127][ T8737] ? sock_alloc_inode+0x17/0xb0 [ 244.973058][ T8737] kmem_cache_alloc+0x3d/0x290 [ 244.977866][ T8737] ? sockfs_init_fs_context+0xa0/0xa0 [ 244.983290][ T8737] sock_alloc_inode+0x17/0xb0 [ 244.988011][ T8737] ? sockfs_init_fs_context+0xa0/0xa0 [ 244.993598][ T8737] new_inode_pseudo+0x5f/0x210 [ 244.998436][ T8737] __sock_create+0x129/0x900 [ 245.003101][ T8737] __sys_socketpair+0x1bd/0x540 [ 245.008126][ T8737] __x64_sys_socketpair+0x97/0xb0 [ 245.013214][ T8737] do_syscall_64+0x4c/0xa0 [ 245.017683][ T8737] ? clear_bhb_loop+0x30/0x80 [ 245.022403][ T8737] ? clear_bhb_loop+0x30/0x80 [ 245.027144][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.033171][ T8737] RIP: 0033:0x7f55e3aafcb9 [ 245.037643][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.057305][ T8737] RSP: 002b:00007f55e1d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 245.065824][ T8737] RAX: ffffffffffffffda RBX: 00007f55e3d2afa0 RCX: 00007f55e3aafcb9 [ 245.073845][ T8737] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 245.081858][ T8737] RBP: 00007f55e1d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.089918][ T8737] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.097930][ T8737] R13: 00007f55e3d2b038 R14: 00007f55e3d2afa0 R15: 00007ffed69b2cb8 [ 245.106076][ T8737] [ 245.117345][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.173673][ T8467] device veth1_macvtap entered promiscuous mode [ 245.183493][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.193433][ T8737] socket: no more sockets [ 245.207246][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.236971][ T8739] device bridge_slave_1 left promiscuous mode [ 245.256210][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.363000][ T8739] device bridge_slave_0 left promiscuous mode [ 245.370028][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.544756][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.590167][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.617432][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.630735][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.646573][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.659418][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.676976][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.688485][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.729557][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.803245][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.885917][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.922353][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.957007][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.980465][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.010690][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.031203][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.064758][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.098065][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.115983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.139265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.156689][ T8467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.176026][ T8467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.191043][ T8467] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.200213][ T8467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.262366][ T8769] netlink: 'syz.5.1353': attribute type 39 has an invalid length. [ 246.444624][ T8778] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1357'. [ 246.493284][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.501486][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.626894][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.661242][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.688209][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.766978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.852965][ T3072] device hsr_slave_0 left promiscuous mode [ 246.875063][ T3072] device hsr_slave_1 left promiscuous mode [ 246.883152][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.898727][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.919153][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.931113][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.941029][ T3072] device bridge_slave_1 left promiscuous mode [ 246.947791][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.969575][ T3072] device veth1_macvtap left promiscuous mode [ 246.978009][ T3072] device veth0_vlan left promiscuous mode [ 246.979138][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1364'. [ 247.379505][ T3072] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 247.489937][ T3072] device team_slave_1 left promiscuous mode [ 247.506322][ T3072] team0 (unregistering): Port device team_slave_1 removed [ 247.525166][ T3072] device team_slave_0 left promiscuous mode [ 247.536398][ T3072] team0 (unregistering): Port device team_slave_0 removed [ 247.553540][ T3072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.570774][ T3072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.651043][ T3072] bond0 (unregistering): Released all slaves [ 247.733569][ T8822] netlink: 15414 bytes leftover after parsing attributes in process `syz.5.1370'. [ 247.870859][ T8831] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1372'. [ 248.354616][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1377'. [ 248.379868][ T8849] netlink: 'syz.0.1377': attribute type 3 has an invalid length. [ 248.395310][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1377'. [ 249.262365][ T8896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1390'. [ 249.271827][ T8896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1390'. [ 250.273412][ T8931] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1403'. [ 250.652324][ T8958] netlink: 'syz.5.1413': attribute type 17 has an invalid length. [ 250.672297][ T8958] netlink: 'syz.5.1413': attribute type 16 has an invalid length. [ 250.700685][ T8958] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1413'. [ 251.861256][ T9009] __nla_validate_parse: 1 callbacks suppressed [ 251.861277][ T9009] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1434'. [ 251.885728][ T9007] netlink: 'syz.5.1433': attribute type 46 has an invalid length. [ 251.938089][ T9006] delete_channel: no stack [ 253.103447][ T9043] netlink: 'syz.1.1446': attribute type 4 has an invalid length. [ 253.182983][ T9061] netlink: 'syz.4.1450': attribute type 21 has an invalid length. [ 253.231757][ T9043] netlink: 'syz.1.1446': attribute type 3 has an invalid length. [ 253.254413][ T9048] device team_slave_0 entered promiscuous mode [ 253.262885][ T9043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1446'. [ 253.302880][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.632034][ T9088] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1460'. [ 