last executing test programs: 21.298602524s ago: executing program 3 (id=4752): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) ioctl$TUNSETIFF(r3, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) 20.796029877s ago: executing program 3 (id=4757): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000020038ea9c198ec5be0ed5f8131f000000000761cbdd84b4a7db88048000"/51], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) (fail_nth: 5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 19.254362704s ago: executing program 3 (id=4764): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x6d7c6c3eacb5c910, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) r3 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x408000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='syzkaller\x00') ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000005c0)=""/168) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1", 0x3a}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x312, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000100)="38030200f00f000006", 0x9}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/time\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 18.838959994s ago: executing program 3 (id=4767): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000023153490e87acf0dfe77551d195fbfd1670a5480781bc52595e6d3cb41d5f286dd8bb6f60b58e0071546158f232658c14d362aaafb63e8d0fdcba96f53ae85f56ff8b914c0bbb72c32faae3378e302", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000100000000000000000000000000000000000000007e9bd2e1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000003820000004000000", @ANYRES32=r3], 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200001302000000040000000000000000000000000000800000000000000000000000005f"], 0x0, 0x42}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0xd, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000792a000101000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fff, 0x10}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) ioctl$TUNGETVNETLE(r6, 0x8953, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="2b65eef50e7a6ae706328750022669944f92390c6a618171ffb213384ecb3b", @ANYBLOB="002dcaaf4d3fcb8798963200008d00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="1811cd00", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085200000010000000a87e605f58500008510000001000000181a0000", @ANYRES32=r5, @ANYBLOB="0000000000000000852000000400000018460000ffffffff00000000000000008dabfefff0ffffff18430000fbffffff00000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x34, &(0x7f00000006c0)=""/52, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000700)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x9e, 0x81}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r2, r1, r1, r7, r2], &(0x7f0000000840)=[{0x1, 0x4, 0x2, 0xa}, {0x1, 0x1, 0xc, 0x3}, {0x3, 0x1, 0xb}, {0x1, 0x2, 0xa, 0x1}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0xff}, 0x94) close(r4) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r4, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 5.228000074s ago: executing program 0 (id=4814): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x3, 0x0, 0x4000e, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffff, 0x0, 0xfffffffc, 0xb}, {0x2, 0xfffffffd}], 0x10, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000), 0xe0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x24}, 0x1c0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_clone(0x4800480, &(0x7f0000000140)="19c321cd56c6f179a2820b7ba099ef8045b626b2953539f479169cd41af1ebe6132bccedb63336883fe13d8b245d85dbcd6ab8f8856379626f4802067ae6decb3c594986f75483e87888c9e76cdc3a94c4d2dc98cbd4c4527870493857b97efa59e3c4925ad151c44821a121963ba368964cb55d4cb94fdda534fd8cba1355e55b0b3c03aaf5c7bf9e58a60fb6d34cb27ae62a7f90034b46bba9f08d", 0x9c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="23624d64a8ef80dcff0493fc1a2c2dde8976245bdd3f5135d0bc8975e15d78a7dc79d8a3d6b6e2806e4a10336f39bd4b1432c821765299a43d0a7f7080257eb1163c07bc095493afdf98f2feb13249afa2508587068b006cbf77d70b5985aa3c9977d3917ecfb39f7665023be1d6aa0a490592") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x5}, 0x11, 0x0, 0x0, 0x3, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000feffffff85000000c200000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000003c000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.348867905s ago: executing program 1 (id=4816): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="00ffffffffffffff7f00000000d3ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) socket$kcm(0x2b, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x140}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.922427466s ago: executing program 2 (id=4819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)=r0, 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.780032939s ago: executing program 1 (id=4820): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000020038ea9c198ec5be0ed5f8131f000000000761cbdd84b4a7db88048000"/51], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.772617259s ago: executing program 0 (id=4821): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000001000082d6b902929050030000000054bae84be89ccee621c36d7c5dccf78bb66bf7c8131609a04b0a59745d7a7a5b8568ded6962640da4d1bb79214d68afb8d25bfb0c00d9cbefe3b39688d1bfb91f881f706af9805db4bcdfe8b5cf329bfcf1bc0a8b3fe60d171734fcfa0aad409dad225022590981526b3ed2fd00234cabde496582babf2b21fedd35754b71dfeb9a11ceea467906ff02dc736fa1f170f83f5390bf719a86d37706e45e6", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) 3.338505559s ago: executing program 2 (id=4822): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 3.029205757s ago: executing program 2 (id=4823): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2140, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12490a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="458600dedf", 0x5}, {&(0x7f0000000100)="5e62ad657ddd26069e462ebcbea9dfede4fa26f950f234b67a42667b34155c86bd7d41a2605e45286f4bdfddaaccc5f5e43f161809a297e4d2fc1100c353c4b5743f33e24de544307e60bfbd5f3fdfdc949fc64633382271503fb5af3e4072659ba0194c47300558af1af21eea6ec8c33aebc5922bbf222a7c649c99108765e367463321b1dcb877ff077b91a7b8258c333f5c89", 0x94}], 0x2}, 0x40000) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x4, 0x80000009}, {}, {0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x40, 0x720}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000e40000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000000000002cdd3c26485e40cfcef55fe64e5fa02fc9ffa0398d91388abb6ddd5aedd2d678d3d20fd1c6c0ace50fd93fa6f2af037af98b7d5e0c7e6951fb1be205215a791caf5308f689abc69e3c81001cf45f8aed36344106aa4636360b23a4d641099b93b993de3627a1b93f56cbba9d1ebb68ab604760d4b396041bd05bcfd7e9fe7b86f64296cbd56e7c263cf91b41013de0cdce22cbe35cb4e53920389840a451043abf8dba0bbaaab431d67860ca4c9e3e67caa94abcf805f92fbe0cc08436cc2f6bcc1f75f3117f26b5323c65"]) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x8, &(0x7f0000000100), 0x120) 2.593239428s ago: executing program 1 (id=4824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1}) r7 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380)=r7, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xc, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x1}, {0x2, 0x3}, {0xb, 0x3}, {0x2}, {0x1, 0x4}, {0x8, 0x5}, {0x9}, {0xe, 0x1}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x7f, 0x2}, @volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @fwd={0xf}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @restrict={0xc}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x9}, @const={0x7, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x5f, 0x3e, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000200)=""/67, 0xe4, 0x43, 0x0, 0x6, 0x10000}, 0x28) 2.591173508s ago: executing program 0 (id=4831): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000001000082d6b902929050030000000054bae84be89ccee621c36d7c5dccf78bb66bf7c8131609a04b0a59745d7a7a5b8568ded6962640da4d1bb79214d68afb8d25bfb0c00d9cbefe3b39688d1bfb91f881f706af9805db4bcdfe8b5cf329bfcf1bc0a8b3fe60d171734fcfa0aad409dad225022590981526b3ed2fd00234cabde496582babf2b21fedd35754b71dfeb9a11ceea467906ff02dc736fa1f170f83f5390bf719a86d37706e45e6", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) 2.147710069s ago: executing program 1 (id=4825): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18000, 0x6, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4704, 0x10003, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.986176433s ago: executing program 2 (id=4826): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20044810) 1.931161303s ago: executing program 0 (id=4827): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="00ffffffffffffff7f00000000d3ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x140}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.884343704s ago: executing program 2 (id=4828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@cgroup=r1, r1, 0x2f, 0x14, 0x4, @void, @value=r0, @void, @void, r2}, 0x20) 1.484404194s ago: executing program 0 (id=4829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)=r0, 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.356002488s ago: executing program 2 (id=4830): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 759.243472ms ago: executing program 3 (id=4772): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00"/25], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000042100a118000200fe8000", 0x23}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) (fail_nth: 1) 744.231032ms ago: executing program 1 (id=4839): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 448.454639ms ago: executing program 0 (id=4832): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000020038ea9c198ec5be0ed5f8131f000000000761cbdd84b4a7db88048000"/51], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 50.302929ms ago: executing program 3 (id=4833): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e", 0x27}], 0x1}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'some'}, 0x2f) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000001700)}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r3}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001600)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="41fdca2d2ebaf9c27fc665ff7aea8fd6c23c240efe4cd57e309f68f4946323cf21e4288c485186d6f353cc8ce1c2bbcfdb313439599debc0efe9526a9f5c09d2f611244645a54980291f480fb56f436c61d97ea710ed3e73802651554aa697674e7f1f82b2006bb1fef6296cee1e25fd949642481d801da189453a47148716cc5f4432fb6ded638659dcf02d2558d8b17f2c4a045a6965ea7c5d83e14908c1595bc303662c87412c23dd50f5ca2f6877a4816faeac7a7dfab7015f2d8000df", @ANYRES64=0x0], 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000813ffe21000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r6], &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 0s ago: executing program 1 (id=4834): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x29, 0xa, 0x1, &(0x7f0000000180)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0x0, 0x0}, 0x10) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000002c0)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000540)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffc, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1a02}) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) kernel console output (not intermixed with test programs): 16497] __se_sys_sendmsg+0x1d0/0x2c0 [ 819.887728][T16497] ? __x64_sys_sendmsg+0x80/0x80 [ 819.892742][T16497] ? lockdep_hardirqs_on+0x98/0x150 [ 819.897991][T16497] do_syscall_64+0x55/0xb0 [ 819.902438][T16497] ? clear_bhb_loop+0x40/0x90 [ 819.907144][T16497] ? clear_bhb_loop+0x40/0x90 [ 819.911845][T16497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.917761][T16497] RIP: 0033:0x7fdb85f9e0d9 [ 819.922202][T16497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.941834][T16497] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.950279][T16497] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 819.958271][T16497] RDX: 0000000000008040 RSI: 0000200000002700 RDI: 000000000000000a [ 819.966260][T16497] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 819.974252][T16497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.982245][T16497] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 819.990256][T16497] [ 820.037883][T16494] netlink: 'syz.2.3746': attribute type 3 has an invalid length. [ 820.068862][T16494] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3746'. [ 820.087720][T16497] netlink: 'syz.1.3747': attribute type 9 has an invalid length. [ 820.117680][T16497] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3747'. [ 820.897878][T16508] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 821.350648][T16517] syzkaller0: entered promiscuous mode [ 821.368985][T16517] syzkaller0: entered allmulticast mode [ 821.575765][T16522] netlink: 'syz.0.3756': attribute type 9 has an invalid length. [ 821.589605][T16522] netlink: 153604 bytes leftover after parsing attributes in process `syz.0.3756'. [ 821.790744][T16528] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 823.804391][T16528] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 823.813480][T16532] netlink: 'syz.3.3757': attribute type 3 has an invalid length. [ 823.828807][T16532] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3757'. [ 824.430808][T16543] netlink: 'syz.1.3763': attribute type 10 has an invalid length. [ 824.816052][T16554] netlink: 'syz.0.3767': attribute type 9 has an invalid length. [ 824.868736][T16554] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3767'. [ 825.153489][T16558] netlink: 'syz.3.3770': attribute type 9 has an invalid length. [ 825.180261][T16558] netlink: 153604 bytes leftover after parsing attributes in process `syz.3.3770'. [ 825.809992][T16563] netlink: 'syz.1.3768': attribute type 3 has an invalid length. [ 825.873389][T16563] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3768'. [ 826.273913][T16574] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3776'. [ 826.471046][T16577] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 826.552391][T16583] netlink: 'syz.1.3778': attribute type 10 has an invalid length. [ 826.636961][T16583] veth0_vlan: entered allmulticast mode [ 826.946142][T16583] veth0_vlan: left promiscuous mode [ 827.098094][T16583] veth0_vlan: entered promiscuous mode [ 827.374831][T16583] team0: Device veth0_vlan failed to register rx_handler [ 827.526450][T16593] netlink: 'syz.2.3783': attribute type 9 has an invalid length. [ 827.536931][T16593] netlink: 153604 bytes leftover after parsing attributes in process `syz.2.3783'. [ 827.819365][T16583] syz.1.3778 (16583) used greatest stack depth: 17032 bytes left [ 828.707259][T16609] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3788'. [ 828.949843][T16614] netlink: 'syz.2.3790': attribute type 10 has an invalid length. [ 829.724396][T16625] netlink: 'syz.1.3794': attribute type 9 has an invalid length. [ 829.746639][T16625] netlink: 153604 bytes leftover after parsing attributes in process `syz.1.3794'. [ 830.484568][T16633] netlink: 'syz.3.3796': attribute type 10 has an invalid length. [ 830.541175][T16633] veth0_vlan: entered allmulticast mode [ 830.667323][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 831.410353][T16633] veth0_vlan: left promiscuous mode [ 831.487866][T16633] veth0_vlan: entered promiscuous mode [ 831.558139][T16633] team0: Device veth0_vlan failed to register rx_handler [ 831.939575][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 832.020839][T16646] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3800'. [ 832.698805][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 833.327617][T16665] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 833.810178][T16669] netlink: 'syz.0.3807': attribute type 9 has an invalid length. [ 833.879475][T16669] netlink: 153604 bytes leftover after parsing attributes in process `syz.0.3807'. [ 834.252706][T16676] FAULT_INJECTION: forcing a failure. [ 834.252706][T16676] name failslab, interval 1, probability 0, space 0, times 0 [ 834.305067][T16676] CPU: 1 PID: 16676 Comm: syz.3.3810 Not tainted syzkaller #0 [ 834.312616][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.322716][T16676] Call Trace: [ 834.326041][T16676] [ 834.329020][T16676] dump_stack_lvl+0x18c/0x250 [ 834.333749][T16676] ? show_regs_print_info+0x20/0x20 [ 834.339006][T16676] ? load_image+0x420/0x420 [ 834.343567][T16676] ? __might_sleep+0xe0/0xe0 [ 834.348221][T16676] ? __lock_acquire+0x7d80/0x7d80 [ 834.353301][T16676] ? trace_raw_output_contention_end+0xd0/0xd0 [ 834.359509][T16676] should_fail_ex+0x394/0x4c0 [ 834.364247][T16676] should_failslab+0x9/0x20 [ 834.368808][T16676] slab_pre_alloc_hook+0x59/0x300 [ 834.373886][T16676] ? find_get_pmu_context+0x81/0x9e0 [ 834.379245][T16676] __kmem_cache_alloc_node+0x53/0x250 [ 834.384676][T16676] ? find_get_pmu_context+0x81/0x9e0 [ 834.390020][T16676] kmalloc_trace+0x2a/0xe0 [ 