254.231129][ T9116] netlink: 'syz.0.1471': attribute type 21 has an invalid length. [ 254.271925][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1471'. [ 254.291102][ T9112] netlink: 'syz.6.1468': attribute type 4 has an invalid length. [ 254.319404][ T9112] netlink: 'syz.6.1468': attribute type 3 has an invalid length. [ 254.335140][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1468'. [ 254.432567][ T9112] device team_slave_0 entered promiscuous mode [ 254.508814][ T9125] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 254.521064][ T9125] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.1473'. [ 254.542729][ T9125] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1473'. [ 254.570724][ T9127] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1474'. [ 255.221410][ T9153] delete_channel: no stack [ 255.528691][ T9171] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1488'. [ 255.609539][ T9165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1487'. [ 255.824779][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.831154][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892629][ T9178] device team_slave_0 entered promiscuous mode [ 256.058603][ T9185] validate_nla: 3 callbacks suppressed [ 256.058625][ T9185] netlink: 'syz.1.1492': attribute type 17 has an invalid length. [ 256.133196][ T9185] netlink: 'syz.1.1492': attribute type 16 has an invalid length. [ 257.092899][ T4507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.097502][ T9219] __nla_validate_parse: 1 callbacks suppressed [ 259.097533][ T9219] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1503'. [ 259.206801][ T9221] netlink: 'syz.0.1504': attribute type 39 has an invalid length. [ 259.788053][ T9258] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1518'. [ 259.918203][ T9263] netlink: 'syz.4.1519': attribute type 46 has an invalid length. [ 259.926760][ T9263] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1519'. [ 260.754312][ T9277] netlink: 'syz.5.1523': attribute type 39 has an invalid length. [ 260.909426][ T9295] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1529'. [ 260.939764][ T9295] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1529'. [ 264.043056][ T9312] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1534'. [ 264.049528][ T9313] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1536'. [ 264.185387][ T9321] netlink: 'syz.1.1540': attribute type 39 has an invalid length. [ 264.261274][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1542'. [ 264.551591][ T9348] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1548'. [ 264.890663][ T9365] netlink: 'syz.6.1555': attribute type 17 has an invalid length. [ 264.913742][ T9365] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1555'. [ 265.095519][ T9373] netlink: 'syz.4.1557': attribute type 39 has an invalid length. [ 265.496408][ T9405] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1569'. [ 265.567207][ T9404] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1569'. [ 265.594151][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1570'. [ 265.911976][ T9425] netlink: 'syz.6.1575': attribute type 39 has an invalid length. [ 266.094498][ T9435] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1577'. [ 266.242024][ T9444] FAULT_INJECTION: forcing a failure. [ 266.242024][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 266.288018][ T9444] CPU: 0 PID: 9444 Comm: syz.4.1583 Not tainted syzkaller #0 [ 266.295473][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.305575][ T9444] Call Trace: [ 266.308919][ T9444] [ 266.311888][ T9444] dump_stack_lvl+0x188/0x250 [ 266.316613][ T9444] ? show_regs_print_info+0x20/0x20 [ 266.321853][ T9444] ? load_image+0x400/0x400 [ 266.326407][ T9444] ? __might_sleep+0xf0/0xf0 [ 266.331037][ T9444] ? __lock_acquire+0x7d10/0x7d10 [ 266.336164][ T9444] should_fail+0x38c/0x4c0 [ 266.340622][ T9444] should_failslab+0x5/0x20 [ 266.345163][ T9444] slab_pre_alloc_hook+0x51/0xc0 [ 266.350143][ T9444] kmem_cache_alloc_node+0x47/0x2d0 [ 266.355426][ T9444] ? __alloc_skb+0xf4/0x750 [ 266.359981][ T9444] __alloc_skb+0xf4/0x750 [ 266.364363][ T9444] notify_rule_change+0xab/0x210 [ 266.369367][ T9444] fib_nl_delrule+0x1c1e/0x1df0 [ 266.374431][ T9444] ? notify_rule_change+0x210/0x210 [ 266.379691][ T9444] ? __mutex_lock_common+0x465/0x2400 [ 266.385163][ T9444] ? notify_rule_change+0x210/0x210 [ 266.390420][ T9444] rtnetlink_rcv_msg+0x844/0xf30 [ 266.395413][ T9444] ? rtnetlink_bind+0x80/0x80 [ 266.400302][ T9444] ? __local_bh_enable_ip+0x136/0x1c0 [ 266.405713][ T9444] ? lockdep_hardirqs_on+0x94/0x140 [ 266.410944][ T9444] ? __local_bh_enable_ip+0x136/0x1c0 [ 266.416345][ T9444] ? _local_bh_enable+0xa0/0xa0 [ 266.421232][ T9444] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 266.426465][ T9444] ? dev_queue_xmit+0x20/0x20 [ 266.431158][ T9444] ? memcpy+0x3c/0x60 [ 266.435162][ T9444] ? __copy_skb_header+0x3ba/0x4f0 [ 266.440395][ T9444] ? __skb_clone+0x480/0x790 [ 266.445217][ T9444] netlink_rcv_skb+0x1f5/0x440 [ 266.450086][ T9444] ? rtnetlink_bind+0x80/0x80 [ 266.454792][ T9444] ? netlink_ack+0xb50/0xb50 [ 266.459418][ T9444] netlink_unicast+0x774/0x920 [ 266.464222][ T9444] netlink_sendmsg+0x8ba/0xbe0 [ 266.469009][ T9444] ? netlink_getsockopt+0x570/0x570 [ 266.474223][ T9444] ? aa_sock_msg_perm+0x94/0x150 [ 266.479182][ T9444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 266.484491][ T9444] ? security_socket_sendmsg+0x7c/0xa0 [ 266.489979][ T9444] ? netlink_getsockopt+0x570/0x570 [ 266.495199][ T9444] ____sys_sendmsg+0x5b7/0x8f0 [ 266.499994][ T9444] ? __sys_sendmsg_sock+0x30/0x30 [ 266.505164][ T9444] ? import_iovec+0x6f/0xa0 [ 266.509710][ T9444] ___sys_sendmsg+0x236/0x2e0 [ 266.514437][ T9444] ? __sys_sendmsg+0x2a0/0x2a0 [ 266.519238][ T9444] ? vfs_write+0x8b2/0xd60 [ 266.523701][ T9444] __se_sys_sendmsg+0x1af/0x290 [ 266.528674][ T9444] ? __x64_sys_sendmsg+0x80/0x80 [ 266.533635][ T9444] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 266.539661][ T9444] ? lockdep_hardirqs_on+0x94/0x140 [ 266.544889][ T9444] do_syscall_64+0x4c/0xa0 [ 266.549337][ T9444] ? clear_bhb_loop+0x30/0x80 [ 266.554045][ T9444] ? clear_bhb_loop+0x30/0x80 [ 266.558752][ T9444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.564675][ T9444] RIP: 0033:0x7f19c2068cb9 [ 266.569107][ T9444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.588742][ T9444] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.597223][ T9444] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 266.605214][ T9444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.613201][ T9444] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.621190][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.629261][ T9444] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 266.637268][ T9444] [ 269.752729][ T9477] netlink: 'syz.1.1592': attribute type 39 has an invalid