834.394497][T16676] find_get_pmu_context+0x81/0x9e0 [ 834.399670][T16676] __se_sys_perf_event_open+0xb80/0x1c60 [ 834.405369][T16676] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 834.411074][T16676] ? lock_chain_count+0x20/0x20 [ 834.415994][T16676] ? lockdep_hardirqs_on+0x98/0x150 [ 834.421242][T16676] ? __x64_sys_perf_event_open+0x20/0xc0 [ 834.426926][T16676] do_syscall_64+0x55/0xb0 [ 834.431387][T16676] ? clear_bhb_loop+0x40/0x90 [ 834.436106][T16676] ? clear_bhb_loop+0x40/0x90 [ 834.440849][T16676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.446791][T16676] RIP: 0033:0x7fb5d279e0d9 [ 834.451244][T16676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.470893][T16676] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 834.479358][T16676] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 834.487374][T16676] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000000c0 [ 834.495394][T16676] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 834.503415][T16676] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 834.511438][T16676] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 834.519511][T16676] [ 834.602799][T16674] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 834.778789][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 834.858497][T16683] netlink: 'syz.2.3809': attribute type 10 has an invalid length. [ 834.929688][T16683] veth0_vlan: entered allmulticast mode [ 835.159655][T16683] veth0_vlan: left promiscuous mode [ 835.250999][T16683] veth0_vlan: entered promiscuous mode [ 835.301512][T16683] team0: Device veth0_vlan failed to register rx_handler [ 835.337034][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 835.576488][T16690] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3813'. [ 836.734399][T16708] netlink: 'syz.0.3820': attribute type 9 has an invalid length. [ 836.749970][T16710] netlink: 'syz.2.3821': attribute type 3 has an invalid length. [ 836.758192][T16708] netlink: 153604 bytes leftover after parsing attributes in process `syz.0.3820'. [ 836.835394][T16710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3821'. [ 837.339541][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 837.518936][T16716] netlink: 'syz.1.3822': attribute type 10 has an invalid length. [ 837.773983][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 837.937681][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 838.112149][T16730] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3826'. [ 838.269333][T16735] FAULT_INJECTION: forcing a failure. [ 838.269333][T16735] name failslab, interval 1, probability 0, space 0, times 0 [ 838.293530][T16735] CPU: 1 PID: 16735 Comm: syz.0.3829 Not tainted syzkaller #0 [ 838.301078][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.311170][T16735] Call Trace: [ 838.314494][T16735] [ 838.317490][T16735] dump_stack_lvl+0x18c/0x250 [ 838.322224][T16735] ? show_regs_print_info+0x20/0x20 [ 838.327465][T16735] ? load_image+0x420/0x420 [ 838.332020][T16735] ? __might_sleep+0xe0/0xe0 [ 838.336662][T16735] ? __lock_acquire+0x7d80/0x7d80 [ 838.341738][T16735] should_fail_ex+0x394/0x4c0 [ 838.346470][T16735] should_failslab+0x9/0x20 [ 838.351030][T16735] slab_pre_alloc_hook+0x59/0x300 [ 838.356114][T16735] ? __lock_acquire+0x7d80/0x7d80 [ 838.361200][T16735] ? security_sk_alloc+0x4b/0x130 [ 838.366269][T16735] ? security_sk_alloc+0x4b/0x130 [ 838.371338][T16735] __kmem_cache_alloc_node+0x53/0x250 [ 838.376762][T16735] ? security_sk_alloc+0x4b/0x130 [ 838.381822][T16735] __kmalloc+0xa7/0x240 [ 838.386032][T16735] security_sk_alloc+0x4b/0x130 [ 838.390931][T16735] sk_prot_alloc+0x101/0x210 [ 838.395567][T16735] sk_alloc+0x3a/0x350 [ 838.399692][T16735] inet_create+0x7a9/0xfe0 [ 838.404158][T16735] ? inet_create+0x9d/0xfe0 [ 838.408718][T16735] __sock_create+0x49e/0x940 [ 838.413376][T16735] __sys_socketpair+0x1c1/0x550 [ 838.418295][T16735] __x64_sys_socketpair+0x9b/0xb0 [ 838.423368][T16735] do_syscall_64+0x55/0xb0 [ 838.427832][T16735] ? clear_bhb_loop+0x40/0x90 [ 838.432553][T16735] ? clear_bhb_loop+0x40/0x90 [ 838.437280][T16735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.443219][T16735] RIP: 0033:0x7ff33359e0d9 [ 838.447672][T16735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.467336][T16735] RSP: 002b:00007ff334488028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 838.475801][T16735] RAX: ffffffffffffffda RBX: 00007ff333825fa0 RCX: 00007ff33359e0d9 [ 838.483818][T16735] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002 [ 838.491852][T16735] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 838.499862][T16735] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 838.507879][T16735] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 838.515914][T16735] [ 838.605940][T16737] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 838.858172][T16732] delete_channel: no stack [ 839.517657][T16756] netlink: 'syz.2.3837': attribute type 10 has an invalid length. [ 839.554533][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 839.822916][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 839.926181][T16764] syzkaller0: entered promiscuous mode [ 839.976434][T16764] syzkaller0: entered allmulticast mode [ 839.979081][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 841.898853][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 843.405926][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 843.515109][T16775] netlink: 'syz.2.3844': attribute type 9 has an invalid length. [ 843.550304][T16775] netlink: 153604 bytes leftover after parsing attributes in process `syz.2.3844'. [ 844.272848][T16789] FAULT_INJECTION: forcing a failure. [ 844.272848][T16789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.306756][T16789] CPU: 1 PID: 16789 Comm: syz.0.3848 Not tainted syzkaller #0 [ 844.314308][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.324415][T16789] Call Trace: [ 844.327737][T16789] [ 844.330717][T16789] dump_stack_lvl+0x18c/0x250 [ 844.335448][T16789] ? show_regs_print_info+0x20/0x20 [ 844.340698][T16789] ? load_image+0x420/0x420 [ 844.345277][T16789] ? __might_fault+0xaa/0x120 [ 844.350027][T16789] ? __lock_acquire+0x7d80/0x7d80 [ 844.355118][T16789] should_fail_ex+0x394/0x4c0 [ 844.359855][T16789] _copy_from_user+0x2f/0xe0 [ 844.364501][T16789] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 844.369933][T16789] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 844.375371][T16789] ? dev_ioctl+0x83c/0x1140 [ 844.379932][T16789] ? __lock_acquire+0x7d80/0x7d80 [ 844.385026][T16789] ? dev_ifsioc+0x957/0xc40 [ 844.389940][T16789] dev_ioctl+0x84c/0x1140 [ 844.394377][T16789] sock_ioctl+0x74c/0x7e0 [ 844.398771][T16789] ? sock_poll+0x3e0/0x3e0 [ 844.403253][T16789] ? bpf_lsm_file_ioctl+0x9/0x10 [ 844.408241][T16789] ? security_file_ioctl+0x80/0xa0 [ 844.414628][T16789] ? sock_poll+0x3e0/0x3e0 [ 844.419091][T16789] __se_sys_ioctl+0xfd/0x170 [ 844.423721][T16789] do_syscall_64+0x55/0xb0 [ 844.428182][T16789] ? clear_bhb_loop+0x40/0x90 [ 844.432895][T16789] ? clear_bhb_loop+0x40/0x90 [ 844.437611][T16789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.443562][T16789] RIP: 0033:0x7ff33359e0d9 [ 844.448045][T16789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.467708][T16789] RSP: 002b:00007ff334488028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.476200][T16789] RAX: ffffffffffffffda RBX: 00007ff333825fa0 RCX: 00007ff33359e0d9 [ 844.484209][T16789] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 844.492211][T16789] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 844.500216][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.508227][T16789] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 844.516254][T16789] [ 844.729316][T16791] netlink: 'syz.1.3849': attribute type 10 has an invalid length. [ 844.759712][T16793] netlink: 'syz.2.3850': attribute type 9 has an invalid length. [ 844.776484][T16793] netlink: 153604 bytes leftover after parsing attributes in process `syz.2.3850'. [ 845.434194][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 845.800872][T16804] syzkaller0: entered promiscuous mode [ 845.806713][T16804] syzkaller0: entered allmulticast mode [ 848.971358][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 848.988998][T16829] netlink: 'syz.2.3861': attribute type 10 has an invalid length. [ 850.139463][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 850.906693][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 851.029345][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 851.147091][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 852.219993][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 854.298909][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 855.573938][T17002] FAULT_INJECTION: forcing a failure. [ 855.573938][T17002] name failslab, interval 1, probability 0, space 0, times 0 [ 855.598095][T17002] CPU: 0 PID: 17002 Comm: syz.1.3929 Not tainted syzkaller #0 [ 855.605635][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.615734][T17002] Call Trace: [ 855.619048][T17002] [ 855.622028][T17002] dump_stack_lvl+0x18c/0x250 [ 855.626769][T17002] ? show_regs_print_info+0x20/0x20 [ 855.632024][T17002] ? load_image+0x420/0x420 [ 855.636590][T17002] ? __might_sleep+0xe0/0xe0 [ 855.641252][T17002] ? __lock_acquire+0x7d80/0x7d80 [ 855.646343][T17002] should_fail_ex+0x394/0x4c0 [ 855.651089][T17002] should_failslab+0x9/0x20 [ 855.655659][T17002] slab_pre_alloc_hook+0x59/0x300 [ 855.660758][T17002] ? stack_trace_save+0x100/0x100 [ 855.665831][T17002] ? kvmalloc_node+0x70/0x180 [ 855.670561][T17002] ? kvmalloc_node+0x70/0x180 [ 855.675291][T17002] __kmem_cache_alloc_node+0x53/0x250 [ 855.680729][T17002] ? kvmalloc_node+0x70/0x180 [ 855.685463][T17002] __kmalloc_node+0xa6/0x240 [ 855.690152][T17002] kvmalloc_node+0x70/0x180 [ 855.694726][T17002] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 855.700158][T17002] ? verify_lock_unused+0x140/0x140 [ 855.705415][T17002] ? kasan_set_track+0x4e/0x70 [ 855.710227][T17002] ? __kasan_kmalloc+0x8f/0xa0 [ 855.715040][T17002] ? __kmalloc+0xb7/0x240 [ 855.719429][T17002] ? bpf_test_init+0x9f/0x140 [ 855.724155][T17002] ? bpf_prog_test_run+0x31f/0x390 [ 855.729313][T17002] ? __sys_bpf+0x49d/0x890 [ 855.733783][T17002] ? __x64_sys_bpf+0x7c/0x90 [ 855.738418][T17002] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.744539][T17002] ? xdp_convert_md_to_buff+0x330/0x330 [ 855.750164][T17002] ? __lock_acquire+0x7d80/0x7d80 [ 855.755247][T17002] ? __virt_addr_valid+0x10c/0x380 [ 855.760421][T17002] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 855.766702][T17002] ? _copy_from_user+0xa5/0xe0 [ 855.771520][T17002] ? bpf_test_init+0x119/0x140 [ 855.776318][T17002] ? xdp_convert_md_to_buff+0x5b/0x330 [ 855.781811][T17002] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 855.787213][T17002] ? __lock_acquire+0x7d80/0x7d80 [ 855.792281][T17002] ? dev_put+0x80/0x80 [ 855.796387][T17002] ? dev_put+0x80/0x80 [ 855.800499][T17002] bpf_prog_test_run+0x31f/0x390 [ 855.805468][T17002] __sys_bpf+0x49d/0x890 [ 855.809748][T17002] ? bpf_link_show_fdinfo+0x390/0x390 [ 855.815167][T17002] ? lock_chain_count+0x20/0x20 [ 855.820050][T17002] __x64_sys_bpf+0x7c/0x90 [ 855.824517][T17002] do_syscall_64+0x55/0xb0 [ 855.828955][T17002] ? clear_bhb_loop+0x40/0x90 [ 855.833655][T17002] ? clear_bhb_loop+0x40/0x90 [ 855.838391][T17002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.844317][T17002] RIP: 0033:0x7fdb85f9e0d9 [ 855.848772][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.868417][T17002] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.876866][T17002] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 855.884860][T17002] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 855.892852][T17002] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 855.900845][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.908842][T17002] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 855.916849][T17002] [ 856.379880][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 860.470364][T17059] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3954'. [ 860.676164][T17066] netlink: 'syz.2.3957': attribute type 3 has an invalid length. [ 860.684361][T17066] netlink: 'syz.2.3957': attribute type 1 has an invalid length. [ 860.693114][T17066] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3957'. [ 861.553752][T17091] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3968'. [ 861.723042][T17095] netlink: 'syz.0.3969': attribute type 3 has an invalid length. [ 861.733907][T17095] netlink: 'syz.0.3969': attribute type 1 has an invalid length. [ 861.748834][T17095] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3969'. [ 861.764581][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 862.462204][T17117] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3980'. [ 862.624072][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 862.782501][T17131] netlink: 'syz.1.3984': attribute type 3 has an invalid length. [ 862.797855][T17131] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 862.806696][T17131] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3984'. [ 863.564411][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 863.819116][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 864.424414][T17179] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4005'. [ 864.446016][T17179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.587972][T17183] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4007'. [ 864.661932][T17181] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4006'. [ 864.698943][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 864.809019][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 865.308947][T17196] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4010'. [ 865.359132][T17196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.541471][T17202] FAULT_INJECTION: forcing a failure. [ 865.541471][T17202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.569243][T17202] CPU: 1 PID: 17202 Comm: syz.2.4015 Not tainted syzkaller #0 [ 865.576773][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.586876][T17202] Call Trace: [ 865.590201][T17202] [ 865.593165][T17202] dump_stack_lvl+0x18c/0x250 [ 865.597892][T17202] ? show_regs_print_info+0x20/0x20 [ 865.603137][T17202] ? load_image+0x420/0x420 [ 865.607706][T17202] ? __might_fault+0xaa/0x120 [ 865.612433][T17202] ? __lock_acquire+0x7d80/0x7d80 [ 865.617526][T17202] should_fail_ex+0x394/0x4c0 [ 865.622278][T17202] _copy_from_iter+0x1cd/0x1290 [ 865.627178][T17202] ? rcu_is_watching+0x15/0xb0 [ 865.631982][T17202] ? copyout_mc+0x70/0x70 [ 865.636370][T17202] ? __virt_addr_valid+0x10c/0x380 [ 865.641510][T17202] ? __virt_addr_valid+0x10c/0x380 [ 865.646660][T17202] ? __virt_addr_valid+0x10c/0x380 [ 865.651804][T17202] ? __check_object_size+0x4fc/0xa40 [ 865.657139][T17202] netlink_sendmsg+0x76b/0xbf0 [ 865.661933][T17202] ? netlink_getsockopt+0x590/0x590 [ 865.667159][T17202] ? apparmor_socket_sendmsg+0x8e/0x330 [ 865.672752][T17202] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 865.678089][T17202] ? security_socket_sendmsg+0x80/0xa0 [ 865.683586][T17202] ? netlink_getsockopt+0x590/0x590 [ 865.688821][T17202] ____sys_sendmsg+0x61b/0x980 [ 865.693640][T17202] ? __asan_memset+0x22/0x40 [ 865.698263][T17202] ? __sys_sendmsg_sock+0x30/0x30 [ 865.703319][T17202] ? __import_iovec+0x5f2/0x850 [ 865.708221][T17202] ? import_iovec+0x73/0xa0 [ 865.712767][T17202] ___sys_sendmsg+0x2a6/0x360 [ 865.717482][T17202] ? get_pid_task+0x20/0x1e0 [ 865.722116][T17202] ? __sys_sendmsg+0x2b0/0x2b0 [ 865.726937][T17202] ? __lock_acquire+0x7d80/0x7d80 [ 865.732010][T17202] __se_sys_sendmsg+0x1d0/0x2c0 [ 865.736893][T17202] ? __x64_sys_sendmsg+0x80/0x80 [ 865.741876][T17202] ? lockdep_hardirqs_on+0x98/0x150 [ 865.747107][T17202] do_syscall_64+0x55/0xb0 [ 865.751554][T17202] ? clear_bhb_loop+0x40/0x90 [ 865.756280][T17202] ? clear_bhb_loop+0x40/0x90 [ 865.760985][T17202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.766909][T17202] RIP: 0033:0x7f763579e0d9 [ 865.771351][T17202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.790977][T17202] RSP: 002b:00007f76365f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.799430][T17202] RAX: ffffffffffffffda RBX: 00007f7635a25fa0 RCX: 00007f763579e0d9 [ 865.807447][T17202] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 865.815446][T17202] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 865.823439][T17202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.831433][T17202] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 865.839442][T17202] [ 865.895430][T17208] FAULT_INJECTION: forcing a failure. [ 865.895430][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 865.908437][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 865.920245][T17208] CPU: 1 PID: 17208 Comm: syz.0.4017 Not tainted syzkaller #0 [ 865.927769][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.937868][T17208] Call Trace: [ 865.941190][T17208] [ 865.944159][T17208] dump_stack_lvl+0x18c/0x250 [ 865.948887][T17208] ? show_regs_print_info+0x20/0x20 [ 865.954135][T17208] ? load_image+0x420/0x420 [ 865.958686][T17208] ? __might_sleep+0xe0/0xe0 [ 865.963318][T17208] ? __lock_acquire+0x7d80/0x7d80 [ 865.968373][T17208] should_fail_ex+0x394/0x4c0 [ 865.973113][T17208] should_failslab+0x9/0x20 [ 865.977667][T17208] slab_pre_alloc_hook+0x59/0x300 [ 865.982731][T17208] ? __lock_acquire+0x7d80/0x7d80 [ 865.987784][T17208] ? kvmalloc_node+0x70/0x180 [ 865.992499][T17208] ? kvmalloc_node+0x70/0x180 [ 865.997204][T17208] __kmem_cache_alloc_node+0x53/0x250 [ 866.002616][T17208] ? __schedule_delayed_monitor_work+0x200/0x200 [ 866.008996][T17208] ? kvmalloc_node+0x70/0x180 [ 866.013704][T17208] __kmalloc_node+0xa6/0x240 [ 866.018333][T17208] kvmalloc_node+0x70/0x180 [ 866.022874][T17208] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 866.028284][T17208] ? 