length. [ 270.089338][ T9505] netlink: 'syz.0.1603': attribute type 10 has an invalid length. [ 270.110919][ T9505] device geneve0 entered promiscuous mode [ 270.247968][ T9505] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 270.561539][ T9527] netlink: 'syz.5.1610': attribute type 39 has an invalid length. [ 270.635913][ T9515] netlink: 'syz.6.1606': attribute type 9 has an invalid length. [ 270.665512][ T9515] netlink: 150900 bytes leftover after parsing attributes in process `syz.6.1606'. [ 270.819217][ T9535] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1611'. [ 270.906312][ T9532] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1612'. [ 270.950086][ T9534] FAULT_INJECTION: forcing a failure. [ 270.950086][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.090529][ T9534] CPU: 1 PID: 9534 Comm: syz.0.1613 Not tainted syzkaller #0 [ 271.097978][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.108076][ T9534] Call Trace: [ 271.111389][ T9534] [ 271.114349][ T9534] dump_stack_lvl+0x188/0x250 [ 271.119076][ T9534] ? show_regs_print_info+0x20/0x20 [ 271.124319][ T9534] ? load_image+0x400/0x400 [ 271.128959][ T9534] ? __lock_acquire+0x7d10/0x7d10 [ 271.134039][ T9534] should_fail+0x38c/0x4c0 [ 271.138517][ T9534] _copy_to_user+0x2e/0x130 [ 271.143067][ T9534] simple_read_from_buffer+0xe3/0x150 [ 271.148492][ T9534] proc_fail_nth_read+0x1a6/0x220 [ 271.153567][ T9534] ? proc_fault_inject_write+0x310/0x310 [ 271.159251][ T9534] ? fsnotify_perm+0x254/0x560 [ 271.164066][ T9534] ? proc_fault_inject_write+0x310/0x310 [ 271.170264][ T9534] vfs_read+0x301/0xd60 [ 271.174469][ T9534] ? kernel_read+0x1e0/0x1e0 [ 271.179111][ T9534] ? __fget_files+0x40f/0x480 [ 271.183843][ T9534] ? mutex_lock_nested+0x17/0x20 [ 271.188844][ T9534] ? __fdget_pos+0x2bf/0x370 [ 271.193474][ T9534] ? ksys_read+0x71/0x260 [ 271.197856][ T9534] ksys_read+0x152/0x260 [ 271.202204][ T9534] ? vfs_write+0xd60/0xd60 [ 271.206680][ T9534] ? lockdep_hardirqs_on+0x94/0x140 [ 271.211938][ T9534] do_syscall_64+0x4c/0xa0 [ 271.216403][ T9534] ? clear_bhb_loop+0x30/0x80 [ 271.221124][ T9534] ? clear_bhb_loop+0x30/0x80 [ 271.225850][ T9534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.231786][ T9534] RIP: 0033:0x7f55e3a7058e [ 271.236253][ T9534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.255897][ T9534] RSP: 002b:00007f55e1d0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.264357][ T9534] RAX: ffffffffffffffda RBX: 00007f55e1d0b6c0 RCX: 00007f55e3a7058e [ 271.272368][ T9534] RDX: 000000000000000f RSI: 00007f55e1d0b0a0 RDI: 0000000000000005 [ 271.280553][ T9534] RBP: 00007f55e1d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 271.288566][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.296579][ T9534] R13: 00007f55e3d2b038 R14: 00007f55e3d2afa0 R15: 00007ffed69b2cb8 [ 271.304737][ T9534] [ 271.327591][ T9540] device syzkaller0 entered promiscuous mode [ 272.177907][ T9573] netlink: 'syz.0.1622': attribute type 39 has an invalid length. [ 272.208380][ T9575] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1623'. [ 272.536474][ T9580] netlink: 'syz.5.1624': attribute type 9 has an invalid length. [ 272.587040][ T9579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1625'. [ 272.618981][ T9580] netlink: 150900 bytes leftover after parsing attributes in process `syz.5.1624'. [ 272.715590][ T9589] netlink: 'syz.0.1627': attribute type 3 has an invalid length. [ 272.744256][ T9589] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1627'. [ 273.470735][ T9619] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1637'. [ 273.646205][ T9623] netlink: 'syz.6.1638': attribute type 39 has an invalid length. [ 273.950179][ T9630] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 273.972916][ T9630] netlink: 'syz.1.1640': attribute type 4 has an invalid length. [ 273.995363][ T9630] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1640'. [ 274.374072][ T4302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.557127][ T9666] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1652'. [ 274.804680][ T9676] validate_nla: 2 callbacks suppressed [ 274.804700][ T9676] netlink: 'syz.0.1653': attribute type 21 has an invalid length. [ 274.827668][ T9676] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.835879][ T9676] IPv6: Can't replace route, no match found [ 275.703011][ T9705] FAULT_INJECTION: forcing a failure. [ 275.703011][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.770621][ T9705] CPU: 0 PID: 9705 Comm: syz.4.1664 Not tainted syzkaller #0 [ 275.778094][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.788192][ T9705] Call Trace: [ 275.791512][ T9705] [ 275.794473][ T9705] dump_stack_lvl+0x188/0x250 [ 275.799202][ T9705] ? show_regs_print_info+0x20/0x20 [ 275.804439][ T9705] ? load_image+0x400/0x400 [ 275.809004][ T9705] ? __lock_acquire+0x7d10/0x7d10 [ 275.814075][ T9705] should_fail+0x38c/0x4c0 [ 275.818548][ T9705] _copy_to_user+0x2e/0x130 [ 275.823118][ T9705] simple_read_from_buffer+0xe3/0x150 [ 275.828562][ T9705] proc_fail_nth_read+0x1a6/0x220 [ 275.833744][ T9705] ? proc_fault_inject_write+0x310/0x310 [ 275.839445][ T9705] ? fsnotify_perm+0x254/0x560 [ 275.844254][ T9705] ? proc_fault_inject_write+0x310/0x310 [ 275.849932][ T9705] vfs_read+0x301/0xd60 [ 275.854143][ T9705] ? kernel_read+0x1e0/0x1e0 [ 275.858795][ T9705] ? __fget_files+0x40f/0x480 [ 275.863539][ T9705] ? mutex_lock_nested+0x17/0x20 [ 275.868522][ T9705] ? __fdget_pos+0x2bf/0x370 [ 275.873332][ T9705] ? ksys_read+0x71/0x260 [ 275.877757][ T9705] ksys_read+0x152/0x260 [ 275.882045][ T9705] ? vfs_write+0xd60/0xd60 [ 275.886508][ T9705] ? lockdep_hardirqs_on+0x94/0x140 [ 275.891760][ T9705] do_syscall_64+0x4c/0xa0 [ 275.896212][ T9705] ? clear_bhb_loop+0x30/0x80 [ 275.900926][ T9705] ? clear_bhb_loop+0x30/0x80 [ 275.905743][ T9705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.911675][ T9705] RIP: 0033:0x7f19c202958e [ 275.916126][ T9705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.935767][ T9705] RSP: 002b:00007f19c02a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.944230][ T9705] RAX: ffffffffffffffda RBX: 00007f19c02a36c0 RCX: 00007f19c202958e [ 275.952232][ T9705] RDX: 000000000000000f RSI: 00007f19c02a30a0 RDI: 0000000000000004 [ 275.960239][ T9705] RBP: 00007f19c02a3090 R08: 0000000000000000 R09: 0000000000000000 [ 275.968239][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.976245][ T9705] R13: 00007f19c22e4128 R14: 00007f19c22e4090 R15: 00007ffda56cf7b8 [ 275.984546][ T9705] [ 276.135990][ T9715] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1667'. [ 276.341799][ T9718] netlink: 'syz.6.1668': attribute type 39 has an invalid length. [ 277.521928][ T9742] FAULT_INJECTION: forcing a failure. [ 277.521928][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 277.585615][ T9742] CPU: 1 PID: 9742 Comm: syz.4.1677 Not tainted syzkaller #0 [ 277.593082][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.603214][ T9742] Call Trace: [ 277.606546][ T9742] [ 277.609522][ T9742] dump_stack_lvl+0x188/0x250 [ 277.614265][ T9742] ? show_regs_print_info+0x20/0x20 [ 277.619671][ T9742] ? load_image+0x400/0x400 [ 277.624271][ T9742] should_fail+0x38c/0x4c0 [ 277.628765][ T9742] should_failslab+0x5/0x20 [ 277.633313][ T9742] slab_pre_alloc_hook+0x51/0xc0 [ 277.638413][ T9742] kmem_cache_alloc_trace+0x47/0x2a0 [ 277.643754][ T9742] ? sctp_add_bind_addr+0x89/0x350 [ 277.649027][ T9742] sctp_add_bind_addr+0x89/0x350 [ 277.654034][ T9742] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 277.659746][ T9742] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 277.666001][ T9742] ? sctp_v4_is_any+0x31/0x50 [ 277.670741][ T9742] ? sctp_copy_one_addr+0x93/0x660 [ 277.676015][ T9742] sctp_bind_addr_copy+0xaf/0x3c0 [ 277.681106][ T9742] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 277.687509][ T9742] sctp_connect_new_asoc+0x2f5/0x6a0 [ 277.692954][ T9742] ? __sctp_connect+0xd80/0xd80 [ 277.697859][ T9742] ? __local_bh_enable_ip+0x136/0x1c0 [ 277.703292][ T9742] ? _local_bh_enable+0xa0/0xa0 [ 277.708209][ T9742] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 277.713808][ T9742] ? security_sctp_bind_connect+0x85/0xb0 [ 277.719611][ T9742] sctp_sendmsg+0x158d/0x2900 [ 277.724412][ T9742] ? aa_sk_perm+0x7dc/0x910 [ 277.728991][ T9742] ? sctp_getsockopt+0x8a0/0x8a0 [ 277.734044][ T9742] ? aa_af_perm+0x340/0x340 [ 277.738675][ T9742] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 277.745166][ T9742] ? sock_rps_record_flow+0x17/0x3b0 [ 277.750522][ T9742] ? inet_sendmsg+0x78/0x2f0 [ 277.755198][ T9742] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.760547][ T9742] ? security_socket_sendmsg+0x7c/0xa0 [ 277.766063][ T9742] ? inet_send_prepare+0x260/0x260 [ 277.771230][ T9742] ____sys_sendmsg+0x5b7/0x8f0 [ 277.776088][ T9742] ? __sys_sendmsg_sock+0x30/0x30 [ 277.781215][ T9742] ? import_iovec+0x6f/0xa0 [ 277.785783][ T9742] ___sys_sendmsg+0x236/0x2e0 [ 277.790539][ T9742] ? __sys_sendmsg+0x2a0/0x2a0 [ 277.795569][ T9742] ? vfs_write+0x8b2/0xd60 [ 277.800127][ T9742] __se_sys_sendmsg+0x1af/0x290 [ 277.805046][ T9742] ? __x64_sys_sendmsg+0x80/0x80 [ 277.810037][ T9742] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 277.816119][ T9742] ? lockdep_hardirqs_on+0x94/0x140 [ 277.821389][ T9742] do_syscall_64+0x4c/0xa0 [ 277.825861][ T9742] ? clear_bhb_loop+0x30/0x80 [ 277.830587][ T9742] ? clear_bhb_loop+0x30/0x80 [ 277.835319][ T9742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.841260][ T9742] RIP: 0033:0x7f19c2068cb9 [ 277.845727][ T9742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.865505][ T9742] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.874008][ T9742] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 277.882109][ T9742] RDX: 00000000000080d1 RSI: 0000200000000300 RDI: 0000000000000003 [ 277.890128][ T9742] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 277.898149][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.906163][ T9742] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 277.914232][ T9742] [ 278.382769][ T4256] Bluetooth: hci5: command 0x0406 tx timeout [ 278.562849][ T9760] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1683'. [ 279.103237][ T9769] netlink: 'syz.4.1686': attribute type 39 has an invalid length. [ 279.116583][ T9771] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1688'. [ 279.143876][ T9774] FAULT_INJECTION: forcing a failure. [ 279.143876][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.203250][ T9774] CPU: 0 PID: 9774 Comm: syz.0.1689 Not tainted syzkaller #0 [ 279.210711][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.220805][ T9774] Call Trace: [ 279.224120][ T9774] [ 279.227083][ T9774] dump_stack_lvl+0x188/0x250 [ 279.231909][ T9774] ? show_regs_print_info+0x20/0x20 [ 279.237146][ T9774] ? load_image+0x400/0x400 [ 279.241701][ T9774] ? __lock_acquire+0x7d10/0x7d10 [ 279.246797][ T9774] should_fail+0x38c/0x4c0 [ 279.251259][ T9774] _copy_to_user+0x2e/0x130 [ 279.255798][ T9774] simple_read_from_buffer+0xe3/0x150 [ 279.261219][ T9774] proc_fail_nth_read+0x1a6/0x220 [ 279.266287][ T9774] ? proc_fault_inject_write+0x310/0x310 [ 279.271966][ T9774] ? fsnotify_perm+0x254/0x560 [ 279.276770][ T9774] ? proc_fault_inject_write+0x310/0x310 [ 279.282442][ T9774] vfs_read+0x301/0xd60 [ 279.286681][ T9774] ? kernel_read+0x1e0/0x1e0 [ 279.291330][ T9774] ? __fget_files+0x40f/0x480 [ 279.296179][ T9774] ? mutex_lock_nested+0x17/0x20 [ 279.301147][ T9774] ? __fdget_pos+0x2bf/0x370 [ 279.305788][ T9774] ? ksys_read+0x71/0x260 [ 279.310185][ T9774] ksys_read+0x152/0x260 [ 279.314466][ T9774] ? vfs_write+0xd60/0xd60 [ 279.318925][ T9774] ? lockdep_hardirqs_on+0x94/0x140 [ 279.324165][ T9774] do_syscall_64+0x4c/0xa0 [ 279.328611][ T9774] ? clear_bhb_loop+0x30/0x80 [ 279.333322][ T9774] ? clear_bhb_loop+0x30/0x80 [ 279.338036][ T9774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.343953][ T9774] RIP: 0033:0x7f55e3a7058e [ 279.348399][ T9774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.368046][ T9774] RSP: 002b:00007f55e1d0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.376491][ T9774] RAX: ffffffffffffffda RBX: 00007f55e1d0b6c0 RCX: 00007f55e3a7058e [ 279.384493][ T9774] RDX: 000000000000000f RSI: 00007f55e1d0b0a0 RDI: 0000000000000004 [ 279.392491][ T9774] RBP: 00007f55e1d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.400506][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.408533][ T9774] R13: 00007f55e3d2b038 R14: 00007f55e3d2afa0 R15: 00007ffed69b2cb8 [ 279.416598][ T9774] [ 279.727130][ T9786] FAULT_INJECTION: forcing a failure. [ 279.727130][ T9786] name failslab, interval 1, probability 0, space 0, times 0 [ 279.773796][ T9786] CPU: 1 PID: 9786 Comm: syz.4.1693 Not tainted syzkaller #0 [ 279.781254][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.791379][ T9786] Call Trace: [ 279.794715][ T9786] [ 279.797775][ T9786] dump_stack_lvl+0x188/0x250 [ 279.802527][ T9786] ? show_regs_print_info+0x20/0x20 [ 279.807792][ T9786] ? load_image+0x400/0x400 [ 279.812676][ T9786] ? __might_sleep+0xf0/0xf0 [ 279.817342][ T9786] ? __lock_acquire+0x7d10/0x7d10 [ 279.822691][ T9786] should_fail+0x38c/0x4c0 [ 279.827196][ T9786] should_failslab+0x5/0x20 [ 279.831755][ T9786] slab_pre_alloc_hook+0x51/0xc0 [ 279.836770][ T9786] kmem_cache_alloc_node+0x47/0x2d0 [ 279.842026][ T9786] ? __alloc_skb+0xf4/0x750 [ 279.846608][ T9786] __alloc_skb+0xf4/0x750 [ 279.851168][ T9786] alloc_skb_with_frags+0xa7/0x730 [ 279.856376][ T9786] sock_alloc_send_pskb+0x87f/0x9a0 [ 279.861798][ T9786] ? sock_kzfree_s+0x50/0x50 [ 279.866457][ T9786] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 279.872362][ T9786] tun_get_user+0x7c8/0x3a70 [ 279.877086][ T9786] ? tun_ring_recv+0xc40/0xc40 [ 279.881945][ T9786] ? rcu_lock_release+0x5/0x20 [ 279.886779][ T9786] ? __lock_acquire+0x7d10/0x7d10 [ 279.891927][ T9786] tun_chr_write_iter+0x112/0x1e0 [ 279.897016][ T9786] vfs_write+0x745/0xd60 [ 279.901340][ T9786] ? file_end_write+0x250/0x250 [ 279.906279][ T9786] ? __fget_files+0x40f/0x480 [ 279.911063][ T9786] ? __fdget_pos+0x1e2/0x370 [ 279.915810][ T9786] ? ksys_write+0x71/0x260 [ 279.920438][ T9786] ksys_write+0x152/0x260 [ 279.924839][ T9786] ? __ia32_sys_read+0x80/0x80 [ 279.929767][ T9786] ? trace_sys_enter+0x1f/0x80 [ 279.934734][ T9786] do_syscall_64+0x4c/0xa0 [ 279.939204][ T9786] ? clear_bhb_loop+0x30/0x80 [ 279.943948][ T9786] ? clear_bhb_loop+0x30/0x80 [ 279.948692][ T9786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.954638][ T9786] RIP: 0033:0x7f19c2068cb9 [ 279.959107][ T9786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.978773][ T9786] RSP: 002b:00007f19c02c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.987296][ T9786] RAX: ffffffffffffffda RBX: 00007f19c22e3fa0 RCX: 00007f19c2068cb9 [ 279.995325][ T9786] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 280.003351][ T9786] RBP: 00007f19c02c4090 R08: 0000000000000000 R09: 0000000000000000 [ 280.011477][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.019569][ T9786] R13: 00007f19c22e4038 R14: 00007f19c22e3fa0 R15: 00007ffda56cf7b8 [ 280.027656][ T9786] [ 280.514647][ T9790] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1695'. [ 280.586501][ T9795] netlink: 'syz.4.1697': attribute type 39 has an invalid length. [ 280.770650][ T9799] netlink: 'syz.5.1696': attribute type 2 has an invalid length. [ 280.812600][ T9799] netlink: 'syz.5.1696': attribute type 8 has an invalid length. [ 280.852706][ T9799] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1696'. [ 280.964504][ T9798] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1697'. [ 280.989541][ T9798] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.1697'. [ 281.084756][ T9807] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1699'. [ 282.199342][ T9839] netlink: 'syz.1.1708': attribute type 21 has an invalid length. [ 282.273950][ T9839] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.312586][ T9839] IPv6: Can't replace route, no match found [ 282.365424][ T9844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.114606][ T9853] netlink: 'syz.1.1712': attribute type 13 has an invalid length. [ 283.153754][ T9853] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1712'. [ 283.262523][ T9853] erspan0: refused to change device tx_queue_len [ 283.279203][ T9853] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 283.490146][ T9865] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.1715'. [ 284.110595][ T9884] netlink: 'syz.4.1722': attribute type 19 has an invalid length. [ 284.140002][ T9884] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1722'. [ 284.216439][ T9888] netlink: 'syz.0.1723': attribute type 46 has an invalid length. [ 284.234882][ T9888] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1723'. [ 284.284034][ T9888] netlink: 'syz.0.1723': attribute type 9 has an invalid length. [ 284.322350][ T9888] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1723'. [ 284.515776][ T9892] device pim6reg1 entered promiscuous mode [ 285.977424][ T9917] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1731'. [ 286.477338][ T9921] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1733'. [ 287.242119][ T9944] device bridge_slave_1 left promiscuous mode [ 287.249128][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.360704][ T9944] device bridge_slave_0 left promiscuous mode [ 287.378839][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.598327][ T9956] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1745'. [ 287.812836][ T9952] netlink: 'syz.0.1744': attribute type 21 has an invalid length. [ 287.863498][ T9952] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1744'. [ 288.374413][ T9975] device wlan0 entered promiscuous mode [ 289.093625][ T3072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.427127][ T9990] netlink: 'syz.0.1756': attribute type 39 has an invalid length. [ 289.948362][ T9999] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1759'. [ 290.427498][T10009] netlink: 'syz.5.1762': attribute type 13 has an invalid length. [ 290.472376][T10009] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1762'. [ 290.777840][T10007] FAULT_INJECTION: forcing a failure. [ 290.777840][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.922321][T10007] CPU: 0 PID: 10007 Comm: syz.6.1760 Not tainted syzkaller #0 [ 290.929912][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.940024][T10007] Call Trace: [ 290.943361][T10007] [ 290.946341][T10007] dump_stack_lvl+0x188/0x250 [ 290.951113][T10007] ? show_regs_print_info+0x20/0x20 [ 290.956380][T10007] ? load_image+0x400/0x400 [ 290.960955][T10007] ? __lock_acquire+0x7d10/0x7d10 [ 290.966052][T10007] ? vfs_write+0x8b2/0xd60 [ 290.970539][T10007] should_fail+0x38c/0x4c0 [ 290.975036][T10007] _copy_from_user+0x2e/0x170 [ 290.979822][T10007] __sys_bpf+0x26d/0x6f0 [ 290.984131][T10007] ? bpf_link_show_fdinfo+0x380/0x380 [ 290.989638][T10007] ? rcu_nmi_exit+0x6f/0xf0 [ 290.994243][T10007] ? vtime_user_exit+0x2c8/0x3e0 [ 290.999264][T10007] __x64_sys_bpf+0x78/0x90 [ 291.003739][T10007] do_syscall_64+0x4c/0xa0 [ 291.008201][T10007] ? clear_bhb_loop+0x30/0x80 [ 291.012923][T10007] ? clear_bhb_loop+0x30/0x80 [ 291.017750][T10007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.023693][T10007] RIP: 0033:0x7f5a54acdcb9 [ 291.028165][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.047820][T10007] RSP: 002b:00007f5a52ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.056294][T10007] RAX: ffffffffffffffda RBX: 00007f5a54d49180 RCX: 00007f5a54acdcb9 [ 291.064924][T10007] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 291.073039][T10007] RBP: 00007f5a52ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 291.081058][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.089084][T10007] R13: 00007f5a54d49218 R14: 00007f5a54d49180 R15: 00007fff90674b88 [ 291.097159][T10007] [ 292.599521][T10009] erspan0: refused to change device tx_queue_len [ 292.636775][T10009] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 292.923903][T10041] netlink: 'syz.6.1773': attribute type 21 has an invalid length. [ 292.962423][T10041] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1773'. [ 292.992231][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1773'. [ 293.287441][T10063] netlink: 'syz.6.1783': attribute type 10 has an invalid length. [ 293.604003][T10063] team0: Port device geneve1 added [ 294.543164][T10117] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 294.945065][T10117] team0: Port device geneve1 added [ 295.268866][T10144] netlink: 'syz.1.1819': attribute type 10 has an invalid length. [ 295.312285][T10144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1819'. [ 295.334325][T10144] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 295.341610][T10144] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.437850][T10144] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 296.296850][T10169] netlink: 'syz.0.1828': attribute type 10 has an invalid length. [ 296.922021][T10200] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1844'. [ 298.058262][T10245] netlink: 'syz.6.1864': attribute type 10 has an invalid length. [ 298.296918][T10245] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 298.701190][T10252] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 298.733397][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1868'. [ 298.764190][T10252] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.833598][T10252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.871224][T10273] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 298.887427][T10273] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1874'. [ 302.422604][T10307] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 303.216436][T10338] netlink: 'syz.6.1901': attribute type 10 has an invalid length. [ 303.450298][T10352] netlink: 'syz.1.1908': attribute type 39 has an invalid length. [ 303.655941][T10357] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1909'. [ 304.398703][T10392] IPv6: …: Disabled Multicast RS [ 304.549641][T10401] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 304.601733][T10401] netlink: 56823 bytes leftover after parsing attributes in process `syz.4.1928'. [ 304.997441][T10421] netlink: 'syz.5.1938': attribute type 10 has an invalid length. [ 305.596075][T10433] netlink: 'syz.0.1944': attribute type 10 has an invalid length. [ 305.614385][T10430] delete_channel: no stack [ 306.039235][T10454] netlink: 'syz.1.1954': attribute type 10 has an invalid length. [ 306.050245][T10454] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1954'. [ 306.066948][T10454] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 306.590290][T10454] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 307.325247][ T4198] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 310.244571][T10561] netlink: 'syz.1.2001': attribute type 3 has an invalid length. [ 310.269410][T10561] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2001'. [ 310.578613][T10579] delete_channel: no stack [ 311.104659][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 311.126368][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 311.155270][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 311.177583][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 312.013621][T10662] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2048'. [ 312.564528][T10677] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.410816][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 313.661818][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 313.682793][T10723] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 313.706964][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 314.347993][T10756] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 314.517936][T10761] netlink: 'syz.4.2087': attribute type 3 has an invalid length. [ 314.784965][T10756] device batadv0 left promiscuous mode [ 314.792761][T10756] bridge0: port 3(batadv0) entered disabled state [ 314.834283][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.877276][T10756] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 314.933507][T10757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.941113][T10757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.970421][T10757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.992466][T10757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.052726][T10757] bond0: (slave batadv0): Releasing backup interface [ 317.269187][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.275732][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.743805][T10866] netlink: 'syz.1.2128': attribute type 10 has an invalid length. [ 317.839278][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.905795][T10866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.965892][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.993611][T10866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.519281][T10921] netlink: 'syz.4.2149': attribute type 10 has an invalid length. [ 321.017455][ T4189] Bluetooth: hci5: command 0x2016 tx timeout [ 321.316999][T10988] netlink: 'syz.5.2176': attribute type 10 has an invalid length. [ 321.325257][T10988] __nla_validate_parse: 1 callbacks suppressed [ 321.325273][T10988] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2176'. [ 321.341624][T10988] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 321.365767][T10988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.569235][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2190'. [ 321.607629][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2190'. [ 321.620381][T11022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2190'. [ 321.633615][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2190'. [ 322.085795][T11055] mac80211_hwsim hwsim23 .3ăc¤±: renamed from wlan1 [ 322.458156][T11072] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 322.653068][T11082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'. [ 323.022464][ T3072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.052637][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2229'. [ 323.100283][T11111] netlink: 'syz.6.2229': attribute type 10 has an invalid length. [ 323.768167][T11163] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 323.810599][T11164] delete_channel: no stack [ 324.073408][T11180] netpci0: tun_chr_ioctl cmd 21731 [ 324.273936][T11189] delete_channel: no stack [ 324.864800][T11218] delete_channel: no stack [ 324.959510][T11224] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2282'. [ 324.995595][T11226] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2281'. [ 325.087462][T11225] device syzkaller0 entered promiscuous mode [ 325.101004][T11221] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2281'. [ 325.551505][T11246] netlink: 'syz.5.2290': attribute type 2 has an invalid length. [ 325.559726][T11246] netlink: 'syz.5.2290': attribute type 8 has an invalid length. [ 325.599488][T11247] delete_channel: no stack [ 326.011530][T11264] netlink: 'syz.6.2299': attribute type 10 has an invalid length. [ 326.183428][T11277] delete_channel: no stack [ 326.280083][T11264] team0: Device veth1_vlan failed to register rx_handler [ 326.922226][T11287] netlink: 'syz.4.2306': attribute type 10 has an invalid length. [ 326.961650][T11287] team0: Port device netdevsim0 added [ 327.154727][T11299] delete_channel: no stack [ 327.309146][T11305] delete_channel: no stack [ 327.398300][T11298] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 327.409946][T11298] __nla_validate_parse: 1 callbacks suppressed [ 327.410030][T11298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2311'. [ 327.460620][T11298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 327.481250][T11298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.917839][T11336] delete_channel: no stack [ 328.007071][T11345] netlink: 'syz.5.2331': attribute type 10 has an invalid length. [ 328.037275][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2331'. [ 328.108546][T11345] device ipvlan1 entered promiscuous mode [ 328.169925][T11345] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 328.989395][T11370] delete_channel: no stack [ 329.026523][T11374] netlink: 'syz.1.2342': attribute type 13 has an invalid length. [ 329.074335][T11374] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2342'. [ 329.154889][T11381] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 329.316290][T11383] netlink: 'syz.4.2346': attribute type 10 has an invalid length. [ 329.364262][T11383] team0: Device veth1_vlan failed to register rx_handler [ 329.646477][T11404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2353'. [ 329.673989][T11404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2353'. [ 329.705484][T11408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2353'. [ 329.737983][T11407] delete_channel: no stack [ 329.752806][T11404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2353'. [ 330.019582][ T4200] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 330.817137][T11476] device syzkaller0 entered promiscuous mode [ 330.878966][T11481] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2387'. [ 331.016116][T11481] netlink: 'syz.4.2387': attribute type 10 has an invalid length. [ 331.037120][T11481] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2387'. [ 331.972500][ T4227] Bluetooth: hci4: command 0x0409 tx timeout [ 332.013501][T11516] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2401'. [ 332.122116][T11516] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 334.325993][ C0] ------------[ cut here ]------------ [ 334.331684][ C0] WARNING: CPU: 0 PID: 4187 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 334.341397][ C0] Modules linked in: [ 334.345378][ C0] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 334.353080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.363442][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 334.369660][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 334.389361][ C0] RSP: 0018:ffffc90000007380 EFLAGS: 00010246 [ 334.395520][ C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888074438000 [ 334.403566][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.411668][ C0] RBP: 0000000000000000 R08: ffffffff8f0e6008 R09: ffffffff8f0e6018 [ 334.419719][ C0] R10: ffffffff8f0e6010 R11: ffffffff8f0e6003 R12: ffff888074439788 [ 334.427778][ C0] R13: dffffc0000000000 R14: ffffc900000073e8 R15: 0000000000000000 [ 334.435949][ C0] FS: 000055556aef3500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 334.444961][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.451598][ C0] CR2: 000055556af0ea28 CR3: 0000000063be8000 CR4: 00000000003506f0 [ 334.459657][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.467706][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 334.475759][ C0] Call Trace: [ 334.479079][ C0] [ 334.481968][ C0] bpf_probe_read_user+0x26/0x70 [ 334.487004][ C0] bpf_prog_a80a2db5f03b572f+0x3d/0x6d8 [ 334.492710][ C0] bpf_trace_run4+0x2b1/0x360 [ 334.497538][ C0] ? bpf_trace_run3+0x350/0x350 [ 334.502469][ C0] ? __alloc_pages+0x480/0x480 [ 334.507292][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 334.512829][ C0] __alloc_pages+0x457/0x480 [ 334.517566][ C0] ? zone_statistics+0x170/0x170 [ 334.522594][ C0] new_slab+0xc0/0x4b0 [ 334.526709][ C0] ___slab_alloc+0x80a/0xdd0 [ 334.531430][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 334.536652][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 334.542663][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 334.547760][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 334.552885][ C0] __alloc_skb+0x22c/0x750 [ 334.557354][ C0] __napi_alloc_skb+0x151/0x2d0 [ 334.562414][ C0] page_to_skb+0x26a/0xcf0 [ 334.566882][ C0] receive_buf+0x14db/0x58e0 [ 334.571546][ C0] ? virtnet_poll_tx+0x4c0/0x4c0 [ 334.576702][ C0] ? detach_buf_split+0x8a9/0xab0 [ 334.581804][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 334.586914][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 334.592295][ C0] ? virtqueue_get_buf_ctx+0x716/0xfd0 [ 334.597826][ C0] virtnet_poll+0x571/0xf40 [ 334.602592][ C0] ? refill_work+0x210/0x210 [ 334.607249][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 334.613321][ C0] ? lock_chain_count+0x20/0x20 [ 334.618445][ C0] __napi_poll+0xc0/0x430 [ 334.622849][ C0] ? net_rx_action+0x307/0xa10 [ 334.627667][ C0] net_rx_action+0x4d4/0xa10 [ 334.632346][ C0] ? lockdep_softirqs_on+0x580/0x580 [ 334.637688][ C0] ? net_tx_action+0x880/0x880 [ 334.642533][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 334.648572][ C0] ? lock_chain_count+0x20/0x20 [ 334.653656][ C0] handle_softirqs+0x339/0x830 [ 334.658495][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 334.663446][ C0] ? do_softirq+0x210/0x210 [ 334.668154][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 334.673445][ C0] __irq_exit_rcu+0x13b/0x230 [ 334.678188][ C0] ? irq_exit_rcu+0x20/0x20 [ 334.682784][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 334.688051][ C0] irq_exit_rcu+0x5/0x20 [ 334.692372][ C0] common_interrupt+0xb5/0xd0 [ 334.697101][ C0] [ 334.700071][ C0] [ 334.703073][ C0] asm_common_interrupt+0x22/0x40 [ 334.708148][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 334.714731][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 8f 0b 8d f7 65 8b 05 10 18 3d 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 334.734419][ C0] RSP: 0018:ffffc90002e6fc20 EFLAGS: 00000206 [ 334.740541][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 174fdee5f98b0000 [ 334.748677][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 334.756732][ C0] RBP: ffffc90002e6fca8 R08: ffffffff9649de5b R09: 1ffffffff2c93bcb [ 334.764791][ C0] R10: dffffc0000000000 R11: fffffbfff2c93bcc R12: dffffc0000000000 [ 334.772960][ C0] R13: ffff88801f439100 R14: ffffffff9649de58 R15: 1ffff920005cdf84 [ 334.781004][ C0] ? _raw_spin_unlock+0x40/0x40 [ 334.786035][ C0] debug_check_no_obj_freed+0x515/0x530 [ 334.791646][ C0] slab_free_freelist_hook+0x8b/0x170 [ 334.797102][ C0] ? do_unlinkat+0x65f/0x710 [ 334.801741][ C0] kmem_cache_free+0x8f/0x210 [ 334.806608][ C0] do_unlinkat+0x65f/0x710 [ 334.811066][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 334.816280][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 334.821437][ C0] ? strncpy_from_user+0x1fb/0x360 [ 334.826793][ C0] ? getname_flags+0x1fe/0x500 [ 334.831604][ C0] __x64_sys_unlink+0x45/0x50 [ 334.836469][ C0] do_syscall_64+0x4c/0xa0 [ 334.840926][ C0] ? clear_bhb_loop+0x30/0x80 [ 334.845691][ C0] ? clear_bhb_loop+0x30/0x80 [ 334.850462][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.856452][ C0] RIP: 0033:0x7f19c2067da7 [ 334.860912][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 334.880700][ C0] RSP: 002b:00007ffda56cea28 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 334.889215][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f19c2067da7 [ 334.897312][ C0] RDX: 00007ffda56cea50 RSI: 00007ffda56ceae0 RDI: 00007ffda56ceae0 [ 334.905367][ C0] RBP: 00007ffda56ceae0 R08: 00007ffda56cfae0 R09: 00000000ffffffff [ 334.913439][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffda56cfb70 [ 334.921631][ C0] R13: 00007f19c20d271f R14: 0000000000051908 R15: 00007ffda56cfbb0 [ 334.929732][ C0] [ 334.932833][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.940146][ C0] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 334.947766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.957869][ C0] Call Trace: [ 334.961186][ C0] [ 334.964069][ C0] dump_stack_lvl+0x188/0x250 [ 334.968800][ C0] ? show_regs_print_info+0x20/0x20 [ 334.974053][ C0] ? load_image+0x400/0x400 [ 334.978610][ C0] panic+0x2e5/0x810 [ 334.982561][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 334.987125][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 334.992758][ C0] __warn+0x248/0x2b0 [ 334.996780][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 335.002386][ C0] report_bug+0x1b7/0x2e0 [ 335.006764][ C0] handle_bug+0x3a/0x70 [ 335.010957][ C0] exc_invalid_op+0x16/0x40 [ 335.015503][ C0] asm_exc_invalid_op+0x16/0x20 [ 335.020397][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 335.026597][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 335.046330][ C0] RSP: 0018:ffffc90000007380 EFLAGS: 00010246 [ 335.052448][ C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888074438000 [ 335.060520][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.068534][ C0] RBP: 0000000000000000 R08: ffffffff8f0e6008 R09: ffffffff8f0e6018 [ 335.076545][ C0] R10: ffffffff8f0e6010 R11: ffffffff8f0e6003 R12: ffff888074439788 [ 335.084569][ C0] R13: dffffc0000000000 R14: ffffc900000073e8 R15: 0000000000000000 [ 335.092587][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 335.098208][ C0] bpf_probe_read_user+0x26/0x70 [ 335.103203][ C0] bpf_prog_a80a2db5f03b572f+0x3d/0x6d8 [ 335.108802][ C0] bpf_trace_run4+0x2b1/0x360 [ 335.113526][ C0] ? bpf_trace_run3+0x350/0x350 [ 335.118516][ C0] ? __alloc_pages+0x480/0x480 [ 335.123332][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 335.128841][ C0] __alloc_pages+0x457/0x480 [ 335.133483][ C0] ? zone_statistics+0x170/0x170 [ 335.138584][ C0] new_slab+0xc0/0x4b0 [ 335.142700][ C0] ___slab_alloc+0x80a/0xdd0 [ 335.147326][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 335.152498][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 335.158348][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 335.163425][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 335.168589][ C0] __alloc_skb+0x22c/0x750 [ 335.173181][ C0] __napi_alloc_skb+0x151/0x2d0 [ 335.178121][ C0] page_to_skb+0x26a/0xcf0 [ 335.182719][ C0] receive_buf+0x14db/0x58e0 [ 335.187487][ C0] ? virtnet_poll_tx+0x4c0/0x4c0 [ 335.192486][ C0] ? detach_buf_split+0x8a9/0xab0 [ 335.197563][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 335.202642][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 335.208115][ C0] ? virtqueue_get_buf_ctx+0x716/0xfd0 [ 335.213631][ C0] virtnet_poll+0x571/0xf40 [ 335.218201][ C0] ? refill_work+0x210/0x210 [ 335.222976][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 335.229008][ C0] ? lock_chain_count+0x20/0x20 [ 335.233913][ C0] __napi_poll+0xc0/0x430 [ 335.238290][ C0] ? net_rx_action+0x307/0xa10 [ 335.243098][ C0] net_rx_action+0x4d4/0xa10 [ 335.247736][ C0] ? lockdep_softirqs_on+0x580/0x580 [ 335.253165][ C0] ? net_tx_action+0x880/0x880 [ 335.257983][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 335.264016][ C0] ? lock_chain_count+0x20/0x20 [ 335.268923][ C0] handle_softirqs+0x339/0x830 [ 335.273735][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 335.278719][ C0] ? do_softirq+0x210/0x210 [ 335.283271][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 335.288522][ C0] __irq_exit_rcu+0x13b/0x230 [ 335.293234][ C0] ? irq_exit_rcu+0x20/0x20 [ 335.297779][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 335.303027][ C0] irq_exit_rcu+0x5/0x20 [ 335.307318][ C0] common_interrupt+0xb5/0xd0 [ 335.312138][ C0] [ 335.315114][ C0] [ 335.318170][ C0] asm_common_interrupt+0x22/0x40 [ 335.323251][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 335.329802][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 8f 0b 8d f7 65 8b 05 10 18 3d 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 335.349648][ C0] RSP: 0018:ffffc90002e6fc20 EFLAGS: 00000206 [ 335.355770][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 174fdee5f98b0000 [ 335.363842][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 335.371854][ C0] RBP: ffffc90002e6fca8 R08: ffffffff9649de5b R09: 1ffffffff2c93bcb [ 335.379865][ C0] R10: dffffc0000000000 R11: fffffbfff2c93bcc R12: dffffc0000000000 [ 335.387881][ C0] R13: ffff88801f439100 R14: ffffffff9649de58 R15: 1ffff920005cdf84 [ 335.395997][ C0] ? _raw_spin_unlock+0x40/0x40 [ 335.400997][ C0] debug_check_no_obj_freed+0x515/0x530 [ 335.406595][ C0] slab_free_freelist_hook+0x8b/0x170 [ 335.412018][ C0] ? do_unlinkat+0x65f/0x710 [ 335.416662][ C0] kmem_cache_free+0x8f/0x210 [ 335.421390][ C0] do_unlinkat+0x65f/0x710 [ 335.425956][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 335.431123][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 335.436285][ C0] ? strncpy_from_user+0x1fb/0x360 [ 335.441530][ C0] ? getname_flags+0x1fe/0x500 [ 335.446421][ C0] __x64_sys_unlink+0x45/0x50 [ 335.451136][ C0] do_syscall_64+0x4c/0xa0 [ 335.455597][ C0] ? clear_bhb_loop+0x30/0x80 [ 335.460320][ C0] ? clear_bhb_loop+0x30/0x80 [ 335.465046][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.470988][ C0] RIP: 0033:0x7f19c2067da7 [ 335.475462][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 335.495209][ C0] RSP: 002b:00007ffda56cea28 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 335.503683][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f19c2067da7 [ 335.511719][ C0] RDX: 00007ffda56cea50 RSI: 00007ffda56ceae0 RDI: 00007ffda56ceae0 [ 335.519974][ C0] RBP: 00007ffda56ceae0 R08: 00007ffda56cfae0 R09: 00000000ffffffff [ 335.527982][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffda56cfb70 [ 335.536113][ C0] R13: 00007f19c20d271f R14: 0000000000051908 R15: 00007ffda56cfbb0 [ 335.544424][ C0] [ 335.548019][ C0] Kernel Offset: disabled [ 335.552635][ C0] Rebooting in 86400 seconds..