0xffffffffa0004740 [ 866.032464][T17208] ? 0xffffffffa0004740 [ 866.036644][T17208] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 866.042578][T17208] ? xdp_convert_md_to_buff+0x330/0x330 [ 866.048180][T17208] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 866.054453][T17208] ? _copy_from_user+0xa5/0xe0 [ 866.059248][T17208] ? bpf_test_init+0x119/0x140 [ 866.064040][T17208] ? xdp_convert_md_to_buff+0x5b/0x330 [ 866.069534][T17208] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 866.074939][T17208] ? __lock_acquire+0x7d80/0x7d80 [ 866.080009][T17208] ? dev_put+0x80/0x80 [ 866.084125][T17208] ? dev_put+0x80/0x80 [ 866.088225][T17208] bpf_prog_test_run+0x31f/0x390 [ 866.093200][T17208] __sys_bpf+0x49d/0x890 [ 866.097470][T17208] ? bpf_link_show_fdinfo+0x390/0x390 [ 866.102921][T17208] ? lock_chain_count+0x20/0x20 [ 866.107825][T17208] __x64_sys_bpf+0x7c/0x90 [ 866.112284][T17208] do_syscall_64+0x55/0xb0 [ 866.116741][T17208] ? clear_bhb_loop+0x40/0x90 [ 866.121447][T17208] ? clear_bhb_loop+0x40/0x90 [ 866.126170][T17208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.132095][T17208] RIP: 0033:0x7ff33359e0d9 [ 866.136532][T17208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.156169][T17208] RSP: 002b:00007ff334488028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.164606][T17208] RAX: ffffffffffffffda RBX: 00007ff333825fa0 RCX: 00007ff33359e0d9 [ 866.172599][T17208] RDX: 0000000000000043 RSI: 0000200000000600 RDI: 000000000000000a [ 866.180622][T17208] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 866.188621][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.196620][T17208] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 866.204634][T17208] [ 866.859293][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 866.886937][T17230] syzkaller0: entered promiscuous mode [ 866.893679][T17230] syzkaller0: entered allmulticast mode [ 866.909513][T17234] netlink: 'syz.3.4026': attribute type 3 has an invalid length. [ 866.918427][T17234] netlink: 'syz.3.4026': attribute type 1 has an invalid length. [ 866.927258][T17234] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4026'. [ 867.506610][T17241] FAULT_INJECTION: forcing a failure. [ 867.506610][T17241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.519927][T17241] CPU: 1 PID: 17241 Comm: syz.2.4028 Not tainted syzkaller #0 [ 867.527454][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.537558][T17241] Call Trace: [ 867.540879][T17241] [ 867.543865][T17241] dump_stack_lvl+0x18c/0x250 [ 867.548591][T17241] ? show_regs_print_info+0x20/0x20 [ 867.553834][T17241] ? load_image+0x420/0x420 [ 867.558411][T17241] ? __lock_acquire+0x7d80/0x7d80 [ 867.563493][T17241] should_fail_ex+0x394/0x4c0 [ 867.568248][T17241] _copy_from_user+0x2f/0xe0 [ 867.572894][T17241] __copy_msghdr+0x388/0x560 [ 867.577529][T17241] ___sys_sendmsg+0x214/0x360 [ 867.582240][T17241] ? __sys_sendmsg+0x2b0/0x2b0 [ 867.587046][T17241] ? __lock_acquire+0x7d80/0x7d80 [ 867.592127][T17241] __se_sys_sendmsg+0x1d0/0x2c0 [ 867.597012][T17241] ? __x64_sys_sendmsg+0x80/0x80 [ 867.602009][T17241] ? lockdep_hardirqs_on+0x98/0x150 [ 867.607242][T17241] do_syscall_64+0x55/0xb0 [ 867.611700][T17241] ? clear_bhb_loop+0x40/0x90 [ 867.616405][T17241] ? clear_bhb_loop+0x40/0x90 [ 867.621108][T17241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.627032][T17241] RIP: 0033:0x7f763579e0d9 [ 867.631474][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.651111][T17241] RSP: 002b:00007f76365f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.659563][T17241] RAX: ffffffffffffffda RBX: 00007f7635a25fa0 RCX: 00007f763579e0d9 [ 867.667557][T17241] RDX: 000000000004c810 RSI: 0000200000000080 RDI: 0000000000000003 [ 867.675570][T17241] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 867.683565][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.691561][T17241] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 867.699576][T17241] [ 869.180937][T17250] netlink: 'syz.1.4031': attribute type 19 has an invalid length. [ 869.189865][T17250] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4031'. [ 869.807631][T17265] netlink: 'syz.2.4038': attribute type 3 has an invalid length. [ 869.816322][T17265] netlink: 'syz.2.4038': attribute type 1 has an invalid length. [ 869.824744][T17265] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4038'. [ 869.866681][T17266] syzkaller0: entered promiscuous mode [ 869.872289][T17266] syzkaller0: entered allmulticast mode [ 869.981736][T17271] FAULT_INJECTION: forcing a failure. [ 869.981736][T17271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.995264][T17271] CPU: 0 PID: 17271 Comm: syz.2.4041 Not tainted syzkaller #0 [ 870.002807][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.012919][T17271] Call Trace: [ 870.016261][T17271] [ 870.019235][T17271] dump_stack_lvl+0x18c/0x250 [ 870.023980][T17271] ? show_regs_print_info+0x20/0x20 [ 870.029237][T17271] ? load_image+0x420/0x420 [ 870.033811][T17271] ? __might_fault+0xaa/0x120 [ 870.038536][T17271] ? __lock_acquire+0x7d80/0x7d80 [ 870.043625][T17271] should_fail_ex+0x394/0x4c0 [ 870.048360][T17271] _copy_from_user+0x2f/0xe0 [ 870.053008][T17271] __ia32_sys_rt_sigreturn+0x2e1/0x850 [ 870.058563][T17271] ? x64_setup_rt_frame+0xc30/0xc30 [ 870.063860][T17271] ? lock_chain_count+0x20/0x20 [ 870.068777][T17271] ? lockdep_hardirqs_on+0x98/0x150 [ 870.074034][T17271] do_syscall_64+0x55/0xb0 [ 870.078505][T17271] ? clear_bhb_loop+0x40/0x90 [ 870.083231][T17271] ? clear_bhb_loop+0x40/0x90 [ 870.087994][T17271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.093968][T17271] RIP: 0033:0x7f763573f459 [ 870.098428][T17271] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 870.118105][T17271] RSP: 002b:00007f76365f8a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 870.126572][T17271] RAX: ffffffffffffffda RBX: 00007f7635a25fa0 RCX: 00007f763573f459 [ 870.134591][T17271] RDX: 00007f76365f8a80 RSI: 00007f76365f8bb0 RDI: 0000000000000011 [ 870.142612][T17271] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 870.150635][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.158652][T17271] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 870.166690][T17271] [ 870.310797][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.317212][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.969564][T17277] syzkaller0: entered promiscuous mode [ 871.982417][T17277] syzkaller0: entered allmulticast mode [ 877.428231][T17305] FAULT_INJECTION: forcing a failure. [ 877.428231][T17305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.484499][T17305] CPU: 1 PID: 17305 Comm: syz.1.4052 Not tainted syzkaller #0 [ 877.492043][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.502173][T17305] Call Trace: [ 877.505499][T17305] [ 877.508471][T17305] dump_stack_lvl+0x18c/0x250 [ 877.513209][T17305] ? show_regs_print_info+0x20/0x20 [ 877.518458][T17305] ? load_image+0x420/0x420 [ 877.523026][T17305] ? __might_fault+0xaa/0x120 [ 877.527785][T17305] ? __lock_acquire+0x7d80/0x7d80 [ 877.532882][T17305] should_fail_ex+0x394/0x4c0 [ 877.537616][T17305] _copy_from_user+0x2f/0xe0 [ 877.542270][T17305] ___sys_sendmsg+0x1c7/0x360 [ 877.546999][T17305] ? __sys_sendmsg+0x2b0/0x2b0 [ 877.551904][T17305] __se_sys_sendmsg+0x1d0/0x2c0 [ 877.556808][T17305] ? __x64_sys_sendmsg+0x80/0x80 [ 877.561840][T17305] do_syscall_64+0x55/0xb0 [ 877.566315][T17305] ? clear_bhb_loop+0x40/0x90 [ 877.571044][T17305] ? clear_bhb_loop+0x40/0x90 [ 877.575784][T17305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.581725][T17305] RIP: 0033:0x7fdb85f9e0d9 [ 877.586187][T17305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.605846][T17305] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.614313][T17305] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 877.622332][T17305] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 877.630347][T17305] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 877.638361][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.646382][T17305] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 877.654424][T17305] [ 877.980448][T17319] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4058'. [ 878.041601][T17322] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4059'. [ 879.017594][T17329] syzkaller0: entered promiscuous mode [ 879.023173][T17329] syzkaller0: entered allmulticast mode [ 881.061667][T17335] netlink: 'syz.2.4064': attribute type 10 has an invalid length. [ 881.121434][T17343] netlink: 'syz.1.4065': attribute type 21 has an invalid length. [ 884.136269][T17353] FAULT_INJECTION: forcing a failure. [ 884.136269][T17353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.151234][T17353] CPU: 0 PID: 17353 Comm: syz.1.4070 Not tainted syzkaller #0 [ 884.158760][T17353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.168855][T17353] Call Trace: [ 884.172195][T17353] [ 884.175162][T17353] dump_stack_lvl+0x18c/0x250 [ 884.179916][T17353] ? show_regs_print_info+0x20/0x20 [ 884.185168][T17353] ? load_image+0x420/0x420 [ 884.189743][T17353] ? __lock_acquire+0x7d80/0x7d80 [ 884.194817][T17353] ? snprintf+0xe9/0x140 [ 884.199128][T17353] should_fail_ex+0x394/0x4c0 [ 884.203865][T17353] _copy_to_user+0x2f/0xa0 [ 884.208337][T17353] simple_read_from_buffer+0xe7/0x150 [ 884.213762][T17353] proc_fail_nth_read+0x1e8/0x260 [ 884.218854][T17353] ? proc_fault_inject_write+0x360/0x360 [ 884.224551][T17353] ? fsnotify_perm+0x271/0x5e0 [ 884.229384][T17353] ? proc_fault_inject_write+0x360/0x360 [ 884.235072][T17353] vfs_read+0x298/0x990 [ 884.239334][T17353] ? kernel_read+0x1e0/0x1e0 [ 884.243980][T17353] ? __fget_files+0x28/0x460 [ 884.248632][T17353] ? __fget_files+0x3fc/0x460 [ 884.253374][T17353] ? __fdget_pos+0x2a3/0x330 [ 884.258016][T17353] ? ksys_read+0x74/0x260 [ 884.262470][T17353] ksys_read+0x151/0x260 [ 884.266777][T17353] ? vfs_write+0x9a0/0x9a0 [ 884.271273][T17353] ? lockdep_hardirqs_on+0x98/0x150 [ 884.276540][T17353] do_syscall_64+0x55/0xb0 [ 884.281002][T17353] ? clear_bhb_loop+0x40/0x90 [ 884.285728][T17353] ? clear_bhb_loop+0x40/0x90 [ 884.290460][T17353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.296402][T17353] RIP: 0033:0x7fdb85f5e90e [ 884.300858][T17353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.320515][T17353] RSP: 002b:00007fdb86dd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.328967][T17353] RAX: ffffffffffffffda RBX: 00007fdb86dd86c0 RCX: 00007fdb85f5e90e [ 884.336975][T17353] RDX: 000000000000000f RSI: 00007fdb86dd80a0 RDI: 0000000000000008 [ 884.344991][T17353] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 884.353002][T17353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.361026][T17353] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 884.369068][T17353] [ 884.647964][T17361] syzkaller0: entered promiscuous mode [ 884.661904][T17361] syzkaller0: entered allmulticast mode [ 887.659896][T17370] Q±6ã`Ò˜: renamed from lo (while UP) [ 887.933308][T17385] FAULT_INJECTION: forcing a failure. [ 887.933308][T17385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.948882][T17385] CPU: 1 PID: 17385 Comm: syz.2.4081 Not tainted syzkaller #0 [ 887.956407][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.966511][T17385] Call Trace: [ 887.969839][T17385] [ 887.972834][T17385] dump_stack_lvl+0x18c/0x250 [ 887.977568][T17385] ? show_regs_print_info+0x20/0x20 [ 887.982815][T17385] ? load_image+0x420/0x420 [ 887.987382][T17385] ? __lock_acquire+0x7d80/0x7d80 [ 887.992455][T17385] ? snprintf+0xe9/0x140 [ 887.996773][T17385] should_fail_ex+0x394/0x4c0 [ 888.001512][T17385] _copy_to_user+0x2f/0xa0 [ 888.005998][T17385] simple_read_from_buffer+0xe7/0x150 [ 888.011426][T17385] proc_fail_nth_read+0x1e8/0x260 [ 888.016514][T17385] ? proc_fault_inject_write+0x360/0x360 [ 888.022215][T17385] ? fsnotify_perm+0x271/0x5e0 [ 888.027039][T17385] ? proc_fault_inject_write+0x360/0x360 [ 888.032766][T17385] vfs_read+0x298/0x990 [ 888.036977][T17385] ? kernel_read+0x1e0/0x1e0 [ 888.041616][T17385] ? __fget_files+0x28/0x460 [ 888.046266][T17385] ? __fget_files+0x3fc/0x460 [ 888.051014][T17385] ? __fdget_pos+0x2a3/0x330 [ 888.055655][T17385] ? ksys_read+0x74/0x260 [ 888.060040][T17385] ksys_read+0x151/0x260 [ 888.064340][T17385] ? vfs_write+0x9a0/0x9a0 [ 888.068820][T17385] ? lockdep_hardirqs_on+0x98/0x150 [ 888.074079][T17385] do_syscall_64+0x55/0xb0 [ 888.078534][T17385] ? clear_bhb_loop+0x40/0x90 [ 888.083253][T17385] ? clear_bhb_loop+0x40/0x90 [ 888.087974][T17385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.093915][T17385] RIP: 0033:0x7f763575e90e [ 888.098407][T17385] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.118065][T17385] RSP: 002b:00007f76365f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.126541][T17385] RAX: ffffffffffffffda RBX: 00007f76365f96c0 RCX: 00007f763575e90e [ 888.134566][T17385] RDX: 000000000000000f RSI: 00007f76365f90a0 RDI: 0000000000000004 [ 888.142580][T17385] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 888.150595][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.158613][T17385] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 888.166660][T17385] [ 888.181082][T17387] netlink: 'syz.0.4077': attribute type 10 has an invalid length. [ 891.857030][T17417] netlink: 'syz.3.4091': attribute type 10 has an invalid length. [ 893.572955][T17444] netlink: 'syz.0.4100': attribute type 1 has an invalid length. [ 893.891512][T17452] netlink: 'syz.2.4104': attribute type 10 has an invalid length. [ 894.058336][T17461] netlink: 'syz.0.4106': attribute type 15 has an invalid length. [ 894.108889][T17461] netlink: 'syz.0.4106': attribute type 7 has an invalid length. [ 894.116738][T17461] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4106'. [ 894.345218][T17465] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4108'. [ 894.931964][T17478] netlink: 'syz.0.4112': attribute type 3 has an invalid length. [ 894.969098][T17478] netlink: 'syz.0.4112': attribute type 1 has an invalid length. [ 894.976907][T17478] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4112'. [ 895.355672][T17485] netlink: 'syz.2.4115': attribute type 10 has an invalid length. [ 895.576123][T17496] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 895.886721][T17498] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4120'. [ 896.088290][T17504] Q±6ã`Ò˜: renamed from lo (while UP) [ 896.980790][T17519] netlink: 'syz.2.4127': attribute type 3 has an invalid length. [ 896.993203][T17519] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 897.036837][T17519] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4127'. [ 898.239807][T17540] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4133'. [ 898.687206][T17543] Q±6ã`Ò˜: renamed from lo (while UP) [ 902.148035][T17573] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4145'. [ 903.537107][T17595] FAULT_INJECTION: forcing a failure. [ 903.537107][T17595] name failslab, interval 1, probability 0, space 0, times 0 [ 903.639225][T17595] CPU: 1 PID: 17595 Comm: syz.1.4153 Not tainted syzkaller #0 [ 903.646755][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.656872][T17595] Call Trace: [ 903.660198][T17595] [ 903.663145][T17595] dump_stack_lvl+0x18c/0x250 [ 903.667880][T17595] ? show_regs_print_info+0x20/0x20 [ 903.673127][T17595] ? load_image+0x420/0x420 [ 903.677691][T17595] ? __might_sleep+0xe0/0xe0 [ 903.682311][T17595] ? __lock_acquire+0x7d80/0x7d80 [ 903.687384][T17595] should_fail_ex+0x394/0x4c0 [ 903.692119][T17595] should_failslab+0x9/0x20 [ 903.696661][T17595] slab_pre_alloc_hook+0x59/0x300 [ 903.701737][T17595] ? __lock_acquire+0x7d80/0x7d80 [ 903.706797][T17595] kmem_cache_alloc_node+0x5e/0x310 [ 903.712035][T17595] ? __alloc_skb+0x103/0x2c0 [ 903.716682][T17595] __alloc_skb+0x103/0x2c0 [ 903.721131][T17595] netlink_sendmsg+0x66a/0xbf0 [ 903.726019][T17595] ? netlink_getsockopt+0x590/0x590 [ 903.731249][T17595] ? apparmor_socket_sendmsg+0x8e/0x330 [ 903.736839][T17595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 903.742157][T17595] ? security_socket_sendmsg+0x80/0xa0 [ 903.747642][T17595] ? netlink_getsockopt+0x590/0x590 [ 903.752871][T17595] ____sys_sendmsg+0x61b/0x980 [ 903.757671][T17595] ? __asan_memset+0x22/0x40 [ 903.762300][T17595] ? __sys_sendmsg_sock+0x30/0x30 [ 903.767350][T17595] ? __import_iovec+0x5f2/0x850 [ 903.772240][T17595] ? import_iovec+0x73/0xa0 [ 903.776781][T17595] ___sys_sendmsg+0x2a6/0x360 [ 903.781495][T17595] ? __sys_sendmsg+0x2b0/0x2b0 [ 903.786309][T17595] ? __lock_acquire+0x7d80/0x7d80 [ 903.791384][T17595] __se_sys_sendmsg+0x1d0/0x2c0 [ 903.796268][T17595] ? __x64_sys_sendmsg+0x80/0x80 [ 903.801242][T17595] ? lockdep_hardirqs_on+0x98/0x150 [ 903.806501][T17595] do_syscall_64+0x55/0xb0 [ 903.810953][T17595] ? clear_bhb_loop+0x40/0x90 [ 903.815660][T17595] ? clear_bhb_loop+0x40/0x90 [ 903.820368][T17595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.826288][T17595] RIP: 0033:0x7fdb85f9e0d9 [ 903.830728][T17595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.850360][T17595] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.858802][T17595] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 903.866799][T17595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 903.874786][T17595] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 903.882775][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.890771][T17595] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 903.898791][T17595] [ 904.063795][T17601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4155'. [ 904.085105][T17601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4155'. [ 904.107556][T17601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4155'. [ 904.140106][T17600] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4156'. [ 905.433359][T17635] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4168'. [ 906.567700][T17669] sit0: entered allmulticast mode [ 906.583534][T17667] can: request_module (can-proto-0) failed. [ 906.664003][T17672] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4181'. [ 907.274934][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 907.519613][T17702] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4195'. [ 907.826270][T17710] syzkaller0: entered promiscuous mode [ 907.838723][T17710] syzkaller0: entered allmulticast mode [ 909.353409][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 909.866070][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 910.023030][T17727] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4201'. [ 910.073303][T17727] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4201'. [ 910.091781][T17722] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4201'. [ 910.138283][T17722] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4201'. [ 910.317988][T17734] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4206'. [ 910.837504][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 911.031412][T17746] syzkaller0: entered promiscuous mode [ 911.060987][T17746] syzkaller0: entered allmulticast mode [ 911.379589][T17760] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4215'. [ 911.901274][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 913.486635][T17760] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4215'. [ 913.794372][T17773] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4220'. [ 913.987976][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 914.858565][T17804] FAULT_INJECTION: forcing a failure. [ 914.858565][T17804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.899937][T17804] CPU: 0 PID: 17804 Comm: syz.2.4224 Not tainted syzkaller #0 [ 914.907478][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.917585][T17804] Call Trace: [ 914.920910][T17804] [ 914.923885][T17804] dump_stack_lvl+0x18c/0x250 [ 914.928612][T17804] ? show_regs_print_info+0x20/0x20 [ 914.933878][T17804] ? load_image+0x420/0x420 [ 914.938446][T17804] ? __might_fault+0xaa/0x120 [ 914.943179][T17804] ? __lock_acquire+0x7d80/0x7d80 [ 914.948288][T17804] should_fail_ex+0x394/0x4c0 [ 914.953024][T17804] _copy_from_user+0x2f/0xe0 [ 914.957659][T17804] ___sys_sendmsg+0x1c7/0x360 [ 914.962406][T17804] ? get_pid_task+0x20/0x1e0 [ 914.967062][T17804] ? __sys_sendmsg+0x2b0/0x2b0 [ 914.971873][T17804] ? __lock_acquire+0x7d80/0x7d80 [ 914.976955][T17804] __se_sys_sendmsg+0x1d0/0x2c0 [ 914.981838][T17804] ? __x64_sys_sendmsg+0x80/0x80 [ 914.986810][T17804] ? lockdep_hardirqs_on+0x98/0x150 [ 914.992036][T17804] do_syscall_64+0x55/0xb0 [ 914.996472][T17804] ? clear_bhb_loop+0x40/0x90 [ 915.001176][T17804] ? clear_bhb_loop+0x40/0x90 [ 915.005883][T17804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.011826][T17804] RIP: 0033:0x7f763579e0d9 [ 915.016267][T17804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.035899][T17804] RSP: 002b:00007f76365f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.044339][T17804] RAX: ffffffffffffffda RBX: 00007f7635a25fa0 RCX: 00007f763579e0d9 [ 915.052334][T17804] RDX: 0000000010044001 RSI: 0000200000000200 RDI: 0000000000000003 [ 915.060336][T17804] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 915.068340][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.076330][T17804] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 915.084335][T17804] [ 915.338370][T17814] syzkaller0: entered promiscuous mode [ 915.348519][T17814] syzkaller0: entered allmulticast mode [ 915.633242][T17828] validate_nla: 1 callbacks suppressed [ 915.633259][T17828] netlink: 'syz.1.4231': attribute type 3 has an invalid length. [ 915.646883][T17828] netlink: 'syz.1.4231': attribute type 1 has an invalid length. [ 915.663027][T17828] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4231'. [ 917.480869][T17824] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4230'. [ 917.871855][T17850] syzkaller0: entered promiscuous mode [ 917.877632][T17850] syzkaller0: entered allmulticast mode [ 918.276005][T17858] syzkaller0: entered promiscuous mode [ 920.649351][ T2970] syzkaller0: tun_net_xmit 76 [ 920.654692][ T2970] syzkaller0: tun_net_xmit 48 [ 921.157480][T17870] syzkaller0: entered promiscuous mode [ 921.163416][T17870] syzkaller0: entered allmulticast mode [ 921.171746][T17873] netlink: 'syz.1.4242': attribute type 3 has an invalid length. [ 921.180556][T17873] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 921.188497][T17873] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4242'. [ 923.595739][T17898] sit0: left promiscuous mode [ 923.979267][T17903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.409455][T17911] netlink: 'syz.2.4251': attribute type 3 has an invalid length. [ 924.425620][T17911] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 924.433956][T17911] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4251'. [ 925.211684][T17920] syzkaller0: entered promiscuous mode [ 925.217642][T17920] syzkaller0: entered allmulticast mode [ 925.522019][T17933] netlink: 'syz.3.4262': attribute type 3 has an invalid length. [ 925.530263][T17933] netlink: 'syz.3.4262': attribute type 1 has an invalid length. [ 925.538040][T17933] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4262'. [ 927.043640][T17929] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4260'. [ 927.052934][T17931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4261'. [ 927.883681][T17956] netlink: 'syz.0.4271': attribute type 3 has an invalid length. [ 927.899545][T17956] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 927.907400][T17956] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4271'. [ 928.276085][T17966] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4274'. [ 928.455769][T17968] syzkaller0: entered promiscuous mode [ 928.465515][T17968] syzkaller0: entered allmulticast mode [ 931.742342][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.749238][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.795326][T17993] netlink: 'syz.3.4283': attribute type 3 has an invalid length. [ 933.803807][T17993] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 933.812410][T17993] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4283'. [ 933.975381][T17996] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4285'. [ 935.246868][T18014] syzkaller0: entered promiscuous mode [ 935.267633][T18014] syzkaller0: entered allmulticast mode [ 940.556852][T18032] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4295'. [ 940.983344][T18043] netlink: 'syz.2.4299': attribute type 27 has an invalid length. [ 941.083362][T18043] bond0: (slave bond_slave_0): Releasing backup interface [ 941.217215][T18045] netlink: 'syz.0.4300': attribute type 10 has an invalid length. [ 941.586564][T18056] syzkaller0: entered promiscuous mode [ 941.594392][T18056] syzkaller0: entered allmulticast mode [ 943.664894][T18066] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4306'. [ 944.900870][T18075] bond0: (slave macvlan0): Releasing backup interface [ 945.332314][T18091] netlink: 'syz.0.4314': attribute type 1 has an invalid length. [ 945.354096][T18095] netlink: 'syz.2.4313': attribute type 10 has an invalid length. [ 945.367005][T18091] netlink: 'syz.0.4314': attribute type 3 has an invalid length. [ 945.377702][T18091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4314'. [ 946.322855][T18106] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4318'. [ 946.513789][T18110] syzkaller0: entered promiscuous mode [ 946.519459][T18110] syzkaller0: entered allmulticast mode [ 946.788259][T18115] netlink: 'syz.2.4321': attribute type 3 has an invalid length. [ 946.804023][T18115] netlink: 'syz.2.4321': attribute type 1 has an invalid length. [ 946.813616][T18115] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4321'. [ 948.987541][T18135] netlink: 'syz.3.4326': attribute type 10 has an invalid length. [ 949.288544][T18141] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4330'. [ 950.173209][T18155] netlink: 'syz.1.4334': attribute type 3 has an invalid length. [ 950.183640][T18155] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 950.194608][T18155] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4334'. [ 950.375328][T18152] team0: Port device macvlan0 removed [ 950.681877][T18158] syzkaller0: entered promiscuous mode [ 950.687445][T18158] syzkaller0: entered allmulticast mode [ 950.862584][T18168] FAULT_INJECTION: forcing a failure. [ 950.862584][T18168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.877018][T18168] CPU: 0 PID: 18168 Comm: syz.0.4339 Not tainted syzkaller #0 [ 950.884539][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.894644][T18168] Call Trace: [ 950.897977][T18168] [ 950.900953][T18168] dump_stack_lvl+0x18c/0x250 [ 950.905693][T18168] ? show_regs_print_info+0x20/0x20 [ 950.910946][T18168] ? load_image+0x420/0x420 [ 950.915513][T18168] ? __lock_acquire+0x7d80/0x7d80 [ 950.920589][T18168] should_fail_ex+0x394/0x4c0 [ 950.925289][T18168] _copy_to_user+0x2f/0xa0 [ 950.929738][T18168] simple_read_from_buffer+0xe7/0x150 [ 950.935176][T18168] proc_fail_nth_read+0x1e8/0x260 [ 950.940271][T18168] ? proc_fault_inject_write+0x360/0x360 [ 950.945982][T18168] ? fsnotify_perm+0x271/0x5e0 [ 950.950806][T18168] ? proc_fault_inject_write+0x360/0x360 [ 950.956504][T18168] vfs_read+0x298/0x990 [ 950.960732][T18168] ? kernel_read+0x1e0/0x1e0 [ 950.965388][T18168] ? __fget_files+0x28/0x460 [ 950.970028][T18168] ? __fget_files+0x3fc/0x460 [ 950.974796][T18168] ? __fdget_pos+0x2a3/0x330 [ 950.979440][T18168] ? ksys_read+0x74/0x260 [ 950.983832][T18168] ksys_read+0x151/0x260 [ 950.988141][T18168] ? vfs_write+0x9a0/0x9a0 [ 950.992621][T18168] ? syscall_enter_from_user_mode+0x2e/0x80 [ 950.998590][T18168] do_syscall_64+0x55/0xb0 [ 951.003059][T18168] ? clear_bhb_loop+0x40/0x90 [ 951.007788][T18168] ? clear_bhb_loop+0x40/0x90 [ 951.012519][T18168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.018456][T18168] RIP: 0033:0x7ff33355e90e [ 951.022905][T18168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 951.042541][T18168] RSP: 002b:00007ff334487fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.050986][T18168] RAX: ffffffffffffffda RBX: 00007ff3344886c0 RCX: 00007ff33355e90e [ 951.058983][T18168] RDX: 000000000000000f RSI: 00007ff3344880a0 RDI: 0000000000000009 [ 951.066977][T18168] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 951.074974][T18168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.082986][T18168] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 951.091000][T18168] [ 951.474119][T18176] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 951.482064][T18176] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4343'. [ 952.957549][T18172] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4342'. [ 953.416582][T18187] netlink: 'syz.3.4346': attribute type 3 has an invalid length. [ 953.449272][T18187] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 953.460711][T18187] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4346'. [ 953.513011][T18193] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4349'. [ 953.771931][T18200] mac80211_hwsim hwsim194 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 953.865264][T18207] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4353'. [ 953.989628][T18210] syzkaller0: entered promiscuous mode [ 953.995538][T18210] syzkaller0: entered allmulticast mode [ 954.902086][T18233] FAULT_INJECTION: forcing a failure. [ 954.902086][T18233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.915553][T18233] CPU: 0 PID: 18233 Comm: syz.0.4364 Not tainted syzkaller #0 [ 954.923068][T18233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.933163][T18233] Call Trace: [ 954.936488][T18233] [ 954.939486][T18233] dump_stack_lvl+0x18c/0x250 [ 954.944203][T18233] ? show_regs_print_info+0x20/0x20 [ 954.949436][T18233] ? load_image+0x420/0x420 [ 954.953979][T18233] ? __might_fault+0xaa/0x120 [ 954.958723][T18233] ? __lock_acquire+0x7d80/0x7d80 [ 954.963781][T18233] should_fail_ex+0x394/0x4c0 [ 954.968500][T18233] _copy_from_iter+0x1cd/0x1290 [ 954.973405][T18233] ? rcu_is_watching+0x15/0xb0 [ 954.978200][T18233] ? copyout_mc+0x70/0x70 [ 954.982647][T18233] ? __virt_addr_valid+0x10c/0x380 [ 954.987899][T18233] ? __virt_addr_valid+0x10c/0x380 [ 954.993055][T18233] ? __virt_addr_valid+0x10c/0x380 [ 954.998229][T18233] ? __check_object_size+0x4fc/0xa40 [ 955.003571][T18233] netlink_sendmsg+0x76b/0xbf0 [ 955.008368][T18233] ? netlink_getsockopt+0x590/0x590 [ 955.013590][T18233] ? apparmor_socket_sendmsg+0x170/0x330 [ 955.019286][T18233] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 955.024604][T18233] ? security_socket_sendmsg+0x80/0xa0 [ 955.030089][T18233] ? netlink_getsockopt+0x590/0x590 [ 955.035311][T18233] ____sys_sendmsg+0x61b/0x980 [ 955.040108][T18233] ? __asan_memset+0x22/0x40 [ 955.044732][T18233] ? __sys_sendmsg_sock+0x30/0x30 [ 955.050039][T18233] ? __import_iovec+0x5f2/0x850 [ 955.055018][T18233] ? import_iovec+0x73/0xa0 [ 955.059560][T18233] ___sys_sendmsg+0x2a6/0x360 [ 955.064274][T18233] ? __sys_sendmsg+0x2b0/0x2b0 [ 955.069085][T18233] ? __lock_acquire+0x7d80/0x7d80 [ 955.074160][T18233] __se_sys_sendmsg+0x1d0/0x2c0 [ 955.079040][T18233] ? __x64_sys_sendmsg+0x80/0x80 [ 955.084020][T18233] ? lockdep_hardirqs_on+0x98/0x150 [ 955.089265][T18233] do_syscall_64+0x55/0xb0 [ 955.093706][T18233] ? clear_bhb_loop+0x40/0x90 [ 955.098404][T18233] ? clear_bhb_loop+0x40/0x90 [ 955.103120][T18233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.109037][T18233] RIP: 0033:0x7ff33359e0d9 [ 955.113480][T18233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.133142][T18233] RSP: 002b:00007ff334488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.141578][T18233] RAX: ffffffffffffffda RBX: 00007ff333825fa0 RCX: 00007ff33359e0d9 [ 955.149590][T18233] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000003 [ 955.157592][T18233] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 955.165623][T18233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.173624][T18233] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 955.181641][T18233] [ 956.663928][T18244] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4366'. [ 956.689456][T18240] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4367'. [ 957.063758][T18256] FAULT_INJECTION: forcing a failure. [ 957.063758][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.078864][T18256] CPU: 0 PID: 18256 Comm: syz.1.4373 Not tainted syzkaller #0 [ 957.086388][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.096486][T18256] Call Trace: [ 957.099803][T18256] [ 957.102767][T18256] dump_stack_lvl+0x18c/0x250 [ 957.107493][T18256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.113694][T18256] ? show_regs_print_info+0x20/0x20 [ 957.118934][T18256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.125163][T18256] ? dump_stack+0x9/0x20 [ 957.129460][T18256] should_fail_ex+0x394/0x4c0 [ 957.134197][T18256] _copy_to_user+0x2f/0xa0 [ 957.138665][T18256] simple_read_from_buffer+0xe7/0x150 [ 957.144085][T18256] proc_fail_nth_read+0x1e8/0x260 [ 957.149174][T18256] ? proc_fault_inject_write+0x360/0x360 [ 957.154863][T18256] ? fsnotify_perm+0x271/0x5e0 [ 957.159676][T18256] ? proc_fault_inject_write+0x360/0x360 [ 957.165363][T18256] vfs_read+0x298/0x990 [ 957.169584][T18256] ? kernel_read+0x1e0/0x1e0 [ 957.174263][T18256] ? __fget_files+0x28/0x460 [ 957.178908][T18256] ? __fget_files+0x3fc/0x460 [ 957.183733][T18256] ? __fdget_pos+0x2a3/0x330 [ 957.188382][T18256] ? ksys_read+0x74/0x260 [ 957.192769][T18256] ksys_read+0x151/0x260 [ 957.197069][T18256] ? vfs_write+0x9a0/0x9a0 [ 957.201541][T18256] ? syscall_enter_from_user_mode+0x2e/0x80 [ 957.207485][T18256] do_syscall_64+0x55/0xb0 [ 957.211946][T18256] ? clear_bhb_loop+0x40/0x90 [ 957.216689][T18256] ? clear_bhb_loop+0x40/0x90 [ 957.221426][T18256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.227358][T18256] RIP: 0033:0x7fdb85f5e90e [ 957.231804][T18256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 957.251455][T18256] RSP: 002b:00007fdb86dd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 957.259918][T18256] RAX: ffffffffffffffda RBX: 00007fdb86dd86c0 RCX: 00007fdb85f5e90e [ 957.267928][T18256] RDX: 000000000000000f RSI: 00007fdb86dd80a0 RDI: 0000000000000008 [ 957.275941][T18256] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 957.283949][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.291950][T18256] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 957.300009][T18256] [ 957.749189][T18267] syzkaller0: entered promiscuous mode [ 957.755284][T18267] syzkaller0: entered allmulticast mode [ 958.186849][T18286] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4384'. [ 959.776957][T18276] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4381'. [ 959.973426][T18297] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4387'. [ 960.513629][T18317] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4396'. [ 960.534913][T18312] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4394'. [ 960.615266][T18312] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 960.860238][T18321] syzkaller0: entered promiscuous mode [ 960.865874][T18321] syzkaller0: entered allmulticast mode [ 961.254615][T18327] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4399'. [ 961.281841][T18327] openvswitch: netlink: Key type 8208 is out of range max 32 [ 962.781500][T18326] IPv6: Can't replace route, no match found [ 964.829643][T18351] netlink: 'syz.1.4407': attribute type 3 has an invalid length. [ 964.837464][T18351] netlink: 'syz.1.4407': attribute type 1 has an invalid length. [ 964.846485][T18351] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4407'. [ 965.337695][T18364] syzkaller0: entered promiscuous mode [ 965.348647][T18364] syzkaller0: entered allmulticast mode [ 965.359625][T18362] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4411'. [ 965.397689][T18362] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 966.095364][T18379] netlink: 'syz.1.4418': attribute type 3 has an invalid length. [ 966.108463][T18379] netlink: 'syz.1.4418': attribute type 1 has an invalid length. [ 966.117227][T18379] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4418'. [ 972.496944][T18405] syzkaller0: entered promiscuous mode [ 972.504266][T18405] syzkaller0: entered allmulticast mode [ 973.676229][T18414] netlink: 'syz.2.4431': attribute type 3 has an invalid length. [ 973.688363][T18414] netlink: 'syz.2.4431': attribute type 1 has an invalid length. [ 973.698208][T18414] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4431'. [ 978.877889][T18449] netlink: 'syz.3.4442': attribute type 3 has an invalid length. [ 978.886003][T18449] netlink: 'syz.3.4442': attribute type 1 has an invalid length. [ 978.894426][T18449] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4442'. [ 982.062367][T18461] syzkaller0: entered promiscuous mode [ 982.068021][T18461] syzkaller0: entered allmulticast mode [ 984.116370][T18482] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4453'. [ 984.138074][T18483] netlink: 'syz.1.4453': attribute type 2 has an invalid length. [ 984.146601][T18484] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4453'. [ 984.266228][T18487] netlink: 'syz.2.4454': attribute type 3 has an invalid length. [ 984.274111][T18487] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 984.282368][T18487] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4454'. [ 987.309927][T18508] netlink: 'syz.1.4462': attribute type 9 has an invalid length. [ 987.318029][T18508] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4462'. [ 987.581252][T18510] syzkaller0: entered promiscuous mode [ 987.586804][T18510] syzkaller0: entered allmulticast mode [ 987.697385][T18517] netlink: 'syz.2.4466': attribute type 3 has an invalid length. [ 987.715304][T18517] netlink: 'syz.2.4466': attribute type 1 has an invalid length. [ 987.723292][T18517] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4466'. [ 992.294738][T18541] FAULT_INJECTION: forcing a failure. [ 992.294738][T18541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.328964][T18541] CPU: 0 PID: 18541 Comm: syz.1.4474 Not tainted syzkaller #0 [ 992.336498][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.346596][T18541] Call Trace: [ 992.349925][T18541] [ 992.352895][T18541] dump_stack_lvl+0x18c/0x250 [ 992.357632][T18541] ? show_regs_print_info+0x20/0x20 [ 992.362858][T18541] ? load_image+0x420/0x420 [ 992.367406][T18541] ? __might_fault+0xaa/0x120 [ 992.372113][T18541] ? __lock_acquire+0x7d80/0x7d80 [ 992.377169][T18541] should_fail_ex+0x394/0x4c0 [ 992.381877][T18541] _copy_from_user+0x2f/0xe0 [ 992.386490][T18541] ___sys_sendmsg+0x1c7/0x360 [ 992.391210][T18541] ? get_pid_task+0x20/0x1e0 [ 992.395832][T18541] ? __sys_sendmsg+0x2b0/0x2b0 [ 992.400643][T18541] ? __lock_acquire+0x7d80/0x7d80 [ 992.405712][T18541] __se_sys_sendmsg+0x1d0/0x2c0 [ 992.410620][T18541] ? __x64_sys_sendmsg+0x80/0x80 [ 992.415617][T18541] ? lockdep_hardirqs_on+0x98/0x150 [ 992.420846][T18541] do_syscall_64+0x55/0xb0 [ 992.425304][T18541] ? clear_bhb_loop+0x40/0x90 [ 992.430011][T18541] ? clear_bhb_loop+0x40/0x90 [ 992.434726][T18541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.440641][T18541] RIP: 0033:0x7fdb85f9e0d9 [ 992.445076][T18541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.464698][T18541] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.473135][T18541] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 992.481133][T18541] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 992.489123][T18541] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 992.497114][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.505116][T18541] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 992.513126][T18541] [ 992.674660][T18547] netlink: 'syz.2.4477': attribute type 3 has an invalid length. [ 992.709753][T18547] netlink: 'syz.2.4477': attribute type 1 has an invalid length. [ 992.717560][T18547] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4477'. [ 992.907190][T18554] syzkaller0: entered promiscuous mode [ 992.917656][T18554] syzkaller0: entered allmulticast mode [ 993.194815][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.202647][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.681196][T18593] netlink: 'syz.0.4490': attribute type 3 has an invalid length. [ 996.694335][T18593] netlink: 'syz.0.4490': attribute type 1 has an invalid length. [ 996.703722][T18593] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4490'. [ 998.309899][T18578] syzkaller0: entered promiscuous mode [ 998.315472][T18578] syzkaller0: entered allmulticast mode [ 998.483031][T18583] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1002.271547][T18611] FAULT_INJECTION: forcing a failure. [ 1002.271547][T18611] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.288249][T18611] CPU: 1 PID: 18611 Comm: syz.3.4497 Not tainted syzkaller #0 [ 1002.295821][T18611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.305930][T18611] Call Trace: [ 1002.309235][T18611] [ 1002.312190][T18611] dump_stack_lvl+0x18c/0x250 [ 1002.316900][T18611] ? show_regs_print_info+0x20/0x20 [ 1002.322128][T18611] ? load_image+0x420/0x420 [ 1002.326665][T18611] ? __might_sleep+0xe0/0xe0 [ 1002.331280][T18611] ? __lock_acquire+0x7d80/0x7d80 [ 1002.336354][T18611] should_fail_ex+0x394/0x4c0 [ 1002.341090][T18611] should_failslab+0x9/0x20 [ 1002.345651][T18611] slab_pre_alloc_hook+0x59/0x300 [ 1002.350715][T18611] kmem_cache_alloc_node+0x5e/0x310 [ 1002.355935][T18611] ? perf_event_alloc+0x146/0x2150 [ 1002.361081][T18611] perf_event_alloc+0x146/0x2150 [ 1002.366055][T18611] ? find_lively_task_by_vpid+0x19/0x290 [ 1002.371734][T18611] ? find_lively_task_by_vpid+0x19/0x290 [ 1002.377422][T18611] __se_sys_perf_event_open+0x740/0x1c60 [ 1002.383091][T18611] ? mutex_unlock+0x10/0x10 [ 1002.387638][T18611] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1002.393354][T18611] ? lock_chain_count+0x20/0x20 [ 1002.398273][T18611] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.403516][T18611] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1002.409191][T18611] do_syscall_64+0x55/0xb0 [ 1002.413643][T18611] ? clear_bhb_loop+0x40/0x90 [ 1002.418393][T18611] ? clear_bhb_loop+0x40/0x90 [ 1002.423117][T18611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.429050][T18611] RIP: 0033:0x7fb5d279e0d9 [ 1002.433506][T18611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.453150][T18611] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1002.461599][T18611] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1002.469601][T18611] RDX: ffffffffffffffff RSI: 0000000000000596 RDI: 0000200000000140 [ 1002.477605][T18611] RBP: 00007fb5d36e0090 R08: 0000000000000002 R09: 0000000000000000 [ 1002.485643][T18611] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1002.493737][T18611] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1002.501824][T18611] [ 1003.628877][T18616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1003.638293][T18617] netlink: 'syz.3.4499': attribute type 2 has an invalid length. [ 1003.655951][T18618] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1003.888344][T18623] syzkaller0: entered promiscuous mode [ 1003.894190][T18623] syzkaller0: entered allmulticast mode [ 1006.551839][T18651] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 1008.051984][T18681] netlink: 'syz.2.4521': attribute type 10 has an invalid length. [ 1008.064474][T18687] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 1008.081452][T18688] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 1008.090330][T18687] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 1008.226128][T18685] syzkaller0: entered promiscuous mode [ 1008.231921][T18685] syzkaller0: entered allmulticast mode [ 1008.239880][T18687] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 1008.248385][T18688] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 1012.335605][T18723] netlink: 'syz.1.4533': attribute type 10 has an invalid length. [ 1013.422913][T18748] syzkaller0: entered promiscuous mode [ 1013.428862][T18748] syzkaller0: entered allmulticast mode [ 1013.798529][T18767] FAULT_INJECTION: forcing a failure. [ 1013.798529][T18767] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.811844][T18767] CPU: 0 PID: 18767 Comm: syz.1.4549 Not tainted syzkaller #0 [ 1013.819400][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.829498][T18767] Call Trace: [ 1013.832807][T18767] [ 1013.835796][T18767] dump_stack_lvl+0x18c/0x250 [ 1013.840507][T18767] ? show_regs_print_info+0x20/0x20 [ 1013.845753][T18767] ? load_image+0x420/0x420 [ 1013.850290][T18767] ? perf_trace_lock+0xfc/0x3b0 [ 1013.855191][T18767] ? verify_lock_unused+0x140/0x140 [ 1013.860425][T18767] ? perf_trace_lock+0xfc/0x3b0 [ 1013.865320][T18767] should_fail_ex+0x394/0x4c0 [ 1013.870042][T18767] should_failslab+0x9/0x20 [ 1013.874637][T18767] slab_pre_alloc_hook+0x59/0x300 [ 1013.879706][T18767] kmem_cache_alloc+0x5a/0x2c0 [ 1013.884506][T18767] ? skb_clone+0x1eb/0x370 [ 1013.888955][T18767] skb_clone+0x1eb/0x370 [ 1013.893237][T18767] __netlink_deliver_tap+0x411/0x7f0 [ 1013.898556][T18767] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.903793][T18767] netlink_deliver_tap+0x19c/0x1b0 [ 1013.908952][T18767] netlink_unicast+0x77b/0x930 [ 1013.913759][T18767] netlink_sendmsg+0x8d0/0xbf0 [ 1013.918559][T18767] ? netlink_getsockopt+0x590/0x590 [ 1013.923800][T18767] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1013.929384][T18767] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1013.934730][T18767] ? security_socket_sendmsg+0x80/0xa0 [ 1013.940213][T18767] ? netlink_getsockopt+0x590/0x590 [ 1013.945444][T18767] ____sys_sendmsg+0x61b/0x980 [ 1013.950241][T18767] ? __asan_memset+0x22/0x40 [ 1013.954860][T18767] ? __sys_sendmsg_sock+0x30/0x30 [ 1013.959916][T18767] ? __import_iovec+0x5f2/0x850 [ 1013.964806][T18767] ? import_iovec+0x73/0xa0 [ 1013.969345][T18767] ___sys_sendmsg+0x2a6/0x360 [ 1013.974052][T18767] ? __sys_sendmsg+0x2b0/0x2b0 [ 1013.978873][T18767] ? __lock_acquire+0x7d80/0x7d80 [ 1013.983965][T18767] __se_sys_sendmsg+0x1d0/0x2c0 [ 1013.988845][T18767] ? __x64_sys_sendmsg+0x80/0x80 [ 1013.993825][T18767] ? lockdep_hardirqs_on+0x98/0x150 [ 1013.999088][T18767] do_syscall_64+0x55/0xb0 [ 1014.003527][T18767] ? clear_bhb_loop+0x40/0x90 [ 1014.008238][T18767] ? clear_bhb_loop+0x40/0x90 [ 1014.012969][T18767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.018898][T18767] RIP: 0033:0x7fdb85f9e0d9 [ 1014.023336][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.042966][T18767] RSP: 002b:00007fdb86dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.051419][T18767] RAX: ffffffffffffffda RBX: 00007fdb86225fa0 RCX: 00007fdb85f9e0d9 [ 1014.059419][T18767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1014.067411][T18767] RBP: 00007fdb86dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.075404][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.083403][T18767] R13: 00007fdb86226038 R14: 00007fdb86225fa0 R15: 00007ffda330b508 [ 1014.091420][T18767] [ 1014.570614][T18775] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 1014.583005][T18775] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4552'. [ 1014.599188][T18775] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 1015.768374][T18758] netlink: 'syz.3.4547': attribute type 19 has an invalid length. [ 1015.776603][T18758] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1016.530187][T18796] FAULT_INJECTION: forcing a failure. [ 1016.530187][T18796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.595063][T18796] CPU: 1 PID: 18796 Comm: syz.0.4560 Not tainted syzkaller #0 [ 1016.602628][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.612731][T18796] Call Trace: [ 1016.616052][T18796] [ 1016.619027][T18796] dump_stack_lvl+0x18c/0x250 [ 1016.623776][T18796] ? show_regs_print_info+0x20/0x20 [ 1016.629028][T18796] ? load_image+0x420/0x420 [ 1016.633592][T18796] ? __might_fault+0xaa/0x120 [ 1016.638355][T18796] ? __lock_acquire+0x7d80/0x7d80 [ 1016.643452][T18796] should_fail_ex+0x394/0x4c0 [ 1016.648206][T18796] _copy_to_user+0x2f/0xa0 [ 1016.652692][T18796] bpf_test_finish+0x19f/0x650 [ 1016.657545][T18796] ? convert_skb_to___skb+0x420/0x420 [ 1016.662989][T18796] ? read_tsc+0x9/0x20 [ 1016.667133][T18796] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 1016.673465][T18796] ? xdp_convert_buff_to_md+0x200/0x200 [ 1016.679073][T18796] ? __fget_files+0x28/0x460 [ 1016.683738][T18796] ? xdp_convert_buff_to_md+0x200/0x200 [ 1016.689355][T18796] bpf_prog_test_run+0x31f/0x390 [ 1016.694354][T18796] __sys_bpf+0x49d/0x890 [ 1016.698685][T18796] ? bpf_link_show_fdinfo+0x390/0x390 [ 1016.704139][T18796] ? lock_chain_count+0x20/0x20 [ 1016.709064][T18796] __x64_sys_bpf+0x7c/0x90 [ 1016.713549][T18796] do_syscall_64+0x55/0xb0 [ 1016.718025][T18796] ? clear_bhb_loop+0x40/0x90 [ 1016.722763][T18796] ? clear_bhb_loop+0x40/0x90 [ 1016.727517][T18796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.733461][T18796] RIP: 0033:0x7ff33359e0d9 [ 1016.737921][T18796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.757663][T18796] RSP: 002b:00007ff334488028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1016.766142][T18796] RAX: ffffffffffffffda RBX: 00007ff333825fa0 RCX: 00007ff33359e0d9 [ 1016.774169][T18796] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1016.782203][T18796] RBP: 00007ff334488090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.790237][T18796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.798239][T18796] R13: 00007ff333826038 R14: 00007ff333825fa0 R15: 00007fffbd41ff98 [ 1016.806272][T18796] [ 1016.833995][T18802] FAULT_INJECTION: forcing a failure. [ 1016.833995][T18802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.852638][T18802] CPU: 0 PID: 18802 Comm: syz.3.4561 Not tainted syzkaller #0 [ 1016.860181][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.870293][T18802] Call Trace: [ 1016.873616][T18802] [ 1016.876590][T18802] dump_stack_lvl+0x18c/0x250 [ 1016.881319][T18802] ? show_regs_print_info+0x20/0x20 [ 1016.886562][T18802] ? load_image+0x420/0x420 [ 1016.891121][T18802] ? __lock_acquire+0x7d80/0x7d80 [ 1016.896186][T18802] ? snprintf+0xe9/0x140 [ 1016.900488][T18802] should_fail_ex+0x394/0x4c0 [ 1016.905217][T18802] _copy_to_user+0x2f/0xa0 [ 1016.909681][T18802] simple_read_from_buffer+0xe7/0x150 [ 1016.915113][T18802] proc_fail_nth_read+0x1e8/0x260 [ 1016.920200][T18802] ? proc_fault_inject_write+0x360/0x360 [ 1016.925888][T18802] ? fsnotify_perm+0x271/0x5e0 [ 1016.930712][T18802] ? proc_fault_inject_write+0x360/0x360 [ 1016.936409][T18802] vfs_read+0x298/0x990 [ 1016.940636][T18802] ? kernel_read+0x1e0/0x1e0 [ 1016.945274][T18802] ? __fget_files+0x28/0x460 [ 1016.949916][T18802] ? __fget_files+0x3fc/0x460 [ 1016.954662][T18802] ? __fdget_pos+0x2a3/0x330 [ 1016.959302][T18802] ? ksys_read+0x74/0x260 [ 1016.963683][T18802] ksys_read+0x151/0x260 [ 1016.967979][T18802] ? vfs_write+0x9a0/0x9a0 [ 1016.972496][T18802] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.977784][T18802] do_syscall_64+0x55/0xb0 [ 1016.982252][T18802] ? clear_bhb_loop+0x40/0x90 [ 1016.986980][T18802] ? clear_bhb_loop+0x40/0x90 [ 1016.991703][T18802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.997638][T18802] RIP: 0033:0x7fb5d275e90e [ 1017.002089][T18802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.021745][T18802] RSP: 002b:00007fb5d36dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1017.030221][T18802] RAX: ffffffffffffffda RBX: 00007fb5d36e06c0 RCX: 00007fb5d275e90e [ 1017.038246][T18802] RDX: 000000000000000f RSI: 00007fb5d36e00a0 RDI: 0000000000000004 [ 1017.046272][T18802] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.054287][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.062301][T18802] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1017.070334][T18802] [ 1017.214672][T18806] netlink: 'syz.2.4563': attribute type 1 has an invalid length. [ 1017.238684][T18806] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1017.248045][T18806] netlink: 'syz.2.4563': attribute type 1 has an invalid length. [ 1017.330326][T18804] syzkaller0: entered promiscuous mode [ 1017.335909][T18804] syzkaller0: entered allmulticast mode [ 1017.349799][T18810] netlink: 'syz.3.4565': attribute type 10 has an invalid length. [ 1017.397891][T18810] team0: Port device wlan1 added [ 1020.142098][T18829] netlink: 'syz.1.4573': attribute type 21 has an invalid length. [ 1020.644504][T18845] syzkaller0: entered promiscuous mode [ 1020.650260][T18845] syzkaller0: entered allmulticast mode [ 1020.660157][T18849] netlink: 'syz.1.4578': attribute type 2 has an invalid length. [ 1020.672228][T18838] netlink: 703 bytes leftover after parsing attributes in process `syz.0.4576'. [ 1020.685541][T18843] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4578'. [ 1020.840152][T18852] netlink: 'syz.2.4581': attribute type 2 has an invalid length. [ 1020.847957][T18852] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1020.900694][T18852] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1022.655991][T18857] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4590'. [ 1022.666968][T18861] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 1022.680300][T18857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4590'. [ 1022.690538][T18861] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1022.703059][T18861] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 1022.907651][T18871] FAULT_INJECTION: forcing a failure. [ 1022.907651][T18871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.922737][T18871] CPU: 0 PID: 18871 Comm: syz.3.4586 Not tainted syzkaller #0 [ 1022.930267][T18871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1022.940375][T18871] Call Trace: [ 1022.943700][T18871] [ 1022.946678][T18871] dump_stack_lvl+0x18c/0x250 [ 1022.951412][T18871] ? show_regs_print_info+0x20/0x20 [ 1022.956644][T18871] ? load_image+0x420/0x420 [ 1022.961190][T18871] ? __might_fault+0xaa/0x120 [ 1022.965923][T18871] ? __lock_acquire+0x7d80/0x7d80 [ 1022.971009][T18871] should_fail_ex+0x394/0x4c0 [ 1022.975733][T18871] _copy_from_user+0x2f/0xe0 [ 1022.980356][T18871] kstrtouint_from_user+0xde/0x170 [ 1022.985531][T18871] ? kstrtol_from_user+0x190/0x190 [ 1022.990720][T18871] proc_fail_nth_write+0x8f/0x250 [ 1022.995824][T18871] ? proc_fail_nth_read+0x260/0x260 [ 1023.001091][T18871] ? proc_fail_nth_read+0x260/0x260 [ 1023.006331][T18871] vfs_write+0x299/0x9a0 [ 1023.010615][T18871] ? file_end_write+0x250/0x250 [ 1023.015528][T18871] ? __fget_files+0x28/0x460 [ 1023.020198][T18871] ? __fget_files+0x3fc/0x460 [ 1023.024947][T18871] ? __fdget_pos+0x2a3/0x330 [ 1023.029567][T18871] ? ksys_write+0x74/0x260 [ 1023.034047][T18871] ksys_write+0x151/0x260 [ 1023.038464][T18871] ? __ia32_sys_read+0x90/0x90 [ 1023.043300][T18871] ? lockdep_hardirqs_on+0x98/0x150 [ 1023.048560][T18871] do_syscall_64+0x55/0xb0 [ 1023.053027][T18871] ? clear_bhb_loop+0x40/0x90 [ 1023.057754][T18871] ? clear_bhb_loop+0x40/0x90 [ 1023.062487][T18871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.068430][T18871] RIP: 0033:0x7fb5d275e90e [ 1023.072893][T18871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.092547][T18871] RSP: 002b:00007fb5d36dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.101033][T18871] RAX: ffffffffffffffda RBX: 00007fb5d36e06c0 RCX: 00007fb5d275e90e [ 1023.109050][T18871] RDX: 0000000000000001 RSI: 00007fb5d36e00a0 RDI: 0000000000000005 [ 1023.117063][T18871] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.125075][T18871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.133090][T18871] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1023.141107][T18871] [ 1023.611896][T18886] syzkaller0: entered promiscuous mode [ 1023.621415][T18886] syzkaller0: entered allmulticast mode [ 1028.295560][T18896] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4596'. [ 1028.325343][T18899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4596'. [ 1028.395689][T18898] netlink: 703 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1028.547072][T18908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1028.554443][T18908] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.561789][T18908] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.569095][T18908] IPv6: NLM_F_CREATE should be set when creating new route [ 1029.448422][T18927] syzkaller0: entered promiscuous mode [ 1029.475582][T18927] syzkaller0: entered allmulticast mode [ 1031.285567][T18931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1031.295150][T18934] netlink: 'syz.0.4610': attribute type 10 has an invalid length. [ 1031.307559][T18934] team0: Port device wlan1 added [ 1031.313182][T18940] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1031.589442][T18950] syzkaller0: entered promiscuous mode [ 1031.608372][T18950] syzkaller0: entered allmulticast mode [ 1032.574629][T18975] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4623'. [ 1033.993545][T18973] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1034.803624][T19004] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1034.872040][T19008] syzkaller0: entered promiscuous mode [ 1034.877619][T19008] syzkaller0: entered allmulticast mode [ 1035.728325][T19024] netlink: 'syz.1.4638': attribute type 29 has an invalid length. [ 1037.439938][T19017] netlink: 703 bytes leftover after parsing attributes in process `syz.3.4635'. [ 1037.451861][T19024] netlink: 'syz.1.4638': attribute type 29 has an invalid length. [ 1038.036776][T19038] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1039.266051][T19043] FAULT_INJECTION: forcing a failure. [ 1039.266051][T19043] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.301098][T19043] CPU: 0 PID: 19043 Comm: syz.3.4646 Not tainted syzkaller #0 [ 1039.308720][T19043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1039.318821][T19043] Call Trace: [ 1039.322143][T19043] [ 1039.325111][T19043] dump_stack_lvl+0x18c/0x250 [ 1039.329852][T19043] ? show_regs_print_info+0x20/0x20 [ 1039.335101][T19043] ? load_image+0x420/0x420 [ 1039.339666][T19043] ? __might_sleep+0xe0/0xe0 [ 1039.344408][T19043] ? __lock_acquire+0x7d80/0x7d80 [ 1039.349467][T19043] should_fail_ex+0x394/0x4c0 [ 1039.354222][T19043] should_failslab+0x9/0x20 [ 1039.358771][T19043] slab_pre_alloc_hook+0x59/0x300 [ 1039.363844][T19043] kmem_cache_alloc_node+0x5e/0x310 [ 1039.369093][T19043] ? __alloc_skb+0x103/0x2c0 [ 1039.373712][T19043] __alloc_skb+0x103/0x2c0 [ 1039.378254][T19043] alloc_skb_with_frags+0xcd/0x7a0 [ 1039.383403][T19043] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.389588][T19043] ? lockdep_hardirqs_on+0x98/0x150 [ 1039.394830][T19043] sock_alloc_send_pskb+0x883/0x9a0 [ 1039.400074][T19043] ? sock_kzfree_s+0x50/0x50 [ 1039.404707][T19043] ? ip6_dst_lookup_tail+0xd65/0x1660 [ 1039.410119][T19043] rawv6_send_hdrinc+0x2fc/0x1660 [ 1039.415182][T19043] ? txopt_get+0x7a/0x3f0 [ 1039.419558][T19043] ? txopt_get+0x3f0/0x3f0 [ 1039.424011][T19043] ? txopt_get+0x344/0x3f0 [ 1039.428455][T19043] ? fl6_sock_lookup+0xc0/0xc0 [ 1039.433262][T19043] rawv6_sendmsg+0x128f/0x1740 [ 1039.438079][T19043] ? compat_rawv6_ioctl+0x70/0x70 [ 1039.443154][T19043] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1039.449607][T19043] ? aa_sock_msg_perm+0x94/0x150 [ 1039.454581][T19043] ? inet_sendmsg+0x7e/0x2a0 [ 1039.459198][T19043] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1039.464515][T19043] ? inet_send_prepare+0x250/0x250 [ 1039.469661][T19043] ____sys_sendmsg+0x61b/0x980 [ 1039.474462][T19043] ? __asan_memset+0x22/0x40 [ 1039.479092][T19043] ? __sys_sendmsg_sock+0x30/0x30 [ 1039.484159][T19043] ? __import_iovec+0x5f2/0x850 [ 1039.489097][T19043] ? import_iovec+0x73/0xa0 [ 1039.493650][T19043] ___sys_sendmsg+0x2a6/0x360 [ 1039.498355][T19043] ? get_pid_task+0x20/0x1e0 [ 1039.502986][T19043] ? __sys_sendmsg+0x2b0/0x2b0 [ 1039.507789][T19043] ? __lock_acquire+0x7d80/0x7d80 [ 1039.512876][T19043] __se_sys_sendmsg+0x1d0/0x2c0 [ 1039.517773][T19043] ? perf_trace_preemptirq_template+0x269/0x330 [ 1039.524059][T19043] ? __x64_sys_sendmsg+0x80/0x80 [ 1039.529039][T19043] ? lockdep_hardirqs_on+0x98/0x150 [ 1039.534279][T19043] do_syscall_64+0x55/0xb0 [ 1039.538740][T19043] ? clear_bhb_loop+0x40/0x90 [ 1039.543444][T19043] ? clear_bhb_loop+0x40/0x90 [ 1039.548145][T19043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.554062][T19043] RIP: 0033:0x7fb5d279e0d9 [ 1039.558501][T19043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.578137][T19043] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.586578][T19043] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1039.594575][T19043] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1039.602586][T19043] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.610607][T19043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.618619][T19043] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1039.626647][T19043] [ 1040.050055][T19056] syzkaller0: entered promiscuous mode [ 1040.055848][T19056] syzkaller0: entered allmulticast mode [ 1040.480665][T19066] netlink: 'syz.3.4654': attribute type 29 has an invalid length. [ 1042.171832][T19066] netlink: 'syz.3.4654': attribute type 29 has an invalid length. [ 1042.192889][T19071] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1042.205589][T19073] netlink: 'syz.1.4656': attribute type 2 has an invalid length. [ 1042.218404][T19074] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1042.863195][T19092] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1043.043940][T19096] syzkaller0: entered promiscuous mode [ 1043.049809][T19096] syzkaller0: entered allmulticast mode [ 1044.993984][T19098] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1045.009290][T19104] netlink: 'syz.1.4667': attribute type 2 has an invalid length. [ 1045.025671][T19106] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1045.142262][T19109] FAULT_INJECTION: forcing a failure. [ 1045.142262][T19109] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.174984][T19109] CPU: 0 PID: 19109 Comm: syz.3.4670 Not tainted syzkaller #0 [ 1045.182532][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1045.192643][T19109] Call Trace: [ 1045.195969][T19109] [ 1045.198949][T19109] dump_stack_lvl+0x18c/0x250 [ 1045.203683][T19109] ? show_regs_print_info+0x20/0x20 [ 1045.208935][T19109] ? load_image+0x420/0x420 [ 1045.213507][T19109] ? __lock_acquire+0x7d80/0x7d80 [ 1045.218596][T19109] should_fail_ex+0x394/0x4c0 [ 1045.223343][T19109] should_failslab+0x9/0x20 [ 1045.227902][T19109] slab_pre_alloc_hook+0x59/0x300 [ 1045.232995][T19109] ? bpf_test_init+0x9f/0x140 [ 1045.237723][T19109] ? bpf_test_init+0x9f/0x140 [ 1045.242444][T19109] __kmem_cache_alloc_node+0x53/0x250 [ 1045.247883][T19109] ? bpf_test_init+0x9f/0x140 [ 1045.252619][T19109] __kmalloc+0xa7/0x240 [ 1045.256840][T19109] bpf_test_init+0x9f/0x140 [ 1045.261408][T19109] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1045.266850][T19109] ? __lock_acquire+0x7d80/0x7d80 [ 1045.271934][T19109] ? dev_put+0x80/0x80 [ 1045.276066][T19109] ? dev_put+0x80/0x80 [ 1045.280194][T19109] bpf_prog_test_run+0x31f/0x390 [ 1045.285190][T19109] __sys_bpf+0x49d/0x890 [ 1045.289477][T19109] ? bpf_link_show_fdinfo+0x390/0x390 [ 1045.294915][T19109] ? lock_chain_count+0x20/0x20 [ 1045.299824][T19109] __x64_sys_bpf+0x7c/0x90 [ 1045.304286][T19109] do_syscall_64+0x55/0xb0 [ 1045.308782][T19109] ? clear_bhb_loop+0x40/0x90 [ 1045.313512][T19109] ? clear_bhb_loop+0x40/0x90 [ 1045.318252][T19109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.324192][T19109] RIP: 0033:0x7fb5d279e0d9 [ 1045.328672][T19109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.348328][T19109] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1045.356793][T19109] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1045.364819][T19109] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 000000000000000a [ 1045.372833][T19109] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.380853][T19109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.388868][T19109] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1045.396902][T19109] [ 1045.784784][T19123] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4676'. [ 1046.392603][T19131] syzkaller0: entered promiscuous mode [ 1046.398170][T19131] syzkaller0: entered allmulticast mode [ 1046.672692][T19138] syzkaller0: entered promiscuous mode [ 1046.678255][T19138] syzkaller0: entered allmulticast mode [ 1051.890326][T19163] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1051.929247][T19163] netlink: 'syz.3.4690': attribute type 2 has an invalid length. [ 1051.950888][T19163] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1052.342131][T19180] syzkaller0: entered promiscuous mode [ 1052.347690][T19180] syzkaller0: entered allmulticast mode [ 1052.391894][T19179] FAULT_INJECTION: forcing a failure. [ 1052.391894][T19179] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.408259][T19179] CPU: 1 PID: 19179 Comm: syz.3.4694 Not tainted syzkaller #0 [ 1052.415778][T19179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.425855][T19179] Call Trace: [ 1052.429149][T19179] [ 1052.432121][T19179] dump_stack_lvl+0x18c/0x250 [ 1052.436871][T19179] ? show_regs_print_info+0x20/0x20 [ 1052.442112][T19179] ? load_image+0x420/0x420 [ 1052.446658][T19179] ? __might_sleep+0xe0/0xe0 [ 1052.451329][T19179] ? __lock_acquire+0x7d80/0x7d80 [ 1052.456414][T19179] should_fail_ex+0x394/0x4c0 [ 1052.461187][T19179] should_failslab+0x9/0x20 [ 1052.465741][T19179] slab_pre_alloc_hook+0x59/0x300 [ 1052.470843][T19179] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1052.476645][T19179] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1052.482422][T19179] __kmem_cache_alloc_node+0x53/0x250 [ 1052.487833][T19179] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1052.493584][T19179] __kmalloc+0xa7/0x240 [ 1052.497790][T19179] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1052.503377][T19179] ? tomoyo_domain+0xd6/0x120 [ 1052.508112][T19179] tomoyo_path_number_perm+0x248/0x5e0 [ 1052.513613][T19179] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1052.519292][T19179] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1052.524796][T19179] ? ksys_write+0x1d2/0x260 [ 1052.529400][T19179] ? __fget_files+0x28/0x460 [ 1052.534047][T19179] security_file_ioctl+0x70/0xa0 [ 1052.539028][T19179] __se_sys_ioctl+0x48/0x170 [ 1052.543663][T19179] do_syscall_64+0x55/0xb0 [ 1052.548135][T19179] ? clear_bhb_loop+0x40/0x90 [ 1052.552846][T19179] ? clear_bhb_loop+0x40/0x90 [ 1052.557561][T19179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.563485][T19179] RIP: 0033:0x7fb5d279e0d9 [ 1052.567930][T19179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.587560][T19179] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.596010][T19179] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1052.604042][T19179] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000b [ 1052.612067][T19179] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.620092][T19179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.628096][T19179] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1052.636136][T19179] [ 1052.640546][T19179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1054.473598][T19195] netlink: 'syz.3.4699': attribute type 3 has an invalid length. [ 1054.483721][T19195] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.4699'. [ 1054.594418][T19197] FAULT_INJECTION: forcing a failure. [ 1054.594418][T19197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.607770][T19197] CPU: 0 PID: 19197 Comm: syz.3.4710 Not tainted syzkaller #0 [ 1054.615300][T19197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1054.625382][T19197] Call Trace: [ 1054.628688][T19197] [ 1054.631650][T19197] dump_stack_lvl+0x18c/0x250 [ 1054.636365][T19197] ? show_regs_print_info+0x20/0x20 [ 1054.641593][T19197] ? load_image+0x420/0x420 [ 1054.646140][T19197] ? __lock_acquire+0x7d80/0x7d80 [ 1054.651218][T19197] should_fail_ex+0x394/0x4c0 [ 1054.655939][T19197] _copy_from_user+0x2f/0xe0 [ 1054.660558][T19197] __copy_msghdr+0x388/0x560 [ 1054.665180][T19197] ___sys_sendmsg+0x214/0x360 [ 1054.669893][T19197] ? get_pid_task+0x20/0x1e0 [ 1054.674528][T19197] ? __sys_sendmsg+0x2b0/0x2b0 [ 1054.679342][T19197] ? __lock_acquire+0x7d80/0x7d80 [ 1054.684427][T19197] __se_sys_sendmsg+0x1d0/0x2c0 [ 1054.689321][T19197] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.694301][T19197] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.699538][T19197] do_syscall_64+0x55/0xb0 [ 1054.703983][T19197] ? clear_bhb_loop+0x40/0x90 [ 1054.708691][T19197] ? clear_bhb_loop+0x40/0x90 [ 1054.713394][T19197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.719337][T19197] RIP: 0033:0x7fb5d279e0d9 [ 1054.723784][T19197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.743505][T19197] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.751950][T19197] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1054.759962][T19197] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000004 [ 1054.767953][T19197] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.775958][T19197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.783972][T19197] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1054.791984][T19197] [ 1054.828201][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.834643][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.966956][T19201] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1055.014015][T19201] netlink: 'syz.0.4703': attribute type 2 has an invalid length. [ 1055.030740][T19201] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1055.270946][T19212] pim6reg1: entered promiscuous mode [ 1055.284027][T19212] pim6reg1: entered allmulticast mode [ 1055.898254][T19227] netlink: 'syz.0.4713': attribute type 3 has an invalid length. [ 1055.908440][T19227] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1056.069454][T19230] netlink: 'syz.2.4714': attribute type 10 has an invalid length. [ 1057.143388][T19259] netlink: 'syz.1.4727': attribute type 10 has an invalid length. [ 1057.569097][T19268] netlink: 'syz.2.4729': attribute type 3 has an invalid length. [ 1057.577313][T19268] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1057.733078][T19275] netlink: 'syz.1.4732': attribute type 3 has an invalid length. [ 1057.782496][T19275] netlink: 64927 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1057.822780][T19280] netlink: 'syz.0.4735': attribute type 3 has an invalid length. [ 1057.838230][T19280] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1058.469478][T19294] netlink: 'syz.1.4740': attribute type 10 has an invalid length. [ 1059.245126][T19313] netlink: 'syz.3.4748': attribute type 1 has an invalid length. [ 1059.276157][T19313] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1059.440183][T19318] FAULT_INJECTION: forcing a failure. [ 1059.440183][T19318] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.493301][T19318] CPU: 0 PID: 19318 Comm: syz.2.4750 Not tainted syzkaller #0 [ 1059.500895][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1059.510994][T19318] Call Trace: [ 1059.514339][T19318] [ 1059.517316][T19318] dump_stack_lvl+0x18c/0x250 [ 1059.522049][T19318] ? show_regs_print_info+0x20/0x20 [ 1059.527299][T19318] ? load_image+0x420/0x420 [ 1059.531896][T19318] ? __might_sleep+0xe0/0xe0 [ 1059.536547][T19318] ? __lock_acquire+0x7d80/0x7d80 [ 1059.541625][T19318] should_fail_ex+0x394/0x4c0 [ 1059.546361][T19318] should_failslab+0x9/0x20 [ 1059.550922][T19318] slab_pre_alloc_hook+0x59/0x300 [ 1059.556008][T19318] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1059.561790][T19318] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1059.567555][T19318] __kmem_cache_alloc_node+0x53/0x250 [ 1059.572980][T19318] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1059.578756][T19318] __kmalloc+0xa7/0x240 [ 1059.582971][T19318] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1059.588598][T19318] ? tomoyo_domain+0xd6/0x120 [ 1059.593337][T19318] tomoyo_path_number_perm+0x248/0x5e0 [ 1059.598871][T19318] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1059.604560][T19318] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1059.610077][T19318] ? ksys_write+0x1d2/0x260 [ 1059.614675][T19318] ? __fget_files+0x28/0x460 [ 1059.619344][T19318] security_file_ioctl+0x70/0xa0 [ 1059.624331][T19318] __se_sys_ioctl+0x48/0x170 [ 1059.628973][T19318] do_syscall_64+0x55/0xb0 [ 1059.633455][T19318] ? clear_bhb_loop+0x40/0x90 [ 1059.638175][T19318] ? clear_bhb_loop+0x40/0x90 [ 1059.642903][T19318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.648844][T19318] RIP: 0033:0x7f763579e0d9 [ 1059.653313][T19318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.672967][T19318] RSP: 002b:00007f76365f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.681447][T19318] RAX: ffffffffffffffda RBX: 00007f7635a25fa0 RCX: 00007f763579e0d9 [ 1059.689458][T19318] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000005 [ 1059.697476][T19318] RBP: 00007f76365f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.705503][T19318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.713542][T19318] R13: 00007f7635a26038 R14: 00007f7635a25fa0 R15: 00007ffe6bf74658 [ 1059.721584][T19318] [ 1059.822959][T19318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1060.252659][T19331] netlink: 822 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1060.497290][T19332] netlink: 'syz.1.4754': attribute type 10 has an invalid length. [ 1060.649388][T19343] FAULT_INJECTION: forcing a failure. [ 1060.649388][T19343] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.694372][T19345] netlink: 'syz.0.4758': attribute type 9 has an invalid length. [ 1060.704762][T19341] FAULT_INJECTION: forcing a failure. [ 1060.704762][T19341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.728066][T19343] CPU: 1 PID: 19343 Comm: syz.0.4758 Not tainted syzkaller #0 [ 1060.735591][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.738867][T19345] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4758'. [ 1060.745688][T19343] Call Trace: [ 1060.745700][T19343] [ 1060.745711][T19343] dump_stack_lvl+0x18c/0x250 [ 1060.745746][T19343] ? show_regs_print_info+0x20/0x20 [ 1060.771254][T19343] ? load_image+0x420/0x420 [ 1060.775821][T19343] ? perf_trace_lock+0xfc/0x3b0 [ 1060.780723][T19343] ? verify_lock_unused+0x140/0x140 [ 1060.785972][T19343] ? perf_trace_lock+0xfc/0x3b0 [ 1060.790885][T19343] should_fail_ex+0x394/0x4c0 [ 1060.795644][T19343] should_failslab+0x9/0x20 [ 1060.800209][T19343] slab_pre_alloc_hook+0x59/0x300 [ 1060.805317][T19343] kmem_cache_alloc+0x5a/0x2c0 [ 1060.810137][T19343] ? skb_clone+0x1eb/0x370 [ 1060.814609][T19343] skb_clone+0x1eb/0x370 [ 1060.818908][T19343] __netlink_deliver_tap+0x411/0x7f0 [ 1060.824271][T19343] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.829517][T19343] netlink_deliver_tap+0x19c/0x1b0 [ 1060.834665][T19343] netlink_unicast+0x77b/0x930 [ 1060.839478][T19343] netlink_sendmsg+0x8d0/0xbf0 [ 1060.844277][T19343] ? netlink_getsockopt+0x590/0x590 [ 1060.849521][T19343] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1060.855098][T19343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1060.860420][T19343] ? security_socket_sendmsg+0x80/0xa0 [ 1060.865907][T19343] ? netlink_getsockopt+0x590/0x590 [ 1060.871138][T19343] ____sys_sendmsg+0x61b/0x980 [ 1060.875944][T19343] ? __asan_memset+0x22/0x40 [ 1060.880578][T19343] ? __sys_sendmsg_sock+0x30/0x30 [ 1060.885654][T19343] ? __import_iovec+0x5f2/0x850 [ 1060.890548][T19343] ? import_iovec+0x73/0xa0 [ 1060.895086][T19343] ___sys_sendmsg+0x2a6/0x360 [ 1060.899796][T19343] ? __sys_sendmsg+0x2b0/0x2b0 [ 1060.904600][T19343] ? __lock_acquire+0x7d80/0x7d80 [ 1060.909673][T19343] __se_sys_sendmsg+0x1d0/0x2c0 [ 1060.914546][T19343] ? __x64_sys_sendmsg+0x80/0x80 [ 1060.919533][T19343] ? lockdep_hardirqs_on+0x98/0x150 [ 1060.924766][T19343] do_syscall_64+0x55/0xb0 [ 1060.929214][T19343] ? clear_bhb_loop+0x40/0x90 [ 1060.933922][T19343] ? clear_bhb_loop+0x40/0x90 [ 1060.938626][T19343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.944542][T19343] RIP: 0033:0x7ff33359e0d9 [ 1060.948983][T19343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.968629][T19343] RSP: 002b:00007ff334467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.977073][T19343] RAX: ffffffffffffffda RBX: 00007ff333826090 RCX: 00007ff33359e0d9 [ 1060.985063][T19343] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 000000000000000b [ 1060.993056][T19343] RBP: 00007ff334467090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.001047][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.009057][T19343] R13: 00007ff333826128 R14: 00007ff333826090 R15: 00007fffbd41ff98 [ 1061.017078][T19343] [ 1061.031453][T19341] CPU: 0 PID: 19341 Comm: syz.3.4757 Not tainted syzkaller #0 [ 1061.038993][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1061.049111][T19341] Call Trace: [ 1061.052439][T19341] [ 1061.055399][T19341] dump_stack_lvl+0x18c/0x250 [ 1061.060144][T19341] ? show_regs_print_info+0x20/0x20 [ 1061.065385][T19341] ? load_image+0x420/0x420 [ 1061.069947][T19341] ? __lock_acquire+0x7d80/0x7d80 [ 1061.075044][T19341] ? __virt_addr_valid+0x10c/0x380 [ 1061.080216][T19341] should_fail_ex+0x394/0x4c0 [ 1061.084942][T19341] _copy_from_user+0x2f/0xe0 [ 1061.089567][T19341] map_update_elem+0x501/0x710 [ 1061.094404][T19341] __sys_bpf+0x6b5/0x890 [ 1061.098705][T19341] ? bpf_link_show_fdinfo+0x390/0x390 [ 1061.104186][T19341] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1061.110408][T19341] __x64_sys_bpf+0x7c/0x90 [ 1061.114873][T19341] do_syscall_64+0x55/0xb0 [ 1061.119339][T19341] ? clear_bhb_loop+0x40/0x90 [ 1061.124066][T19341] ? clear_bhb_loop+0x40/0x90 [ 1061.128797][T19341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.134739][T19341] RIP: 0033:0x7fb5d279e0d9 [ 1061.139173][T19341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.139194][T19341] RSP: 002b:00007fb5d36e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1061.139220][T19341] RAX: ffffffffffffffda RBX: 00007fb5d2a25fa0 RCX: 00007fb5d279e0d9 [ 1061.139237][T19341] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000002 [ 1061.139251][T19341] RBP: 00007fb5d36e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.139265][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.139278][T19341] R13: 00007fb5d2a26038 R14: 00007fb5d2a25fa0 R15: 00007fff4f6d9158 [ 1061.139315][T19341] [ 1061.353447][T19348] netlink: 'syz.3.4757': attribute type 9 has an invalid length. [ 1061.375550][T19348] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1062.614119][T19373] netlink: 'syz.3.4767': attribute type 3 has an invalid length. [ 1062.656778][T19373] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1062.696294][T19375] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1062.728888][T19378] netlink: 'syz.2.4768': attribute type 2 has an invalid length. [ 1062.769416][T19375] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1063.679254][T19387] netlink: 'syz.1.4770': attribute type 10 has an invalid length. [ 1063.889804][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1063.910304][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1063.918220][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1063.926926][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1063.935238][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1063.943194][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.487160][T19397] chnl_net:caif_netlink_parms(): no params data found [ 1064.667554][T19397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.678773][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.687272][T19397] bridge_slave_0: entered allmulticast mode [ 1064.698064][T19397] bridge_slave_0: entered promiscuous mode [ 1064.717709][T19397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.740176][T19397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.747466][T19397] bridge_slave_1: entered allmulticast mode [ 1064.770152][T19397] bridge_slave_1: entered promiscuous mode [ 1065.082731][T19397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.222824][T19397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.343386][T19420] netlink: 'syz.1.4779': attribute type 9 has an invalid length. [ 1065.358576][T19420] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4779'. [ 1065.695814][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.819380][T19397] team0: Port device team_slave_0 added [ 1065.939136][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.978728][ T51] Bluetooth: hci3: command tx timeout [ 1066.018202][T19397] team0: Port device team_slave_1 added [ 1066.339104][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.400885][T19397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.428367][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.456260][T19397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.502902][T19442] netlink: 'syz.2.4786': attribute type 10 has an invalid length. [ 1066.518722][T19430] netlink: 'syz.0.4783': attribute type 9 has an invalid length. [ 1066.536692][T19430] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4783'. [ 1066.611162][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.672107][T19397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.685666][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.757058][T19397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.070551][T19397] hsr_slave_0: entered promiscuous mode [ 1067.128759][T19397] hsr_slave_1: entered promiscuous mode [ 1067.135506][T19397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.158979][T19397] Cannot create hsr debugfs directory [ 1068.059083][ T51] Bluetooth: hci3: command tx timeout [ 1069.292384][T19491] netlink: 'syz.1.4793': attribute type 9 has an invalid length. [ 1069.415761][T19491] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1069.652006][T19493] netlink: 'syz.0.4794': attribute type 10 has an invalid length. [ 1070.138635][ T51] Bluetooth: hci3: command tx timeout [ 1072.009383][T19523] netlink: 'syz.0.4800': attribute type 3 has an invalid length. [ 1072.017290][T19523] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4800'. [ 1072.218707][ T51] Bluetooth: hci3: command tx timeout [ 1073.126759][T19535] netlink: 'syz.0.4803': attribute type 10 has an invalid length. [ 1073.202945][T19397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1073.386631][T19397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1073.446023][T19397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1073.507621][T19397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1074.072359][T19563] netlink: 'syz.2.4808': attribute type 9 has an invalid length. [ 1074.101050][T19563] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1074.845178][T19397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.950625][T19578] netlink: 'syz.2.4810': attribute type 3 has an invalid length. [ 1074.983334][T19578] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1075.092286][T19397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.161752][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.169013][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.270748][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.277966][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.411635][T19589] FAULT_INJECTION: forcing a failure. [ 1075.411635][T19589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.473480][T19589] CPU: 0 PID: 19589 Comm: syz.1.4811 Not tainted syzkaller #0 [ 1075.481034][T19589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.491140][T19589] Call Trace: [ 1075.494490][T19589] [ 1075.497469][T19589] dump_stack_lvl+0x18c/0x250 [ 1075.502219][T19589] ? show_regs_print_info+0x20/0x20 [ 1075.507476][T19589] ? load_image+0x420/0x420 [ 1075.512141][T19589] ? __might_fault+0xaa/0x120 [ 1075.516907][T19589] ? __lock_acquire+0x7d80/0x7d80 [ 1075.522007][T19589] should_fail_ex+0x394/0x4c0 [ 1075.526769][T19589] _copy_from_user+0x2f/0xe0 [ 1075.531428][T19589] kstrtouint_from_user+0xde/0x170 [ 1075.536616][T19589] ? kstrtol_from_user+0x190/0x190 [ 1075.541809][T19589] proc_fail_nth_write+0x8f/0x250 [ 1075.546900][T19589] ? proc_fail_nth_read+0x260/0x260 [ 1075.552184][T19589] ? proc_fail_nth_read+0x260/0x260 [ 1075.557450][T19589] vfs_write+0x299/0x9a0 [ 1075.561794][T19589] ? file_end_write+0x250/0x250 [ 1075.566715][T19589] ? __fget_files+0x28/0x460 [ 1075.571373][T19589] ? __fget_files+0x3fc/0x460 [ 1075.576128][T19589] ? __fdget_pos+0x2a3/0x330 [ 1075.580784][T19589] ? ksys_write+0x74/0x260 [ 1075.585291][T19589] ksys_write+0x151/0x260 [ 1075.589786][T19589] ? __ia32_sys_read+0x90/0x90 [ 1075.594618][T19589] ? lockdep_hardirqs_on+0x98/0x150 [ 1075.599895][T19589] do_syscall_64+0x55/0xb0 [ 1075.604393][T19589] ? clear_bhb_loop+0x40/0x90 [ 1075.609128][T19589] ? clear_bhb_loop+0x40/0x90 [ 1075.613860][T19589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.619802][T19589] RIP: 0033:0x7fdb85f5e90e [ 1075.624268][T19589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1075.643937][T19589] RSP: 002b:00007fdb86db6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1075.652412][T19589] RAX: ffffffffffffffda RBX: 00007fdb86db76c0 RCX: 00007fdb85f5e90e [ 1075.660431][T19589] RDX: 0000000000000001 RSI: 00007fdb86db70a0 RDI: 0000000000000004 [ 1075.668442][T19589] RBP: 00007fdb86db7090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.676466][T19589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.684492][T19589] R13: 00007fdb86226128 R14: 00007fdb86226090 R15: 00007ffda330b508 [ 1075.692537][T19589] [ 1076.587091][T19397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.900544][T19603] netlink: 'syz.0.4814': attribute type 10 has an invalid length. [ 1077.306705][T19397] veth0_vlan: entered promiscuous mode [ 1077.532748][T19397] veth1_vlan: entered promiscuous mode [ 1077.903895][T19643] netlink: 'syz.1.4820': attribute type 9 has an invalid length. [ 1077.927838][T19643] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4820'. [ 1078.187401][T19397] veth0_macvtap: entered promiscuous mode [ 1078.221837][T19397] veth1_macvtap: entered promiscuous mode [ 1078.277376][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.304668][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.323088][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.340888][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.358712][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.389173][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.406271][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.424409][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.445207][T19397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.631062][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.666660][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.708648][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.734043][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.748564][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.762949][T19655] netlink: 'syz.1.4824': attribute type 3 has an invalid length. [ 1078.770866][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.777915][T19655] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1078.794226][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.815113][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.840684][T19397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.936775][T19397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.976549][T19397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.998619][T19397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.017895][T19397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.959226][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.010490][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.313652][T12555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.331275][T12555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.582453][T19681] FAULT_INJECTION: forcing a failure. [ 1080.582453][T19681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.621396][T19681] CPU: 1 PID: 19681 Comm: syz.3.4772 Not tainted syzkaller #0 [ 1080.628934][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1080.639044][T19681] Call Trace: [ 1080.642372][T19681] [ 1080.645346][T19681] dump_stack_lvl+0x18c/0x250 [ 1080.650081][T19681] ? show_regs_print_info+0x20/0x20 [ 1080.655347][T19681] ? load_image+0x420/0x420 [ 1080.659927][T19681] ? __might_fault+0xaa/0x120 [ 1080.664655][T19681] ? __lock_acquire+0x7d80/0x7d80 [ 1080.669733][T19681] should_fail_ex+0x394/0x4c0 [ 1080.674479][T19681] _copy_from_user+0x2f/0xe0 [ 1080.679137][T19681] __sys_bpf+0x23e/0x890 [ 1080.683434][T19681] ? bpf_link_show_fdinfo+0x390/0x390 [ 1080.688894][T19681] ? lock_chain_count+0x20/0x20 [ 1080.693808][T19681] __x64_sys_bpf+0x7c/0x90 [ 1080.698282][T19681] do_syscall_64+0x55/0xb0 [ 1080.702750][T19681] ? clear_bhb_loop+0x40/0x90 [ 1080.707469][T19681] ? clear_bhb_loop+0x40/0x90 [ 1080.712200][T19681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.718144][T19681] RIP: 0033:0x7f61ceb9e0d9 [ 1080.722610][T19681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.742273][T19681] RSP: 002b:00007f61cf993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.750742][T19681] RAX: ffffffffffffffda RBX: 00007f61cee25fa0 RCX: 00007f61ceb9e0d9 [ 1080.758759][T19681] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1080.766786][T19681] RBP: 00007f61cf993090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.774797][T19681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.782810][T19681] R13: 00007f61cee26038 R14: 00007f61cee25fa0 R15: 00007fffb49d43f8 [ 1080.790844][T19681] [ 1081.235984][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1081.251334][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1081.273852][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1081.329158][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1081.351966][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1081.363026][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1081.425840][ T12] [ 1081.428238][ T12] ====================================================== [ 1081.435285][ T12] WARNING: possible circular locking dependency detected [ 1081.442391][ T12] syzkaller #0 Not tainted [ 1081.446844][ T12] ------------------------------------------------------ [ 1081.453889][ T12] kworker/u4:1/12 is trying to acquire lock: [ 1081.459895][ T12] ffff8880219e4d80 (team->team_lock_key#5){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 1081.469573][ T12] [ 1081.469573][ T12] but task is already holding lock: [ 1081.476962][ T12] ffff8880570e0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1081.487366][ T12] [ 1081.487366][ T12] which lock already depends on the new lock. [ 1081.487366][ T12] [ 1081.497822][ T12] [ 1081.497822][ T12] the existing dependency chain (in reverse order) is: [ 1081.506873][ T12] [ 1081.506873][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1081.514641][ T12] __mutex_lock+0x135/0xc80 [ 1081.519699][ T12] ieee80211_open+0x144/0x200 [ 1081.524916][ T12] __dev_open+0x2cb/0x430 [ 1081.529782][ T12] dev_open+0xab/0x190 [ 1081.534396][ T12] team_add_slave+0x703/0x28a0 [ 1081.539706][ T12] do_setlink+0xcde/0x3f40 [ 1081.544659][ T12] rtnl_newlink+0x1848/0x2170 [ 1081.549879][ T12] rtnetlink_rcv_msg+0x843/0xf90 [ 1081.555359][ T12] netlink_rcv_skb+0x235/0x4c0 [ 1081.560672][ T12] netlink_unicast+0x7b1/0x930 [ 1081.565988][ T12] netlink_sendmsg+0x8d0/0xbf0 [ 1081.571293][ T12] ____sys_sendmsg+0x61b/0x980 [ 1081.576603][ T12] ___sys_sendmsg+0x2a6/0x360 [ 1081.581820][ T12] __se_sys_sendmsg+0x1d0/0x2c0 [ 1081.587207][ T12] do_syscall_64+0x55/0xb0 [ 1081.592164][ T12] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.598595][ T12] [ 1081.598595][ T12] -> #0 (team->team_lock_key#5){+.+.}-{3:3}: [ 1081.606802][ T12] __lock_acquire+0x37ef/0x7d80 [ 1081.612197][ T12] lock_acquire+0x19e/0x420 [ 1081.617239][ T12] __mutex_lock+0x135/0xc80 [ 1081.622290][ T12] team_del_slave+0x31/0x1b0 [ 1081.627429][ T12] team_device_event+0x297/0xa30 [ 1081.632905][ T12] notifier_call_chain+0x18f/0x380 [ 1081.638565][ T12] unregister_netdevice_many_notify+0x1037/0x1910 [ 1081.645518][ T12] unregister_netdevice_queue+0x2e9/0x330 [ 1081.651786][ T12] _cfg80211_unregister_wdev+0x16d/0x580 [ 1081.657979][ T12] ieee80211_remove_interfaces+0x4b3/0x690 [ 1081.664347][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 1081.670272][ T12] mac80211_hwsim_del_radio+0x289/0x480 [ 1081.676368][ T12] hwsim_exit_net+0x58d/0x650 [ 1081.681599][ T12] cleanup_net+0x707/0xbb0 [ 1081.686594][ T12] process_scheduled_works+0xa60/0x1600 [ 1081.692681][ T12] worker_thread+0xa5e/0xfe0 [ 1081.697810][ T12] kthread+0x2fa/0x390 [ 1081.702414][ T12] ret_from_fork+0x48/0x80 [ 1081.707369][ T12] ret_from_fork_asm+0x11/0x20 [ 1081.712673][ T12] [ 1081.712673][ T12] other info that might help us debug this: [ 1081.712673][ T12] [ 1081.723034][ T12] Possible unsafe locking scenario: [ 1081.723034][ T12] [ 1081.730518][ T12] CPU0 CPU1 [ 1081.735920][ T12] ---- ---- [ 1081.741300][ T12] lock(&rdev->wiphy.mtx); [ 1081.745827][ T12] lock(team->team_lock_key#5); [ 1081.753313][ T12] lock(&rdev->wiphy.mtx); [ 1081.760358][ T12] lock(team->team_lock_key#5); [ 1081.765324][ T12] [ 1081.765324][ T12] *** DEADLOCK *** [ 1081.765324][ T12] [ 1081.773497][ T12] 5 locks held by kworker/u4:1/12: [ 1081.778630][ T12] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1081.789548][ T12] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1081.800121][ T12] #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1081.809552][ T12] #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1081.819423][ T12] #4: ffff8880570e0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1081.830261][ T12] [ 1081.830261][ T12] stack backtrace: [ 1081.836185][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1081.843584][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.853707][ T12] Workqueue: netns cleanup_net [ 1081.858510][ T12] Call Trace: [ 1081.861820][ T12] [ 1081.864777][ T12] dump_stack_lvl+0x18c/0x250 [ 1081.869481][ T12] ? load_image+0x420/0x420 [ 1081.874035][ T12] ? show_regs_print_info+0x20/0x20 [ 1081.879275][ T12] ? print_circular_bug+0x12b/0x1a0 [ 1081.884523][ T12] check_noncircular+0x2fc/0x400 [ 1081.889506][ T12] ? print_deadlock_bug+0x5d0/0x5d0 [ 1081.894736][ T12] ? lockdep_lock+0xf5/0x230 [ 1081.899363][ T12] ? _find_first_zero_bit+0xd6/0x100 [ 1081.904697][ T12] __lock_acquire+0x37ef/0x7d80 [ 1081.909596][ T12] ? verify_lock_unused+0x140/0x140 [ 1081.914862][ T12] ? verify_lock_unused+0x140/0x140 [ 1081.920090][ T12] ? __up_read+0x2b8/0x6b0 [ 1081.924536][ T12] lock_acquire+0x19e/0x420 [ 1081.929064][ T12] ? team_del_slave+0x31/0x1b0 [ 1081.933871][ T12] ? __might_sleep+0xe0/0xe0 [ 1081.938498][ T12] ? read_lock_is_recursive+0x20/0x20 [ 1081.943911][ T12] __mutex_lock+0x135/0xc80 [ 1081.948450][ T12] ? team_del_slave+0x31/0x1b0 [ 1081.953246][ T12] ? __mutex_lock+0x30d/0xc80 [ 1081.957987][ T12] ? team_del_slave+0x31/0x1b0 [ 1081.962804][ T12] ? mutex_lock_nested+0x20/0x20 [ 1081.967773][ T12] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1081.973445][ T12] team_del_slave+0x31/0x1b0 [ 1081.978101][ T12] team_device_event+0x297/0xa30 [ 1081.983096][ T12] notifier_call_chain+0x18f/0x380 [ 1081.988245][ T12] unregister_netdevice_many_notify+0x1037/0x1910 [ 1081.994690][ T12] ? unregister_netdevice_many+0x20/0x20 [ 1082.000355][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1082.006109][ T12] ? __lock_acquire+0x7d80/0x7d80 [ 1082.011166][ T12] unregister_netdevice_queue+0x2e9/0x330 [ 1082.016919][ T12] ? list_netdevice+0x730/0x730 [ 1082.021796][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1082.027547][ T12] _cfg80211_unregister_wdev+0x16d/0x580 [ 1082.033228][ T12] ieee80211_remove_interfaces+0x4b3/0x690 [ 1082.039071][ T12] ? ieee80211_do_stop+0x2000/0x2000 [ 1082.044388][ T12] ? rcu_is_watching+0x15/0xb0 [ 1082.049187][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 1082.054587][ T12] mac80211_hwsim_del_radio+0x289/0x480 [ 1082.060156][ T12] ? rhashtable_remove_fast+0xc00/0xc00 [ 1082.065724][ T12] hwsim_exit_net+0x58d/0x650 [ 1082.070434][ T12] ? hwsim_init_net+0x90/0x90 [ 1082.075141][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1082.080972][ T12] cleanup_net+0x707/0xbb0 [ 1082.085412][ T12] ? ops_free_list+0x3b0/0x3b0 [ 1082.090204][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.095434][ T12] ? process_scheduled_works+0x975/0x1600 [ 1082.101183][ T12] ? process_scheduled_works+0x975/0x1600 [ 1082.106926][ T12] process_scheduled_works+0xa60/0x1600 [ 1082.112511][ T12] ? worker_attach_to_pool+0x370/0x370 [ 1082.118002][ T12] ? assign_work+0x3cc/0x5d0 [ 1082.122618][ T12] worker_thread+0xa5e/0xfe0 [ 1082.127243][ T12] kthread+0x2fa/0x390 [ 1082.131337][ T12] ? pr_cont_work+0x550/0x550 [ 1082.136036][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1082.140652][ T12] ret_from_fork+0x48/0x80 [ 1082.145131][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1082.149748][ T12] ret_from_fork_asm+0x11/0x20 [ 1082.154547][ T12] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1082.309655][ T12] team0: Port device wlan1 removed [ 1083.317213][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.341593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.371846][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.380846][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.401280][ T12] veth1_macvtap: left promiscuous mode [ 1083.406846][ T12] veth0_macvtap: left promiscuous mode [ 1083.544772][ T12] team0 (unregistering): Port device geneve1 removed [ 1083.691199][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1083.721577][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1083.751135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.784008][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.810156][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1083.911187][ T12] bond0 (unregistering): Released all slaves [ 1084.434650][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.479172][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.544341][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.594619][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.699188][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.757534][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.840218][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.916968][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.075565][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.116141][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.166942][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.207336][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.370437][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.462014][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.536688][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.604192][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.800995][ T12] team0: Port device wlan1 removed [ 1090.535831][ T12] hsr_slave_0: left promiscuous mode [ 1090.549497][ T12] hsr_slave_1: left promiscuous mode [ 1090.555496][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.567223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.575289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.583879][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.593240][ T12] hsr_slave_0: left promiscuous mode [ 1090.599372][ T12] hsr_slave_1: left promiscuous mode [ 1090.608984][ T12] hsr_slave_0: left promiscuous mode [ 1090.615305][ T12] hsr_slave_1: left promiscuous mode [ 1090.621447][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.629505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.637669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.645462][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.654256][ T12] bridge_slave_1: left allmulticast mode [ 1090.660362][ T12] bridge_slave_1: left promiscuous mode [ 1090.666129][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.675595][ T12] bridge_slave_0: left allmulticast mode [ 1090.681390][ T12] bridge_slave_0: left promiscuous mode [ 1090.687125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.698060][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.705905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.714650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.722337][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.738296][ T12] veth1_macvtap: left promiscuous mode [ 1090.745027][ T12] veth0_macvtap: left promiscuous mode [ 1090.754087][ T12] veth1_macvtap: left promiscuous mode [ 1090.760733][ T12] veth0_macvtap: left promiscuous mode [ 1090.768370][ T12] veth1_macvtap: left promiscuous mode [ 1090.775888][ T12] veth0_macvtap: left promiscuous mode [ 1090.781642][ T12] veth1_vlan: left promiscuous mode [ 1090.787007][ T12] veth0_vlan: left promiscuous mode [ 1090.796942][ T12] veth1_macvtap: left promiscuous mode [ 1090.802536][ T12] veth0_macvtap: left promiscuous mode [ 1091.123247][ T12] team0 (unregistering): Port device geneve1 removed [ 1091.221154][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1091.253992][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1091.276801][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.304481][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface