last executing test programs: 2.601570688s ago: executing program 2 (id=8620): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000003000000ac1414aa"], 0xfdef) 2.444694817s ago: executing program 2 (id=8625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x500}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001c40)) 2.21789797s ago: executing program 4 (id=8626): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001400)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0040002400400027c035c0461c1d67f6f94007134cf6e0f8100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x20040080) 2.026598091s ago: executing program 1 (id=8628): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) 1.946710476s ago: executing program 2 (id=8630): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='.)[-(^{-\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.86731299s ago: executing program 1 (id=8631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = gettid() perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x1a, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x10000000000000ff, &(0x7f00000000c0)=""/13, 0xd}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1b0000001d008104e00f80ecdb4cb9f207c804a00d000000880802", 0x1b}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) gettid() (async) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x0, 0x1a, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$kcm(0xa, 0x6, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x10000000000000ff, &(0x7f00000000c0)=""/13, 0xd}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1b0000001d008104e00f80ecdb4cb9f207c804a00d000000880802", 0x1b}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) (async) 1.86693766s ago: executing program 4 (id=8632): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.834338263s ago: executing program 0 (id=8633): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x75, &(0x7f0000000000), 0x8) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)='|', 0x1}], 0x1}, 0x8c0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x48}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.70946496s ago: executing program 3 (id=8634): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220003"], 0xfdef) (rerun: 32) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000280)) (async) socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000004860cd45b0000000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f0000000080)=""/144}, 0x20) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034008410000", 0x1c}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) 1.491625153s ago: executing program 4 (id=8635): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000014006b02c84e21100af32c6e0a0675f8d344604000050000be7937696182949a36c21b3b48dfd8cdbf9367b498fa51f6db64c9f4d493803792684b0fffb6c0504bb9183132be471b93c91b5d7870743719b4b53cf2000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.440231776s ago: executing program 0 (id=8636): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3499bc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x85, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf835000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.439987256s ago: executing program 1 (id=8637): r0 = socket$kcm(0xa, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, &(0x7f0000000040), 0xcf) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f00000006c0)=""/131, 0x83}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/72, 0x48}], 0x9, &(0x7f0000000900)=""/15, 0xf}, 0x26c787988cd92447) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x16ac, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c00001c210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 1.428652386s ago: executing program 3 (id=8638): socket$kcm(0x18, 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xfffffffe}, {}]}) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000700)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x99, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="cfe864343990e196ab15eab67bba3d11efbda9dbaf963b80d521077ea6a74e1c6d0bd12767709ee7cfa439a387614d96e2cc4521d2a9321f17e36c35e57341", 0x3f}, {&(0x7f0000000140)="e43ce7370d72627630c277ed8e7b69dca0c2d545f077d0aa233d11dda8c6b77fc26d2981b404584ac82f6ba6ebfe5570ed0f78d9bd3e672ce781d9aec3022cd8f468499417eededa7a797ff4b94a357d202f526191942f0d30263f632db9e0", 0x5f}], 0x2}, 0x80) 1.310350803s ago: executing program 2 (id=8639): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93824fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x680e4bae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c0000000000030000000000000001004522a4a0cdf6eea7053ee97425cb782e10f57c06b15f58ecfa2bf9d8bdefb0f6e2f6efd14651e5489e1475aa28dc338382b8dd77e5b1bee24517be171b104ea992e91bdf5245f844ca0b8ea553bb582caba498996fb593a7922c45759a074f800cce3b66d134aba0d74c79477de396a0924210", @ANYBLOB="70886d340c87b652a451fbd1476461b2ae85ddf27b01f6b71c28fdc2980244cbc63db4b8f150ada2025ed2d8c3c8019e1a9cc0c3defdc48db6aac11dfc4d73a26fe3608f341962a9b609f9e4e4a08acb1ea0867ba79abfa844e32b6a8fb43f73dddef510c6bb9aee75b08941f9c35d41edaf203ef51d98e7531fd11eb3128a4b53ef4cadf53f66827fc33c618249a58d54482f6ff7bfac1a", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r3}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea70864160af36514001ac004000202080002000600e716ffb3f06f51cf18c3ecb525c89c32f29209000000251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r0, 0x0, 0x5, &(0x7f00000001c0)='-:#!\x00'}, 0x30) r7 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, 0x0, 0xfdef) 1.295535494s ago: executing program 0 (id=8640): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x4001}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c00050001", 0xf}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.209661019s ago: executing program 4 (id=8641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x500}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001c40)) 1.178340771s ago: executing program 3 (id=8642): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x51}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0xa4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) 908.153397ms ago: executing program 2 (id=8643): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 816.373312ms ago: executing program 3 (id=8644): socket$kcm(0x10, 0x2, 0x0) 815.864082ms ago: executing program 1 (id=8645): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000002000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 737.400297ms ago: executing program 0 (id=8646): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0xa6ffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) 734.963057ms ago: executing program 3 (id=8647): r0 = socket$kcm(0x29, 0x1860fb41c4623da3, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@generic={0x8, "bfc1feae4b09b78d92f0535f47c38a47df95feb47f41fc8aefa144f53bde662af69db0e71485ef03381760f4b97b72c486110549de05ff4a5d954af446d48c5a14b32c7d52e95250c6a8b95a1a2063895768084f780ecacd8cdeb013ad57fc9a3b7378bb11dff8c507f9904b82e336a990ff0721eab31d60936d5422fb4b"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)="c731543b0e18be1687ee30cf957f4e12e610539a23f24a79aa06698802b4d65cebaff38e9afa712b576a3eae4fcd8d39", 0x30}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000240)=[{0xb0, 0x0, 0x5, "97a2c91d49b528acde9a31264c9d155d543542a890dd47f5b4d1d443eb591cf0526e59114fdaf12e869fb8746145158fe7979786abfce1a893dffe3ae50e3aae80364508a7e142e0e89d02775115c78374fcb488b52c1f37b65af99da4b6ab8d734ecef3f954db02e55ccd9b63c5f21c1afbd8e87a8863e6a8832063a1adf71ce71f7b5764fff510f2fad37a348bf0384148af09e909c69d9f55e7ff"}], 0xb0}, 0x4020810) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 554.260118ms ago: executing program 4 (id=8648): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0xb80b}, 0x0) 416.805706ms ago: executing program 0 (id=8649): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="61123400fffffffe61134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 386.416907ms ago: executing program 1 (id=8650): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3499bc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x85, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf835000000000000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 368.477108ms ago: executing program 4 (id=8651): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r2, 0x0, 0xe, &(0x7f00000010c0)='\\+{^*-.#$+\xb9[*\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="65f19977", 0x4}], 0x1}, 0x800) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0xa, 0x0, &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x11}, 0x80) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x41c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4002, 0x44b, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 316.197042ms ago: executing program 2 (id=8652): socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)}, 0x24008080) r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000020721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0xa604, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xf9}, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 281.512563ms ago: executing program 0 (id=8653): r0 = socket$kcm(0xa, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, &(0x7f0000000040), 0xcf) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x8000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0xfbfffffffffffffe, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000008000000010000008000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e0000"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x68, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x800007ff}, 0x828, 0x0, 0x0, 0x7, 0x1ca25cf, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700060400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f00000006c0)=""/131, 0x83}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/72, 0x48}], 0x8, &(0x7f0000000900)=""/15, 0xf}, 0x26c787988cd92447) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x450, 0x16ac, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0) socket$kcm(0x10, 0x2, 0x0) 212.727418ms ago: executing program 1 (id=8654): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93824fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x680e4bae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c0000000000030000000000000001004522a4a0cdf6eea7053ee97425cb782e10f57c06b15f58ecfa2bf9d8bdefb0f6e2f6efd14651e5489e1475aa28dc338382b8dd77e5b1bee24517be171b104ea992e91bdf5245f844ca0b8ea553bb582caba498996fb593a7922c45759a074f800cce3b66d134aba0d74c79477de396a0924210", @ANYBLOB="70886d340c87b652a451fbd1476461b2ae85ddf27b01f6b71c28fdc2980244cbc63db4b8f150ada2025ed2d8c3c8019e1a9cc0c3defdc48db6aac11dfc4d73a26fe3608f341962a9b609f9e4e4a08acb1ea0867ba79abfa844e32b6a8fb43f73dddef510c6bb9aee75b08941f9c35d41edaf203ef51d98e7531fd11eb3128a4b53ef4cadf53f66827fc33c618249a58d54482f6ff7bfac1a", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r3}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea70864160af36514001ac004000202080002000600e716ffb3f06f51cf18c3ecb525c89c32f29209000000251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r0, 0x0, 0x5, &(0x7f00000001c0)='-:#!\x00'}, 0x30) r7 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, 0x0, 0xfdef) 0s ago: executing program 3 (id=8655): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="8500f9c2c53d052c2d28000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e76081350e0000000b000000ff00000080420400", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000"], 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001", 0x1f}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000b00)={0x0, 0x0}}, 0x6c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100020, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu '], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x1fffffffffffe, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x563, 0x800000000}, 0x0, 0x0, 0x9b4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x45}, 0x40) recvmsg$kcm(r10, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 5][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1104.205851][T26565] chnl_net:caif_netlink_parms(): no params data found [ 1104.364040][T26565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.371507][T26565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.380182][T26565] device bridge_slave_0 entered promiscuous mode [ 1104.390761][T26565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.398434][T26565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.407060][T26565] device bridge_slave_1 entered promiscuous mode [ 1104.435647][T26565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.447869][T26565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.479330][T26565] team0: Port device team_slave_0 added [ 1104.487572][T26565] team0: Port device team_slave_1 added [ 1104.510099][T26565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.517486][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.553377][T26565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.566541][T26565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.573852][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.600490][T26565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.951908][T19736] Bluetooth: hci2: command 0x0409 tx timeout [ 1106.027675][T26565] device hsr_slave_0 entered promiscuous mode [ 1106.079060][T26565] device hsr_slave_1 entered promiscuous mode [ 1106.484838][T26593] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1106.753535][T26565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.799734][T26601] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1106.821988][T26601] netlink: zone id is out of range [ 1106.833412][T26601] netlink: zone id is out of range [ 1106.870134][T26601] netlink: zone id is out of range [ 1106.882383][T26601] netlink: get zone limit has 8 unknown bytes [ 1106.974379][T26565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.998492][T26607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1107.141549][T26565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.656143][T26565] bond0: (slave netdevsim0): Releasing backup interface [ 1107.912647][T26565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1107.935618][T26565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1107.956980][T26565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1107.986573][T26636] netlink: 'syz.2.7621': attribute type 39 has an invalid length. [ 1108.002893][T26565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1108.021876][T19736] Bluetooth: hci2: command 0x041b tx timeout [ 1108.306481][T26650] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.7623'. [ 1108.331372][T26565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.341114][T26650] netlink: zone id is out of range [ 1108.351546][T26650] netlink: zone id is out of range [ 1108.371183][T26650] netlink: zone id is out of range [ 1108.393699][T26650] netlink: get zone limit has 8 unknown bytes [ 1108.412972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1108.428725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1108.450283][T26565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.497724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1108.527569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1108.557244][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.564463][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.608833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1108.650879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1108.692263][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.699394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.863242][T26565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1108.881811][T26565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1108.908859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1108.923730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1108.933681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1108.943460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1108.954832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1108.965436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1108.980983][T26672] FAULT_INJECTION: forcing a failure. [ 1108.980983][T26672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.018558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1109.032453][T26672] CPU: 1 PID: 26672 Comm: syz.2.7630 Not tainted syzkaller #0 [ 1109.039967][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1109.050069][T26672] Call Trace: [ 1109.053367][T26672] [ 1109.056325][T26672] dump_stack_lvl+0x188/0x24e [ 1109.061058][T26672] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1109.067249][T26672] ? show_regs_print_info+0x12/0x12 [ 1109.072490][T26672] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1109.078689][T26672] should_fail_ex+0x399/0x4d0 [ 1109.083416][T26672] copyin+0x1b/0x120 [ 1109.087346][T26672] _copy_from_iter+0x447/0x1130 [ 1109.092240][T26672] ? copyout_mc+0x110/0x110 [ 1109.096799][T26672] ? __virt_addr_valid+0x188/0x540 [ 1109.101952][T26672] ? __virt_addr_valid+0x188/0x540 [ 1109.107101][T26672] ? __virt_addr_valid+0x465/0x540 [ 1109.112246][T26672] ? __check_object_size+0x500/0xa40 [ 1109.117559][T26672] netlink_sendmsg+0x755/0xbd0 [ 1109.122363][T26672] ? netlink_getsockopt+0x550/0x550 [ 1109.127588][T26672] ? aa_sock_msg_perm+0x94/0x150 [ 1109.132536][T26672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1109.137828][T26672] ? security_socket_sendmsg+0x7c/0xa0 [ 1109.143303][T26672] ? netlink_getsockopt+0x550/0x550 [ 1109.148515][T26672] ____sys_sendmsg+0x5be/0x970 [ 1109.153306][T26672] ? __sys_sendmsg_sock+0x30/0x30 [ 1109.158375][T26672] ? __import_iovec+0x315/0x500 [ 1109.163239][T26672] ? import_iovec+0x6f/0xa0 [ 1109.167751][T26672] ___sys_sendmsg+0x2a2/0x360 [ 1109.172444][T26672] ? __sys_sendmsg+0x290/0x290 [ 1109.177250][T26672] __se_sys_sendmsg+0x1bb/0x2a0 [ 1109.182116][T26672] ? __x64_sys_sendmsg+0x80/0x80 [ 1109.187077][T26672] ? lockdep_hardirqs_on+0x94/0x140 [ 1109.192293][T26672] do_syscall_64+0x4c/0xa0 [ 1109.196721][T26672] ? clear_bhb_loop+0x60/0xb0 [ 1109.201407][T26672] ? clear_bhb_loop+0x60/0xb0 [ 1109.206131][T26672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.212042][T26672] RIP: 0033:0x7f6d4059acb9 [ 1109.216477][T26672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.236102][T26672] RSP: 002b:00007f6d4144b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.244533][T26672] RAX: ffffffffffffffda RBX: 00007f6d40816090 RCX: 00007f6d4059acb9 [ 1109.252514][T26672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1109.260497][T26672] RBP: 00007f6d4144b090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.268478][T26672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.276464][T26672] R13: 00007f6d40816128 R14: 00007f6d40816090 R15: 00007ffc64b94e48 [ 1109.284462][T26672] [ 1109.322457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1109.346045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1109.354915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1109.364567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1109.375455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1109.384251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1109.525124][T26680] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7632'. [ 1109.745150][T26687] netlink: 'syz.1.7634': attribute type 3 has an invalid length. [ 1109.796838][T26687] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1110.014889][T26697] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7638'. [ 1110.031860][T26697] netlink: zone id is out of range [ 1110.111741][T19736] Bluetooth: hci2: command 0x040f tx timeout [ 1110.268546][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1110.308330][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1110.356490][T26565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.684784][T26721] netlink: 'syz.1.7647': attribute type 13 has an invalid length. [ 1111.491298][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1111.513571][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1111.586764][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1111.606470][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1111.643987][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1111.664135][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1111.708324][T26565] device veth0_vlan entered promiscuous mode [ 1111.736534][T26565] device veth1_vlan entered promiscuous mode [ 1111.795105][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1111.809275][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1111.828463][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1111.839567][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1111.858896][T26565] device veth0_macvtap entered promiscuous mode [ 1111.900679][T26565] device veth1_macvtap entered promiscuous mode [ 1111.920847][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.944148][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.965654][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.980776][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.995165][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.014883][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.030078][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.042899][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.059157][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.072024][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.090478][T26565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.100089][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1112.118726][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1112.158892][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1112.181735][T19736] Bluetooth: hci2: command 0x0419 tx timeout [ 1112.184375][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1112.281912][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.314247][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.326999][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.337896][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.352070][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.364329][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.374443][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.385130][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.395256][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.408171][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.420754][T26565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.459415][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1112.482838][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1112.540058][T26565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.591677][T26565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.600454][T26565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.644629][T26565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.823334][T17292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.831410][T17292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.901479][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.915766][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1112.918633][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.948026][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1113.484221][T26777] FAULT_INJECTION: forcing a failure. [ 1113.484221][T26777] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.527939][T26777] CPU: 0 PID: 26777 Comm: syz.4.7666 Not tainted syzkaller #0 [ 1113.535485][T26777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1113.545602][T26777] Call Trace: [ 1113.548918][T26777] [ 1113.551880][T26777] dump_stack_lvl+0x188/0x24e [ 1113.556630][T26777] ? show_regs_print_info+0x12/0x12 [ 1113.561888][T26777] ? load_image+0x400/0x400 [ 1113.566440][T26777] ? __lock_acquire+0x7d10/0x7d10 [ 1113.571544][T26777] should_fail_ex+0x399/0x4d0 [ 1113.576292][T26777] should_failslab+0x5/0x20 [ 1113.580849][T26777] slab_pre_alloc_hook+0x59/0x310 [ 1113.585931][T26777] ? qdisc_alloc+0x95/0xa50 [ 1113.590488][T26777] __kmem_cache_alloc_node+0x4f/0x260 [ 1113.595920][T26777] ? qdisc_alloc+0x95/0xa50 [ 1113.600478][T26777] __kmalloc_node+0xa0/0x240 [ 1113.605124][T26777] qdisc_alloc+0x95/0xa50 [ 1113.609492][T26777] ? asm_sysvec_call_function_single+0x16/0x20 [ 1113.615704][T26777] qdisc_create_dflt+0x5f/0x4b0 [ 1113.620601][T26777] ? dev_activate+0x378/0x11a0 [ 1113.625412][T26777] dev_activate+0x393/0x11a0 [ 1113.630094][T26777] __dev_open+0x343/0x430 [ 1113.634470][T26777] ? dev_open+0x180/0x180 [ 1113.638875][T26777] __dev_change_flags+0x20d/0x6a0 [ 1113.644043][T26777] ? dev_get_flags+0x1c0/0x1c0 [ 1113.648853][T26777] ? rcu_is_watching+0x11/0xa0 [ 1113.653701][T26777] ? trace_contention_end+0x5f/0x170 [ 1113.659035][T26777] dev_change_flags+0x82/0x1a0 [ 1113.663850][T26777] dev_ifsioc+0x130/0xd40 [ 1113.668220][T26777] ? dev_ioctl+0xe80/0xe80 [ 1113.672685][T26777] ? dev_load+0x1d/0x1e0 [ 1113.676966][T26777] ? dev_load+0x1d/0x1e0 [ 1113.681248][T26777] dev_ioctl+0x55e/0xe80 [ 1113.685554][T26777] sock_do_ioctl+0x245/0x320 [ 1113.690220][T26777] ? sock_show_fdinfo+0xb0/0xb0 [ 1113.695149][T26777] sock_ioctl+0x4d2/0x710 [ 1113.699522][T26777] ? sock_poll+0x410/0x410 [ 1113.704014][T26777] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1113.708994][T26777] ? security_file_ioctl+0x7c/0xa0 [ 1113.714145][T26777] ? sock_poll+0x410/0x410 [ 1113.718608][T26777] __se_sys_ioctl+0xfa/0x170 [ 1113.723246][T26777] do_syscall_64+0x4c/0xa0 [ 1113.727687][T26777] ? clear_bhb_loop+0x60/0xb0 [ 1113.732396][T26777] ? clear_bhb_loop+0x60/0xb0 [ 1113.736966][T26783] netlink: 'syz.3.7667': attribute type 11 has an invalid length. [ 1113.744935][T26777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.744963][T26777] RIP: 0033:0x7fc28599acb9 [ 1113.744983][T26777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.745002][T26777] RSP: 002b:00007fc286903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.745028][T26777] RAX: ffffffffffffffda RBX: 00007fc285c15fa0 RCX: 00007fc28599acb9 [ 1113.745044][T26777] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000d [ 1113.745059][T26777] RBP: 00007fc286903090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.745073][T26777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.745088][T26777] R13: 00007fc285c16038 R14: 00007fc285c15fa0 R15: 00007ffd98ad1df8 [ 1113.745157][T26777] [ 1113.783419][T26783] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7667'. [ 1113.851870][T26777] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1113.872047][T26785] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1113.880759][T26782] syzkaller0: create flow: hash 396058584 index 1 [ 1113.924230][T26778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.974980][T26784] syzkaller0: delete flow: hash 396058584 index 1 [ 1114.261247][T26794] netlink: 'syz.0.7673': attribute type 6 has an invalid length. [ 1114.378108][T26801] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7674'. [ 1114.961937][T19261] syzkaller0: tun_net_xmit 76 [ 1115.527639][T26835] FAULT_INJECTION: forcing a failure. [ 1115.527639][T26835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.549189][T26835] CPU: 0 PID: 26835 Comm: syz.2.7687 Not tainted syzkaller #0 [ 1115.556718][T26835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1115.566803][T26835] Call Trace: [ 1115.570112][T26835] [ 1115.573091][T26835] dump_stack_lvl+0x188/0x24e [ 1115.577826][T26835] ? show_regs_print_info+0x12/0x12 [ 1115.583099][T26835] ? load_image+0x400/0x400 [ 1115.587658][T26835] ? __lock_acquire+0x7d10/0x7d10 [ 1115.592733][T26835] ? snprintf+0xe5/0x140 [ 1115.597012][T26835] should_fail_ex+0x399/0x4d0 [ 1115.601745][T26835] _copy_to_user+0x2c/0x130 [ 1115.606300][T26835] simple_read_from_buffer+0xe3/0x150 [ 1115.611741][T26835] proc_fail_nth_read+0x1a6/0x220 [ 1115.616832][T26835] ? proc_fault_inject_write+0x310/0x310 [ 1115.622517][T26835] ? fsnotify_perm+0x248/0x550 [ 1115.627338][T26835] ? proc_fault_inject_write+0x310/0x310 [ 1115.633013][T26835] vfs_read+0x2de/0xa00 [ 1115.637216][T26835] ? kernel_read+0x1e0/0x1e0 [ 1115.641844][T26835] ? __fget_files+0x28/0x4b0 [ 1115.646478][T26835] ? __fget_files+0x28/0x4b0 [ 1115.651117][T26835] ? __fget_files+0x43d/0x4b0 [ 1115.655852][T26835] ? __fdget_pos+0x2ae/0x360 [ 1115.660487][T26835] ? ksys_read+0x71/0x250 [ 1115.664858][T26835] ksys_read+0x14c/0x250 [ 1115.669158][T26835] ? vfs_write+0xa30/0xa30 [ 1115.673640][T26835] ? lockdep_hardirqs_on+0x94/0x140 [ 1115.678895][T26835] do_syscall_64+0x4c/0xa0 [ 1115.683353][T26835] ? clear_bhb_loop+0x60/0xb0 [ 1115.688068][T26835] ? clear_bhb_loop+0x60/0xb0 [ 1115.692788][T26835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.698710][T26835] RIP: 0033:0x7f6d4055b58e [ 1115.703152][T26835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1115.722785][T26835] RSP: 002b:00007f6d4146bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.731240][T26835] RAX: ffffffffffffffda RBX: 00007f6d4146c6c0 RCX: 00007f6d4055b58e [ 1115.739245][T26835] RDX: 000000000000000f RSI: 00007f6d4146c0a0 RDI: 0000000000000005 [ 1115.747265][T26835] RBP: 00007f6d4146c090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.755310][T26835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.763312][T26835] R13: 00007f6d40816038 R14: 00007f6d40815fa0 R15: 00007ffc64b94e48 [ 1115.771363][T26835] [ 1115.791412][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.797804][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.861946][T26839] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7688'. [ 1115.892276][T26839] net_ratelimit: 3 callbacks suppressed [ 1115.892309][T26839] netlink: zone id is out of range [ 1115.922807][T26839] netlink: zone id is out of range [ 1115.931025][T26839] netlink: zone id is out of range [ 1115.937440][T26839] netlink: get zone limit has 8 unknown bytes [ 1116.202430][T26844] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1116.220841][T26844] netlink: zone id is out of range [ 1116.226681][T26844] netlink: zone id is out of range [ 1116.238507][T26844] netlink: zone id is out of range [ 1116.246654][T26844] netlink: get zone limit has 8 unknown bytes [ 1116.551889][ T4273] syzkaller0: tun_net_xmit 76 [ 1117.184707][ T22] syzkaller0: tun_net_xmit 76 [ 1118.499038][T26876] netlink: 'syz.2.7703': attribute type 12 has an invalid length. [ 1118.522704][T26876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7703'. [ 1118.539344][T26874] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1118.555281][T26874] netlink: zone id is out of range [ 1118.559764][T26870] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1118.570901][T26874] netlink: zone id is out of range [ 1118.584536][T26877] netlink: 'syz.1.7700': attribute type 10 has an invalid length. [ 1122.447305][T26921] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7718'. [ 1122.472043][T26921] net_ratelimit: 6 callbacks suppressed [ 1122.472077][T26921] netlink: zone id is out of range [ 1122.502366][T26921] netlink: zone id is out of range [ 1122.522328][T26921] netlink: zone id is out of range [ 1122.528548][T26921] netlink: get zone limit has 8 unknown bytes [ 1122.634412][T26924] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7719'. [ 1122.688392][T26924] netlink: zone id is out of range [ 1122.694678][T26924] netlink: zone id is out of range [ 1122.726219][T26924] netlink: zone id is out of range [ 1122.753148][T26924] netlink: get zone limit has 8 unknown bytes [ 1122.952273][T26933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7724'. [ 1123.968405][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1125.952152][T26933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7724'. [ 1126.334115][T26969] netlink: 'syz.2.7731': attribute type 39 has an invalid length. [ 1126.695851][T26979] netlink: 'syz.3.7735': attribute type 2 has an invalid length. [ 1126.819381][T26983] netlink: 'syz.4.7737': attribute type 10 has an invalid length. [ 1126.909108][T26983] team0: Port device netdevsim0 added [ 1126.974457][T26987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.983102][T26987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.098926][T26986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.122464][T26986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.182955][T26986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.190455][T26986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.291288][T26984] netlink: 'syz.4.7737': attribute type 10 has an invalid length. [ 1127.329357][T26984] team0: Port device netdevsim0 removed [ 1127.344207][T26984] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1127.355192][T26992] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7739'. [ 1127.736458][T27007] netlink: 'syz.4.7744': attribute type 10 has an invalid length. [ 1127.829926][T27011] netlink: 'syz.4.7744': attribute type 29 has an invalid length. [ 1127.899390][T27011] netlink: 'syz.4.7744': attribute type 29 has an invalid length. [ 1128.499411][T27030] IPv6: Can't replace route, no match found [ 1128.996318][T27036] netlink: 'syz.2.7755': attribute type 10 has an invalid length. [ 1129.052933][T27036] bond0: (slave netdevsim0): Releasing backup interface [ 1129.088767][T27036] device netdevsim0 left promiscuous mode [ 1129.133438][T27036] device netdevsim0 entered promiscuous mode [ 1129.151411][T27036] team0: Port device netdevsim0 added [ 1129.170239][T27048] netlink: 'syz.2.7755': attribute type 10 has an invalid length. [ 1129.187788][T27048] device netdevsim0 left promiscuous mode [ 1129.251496][T27048] team0: Port device netdevsim0 removed [ 1129.271466][T27048] device netdevsim0 entered promiscuous mode [ 1129.285103][T27048] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1129.303078][T27039] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1129.366231][T27046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.376806][T27046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.423262][T27050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.436141][T27050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.444884][T27050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.452707][T27050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.965278][T27070] netlink: 'syz.1.7764': attribute type 39 has an invalid length. [ 1130.257648][T27073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7765'. [ 1130.294491][T27073] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7765'. [ 1130.618493][T27094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1130.840554][T27100] device netdevsim0 entered promiscuous mode [ 1130.860400][T27100] team0: Port device netdevsim0 added [ 1130.957032][T27100] device netdevsim0 left promiscuous mode [ 1131.065531][T27100] team0: Port device netdevsim0 removed [ 1131.111762][T27109] bridge0: port 4(bond0) entered disabled state [ 1131.118761][T27109] bridge0: port 3(team0) entered disabled state [ 1131.127163][T27109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.136177][T27109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.324274][T27112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.362516][T27112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.391710][T27112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.399177][T27112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.527329][T27124] FAULT_INJECTION: forcing a failure. [ 1131.527329][T27124] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.560973][T27124] CPU: 1 PID: 27124 Comm: syz.3.7782 Not tainted syzkaller #0 [ 1131.568493][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1131.578577][T27124] Call Trace: [ 1131.581885][T27124] [ 1131.584853][T27124] dump_stack_lvl+0x188/0x24e [ 1131.589593][T27124] ? show_regs_print_info+0x12/0x12 [ 1131.594829][T27124] ? load_image+0x400/0x400 [ 1131.599386][T27124] should_fail_ex+0x399/0x4d0 [ 1131.600292][T27126] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1131.604093][T27124] should_failslab+0x5/0x20 [ 1131.604149][T27124] slab_pre_alloc_hook+0x59/0x310 [ 1131.604178][T27124] kmem_cache_alloc+0x56/0x2f0 [ 1131.604199][T27124] ? skb_clone+0x1e7/0x370 [ 1131.604234][T27124] skb_clone+0x1e7/0x370 [ 1131.604266][T27124] bpf_clone_redirect+0xa9/0x3c0 [ 1131.617407][T27126] netlink: zone id is out of range [ 1131.618063][T27124] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 1131.618088][T27124] ? __kprobes_text_end+0x96d10/0x96d10 [ 1131.618112][T27124] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.627559][T27126] netlink: zone id is out of range [ 1131.627912][T27124] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1131.627947][T27124] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1131.627978][T27124] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 1131.628007][T27124] ? ktime_get_real_ts64+0x440/0x440 [ 1131.638021][T27126] netlink: zone id is out of range [ 1131.641605][T27124] ? read_lock_is_recursive+0x10/0x10 [ 1131.641640][T27124] ? __cant_sleep+0x220/0x220 [ 1131.641658][T27124] ? preempt_schedule_irq+0xe6/0x160 [ 1131.641690][T27124] ? bpf_test_timer_continue+0x142/0x380 [ 1131.641720][T27124] bpf_test_run+0x2b6/0x830 [ 1131.652859][T27126] netlink: get zone limit has 8 unknown bytes [ 1131.657845][T27124] ? convert___skb_to_skb+0x580/0x580 [ 1131.657876][T27124] ? eth_get_headlen+0x200/0x200 [ 1131.657893][T27124] ? __build_skb+0x257/0x3c0 [ 1131.657923][T27124] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 1131.657944][T27124] ? convert___skb_to_skb+0x3d/0x580 [ 1131.657969][T27124] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 1131.759967][T27124] ? cpu_online+0xa0/0xa0 [ 1131.764320][T27124] bpf_prog_test_run+0x31e/0x390 [ 1131.769284][T27124] __sys_bpf+0x62b/0x780 [ 1131.773632][T27124] ? bpf_link_show_fdinfo+0x380/0x380 [ 1131.779037][T27124] ? lock_chain_count+0x20/0x20 [ 1131.783907][T27124] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.789911][T27124] __x64_sys_bpf+0x78/0x90 [ 1131.794351][T27124] do_syscall_64+0x4c/0xa0 [ 1131.798782][T27124] ? clear_bhb_loop+0x60/0xb0 [ 1131.803470][T27124] ? clear_bhb_loop+0x60/0xb0 [ 1131.808161][T27124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.814065][T27124] RIP: 0033:0x7face719acb9 [ 1131.818495][T27124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.838118][T27124] RSP: 002b:00007face53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.846549][T27124] RAX: ffffffffffffffda RBX: 00007face7415fa0 RCX: 00007face719acb9 [ 1131.854536][T27124] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1131.862515][T27124] RBP: 00007face53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.870492][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.878475][T27124] R13: 00007face7416038 R14: 00007face7415fa0 R15: 00007ffcefce2478 [ 1131.886489][T27124] [ 1132.534863][T27133] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7786'. [ 1132.551842][T27133] netlink: zone id is out of range [ 1132.582856][T27133] netlink: zone id is out of range [ 1132.594002][T27133] netlink: zone id is out of range [ 1132.615263][T27133] netlink: zone id is out of range [ 1132.639825][T27133] netlink: zone id is out of range [ 1132.652014][T27133] netlink: zone id is out of range [ 1132.662271][T27141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7790'. [ 1132.890512][T27146] validate_nla: 6 callbacks suppressed [ 1132.890913][T27146] netlink: 'syz.2.7791': attribute type 10 has an invalid length. [ 1132.954118][T27146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7791'. [ 1133.083367][T27145] delete_channel: no stack [ 1133.480337][T27156] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7794'. [ 1133.596217][T27164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.615541][T27164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.647145][T27164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.668851][T27164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.055209][T27182] FAULT_INJECTION: forcing a failure. [ 1134.055209][T27182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.071325][T27182] CPU: 1 PID: 27182 Comm: syz.2.7805 Not tainted syzkaller #0 [ 1134.078835][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.088930][T27182] Call Trace: [ 1134.092247][T27182] [ 1134.095203][T27182] dump_stack_lvl+0x188/0x24e [ 1134.099922][T27182] ? show_regs_print_info+0x12/0x12 [ 1134.105157][T27182] ? load_image+0x400/0x400 [ 1134.109692][T27182] ? __lock_acquire+0x7d10/0x7d10 [ 1134.114764][T27182] ? __might_sleep+0x2a/0xd0 [ 1134.119384][T27182] should_fail_ex+0x399/0x4d0 [ 1134.124123][T27182] _copy_to_user+0x2c/0x130 [ 1134.128697][T27182] bpf_test_finish+0x4a2/0x600 [ 1134.133503][T27182] ? convert___skb_to_skb+0x580/0x580 [ 1134.138923][T27182] ? convert_skb_to___skb+0x420/0x420 [ 1134.144343][T27182] ? __build_skb+0x257/0x3c0 [ 1134.148973][T27182] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1134.154411][T27182] ? cpu_online+0xa0/0xa0 [ 1134.158791][T27182] bpf_prog_test_run+0x31e/0x390 [ 1134.163775][T27182] __sys_bpf+0x62b/0x780 [ 1134.168079][T27182] ? bpf_link_show_fdinfo+0x380/0x380 [ 1134.173505][T27182] ? lock_chain_count+0x20/0x20 [ 1134.178402][T27182] __x64_sys_bpf+0x78/0x90 [ 1134.182851][T27182] do_syscall_64+0x4c/0xa0 [ 1134.187313][T27182] ? clear_bhb_loop+0x60/0xb0 [ 1134.192017][T27182] ? clear_bhb_loop+0x60/0xb0 [ 1134.196742][T27182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.202664][T27182] RIP: 0033:0x7f6d4059acb9 [ 1134.207105][T27182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.226782][T27182] RSP: 002b:00007f6d4146c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1134.235230][T27182] RAX: ffffffffffffffda RBX: 00007f6d40815fa0 RCX: 00007f6d4059acb9 [ 1134.243223][T27182] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1134.251221][T27182] RBP: 00007f6d4146c090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.259219][T27182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.267215][T27182] R13: 00007f6d40816038 R14: 00007f6d40815fa0 R15: 00007ffc64b94e48 [ 1134.275227][T27182] [ 1134.378497][T27189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7806'. [ 1134.392779][T27191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7808'. [ 1134.624993][T27199] FAULT_INJECTION: forcing a failure. [ 1134.624993][T27199] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.649704][T27199] CPU: 0 PID: 27199 Comm: syz.1.7811 Not tainted syzkaller #0 [ 1134.657210][T27199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.667289][T27199] Call Trace: [ 1134.670609][T27199] [ 1134.673571][T27199] dump_stack_lvl+0x188/0x24e [ 1134.678307][T27199] ? show_regs_print_info+0x12/0x12 [ 1134.683537][T27199] ? load_image+0x400/0x400 [ 1134.688077][T27199] ? mark_lock+0x94/0x320 [ 1134.692449][T27199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1134.698462][T27199] should_fail_ex+0x399/0x4d0 [ 1134.703187][T27199] should_failslab+0x5/0x20 [ 1134.707725][T27199] slab_pre_alloc_hook+0x59/0x310 [ 1134.712784][T27199] ? sctp_add_bind_addr+0x89/0x350 [ 1134.717927][T27199] __kmem_cache_alloc_node+0x4f/0x260 [ 1134.723332][T27199] ? sctp_add_bind_addr+0x89/0x350 [ 1134.728478][T27199] kmalloc_trace+0x26/0xe0 [ 1134.732932][T27199] sctp_add_bind_addr+0x89/0x350 [ 1134.737902][T27199] sctp_copy_local_addr_list+0x311/0x4e0 [ 1134.743586][T27199] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1134.749343][T27199] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1134.755460][T27199] ? sctp_v6_is_any+0x60/0x70 [ 1134.760173][T27199] ? sctp_copy_one_addr+0x93/0x660 [ 1134.765302][T27199] sctp_bind_addr_copy+0xaf/0x3c0 [ 1134.770344][T27199] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1134.776706][T27199] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1134.782006][T27199] ? __sctp_connect+0xd80/0xd80 [ 1134.786880][T27199] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1134.792431][T27199] ? security_sctp_bind_connect+0x85/0xb0 [ 1134.798163][T27199] sctp_sendmsg+0x15b0/0x2940 [ 1134.802867][T27199] ? aa_sk_perm+0x7e1/0x950 [ 1134.807385][T27199] ? sctp_getsockopt+0x8a0/0x8a0 [ 1134.812342][T27199] ? aa_af_perm+0x340/0x340 [ 1134.816853][T27199] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1134.823287][T27199] ? inet_sendmsg+0xe5/0x2f0 [ 1134.827896][T27199] ? inet_send_prepare+0x260/0x260 [ 1134.833024][T27199] ____sys_sendmsg+0x5be/0x970 [ 1134.837806][T27199] ? __sys_sendmsg_sock+0x30/0x30 [ 1134.842853][T27199] ? import_iovec+0x74/0xa0 [ 1134.847379][T27199] ___sys_sendmsg+0x2a2/0x360 [ 1134.852081][T27199] ? __sys_sendmsg+0x290/0x290 [ 1134.856878][T27199] ? ktime_get_real_ts64+0x440/0x440 [ 1134.862191][T27199] __se_sys_sendmsg+0x1bb/0x2a0 [ 1134.867060][T27199] ? __x64_sys_sendmsg+0x80/0x80 [ 1134.872022][T27199] ? lockdep_hardirqs_on+0x94/0x140 [ 1134.877245][T27199] do_syscall_64+0x4c/0xa0 [ 1134.881686][T27199] ? clear_bhb_loop+0x60/0xb0 [ 1134.886379][T27199] ? clear_bhb_loop+0x60/0xb0 [ 1134.891078][T27199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.896983][T27199] RIP: 0033:0x7fc9ae59acb9 [ 1134.901408][T27199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.921041][T27199] RSP: 002b:00007fc9af38a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.929470][T27199] RAX: ffffffffffffffda RBX: 00007fc9ae815fa0 RCX: 00007fc9ae59acb9 [ 1134.937465][T27199] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1134.945500][T27199] RBP: 00007fc9af38a090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.953485][T27199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.961462][T27199] R13: 00007fc9ae816038 R14: 00007fc9ae815fa0 R15: 00007ffd349e4878 [ 1134.969460][T27199] [ 1135.103056][T27204] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7812'. [ 1135.234273][T27210] netlink: 'syz.2.7814': attribute type 5 has an invalid length. [ 1136.312552][T27244] netlink: 'syz.2.7827': attribute type 41 has an invalid length. [ 1136.320511][T27244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7827'. [ 1136.335804][T27244] FAULT_INJECTION: forcing a failure. [ 1136.335804][T27244] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.423136][T27244] CPU: 0 PID: 27244 Comm: syz.2.7827 Not tainted syzkaller #0 [ 1136.430667][T27244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1136.440749][T27244] Call Trace: [ 1136.444064][T27244] [ 1136.447020][T27244] dump_stack_lvl+0x188/0x24e [ 1136.451739][T27244] ? show_regs_print_info+0x12/0x12 [ 1136.456974][T27244] ? load_image+0x400/0x400 [ 1136.461510][T27244] ? __might_sleep+0xd0/0xd0 [ 1136.466139][T27244] ? __lock_acquire+0x7d10/0x7d10 [ 1136.471217][T27244] should_fail_ex+0x399/0x4d0 [ 1136.475948][T27244] should_failslab+0x5/0x20 [ 1136.480492][T27244] slab_pre_alloc_hook+0x59/0x310 [ 1136.485557][T27244] kmem_cache_alloc_node+0x5a/0x320 [ 1136.490788][T27244] ? __dev_queue_xmit+0x26b/0x37f0 [ 1136.495923][T27244] ? __alloc_skb+0xfc/0x7e0 [ 1136.500462][T27244] __alloc_skb+0xfc/0x7e0 [ 1136.504832][T27244] netlink_ack+0x372/0x1170 [ 1136.509373][T27244] ? ref_tracker_free+0x68c/0x840 [ 1136.514430][T27244] ? __copy_skb_header+0x3ba/0x4f0 [ 1136.519578][T27244] ? refcount_inc+0x70/0x70 [ 1136.524113][T27244] ? memcpy+0x3c/0x60 [ 1136.528130][T27244] ? netlink_dump+0xd00/0xd00 [ 1136.532840][T27244] ? __copy_skb_header+0x3ba/0x4f0 [ 1136.537985][T27244] ? __skb_clone+0x480/0x790 [ 1136.542619][T27244] netlink_rcv_skb+0x280/0x450 [ 1136.547434][T27244] ? rtnetlink_bind+0x80/0x80 [ 1136.552136][T27244] ? netlink_ack+0x1170/0x1170 [ 1136.556921][T27244] ? netlink_deliver_tap+0x2e/0x1b0 [ 1136.562143][T27244] netlink_unicast+0x74d/0x8d0 [ 1136.566944][T27244] netlink_sendmsg+0x8ad/0xbd0 [ 1136.571740][T27244] ? netlink_getsockopt+0x550/0x550 [ 1136.576962][T27244] ? aa_sock_msg_perm+0x94/0x150 [ 1136.581927][T27244] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1136.587429][T27244] ? security_socket_sendmsg+0x7c/0xa0 [ 1136.592907][T27244] ? netlink_getsockopt+0x550/0x550 [ 1136.598124][T27244] ____sys_sendmsg+0x5be/0x970 [ 1136.602915][T27244] ? __sys_sendmsg_sock+0x30/0x30 [ 1136.607959][T27244] ? __import_iovec+0x315/0x500 [ 1136.612824][T27244] ? import_iovec+0x6f/0xa0 [ 1136.617336][T27244] ___sys_sendmsg+0x2a2/0x360 [ 1136.622039][T27244] ? __sys_sendmsg+0x290/0x290 [ 1136.626846][T27244] ? __lock_acquire+0x7d10/0x7d10 [ 1136.631913][T27244] __se_sys_sendmsg+0x1bb/0x2a0 [ 1136.636787][T27244] ? __x64_sys_sendmsg+0x80/0x80 [ 1136.641752][T27244] ? lockdep_hardirqs_on+0x94/0x140 [ 1136.646976][T27244] do_syscall_64+0x4c/0xa0 [ 1136.651416][T27244] ? clear_bhb_loop+0x60/0xb0 [ 1136.656109][T27244] ? clear_bhb_loop+0x60/0xb0 [ 1136.660809][T27244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.666727][T27244] RIP: 0033:0x7f6d4059acb9 [ 1136.671149][T27244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.690770][T27244] RSP: 002b:00007f6d4146c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.699206][T27244] RAX: ffffffffffffffda RBX: 00007f6d40815fa0 RCX: 00007f6d4059acb9 [ 1136.707187][T27244] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1136.715171][T27244] RBP: 00007f6d4146c090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.723242][T27244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.731237][T27244] R13: 00007f6d40816038 R14: 00007f6d40815fa0 R15: 00007ffc64b94e48 [ 1136.739249][T27244] [ 1136.795248][T27249] net_ratelimit: 508 callbacks suppressed [ 1136.795266][T27249] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1137.024057][T27254] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1137.110627][T27254] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1137.265017][T27262] netlink: 'syz.4.7835': attribute type 21 has an invalid length. [ 1137.273063][T27262] netlink: 'syz.4.7835': attribute type 1 has an invalid length. [ 1137.280804][T27262] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7835'. [ 1137.479359][T27270] netlink: 'syz.0.7838': attribute type 6 has an invalid length. [ 1137.808625][T27289] FAULT_INJECTION: forcing a failure. [ 1137.808625][T27289] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.830845][T27289] CPU: 0 PID: 27289 Comm: syz.1.7844 Not tainted syzkaller #0 [ 1137.838442][T27289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1137.848522][T27289] Call Trace: [ 1137.851832][T27289] [ 1137.854791][T27289] dump_stack_lvl+0x188/0x24e [ 1137.859510][T27289] ? show_regs_print_info+0x12/0x12 [ 1137.864742][T27289] ? load_image+0x400/0x400 [ 1137.869279][T27289] ? __might_sleep+0xd0/0xd0 [ 1137.873905][T27289] ? __lock_acquire+0x7d10/0x7d10 [ 1137.878966][T27289] ? trace_event_raw_event_lock+0x250/0x250 [ 1137.884892][T27289] should_fail_ex+0x399/0x4d0 [ 1137.889628][T27289] should_failslab+0x5/0x20 [ 1137.894167][T27289] slab_pre_alloc_hook+0x59/0x310 [ 1137.899223][T27289] ? sk_prot_alloc+0xe7/0x210 [ 1137.903929][T27289] __kmem_cache_alloc_node+0x4f/0x260 [ 1137.909343][T27289] ? sk_prot_alloc+0xe7/0x210 [ 1137.914054][T27289] __kmalloc+0xa0/0x240 [ 1137.918267][T27289] sk_prot_alloc+0xe7/0x210 [ 1137.922810][T27289] ? sk_alloc+0x20/0x340 [ 1137.927089][T27289] sk_alloc+0x36/0x340 [ 1137.931188][T27289] ? bpf_ctx_init+0x163/0x1a0 [ 1137.935896][T27289] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1137.941526][T27289] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1137.946940][T27289] ? __fget_files+0x28/0x4b0 [ 1137.951565][T27289] ? __fget_files+0x43d/0x4b0 [ 1137.956297][T27289] ? cpu_online+0xa0/0xa0 [ 1137.960663][T27289] bpf_prog_test_run+0x31e/0x390 [ 1137.965643][T27289] __sys_bpf+0x62b/0x780 [ 1137.969934][T27289] ? bpf_link_show_fdinfo+0x380/0x380 [ 1137.975383][T27289] ? lock_chain_count+0x20/0x20 [ 1137.980305][T27289] __x64_sys_bpf+0x78/0x90 [ 1137.984759][T27289] do_syscall_64+0x4c/0xa0 [ 1137.989227][T27289] ? clear_bhb_loop+0x60/0xb0 [ 1137.993939][T27289] ? clear_bhb_loop+0x60/0xb0 [ 1137.998647][T27289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.004573][T27289] RIP: 0033:0x7fc9ae59acb9 [ 1138.009010][T27289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.028641][T27289] RSP: 002b:00007fc9af38a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1138.037084][T27289] RAX: ffffffffffffffda RBX: 00007fc9ae815fa0 RCX: 00007fc9ae59acb9 [ 1138.045083][T27289] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1138.053088][T27289] RBP: 00007fc9af38a090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.061078][T27289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.069071][T27289] R13: 00007fc9ae816038 R14: 00007fc9ae815fa0 R15: 00007ffd349e4878 [ 1138.077085][T27289] [ 1138.172003][T27291] netlink: 'syz.4.7845': attribute type 13 has an invalid length. [ 1138.372872][T27302] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.7850'. [ 1138.401793][T27302] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7850'. [ 1139.811404][T27337] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1140.134090][T27355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7869'. [ 1140.728524][T27374] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1140.770309][T27374] netlink: zone id is out of range [ 1140.776413][T27374] netlink: zone id is out of range [ 1140.796412][T27374] netlink: zone id is out of range [ 1140.802664][T27374] netlink: get zone limit has 8 unknown bytes [ 1140.976967][T27388] netlink: 'syz.2.7882': attribute type 11 has an invalid length. [ 1141.005802][T27388] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1141.097883][T27392] netlink: 'syz.4.7885': attribute type 11 has an invalid length. [ 1141.114916][T27392] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7885'. [ 1141.149685][T27382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.288433][T27391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.323603][T27400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7888'. [ 1141.626691][T27411] FAULT_INJECTION: forcing a failure. [ 1141.626691][T27411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.707110][T27411] CPU: 1 PID: 27411 Comm: syz.1.7890 Not tainted syzkaller #0 [ 1141.714641][T27411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1141.724735][T27411] Call Trace: [ 1141.728040][T27411] [ 1141.730988][T27411] dump_stack_lvl+0x188/0x24e [ 1141.735709][T27411] ? show_regs_print_info+0x12/0x12 [ 1141.740960][T27411] ? load_image+0x400/0x400 [ 1141.745496][T27411] ? __lock_acquire+0x7d10/0x7d10 [ 1141.750555][T27411] should_fail_ex+0x399/0x4d0 [ 1141.755260][T27411] _copy_from_user+0x2c/0x170 [ 1141.759960][T27411] bpf_prog_test_run_skb+0x262/0x12a0 [ 1141.765347][T27411] ? __fget_files+0x28/0x4b0 [ 1141.769967][T27411] ? __fget_files+0x28/0x4b0 [ 1141.774573][T27411] ? __fget_files+0x43d/0x4b0 [ 1141.779286][T27411] ? cpu_online+0xa0/0xa0 [ 1141.783629][T27411] bpf_prog_test_run+0x31e/0x390 [ 1141.788594][T27411] __sys_bpf+0x62b/0x780 [ 1141.792860][T27411] ? bpf_link_show_fdinfo+0x380/0x380 [ 1141.798265][T27411] ? lock_chain_count+0x20/0x20 [ 1141.803144][T27411] __x64_sys_bpf+0x78/0x90 [ 1141.807577][T27411] do_syscall_64+0x4c/0xa0 [ 1141.812013][T27411] ? clear_bhb_loop+0x60/0xb0 [ 1141.816735][T27411] ? clear_bhb_loop+0x60/0xb0 [ 1141.821431][T27411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.827341][T27411] RIP: 0033:0x7fc9ae59acb9 [ 1141.831769][T27411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.851400][T27411] RSP: 002b:00007fc9ac7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1141.859824][T27411] RAX: ffffffffffffffda RBX: 00007fc9ae816090 RCX: 00007fc9ae59acb9 [ 1141.867808][T27411] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 1141.875803][T27411] RBP: 00007fc9ac7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.883790][T27411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.891776][T27411] R13: 00007fc9ae816128 R14: 00007fc9ae816090 R15: 00007ffd349e4878 [ 1141.899768][T27411] [ 1141.903887][T27409] netlink: 'syz.1.7890': attribute type 11 has an invalid length. [ 1141.920964][T27409] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7890'. [ 1141.981549][T27403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1142.058519][T27422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7894'. [ 1142.111176][T27425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7894'. [ 1142.154014][T27425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7894'. [ 1142.948672][T27443] device hsr_slave_0 left promiscuous mode [ 1142.988849][T27443] device hsr_slave_1 left promiscuous mode [ 1143.154847][T27452] netlink: 'syz.0.7905': attribute type 17 has an invalid length. [ 1143.206989][T27452] netlink: 'syz.0.7905': attribute type 16 has an invalid length. [ 1143.660630][T27469] FAULT_INJECTION: forcing a failure. [ 1143.660630][T27469] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.696932][T27469] CPU: 1 PID: 27469 Comm: syz.2.7912 Not tainted syzkaller #0 [ 1143.704460][T27469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1143.714538][T27469] Call Trace: [ 1143.717840][T27469] [ 1143.720793][T27469] dump_stack_lvl+0x188/0x24e [ 1143.725523][T27469] ? show_regs_print_info+0x12/0x12 [ 1143.730761][T27469] ? load_image+0x400/0x400 [ 1143.735295][T27469] ? __might_sleep+0xd0/0xd0 [ 1143.739913][T27469] ? __lock_acquire+0x7d10/0x7d10 [ 1143.744978][T27469] ? trace_event_raw_event_lock+0x250/0x250 [ 1143.750922][T27469] should_fail_ex+0x399/0x4d0 [ 1143.755651][T27469] should_failslab+0x5/0x20 [ 1143.760206][T27469] slab_pre_alloc_hook+0x59/0x310 [ 1143.765297][T27469] ? sk_prot_alloc+0xe7/0x210 [ 1143.770017][T27469] __kmem_cache_alloc_node+0x4f/0x260 [ 1143.775421][T27469] ? sk_prot_alloc+0xe7/0x210 [ 1143.780159][T27469] __kmalloc+0xa0/0x240 [ 1143.784358][T27469] sk_prot_alloc+0xe7/0x210 [ 1143.788895][T27469] ? sk_alloc+0x20/0x340 [ 1143.793184][T27469] sk_alloc+0x36/0x340 [ 1143.797291][T27469] ? bpf_ctx_init+0x163/0x1a0 [ 1143.802003][T27469] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1143.807580][T27469] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1143.812982][T27469] ? __fget_files+0x28/0x4b0 [ 1143.817619][T27469] ? __fget_files+0x43d/0x4b0 [ 1143.822344][T27469] ? cpu_online+0xa0/0xa0 [ 1143.826705][T27469] bpf_prog_test_run+0x31e/0x390 [ 1143.831689][T27469] __sys_bpf+0x62b/0x780 [ 1143.835973][T27469] ? bpf_link_show_fdinfo+0x380/0x380 [ 1143.841411][T27469] ? lock_chain_count+0x20/0x20 [ 1143.846572][T27469] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1143.852624][T27469] __x64_sys_bpf+0x78/0x90 [ 1143.857077][T27469] do_syscall_64+0x4c/0xa0 [ 1143.861535][T27469] ? clear_bhb_loop+0x60/0xb0 [ 1143.866260][T27469] ? clear_bhb_loop+0x60/0xb0 [ 1143.870982][T27469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.876914][T27469] RIP: 0033:0x7f6d4059acb9 [ 1143.881348][T27469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.900976][T27469] RSP: 002b:00007f6d4146c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1143.909429][T27469] RAX: ffffffffffffffda RBX: 00007f6d40815fa0 RCX: 00007f6d4059acb9 [ 1143.917424][T27469] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1143.925426][T27469] RBP: 00007f6d4146c090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.933446][T27469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.941442][T27469] R13: 00007f6d40816038 R14: 00007f6d40815fa0 R15: 00007ffc64b94e48 [ 1143.949453][T27469] [ 1143.973907][T27475] netlink: 'syz.1.7913': attribute type 10 has an invalid length. [ 1144.104541][T27480] netlink: 'syz.3.7914': attribute type 27 has an invalid length. [ 1144.418486][T27490] netlink: 'syz.4.7917': attribute type 10 has an invalid length. [ 1144.599741][T27501] netlink: 'syz.1.7920': attribute type 13 has an invalid length. [ 1147.975258][T27511] __nla_validate_parse: 7 callbacks suppressed [ 1147.975275][T27511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7924'. [ 1148.119066][T27516] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1148.943084][T27514] delete_channel: no stack [ 1148.981259][T27529] netlink: 'syz.2.7932': attribute type 25 has an invalid length. [ 1149.057595][T27529] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.7932'. [ 1149.111452][T27534] netlink: 'syz.0.7933': attribute type 30 has an invalid length. [ 1149.423411][T27540] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.7935'. [ 1149.475545][T27540] netlink: zone id is out of range [ 1149.496758][T27540] netlink: zone id is out of range [ 1149.519820][T27540] netlink: zone id is out of range [ 1149.550376][T27540] netlink: get zone limit has 8 unknown bytes [ 1149.596816][T27550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7938'. [ 1149.912873][T27557] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1149.962253][T27557] netlink: 'syz.2.7940': attribute type 3 has an invalid length. [ 1149.992085][T27557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1150.109334][T27563] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7943'. [ 1150.129463][T27565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1150.249593][T27570] netlink: 'syz.0.7946': attribute type 2 has an invalid length. [ 1150.541691][T27581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7949'. [ 1151.100441][T27601] FAULT_INJECTION: forcing a failure. [ 1151.100441][T27601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.124131][T27601] CPU: 0 PID: 27601 Comm: syz.0.7957 Not tainted syzkaller #0 [ 1151.131643][T27601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1151.141720][T27601] Call Trace: [ 1151.145034][T27601] [ 1151.148006][T27601] dump_stack_lvl+0x188/0x24e [ 1151.152731][T27601] ? show_regs_print_info+0x12/0x12 [ 1151.158068][T27601] ? load_image+0x400/0x400 [ 1151.162616][T27601] ? __lock_acquire+0x7d10/0x7d10 [ 1151.167704][T27601] should_fail_ex+0x399/0x4d0 [ 1151.172529][T27601] _copy_to_user+0x2c/0x130 [ 1151.177080][T27601] bpf_test_finish+0x266/0x600 [ 1151.181864][T27601] ? convert___skb_to_skb+0x580/0x580 [ 1151.187260][T27601] ? convert_skb_to___skb+0x420/0x420 [ 1151.192660][T27601] ? __build_skb+0x257/0x3c0 [ 1151.197291][T27601] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1151.202716][T27601] ? cpu_online+0xa0/0xa0 [ 1151.207094][T27601] bpf_prog_test_run+0x31e/0x390 [ 1151.212159][T27601] __sys_bpf+0x62b/0x780 [ 1151.216447][T27601] ? bpf_link_show_fdinfo+0x380/0x380 [ 1151.221876][T27601] ? lock_chain_count+0x20/0x20 [ 1151.226775][T27601] __x64_sys_bpf+0x78/0x90 [ 1151.231225][T27601] do_syscall_64+0x4c/0xa0 [ 1151.235679][T27601] ? clear_bhb_loop+0x60/0xb0 [ 1151.240397][T27601] ? clear_bhb_loop+0x60/0xb0 [ 1151.245121][T27601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1151.251045][T27601] RIP: 0033:0x7f83bd99acb9 [ 1151.255490][T27601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.275221][T27601] RSP: 002b:00007f83be889028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1151.283666][T27601] RAX: ffffffffffffffda RBX: 00007f83bdc15fa0 RCX: 00007f83bd99acb9 [ 1151.291666][T27601] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1151.299667][T27601] RBP: 00007f83be889090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.307660][T27601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.315664][T27601] R13: 00007f83bdc16038 R14: 00007f83bdc15fa0 R15: 00007ffc70374af8 [ 1151.323689][T27601] [ 1151.486715][T27610] netlink: 'syz.2.7960': attribute type 29 has an invalid length. [ 1151.626778][T27610] netlink: 'syz.2.7960': attribute type 29 has an invalid length. [ 1151.770366][T27619] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1152.706805][T27654] netlink: zone id is out of range [ 1152.733057][T27654] netlink: zone id is out of range [ 1152.738926][T27654] netlink: zone id is out of range [ 1152.772324][T27654] netlink: get zone limit has 8 unknown bytes [ 1153.118020][T27668] __nla_validate_parse: 5 callbacks suppressed [ 1153.118037][T27668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1155.955798][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1156.286748][T27684] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7982'. [ 1156.677450][T27694] FAULT_INJECTION: forcing a failure. [ 1156.677450][T27694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.693356][T27694] CPU: 0 PID: 27694 Comm: syz.3.7987 Not tainted syzkaller #0 [ 1156.700851][T27694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1156.710929][T27694] Call Trace: [ 1156.714254][T27694] [ 1156.717205][T27694] dump_stack_lvl+0x188/0x24e [ 1156.721923][T27694] ? show_regs_print_info+0x12/0x12 [ 1156.727154][T27694] ? load_image+0x400/0x400 [ 1156.731701][T27694] ? __lock_acquire+0x7d10/0x7d10 [ 1156.736785][T27694] should_fail_ex+0x399/0x4d0 [ 1156.741519][T27694] _copy_to_user+0x2c/0x130 [ 1156.746073][T27694] bpf_test_finish+0x4a2/0x600 [ 1156.750887][T27694] ? convert_skb_to___skb+0x420/0x420 [ 1156.756326][T27694] ? bpf_test_init+0x119/0x140 [ 1156.761132][T27694] bpf_prog_test_run_xdp+0x80a/0xf10 [ 1156.766477][T27694] ? dev_put+0x80/0x80 [ 1156.770622][T27694] ? dev_put+0x80/0x80 [ 1156.774722][T27694] bpf_prog_test_run+0x31e/0x390 [ 1156.779717][T27694] __sys_bpf+0x62b/0x780 [ 1156.784000][T27694] ? bpf_link_show_fdinfo+0x380/0x380 [ 1156.789427][T27694] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1156.795631][T27694] __x64_sys_bpf+0x78/0x90 [ 1156.800097][T27694] do_syscall_64+0x4c/0xa0 [ 1156.804542][T27694] ? clear_bhb_loop+0x60/0xb0 [ 1156.809258][T27694] ? clear_bhb_loop+0x60/0xb0 [ 1156.813960][T27694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.819883][T27694] RIP: 0033:0x7face719acb9 [ 1156.824325][T27694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.843955][T27694] RSP: 002b:00007face53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1156.852396][T27694] RAX: ffffffffffffffda RBX: 00007face7415fa0 RCX: 00007face719acb9 [ 1156.860397][T27694] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1156.868394][T27694] RBP: 00007face53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.876422][T27694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.884428][T27694] R13: 00007face7416038 R14: 00007face7415fa0 R15: 00007ffcefce2478 [ 1156.892442][T27694] [ 1156.965816][T27700] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7988'. [ 1156.986785][T27700] netlink: zone id is out of range [ 1156.997104][T27700] netlink: zone id is out of range [ 1157.007058][T27700] netlink: zone id is out of range [ 1157.017322][T27700] netlink: get zone limit has 8 unknown bytes [ 1157.513037][T27714] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1157.541967][T27714] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1158.193564][T27728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1162.087238][T27769] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8013'. [ 1162.899751][T27797] FAULT_INJECTION: forcing a failure. [ 1162.899751][T27797] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.924797][T27797] CPU: 0 PID: 27797 Comm: syz.2.8022 Not tainted syzkaller #0 [ 1162.932309][T27797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.942405][T27797] Call Trace: [ 1162.945697][T27797] [ 1162.948667][T27797] dump_stack_lvl+0x188/0x24e [ 1162.953383][T27797] ? show_regs_print_info+0x12/0x12 [ 1162.958618][T27797] ? load_image+0x400/0x400 [ 1162.963136][T27797] ? __might_sleep+0xd0/0xd0 [ 1162.967745][T27797] ? __lock_acquire+0x7d10/0x7d10 [ 1162.972786][T27797] ? mark_lock+0x94/0x320 [ 1162.977141][T27797] should_fail_ex+0x399/0x4d0 [ 1162.981863][T27797] should_failslab+0x5/0x20 [ 1162.986405][T27797] slab_pre_alloc_hook+0x59/0x310 [ 1162.991449][T27797] ? __get_vm_area_node+0x122/0x330 [ 1162.996689][T27797] __kmem_cache_alloc_node+0x4f/0x260 [ 1163.002080][T27797] ? __get_vm_area_node+0x122/0x330 [ 1163.007293][T27797] kmalloc_node_trace+0x22/0xe0 [ 1163.012175][T27797] __get_vm_area_node+0x122/0x330 [ 1163.017232][T27797] __vmalloc_node_range+0x357/0x13b0 [ 1163.022532][T27797] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.028109][T27797] ? free_vm_area+0x50/0x50 [ 1163.032625][T27797] ? end_current_label_crit_section+0x170/0x170 [ 1163.038878][T27797] ? __lock_acquire+0x7d10/0x7d10 [ 1163.043922][T27797] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.049487][T27797] __vmalloc+0x76/0x80 [ 1163.053564][T27797] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.059134][T27797] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.064529][T27797] ? bpf_lsm_capable+0x5/0x10 [ 1163.069214][T27797] ? security_capable+0x85/0xb0 [ 1163.074080][T27797] bpf_prog_alloc+0x1c/0x1b0 [ 1163.078698][T27797] bpf_prog_load+0x7c9/0x1560 [ 1163.083404][T27797] ? map_freeze+0x390/0x390 [ 1163.087923][T27797] ? __might_fault+0xa6/0x120 [ 1163.092616][T27797] ? __might_fault+0xa6/0x120 [ 1163.097298][T27797] ? __might_fault+0xc2/0x120 [ 1163.101981][T27797] ? __might_fault+0xa6/0x120 [ 1163.106689][T27797] ? bpf_lsm_bpf+0x5/0x10 [ 1163.111032][T27797] ? security_bpf+0x7a/0xa0 [ 1163.115560][T27797] __sys_bpf+0x5b8/0x780 [ 1163.119827][T27797] ? bpf_link_show_fdinfo+0x380/0x380 [ 1163.125229][T27797] ? lock_chain_count+0x20/0x20 [ 1163.130101][T27797] __x64_sys_bpf+0x78/0x90 [ 1163.134550][T27797] do_syscall_64+0x4c/0xa0 [ 1163.139004][T27797] ? clear_bhb_loop+0x60/0xb0 [ 1163.143694][T27797] ? clear_bhb_loop+0x60/0xb0 [ 1163.148386][T27797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.154292][T27797] RIP: 0033:0x7f6d4059acb9 [ 1163.158716][T27797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.178327][T27797] RSP: 002b:00007f6d4144b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1163.186778][T27797] RAX: ffffffffffffffda RBX: 00007f6d40816090 RCX: 00007f6d4059acb9 [ 1163.194760][T27797] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 1163.202749][T27797] RBP: 00007f6d4144b090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.210775][T27797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.218760][T27797] R13: 00007f6d40816128 R14: 00007f6d40816090 R15: 00007ffc64b94e48 [ 1163.226757][T27797] [ 1163.256002][T27797] syz.2.8022: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1163.275462][T27797] CPU: 0 PID: 27797 Comm: syz.2.8022 Not tainted syzkaller #0 [ 1163.282971][T27797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1163.293055][T27797] Call Trace: [ 1163.296361][T27797] [ 1163.299326][T27797] dump_stack_lvl+0x188/0x24e [ 1163.304046][T27797] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1163.310492][T27797] ? show_regs_print_info+0x12/0x12 [ 1163.315729][T27797] ? load_image+0x400/0x400 [ 1163.320274][T27797] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1163.326724][T27797] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1163.333255][T27797] warn_alloc+0x242/0x330 [ 1163.337618][T27797] ? __get_vm_area_node+0x122/0x330 [ 1163.342872][T27797] ? zone_watermark_ok_safe+0x270/0x270 [ 1163.348461][T27797] ? rcu_is_watching+0x11/0xa0 [ 1163.353265][T27797] ? __get_vm_area_node+0x318/0x330 [ 1163.358503][T27797] __vmalloc_node_range+0x37c/0x13b0 [ 1163.363850][T27797] ? free_vm_area+0x50/0x50 [ 1163.368392][T27797] ? end_current_label_crit_section+0x170/0x170 [ 1163.374660][T27797] ? __lock_acquire+0x7d10/0x7d10 [ 1163.379728][T27797] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.385356][T27797] __vmalloc+0x76/0x80 [ 1163.389458][T27797] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.395038][T27797] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1163.400455][T27797] ? bpf_lsm_capable+0x5/0x10 [ 1163.405177][T27797] ? security_capable+0x85/0xb0 [ 1163.410061][T27797] bpf_prog_alloc+0x1c/0x1b0 [ 1163.414684][T27797] bpf_prog_load+0x7c9/0x1560 [ 1163.419405][T27797] ? map_freeze+0x390/0x390 [ 1163.423947][T27797] ? __might_fault+0xa6/0x120 [ 1163.428671][T27797] ? __might_fault+0xa6/0x120 [ 1163.433381][T27797] ? __might_fault+0xc2/0x120 [ 1163.438082][T27797] ? __might_fault+0xa6/0x120 [ 1163.442810][T27797] ? bpf_lsm_bpf+0x5/0x10 [ 1163.447173][T27797] ? security_bpf+0x7a/0xa0 [ 1163.451733][T27797] __sys_bpf+0x5b8/0x780 [ 1163.453478][T27803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1163.456001][T27797] ? bpf_link_show_fdinfo+0x380/0x380 [ 1163.470353][T27797] ? lock_chain_count+0x20/0x20 [ 1163.471911][T27803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1163.475236][T27797] __x64_sys_bpf+0x78/0x90 [ 1163.488597][T27797] do_syscall_64+0x4c/0xa0 [ 1163.493047][T27797] ? clear_bhb_loop+0x60/0xb0 [ 1163.497759][T27797] ? clear_bhb_loop+0x60/0xb0 [ 1163.502469][T27797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.508392][T27797] RIP: 0033:0x7f6d4059acb9 [ 1163.512832][T27797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.532469][T27797] RSP: 002b:00007f6d4144b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1163.540922][T27797] RAX: ffffffffffffffda RBX: 00007f6d40816090 RCX: 00007f6d4059acb9 [ 1163.548939][T27797] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 1163.556938][T27797] RBP: 00007f6d4144b090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.564907][T27797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.572884][T27797] R13: 00007f6d40816128 R14: 00007f6d40816090 R15: 00007ffc64b94e48 [ 1163.580920][T27797] [ 1163.598979][T27797] Mem-Info: [ 1163.602853][T27797] active_anon:5508 inactive_anon:0 isolated_anon:0 [ 1163.602853][T27797] active_file:20255 inactive_file:40367 isolated_file:0 [ 1163.602853][T27797] unevictable:768 dirty:73 writeback:0 [ 1163.602853][T27797] slab_reclaimable:21079 slab_unreclaimable:108446 [ 1163.602853][T27797] mapped:30123 shmem:1361 pagetables:625 [ 1163.602853][T27797] sec_pagetables:0 bounce:0 [ 1163.602853][T27797] kernel_misc_reclaimable:0 [ 1163.602853][T27797] free:1303460 free_pcp:9036 free_cma:0 [ 1163.649522][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1163.657893][T27797] Node 0 active_anon:22072kB inactive_anon:0kB active_file:81020kB inactive_file:161264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120492kB dirty:296kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:2504kB sec_pagetables:0kB all_unreclaimable? no [ 1163.658492][T27797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1163.658543][T27797] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.760281][T27803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1163.770875][T27797] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1163.777845][T27797] Node 0 DMA32 free:1300560kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:22144kB inactive_anon:0kB active_file:81020kB inactive_file:161272kB unevictable:1536kB writepending:304kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:17608kB local_pcp:7176kB free_cma:0kB [ 1163.844351][T27806] netlink: 'syz.3.8025': attribute type 3 has an invalid length. [ 1163.864955][T27806] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.8025'. [ 1163.914937][T27797] lowmem_reserve[]: 0 0 1 1 1 [ 1163.919767][T27797] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1163.947696][T27797] lowmem_reserve[]: 0 0 0 0 0 [ 1163.953252][T27797] Node 1 Normal free:3897904kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19592kB local_pcp:12292kB free_cma:0kB [ 1163.998901][T27797] lowmem_reserve[]: 0 0 0 0 0 [ 1164.004004][T27797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1164.018838][T27797] Node 0 DMA32: 1164*4kB (UME) 1025*8kB (UME) 900*16kB (UME) 2194*32kB (UME) 460*64kB (UME) 632*128kB (UME) 279*256kB (UM) 177*512kB (UME) 110*1024kB (UME) 13*2048kB (UME) 193*4096kB (UM) = 1299640kB [ 1164.115279][T27797] Node 0 Normal: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1164.169829][T27797] Node 1 Normal: 208*4kB (UME) 50*8kB (UME) 28*16kB (UE) 39*32kB (UME) 25*64kB (UME) 11*128kB (UME) 5*256kB (UME) 3*512kB (UME) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3897904kB [ 1164.259110][T27797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.299825][T27797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.325673][T27823] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1164.350965][T27797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.378599][T27797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.398985][T27797] 61985 total pagecache pages [ 1164.418148][T27797] 0 pages in swap cache [ 1164.422706][T27797] Free swap = 124996kB [ 1164.428033][T27797] Total swap = 124996kB [ 1164.436575][T27797] 2097051 pages RAM [ 1164.461687][T27797] 0 pages HighMem/MovableOnly [ 1164.472786][T27797] 415205 pages reserved [ 1164.478942][T27797] 0 pages cma reserved [ 1164.904799][T27844] netlink: 'syz.4.8036': attribute type 10 has an invalid length. [ 1165.214420][T27863] netlink: 'syz.3.8040': attribute type 19 has an invalid length. [ 1165.979942][T27877] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8045'. [ 1169.111575][T27919] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1169.626679][ T66] wlan1: Trigger new scan to find an IBSS to join [ 1172.498979][T27942] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.8067'. [ 1172.560819][T27943] netlink: 'syz.0.8067': attribute type 25 has an invalid length. [ 1172.608941][T27943] netlink: 'syz.0.8067': attribute type 27 has an invalid length. [ 1172.698309][T27943] netlink: 'syz.0.8067': attribute type 28 has an invalid length. [ 1172.720060][T27943] netlink: 'syz.0.8067': attribute type 29 has an invalid length. [ 1172.745599][T27943] netlink: 'syz.0.8067': attribute type 7 has an invalid length. [ 1172.779847][T27943] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.8067'. [ 1173.406589][T27967] device syzkaller0 entered promiscuous mode [ 1173.421952][ T4256] syzkaller0: tun_net_xmit 76 [ 1173.436843][T27966] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8076'. [ 1173.467944][ T4256] syzkaller0: tun_net_xmit 76 [ 1173.979576][T27991] netlink: 'syz.1.8085': attribute type 2 has an invalid length. [ 1174.007804][T27991] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.8085'. [ 1174.555563][T28015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8094'. [ 1174.625386][T28016] device syzkaller0 entered promiscuous mode [ 1174.632962][ T4256] syzkaller0: tun_net_xmit 76 [ 1174.661887][ T66] wlan1: Trigger new scan to find an IBSS to join [ 1174.773065][ T9] wlan1: Creating new IBSS network, BSSID 82:b0:b2:4c:4f:ec [ 1175.497224][T28036] netlink: 'syz.3.8100': attribute type 39 has an invalid length. [ 1175.788506][T28055] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1176.584313][T28092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1176.590800][T28092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1177.130586][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.137209][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.418537][ T46] device .*! left promiscuous mode [ 1178.389960][T28131] netlink: 'syz.2.8135': attribute type 21 has an invalid length. [ 1178.422064][T28131] netlink: 'syz.2.8135': attribute type 6 has an invalid length. [ 1178.440063][T28131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1179.033832][T28156] netlink: 'syz.1.8145': attribute type 3 has an invalid length. [ 1179.048784][T28156] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1179.283110][ T46] device hsr_slave_0 left promiscuous mode [ 1179.296133][ T46] device hsr_slave_1 left promiscuous mode [ 1179.316419][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.335478][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.347072][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.356568][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.365926][ T46] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1179.374142][ T46] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1179.382780][ T46] device bridge_slave_1 left promiscuous mode [ 1179.389347][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.402008][ T46] device bridge_slave_0 left promiscuous mode [ 1179.408398][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.452565][ T46] device veth1_macvtap left promiscuous mode [ 1179.458817][ T46] device veth1_vlan left promiscuous mode [ 1179.488854][T28176] netlink: 'syz.0.8151': attribute type 29 has an invalid length. [ 1180.047849][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.088154][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.340303][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1180.349500][ T46] bond0 (unregistering): Released all slaves [ 1180.456305][T28173] netlink: 'syz.4.8148': attribute type 39 has an invalid length. [ 1180.468053][T28173] device veth0_macvtap left promiscuous mode [ 1180.568270][T28176] netlink: 'syz.0.8151': attribute type 29 has an invalid length. [ 1180.580007][T28181] netlink: 'syz.1.8152': attribute type 13 has an invalid length. [ 1180.779620][T28188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8156'. [ 1181.275813][T28210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8165'. [ 1181.637519][T28229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8174'. [ 1181.692319][ T4256] syzkaller0: tun_net_xmit 76 [ 1182.396328][T28240] netlink: 'syz.4.8179': attribute type 1 has an invalid length. [ 1182.500219][T28246] netlink: 'syz.1.8182': attribute type 11 has an invalid length. [ 1182.509348][T28246] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1182.616353][T28245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.857894][T28265] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1182.911852][T28262] FAULT_INJECTION: forcing a failure. [ 1182.911852][T28262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.959811][T28262] CPU: 0 PID: 28262 Comm: syz.0.8188 Not tainted syzkaller #0 [ 1182.967340][T28262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.977433][T28262] Call Trace: [ 1182.980748][T28262] [ 1182.983720][T28262] dump_stack_lvl+0x188/0x24e [ 1182.988451][T28262] ? show_regs_print_info+0x12/0x12 [ 1182.993688][T28262] ? load_image+0x400/0x400 [ 1182.998241][T28262] ? __lock_acquire+0x7d10/0x7d10 [ 1183.003339][T28262] should_fail_ex+0x399/0x4d0 [ 1183.008073][T28262] _copy_from_user+0x2c/0x170 [ 1183.012793][T28262] kstrtouint_from_user+0xda/0x170 [ 1183.017952][T28262] ? kstrtol_from_user+0x190/0x190 [ 1183.023136][T28262] proc_fail_nth_write+0x8b/0x200 [ 1183.028199][T28262] ? proc_fail_nth_read+0x220/0x220 [ 1183.033426][T28262] ? common_file_perm+0x171/0x1c0 [ 1183.038532][T28262] ? proc_fail_nth_read+0x220/0x220 [ 1183.043766][T28262] vfs_write+0x2e6/0xa30 [ 1183.048058][T28262] ? file_end_write+0x250/0x250 [ 1183.052953][T28262] ? __fget_files+0x28/0x4b0 [ 1183.057598][T28262] ? __fget_files+0x28/0x4b0 [ 1183.062238][T28262] ? __fget_files+0x43d/0x4b0 [ 1183.066976][T28262] ? __fdget_pos+0x2ae/0x360 [ 1183.071607][T28262] ? ksys_write+0x71/0x250 [ 1183.076082][T28262] ksys_write+0x14c/0x250 [ 1183.080470][T28262] ? __ia32_sys_read+0x80/0x80 [ 1183.085283][T28262] ? lockdep_hardirqs_on+0x94/0x140 [ 1183.090525][T28262] do_syscall_64+0x4c/0xa0 [ 1183.094982][T28262] ? clear_bhb_loop+0x60/0xb0 [ 1183.099744][T28262] ? clear_bhb_loop+0x60/0xb0 [ 1183.104463][T28262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.110384][T28262] RIP: 0033:0x7f83bd95b58e [ 1183.114827][T28262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1183.134467][T28262] RSP: 002b:00007f83be888fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1183.142925][T28262] RAX: ffffffffffffffda RBX: 00007f83be8896c0 RCX: 00007f83bd95b58e [ 1183.150940][T28262] RDX: 0000000000000001 RSI: 00007f83be8890a0 RDI: 000000000000000e [ 1183.158938][T28262] RBP: 00007f83be889090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.166940][T28262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.174939][T28262] R13: 00007f83bdc16038 R14: 00007f83bdc15fa0 R15: 00007ffc70374af8 [ 1183.182979][T28262] [ 1183.231510][T28270] FAULT_INJECTION: forcing a failure. [ 1183.231510][T28270] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.244740][T28270] CPU: 0 PID: 28270 Comm: syz.3.8192 Not tainted syzkaller #0 [ 1183.252238][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.262331][T28270] Call Trace: [ 1183.265644][T28270] [ 1183.268700][T28270] dump_stack_lvl+0x188/0x24e [ 1183.273424][T28270] ? show_regs_print_info+0x12/0x12 [ 1183.278663][T28270] ? load_image+0x400/0x400 [ 1183.283209][T28270] ? __might_sleep+0xd0/0xd0 [ 1183.287832][T28270] ? __lock_acquire+0x7d10/0x7d10 [ 1183.292900][T28270] should_fail_ex+0x399/0x4d0 [ 1183.297623][T28270] should_failslab+0x5/0x20 [ 1183.302175][T28270] slab_pre_alloc_hook+0x59/0x310 [ 1183.307238][T28270] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.313016][T28270] __kmem_cache_alloc_node+0x4f/0x260 [ 1183.318428][T28270] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.324188][T28270] __kmalloc+0xa0/0x240 [ 1183.328390][T28270] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.334000][T28270] ? tomoyo_path_number_perm+0x205/0x650 [ 1183.339681][T28270] tomoyo_path_number_perm+0x22f/0x650 [ 1183.345183][T28270] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1183.350680][T28270] ? ksys_write+0x1c0/0x250 [ 1183.355231][T28270] ? common_file_perm+0x171/0x1c0 [ 1183.360310][T28270] ? __fget_files+0x28/0x4b0 [ 1183.364934][T28270] ? __fget_files+0x28/0x4b0 [ 1183.369569][T28270] security_file_ioctl+0x6c/0xa0 [ 1183.374531][T28270] __se_sys_ioctl+0x48/0x170 [ 1183.379147][T28270] do_syscall_64+0x4c/0xa0 [ 1183.383583][T28270] ? clear_bhb_loop+0x60/0xb0 [ 1183.388274][T28270] ? clear_bhb_loop+0x60/0xb0 [ 1183.392968][T28270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.398882][T28270] RIP: 0033:0x7face719acb9 [ 1183.403313][T28270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.422937][T28270] RSP: 002b:00007face53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.431369][T28270] RAX: ffffffffffffffda RBX: 00007face7415fa0 RCX: 00007face719acb9 [ 1183.439357][T28270] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1183.447337][T28270] RBP: 00007face53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.455354][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.463351][T28270] R13: 00007face7416038 R14: 00007face7415fa0 R15: 00007ffcefce2478 [ 1183.471352][T28270] [ 1183.557706][T28270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1183.963607][T28289] netlink: 'syz.2.8200': attribute type 6 has an invalid length. [ 1184.144795][T28301] netlink: 'syz.2.8204': attribute type 10 has an invalid length. [ 1184.171134][T28301] bond0: (slave netdevsim0): Releasing backup interface [ 1184.178846][T28301] device netdevsim0 left promiscuous mode [ 1184.206574][T28301] device netdevsim0 entered promiscuous mode [ 1184.214647][T28301] team0: Port device netdevsim0 added [ 1184.433675][T28305] netlink: 'syz.2.8204': attribute type 10 has an invalid length. [ 1184.513264][T28305] device netdevsim0 left promiscuous mode [ 1185.144091][T28305] team0: Port device netdevsim0 removed [ 1185.169031][T28305] device netdevsim0 entered promiscuous mode [ 1185.192220][T28305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1186.325141][T28346] netlink: 'syz.3.8219': attribute type 11 has an invalid length. [ 1186.343321][T28346] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8219'. [ 1186.365082][T28345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.171506][T28364] netlink: 'syz.3.8226': attribute type 1 has an invalid length. [ 1187.647729][T28384] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1187.673102][T28378] netlink: 'syz.2.8232': attribute type 10 has an invalid length. [ 1187.779267][T28378] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1187.876527][T28394] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1188.099534][T28401] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8240'. [ 1188.690789][T28406] device wlan1 entered promiscuous mode [ 1189.798719][T28436] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1189.971529][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1189.997257][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1190.005747][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1190.021036][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1190.029125][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1190.036676][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1190.419937][T28457] netlink: 'syz.1.8259': attribute type 1 has an invalid length. [ 1190.607125][T28442] chnl_net:caif_netlink_parms(): no params data found [ 1191.117198][T28442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.172410][T28442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.251547][T28442] device bridge_slave_0 entered promiscuous mode [ 1191.284137][T28442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.318109][T28442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.353644][T28442] device bridge_slave_1 entered promiscuous mode [ 1191.473112][T28468] netlink: 'syz.4.8262': attribute type 10 has an invalid length. [ 1191.542701][T28442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.578840][T28442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.684967][T28442] team0: Port device team_slave_0 added [ 1191.720138][T28442] team0: Port device team_slave_1 added [ 1191.782144][T28442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.802519][T28442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.837317][T28442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.859342][T28485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8267'. [ 1191.878072][T28488] netlink: 'syz.1.8266': attribute type 10 has an invalid length. [ 1191.920235][T28488] team0: Port device netdevsim0 added [ 1191.926926][T28442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.944147][T28442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.988268][T28442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.111999][T19736] Bluetooth: hci0: command 0x0409 tx timeout [ 1192.120139][T28442] device hsr_slave_0 entered promiscuous mode [ 1192.149150][T28442] device hsr_slave_1 entered promiscuous mode [ 1192.213584][T28498] netlink: 'syz.4.8272': attribute type 29 has an invalid length. [ 1192.242820][T28498] netlink: 'syz.4.8272': attribute type 29 has an invalid length. [ 1192.390505][T28505] netlink: 'syz.3.8274': attribute type 10 has an invalid length. [ 1192.465953][T28511] netlink: 'syz.4.8278': attribute type 1 has an invalid length. [ 1192.487846][T28511] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.8278'. [ 1192.554512][T28442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.603932][T28516] netlink: 'syz.2.8280': attribute type 21 has an invalid length. [ 1192.713667][T28442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.732417][T28517] netlink: 'syz.3.8279': attribute type 10 has an invalid length. [ 1192.779048][T28517] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1192.890705][T28442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.191798][T19736] Bluetooth: hci0: command 0x041b tx timeout [ 1196.013969][T28442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.177171][T28442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1196.263151][T19736] Bluetooth: hci0: command 0x040f tx timeout [ 1198.351807][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 1199.110228][T28552] netlink: 'syz.4.8288': attribute type 21 has an invalid length. [ 1199.129291][T28552] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1199.146210][T28560] FAULT_INJECTION: forcing a failure. [ 1199.146210][T28560] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.161730][T28560] CPU: 1 PID: 28560 Comm: syz.3.8294 Not tainted syzkaller #0 [ 1199.169225][T28560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1199.179306][T28560] Call Trace: [ 1199.182605][T28560] [ 1199.185552][T28560] dump_stack_lvl+0x188/0x24e [ 1199.190263][T28560] ? show_regs_print_info+0x12/0x12 [ 1199.195627][T28560] ? load_image+0x400/0x400 [ 1199.200157][T28560] ? __might_sleep+0xd0/0xd0 [ 1199.204763][T28560] ? __lock_acquire+0x7d10/0x7d10 [ 1199.209808][T28560] should_fail_ex+0x399/0x4d0 [ 1199.214509][T28560] should_failslab+0x5/0x20 [ 1199.219028][T28560] slab_pre_alloc_hook+0x59/0x310 [ 1199.224065][T28560] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1199.229801][T28560] __kmem_cache_alloc_node+0x4f/0x260 [ 1199.235190][T28560] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1199.240927][T28560] __kmalloc+0xa0/0x240 [ 1199.245102][T28560] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1199.250677][T28560] ? tomoyo_path_number_perm+0x205/0x650 [ 1199.256342][T28560] tomoyo_path_number_perm+0x22f/0x650 [ 1199.261834][T28560] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1199.267304][T28560] ? ksys_write+0x1c0/0x250 [ 1199.271821][T28560] ? common_file_perm+0x171/0x1c0 [ 1199.276874][T28560] ? __fget_files+0x28/0x4b0 [ 1199.281491][T28560] ? __fget_files+0x28/0x4b0 [ 1199.286119][T28560] security_file_ioctl+0x6c/0xa0 [ 1199.291085][T28560] __se_sys_ioctl+0x48/0x170 [ 1199.295695][T28560] do_syscall_64+0x4c/0xa0 [ 1199.300139][T28560] ? clear_bhb_loop+0x60/0xb0 [ 1199.304837][T28560] ? clear_bhb_loop+0x60/0xb0 [ 1199.309534][T28560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.315462][T28560] RIP: 0033:0x7face719acb9 [ 1199.319938][T28560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.339591][T28560] RSP: 002b:00007face53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.348020][T28560] RAX: ffffffffffffffda RBX: 00007face7415fa0 RCX: 00007face719acb9 [ 1199.356012][T28560] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 1199.364001][T28560] RBP: 00007face53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.372155][T28560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.380136][T28560] R13: 00007face7416038 R14: 00007face7415fa0 R15: 00007ffcefce2478 [ 1199.388152][T28560] [ 1199.391259][T28552] netlink: 'syz.4.8288': attribute type 4 has an invalid length. [ 1199.403743][T28560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.411693][T28552] netlink: 'syz.4.8288': attribute type 5 has an invalid length. [ 1199.419637][T28552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1199.440840][T28442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1199.463267][T28442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1199.478819][T28442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1199.690855][T28442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.740719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1199.760971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1199.800979][T28442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.822897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1199.844678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1199.857862][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.865047][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.912253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1199.934739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1199.956105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1199.984760][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.991910][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.019054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1200.055319][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1200.092487][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1200.154425][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1200.277791][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1200.314617][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1200.362148][T28592] netlink: 'syz.4.8302': attribute type 10 has an invalid length. [ 1200.370672][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1200.396203][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1200.404867][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1200.415566][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1200.425759][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1200.469797][T28442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1201.211832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1201.220073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1201.245019][T28442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.294829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1201.306234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.359692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1201.382189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.407044][T28442] device veth0_vlan entered promiscuous mode [ 1201.422292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.442678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.460456][T28642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1201.467853][T28642] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.475377][T28642] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.482841][T28642] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.503952][T28442] device veth1_vlan entered promiscuous mode [ 1201.554703][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1201.582460][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1201.594501][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.615323][T18620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.637657][T28442] device veth0_macvtap entered promiscuous mode [ 1201.683005][T28442] device veth1_macvtap entered promiscuous mode [ 1201.719742][T28442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.744066][T28442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.768963][T28442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.789160][T28442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1201.806958][T28442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.849115][T28442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.865756][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1201.895701][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1201.905247][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1201.914171][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1201.923443][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1201.936951][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1201.955126][T28442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.964547][T28442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.973653][T28442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.992513][T28442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.253452][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.261538][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.354694][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1202.407558][T18620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.431086][T18620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.462384][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1203.236881][T28712] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8338'. [ 1203.349871][T28715] FAULT_INJECTION: forcing a failure. [ 1203.349871][T28715] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.404978][T28715] CPU: 0 PID: 28715 Comm: syz.1.8339 Not tainted syzkaller #0 [ 1203.412490][T28715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1203.422603][T28715] Call Trace: [ 1203.425912][T28715] [ 1203.428889][T28715] dump_stack_lvl+0x188/0x24e [ 1203.433605][T28715] ? show_regs_print_info+0x12/0x12 [ 1203.438853][T28715] ? load_image+0x400/0x400 [ 1203.443405][T28715] ? __might_sleep+0xd0/0xd0 [ 1203.448059][T28715] ? __lock_acquire+0x7d10/0x7d10 [ 1203.453156][T28715] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1203.458670][T28715] should_fail_ex+0x399/0x4d0 [ 1203.463411][T28715] should_failslab+0x5/0x20 [ 1203.467952][T28715] slab_pre_alloc_hook+0x59/0x310 [ 1203.473012][T28715] ? __raw_spin_lock_init+0x41/0x100 [ 1203.478324][T28715] ? security_task_alloc+0x42/0x130 [ 1203.483557][T28715] __kmem_cache_alloc_node+0x4f/0x260 [ 1203.488958][T28715] ? put_ctx+0x97/0x190 [ 1203.493164][T28715] ? security_task_alloc+0x42/0x130 [ 1203.498399][T28715] __kmalloc+0xa0/0x240 [ 1203.502600][T28715] security_task_alloc+0x42/0x130 [ 1203.507663][T28715] copy_process+0x17df/0x4030 [ 1203.512384][T28715] ? copy_process+0x94d/0x4030 [ 1203.517186][T28715] ? idle_dummy+0x10/0x10 [ 1203.521559][T28715] kernel_clone+0x24b/0x900 [ 1203.526118][T28715] ? create_io_thread+0x170/0x170 [ 1203.531194][T28715] ? irqentry_enter+0x33/0x50 [ 1203.535913][T28715] __x64_sys_clone+0x1a7/0x220 [ 1203.540719][T28715] ? __ia32_sys_vfork+0x140/0x140 [ 1203.545803][T28715] ? lock_chain_count+0x20/0x20 [ 1203.550706][T28715] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.555982][T28715] do_syscall_64+0x4c/0xa0 [ 1203.560448][T28715] ? clear_bhb_loop+0x60/0xb0 [ 1203.565166][T28715] ? clear_bhb_loop+0x60/0xb0 [ 1203.569883][T28715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.575809][T28715] RIP: 0033:0x7fc9ae59acb9 [ 1203.580257][T28715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.599934][T28715] RSP: 002b:00007fc9af389fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1203.608387][T28715] RAX: ffffffffffffffda RBX: 00007fc9ae815fa0 RCX: 00007fc9ae59acb9 [ 1203.616394][T28715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008001000 [ 1203.624400][T28715] RBP: 00007fc9af38a090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.632411][T28715] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1203.640406][T28715] R13: 00007fc9ae816038 R14: 00007fc9ae815fa0 R15: 00007ffd349e4878 [ 1203.648418][T28715] [ 1204.130981][T28729] netlink: 'syz.2.8344': attribute type 10 has an invalid length. [ 1204.145595][T28729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1204.173372][T28729] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1204.255001][T28727] delete_channel: no stack [ 1204.365552][T28740] netlink: 'syz.1.8346': attribute type 10 has an invalid length. [ 1204.906762][T28748] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8351'. [ 1205.410190][T28762] device syzkaller0 left promiscuous mode [ 1206.251127][T28773] netlink: 'syz.0.8358': attribute type 2 has an invalid length. [ 1206.446910][T28783] netlink: 'syz.3.8363': attribute type 41 has an invalid length. [ 1206.483072][T28783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8363'. [ 1206.521278][T28783] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1206.561320][T28788] netlink: 'syz.1.8364': attribute type 2 has an invalid length. [ 1206.577042][T28788] netlink: 'syz.1.8364': attribute type 1 has an invalid length. [ 1206.777219][T28793] netlink: 'syz.3.8365': attribute type 5 has an invalid length. [ 1206.795443][T28794] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8366'. [ 1207.124530][T28797] device syzkaller0 left promiscuous mode [ 1207.152102][T21524] syzkaller0: tun_net_xmit 76 [ 1207.421234][T28811] netlink: 'syz.4.8374': attribute type 5 has an invalid length. [ 1207.486194][T28813] netlink: 'syz.1.8375': attribute type 1 has an invalid length. [ 1207.508119][T28813] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8375'. [ 1208.491985][T28832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8381'. [ 1208.748020][T28843] netlink: 'syz.4.8388': attribute type 41 has an invalid length. [ 1208.757501][T28840] FAULT_INJECTION: forcing a failure. [ 1208.757501][T28840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.780062][T28843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8388'. [ 1208.788475][T28840] CPU: 1 PID: 28840 Comm: syz.0.8385 Not tainted syzkaller #0 [ 1208.796596][T28840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1208.805065][T28843] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1208.806704][T28840] Call Trace: [ 1208.806726][T28840] [ 1208.806735][T28840] dump_stack_lvl+0x188/0x24e [ 1208.833574][T28840] ? show_regs_print_info+0x12/0x12 [ 1208.838800][T28840] ? load_image+0x400/0x400 [ 1208.843362][T28840] ? __lock_acquire+0x7d10/0x7d10 [ 1208.848406][T28840] ? snprintf+0xe5/0x140 [ 1208.852670][T28840] should_fail_ex+0x399/0x4d0 [ 1208.857375][T28840] _copy_to_user+0x2c/0x130 [ 1208.861902][T28840] simple_read_from_buffer+0xe3/0x150 [ 1208.867294][T28840] proc_fail_nth_read+0x1a6/0x220 [ 1208.872335][T28840] ? proc_fault_inject_write+0x310/0x310 [ 1208.877981][T28840] ? fsnotify_perm+0x248/0x550 [ 1208.882770][T28840] ? proc_fault_inject_write+0x310/0x310 [ 1208.888413][T28840] vfs_read+0x2de/0xa00 [ 1208.892604][T28840] ? kernel_read+0x1e0/0x1e0 [ 1208.897214][T28840] ? __fget_files+0x28/0x4b0 [ 1208.901840][T28840] ? __fget_files+0x28/0x4b0 [ 1208.906452][T28840] ? __fget_files+0x43d/0x4b0 [ 1208.911163][T28840] ? __fdget_pos+0x2ae/0x360 [ 1208.915773][T28840] ? ksys_read+0x71/0x250 [ 1208.920129][T28840] ksys_read+0x14c/0x250 [ 1208.924400][T28840] ? vfs_write+0xa30/0xa30 [ 1208.928840][T28840] ? lockdep_hardirqs_on+0x94/0x140 [ 1208.934059][T28840] do_syscall_64+0x4c/0xa0 [ 1208.938510][T28840] ? clear_bhb_loop+0x60/0xb0 [ 1208.943207][T28840] ? clear_bhb_loop+0x60/0xb0 [ 1208.947894][T28840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.953794][T28840] RIP: 0033:0x7fcfe335b58e [ 1208.958225][T28840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1208.977850][T28840] RSP: 002b:00007fcfe41a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1208.986278][T28840] RAX: ffffffffffffffda RBX: 00007fcfe41aa6c0 RCX: 00007fcfe335b58e [ 1208.994271][T28840] RDX: 000000000000000f RSI: 00007fcfe41aa0a0 RDI: 0000000000000007 [ 1209.002251][T28840] RBP: 00007fcfe41aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.010253][T28840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.018244][T28840] R13: 00007fcfe3616038 R14: 00007fcfe3615fa0 R15: 00007fffe209d258 [ 1209.026247][T28840] [ 1209.042123][T28846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8386'. [ 1209.053029][T28846] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1209.172444][T28850] validate_nla: 1 callbacks suppressed [ 1209.172460][T28850] netlink: 'syz.4.8390': attribute type 40 has an invalid length. [ 1209.215530][T28848] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.226628][T28848] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1209.247192][T28853] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1209.650983][T28871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8398'. [ 1209.912021][ T4273] syzkaller0: tun_net_xmit 76 [ 1211.968172][T28911] netlink: 'syz.2.8409': attribute type 1 has an invalid length. [ 1211.985152][T28911] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.8409'. [ 1212.004037][T28913] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8411'. [ 1212.662236][T24219] syzkaller0: tun_net_xmit 76 [ 1213.621852][ T4316] syzkaller0: tun_net_xmit 76 [ 1215.914524][T28958] FAULT_INJECTION: forcing a failure. [ 1215.914524][T28958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.936411][T28958] CPU: 0 PID: 28958 Comm: syz.2.8424 Not tainted syzkaller #0 [ 1215.943927][T28958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1215.954015][T28958] Call Trace: [ 1215.957327][T28958] [ 1215.960281][T28958] dump_stack_lvl+0x188/0x24e [ 1215.965004][T28958] ? show_regs_print_info+0x12/0x12 [ 1215.970257][T28958] ? load_image+0x400/0x400 [ 1215.974793][T28958] ? __might_fault+0xa6/0x120 [ 1215.979504][T28958] should_fail_ex+0x399/0x4d0 [ 1215.984235][T28958] copyin+0x1b/0x120 [ 1215.988175][T28958] _copy_from_iter+0x447/0x1130 [ 1215.993079][T28958] ? copyout_mc+0x110/0x110 [ 1215.997614][T28958] ? __virt_addr_valid+0x188/0x540 [ 1216.002757][T28958] ? __virt_addr_valid+0x188/0x540 [ 1216.007901][T28958] ? __virt_addr_valid+0x465/0x540 [ 1216.013052][T28958] ? __check_object_size+0x500/0xa40 [ 1216.016952][T28960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8425'. [ 1216.018362][T28958] tcp_sendmsg_locked+0x1975/0x3f50 [ 1216.018432][T28958] ? tcp_set_state+0x520/0x520 [ 1216.037464][T28958] tcp_sendmsg+0x2b/0x40 [ 1216.041738][T28958] ? inet_send_prepare+0x260/0x260 [ 1216.046883][T28958] ____sys_sendmsg+0x5be/0x970 [ 1216.051690][T28958] ? __sys_sendmsg_sock+0x30/0x30 [ 1216.056740][T28958] ? __import_iovec+0x315/0x500 [ 1216.061615][T28958] ? import_iovec+0x6f/0xa0 [ 1216.066138][T28958] ___sys_sendmsg+0x2a2/0x360 [ 1216.070855][T28958] ? __sys_sendmsg+0x290/0x290 [ 1216.075664][T28958] ? __lock_acquire+0x7d10/0x7d10 [ 1216.080732][T28958] __se_sys_sendmsg+0x1bb/0x2a0 [ 1216.085606][T28958] ? __x64_sys_sendmsg+0x80/0x80 [ 1216.090584][T28958] ? lockdep_hardirqs_on+0x94/0x140 [ 1216.095811][T28958] do_syscall_64+0x4c/0xa0 [ 1216.100254][T28958] ? clear_bhb_loop+0x60/0xb0 [ 1216.104945][T28958] ? clear_bhb_loop+0x60/0xb0 [ 1216.109636][T28958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.115553][T28958] RIP: 0033:0x7f6d4059acb9 [ 1216.119985][T28958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.139607][T28958] RSP: 002b:00007f6d4144b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.148050][T28958] RAX: ffffffffffffffda RBX: 00007f6d40816090 RCX: 00007f6d4059acb9 [ 1216.156040][T28958] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000004 [ 1216.164031][T28958] RBP: 00007f6d4144b090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.172019][T28958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.179996][T28958] R13: 00007f6d40816128 R14: 00007f6d40816090 R15: 00007ffc64b94e48 [ 1216.188015][T28958] [ 1216.426750][T28967] netlink: 'syz.4.8427': attribute type 22 has an invalid length. [ 1216.449697][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'. [ 1216.516730][T28974] netlink: 'syz.3.8430': attribute type 28 has an invalid length. [ 1216.566997][T28974] netlink: 'syz.3.8430': attribute type 29 has an invalid length. [ 1216.575582][T28974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1216.597130][T28973] netlink: 'syz.0.8431': attribute type 21 has an invalid length. [ 1216.616095][T28975] netlink: 'syz.0.8431': attribute type 10 has an invalid length. [ 1216.738890][T28981] netlink: 'syz.3.8433': attribute type 11 has an invalid length. [ 1216.764782][T28981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8433'. [ 1216.892685][T28980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.905387][T28975] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1217.111979][T28986] netlink: 'syz.2.8435': attribute type 11 has an invalid length. [ 1217.131192][T28986] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1217.185504][T28985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.307638][T28993] netlink: 'syz.0.8438': attribute type 6 has an invalid length. [ 1217.397689][T28997] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1217.607366][T28999] netlink: 'syz.0.8441': attribute type 6 has an invalid length. [ 1217.629380][T28999] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8441'. [ 1218.010862][T29016] netlink: 'syz.4.8448': attribute type 21 has an invalid length. [ 1218.059431][T29016] netlink: 'syz.4.8448': attribute type 10 has an invalid length. [ 1218.314493][T29033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8454'. [ 1218.526111][T29040] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8457'. [ 1218.638766][T29047] FAULT_INJECTION: forcing a failure. [ 1218.638766][T29047] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.661723][T29047] CPU: 1 PID: 29047 Comm: syz.3.8459 Not tainted syzkaller #0 [ 1218.669226][T29047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1218.679304][T29047] Call Trace: [ 1218.682602][T29047] [ 1218.685577][T29047] dump_stack_lvl+0x188/0x24e [ 1218.690336][T29047] ? show_regs_print_info+0x12/0x12 [ 1218.695568][T29047] ? load_image+0x400/0x400 [ 1218.700093][T29047] ? __might_sleep+0xd0/0xd0 [ 1218.704695][T29047] ? __lock_acquire+0x7d10/0x7d10 [ 1218.709751][T29047] should_fail_ex+0x399/0x4d0 [ 1218.714464][T29047] should_failslab+0x5/0x20 [ 1218.718986][T29047] slab_pre_alloc_hook+0x59/0x310 [ 1218.724027][T29047] ? apparmor_sk_alloc_security+0x74/0x100 [ 1218.729856][T29047] __kmem_cache_alloc_node+0x4f/0x260 [ 1218.735245][T29047] ? apparmor_sk_alloc_security+0x74/0x100 [ 1218.741067][T29047] kmalloc_trace+0x26/0xe0 [ 1218.745520][T29047] apparmor_sk_alloc_security+0x74/0x100 [ 1218.751190][T29047] security_sk_alloc+0x6a/0xa0 [ 1218.755983][T29047] sk_prot_alloc+0x101/0x210 [ 1218.760592][T29047] ? sk_alloc+0x20/0x340 [ 1218.764848][T29047] sk_alloc+0x36/0x340 [ 1218.768932][T29047] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1218.774323][T29047] ? __fget_files+0x28/0x4b0 [ 1218.778938][T29047] ? __fget_files+0x43d/0x4b0 [ 1218.783635][T29047] ? cpu_online+0xa0/0xa0 [ 1218.787974][T29047] bpf_prog_test_run+0x31e/0x390 [ 1218.792934][T29047] __sys_bpf+0x62b/0x780 [ 1218.797196][T29047] ? bpf_link_show_fdinfo+0x380/0x380 [ 1218.802590][T29047] ? lock_chain_count+0x20/0x20 [ 1218.807461][T29047] __x64_sys_bpf+0x78/0x90 [ 1218.811894][T29047] do_syscall_64+0x4c/0xa0 [ 1218.816344][T29047] ? clear_bhb_loop+0x60/0xb0 [ 1218.821045][T29047] ? clear_bhb_loop+0x60/0xb0 [ 1218.825740][T29047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.831678][T29047] RIP: 0033:0x7face719acb9 [ 1218.836107][T29047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.855735][T29047] RSP: 002b:00007face53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1218.864168][T29047] RAX: ffffffffffffffda RBX: 00007face7415fa0 RCX: 00007face719acb9 [ 1218.872156][T29047] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1218.880135][T29047] RBP: 00007face53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.888201][T29047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.896184][T29047] R13: 00007face7416038 R14: 00007face7415fa0 R15: 00007ffcefce2478 [ 1218.904182][T29047] [ 1219.165778][T29058] netlink: 'syz.3.8464': attribute type 21 has an invalid length. [ 1220.124676][T29065] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1221.197830][T29088] delete_channel: no stack [ 1221.211529][T29088] delete_channel: no stack [ 1223.789936][T29170] validate_nla: 3 callbacks suppressed [ 1223.789955][T29170] netlink: 'syz.1.8503': attribute type 10 has an invalid length. [ 1223.907248][T29170] team0: Port device wlan1 added [ 1224.347010][ T4316] syzkaller0: tun_net_xmit 76 [ 1224.439265][ T4316] syzkaller0: tun_net_xmit 76 [ 1226.662240][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1226.865393][T29194] __nla_validate_parse: 1 callbacks suppressed [ 1226.865410][T29194] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.8510'. [ 1227.232935][T29211] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1227.296189][T29211] netlink: 'syz.0.8518': attribute type 3 has an invalid length. [ 1227.323657][T29211] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1228.332596][ T38] syzkaller0: tun_net_xmit 76 [ 1228.804295][T21524] syzkaller0: tun_net_xmit 76 [ 1230.031683][ T4273] syzkaller0: tun_net_xmit 76 [ 1230.343907][T19736] Bluetooth: hci2: command 0x0406 tx timeout [ 1232.662845][T18620] wlan1: Trigger new scan to find an IBSS to join [ 1233.697134][ T66] wlan1: Creating new IBSS network, BSSID fa:bf:d7:71:85:98 [ 1233.768245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1234.050559][T29297] netlink: 'syz.3.8542': attribute type 2 has an invalid length. [ 1234.447014][T29311] delete_channel: no stack [ 1234.635843][T29318] netlink: 'syz.4.8550': attribute type 2 has an invalid length. [ 1234.647207][T29318] netlink: 'syz.4.8550': attribute type 8 has an invalid length. [ 1234.657541][T29318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8550'. [ 1237.618820][T29344] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8556'. [ 1237.657085][T29346] netlink: 'syz.3.8556': attribute type 10 has an invalid length. [ 1237.856140][T29348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1237.901804][T29348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1237.949021][T29351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1237.991183][T29353] netlink: 'syz.3.8559': attribute type 4 has an invalid length. [ 1238.007570][T29353] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8559'. [ 1238.053816][T29348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1238.224119][T29350] FAULT_INJECTION: forcing a failure. [ 1238.224119][T29350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.254584][T29350] CPU: 0 PID: 29350 Comm: syz.1.8558 Not tainted syzkaller #0 [ 1238.262113][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1238.272201][T29350] Call Trace: [ 1238.275520][T29350] [ 1238.278498][T29350] dump_stack_lvl+0x188/0x24e [ 1238.283205][T29350] ? show_regs_print_info+0x12/0x12 [ 1238.288457][T29350] ? load_image+0x400/0x400 [ 1238.293024][T29350] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1238.299216][T29350] should_fail_ex+0x399/0x4d0 [ 1238.303933][T29350] _copy_to_user+0x2c/0x130 [ 1238.308467][T29350] simple_read_from_buffer+0xe3/0x150 [ 1238.313878][T29350] proc_fail_nth_read+0x1a6/0x220 [ 1238.318936][T29350] ? proc_fault_inject_write+0x310/0x310 [ 1238.324594][T29350] ? fsnotify_perm+0x248/0x550 [ 1238.329386][T29350] ? proc_fault_inject_write+0x310/0x310 [ 1238.335042][T29350] vfs_read+0x2de/0xa00 [ 1238.339236][T29350] ? kernel_read+0x1e0/0x1e0 [ 1238.343858][T29350] ? __fget_files+0x28/0x4b0 [ 1238.348478][T29350] ? __fget_files+0x28/0x4b0 [ 1238.353111][T29350] ? __fget_files+0x43d/0x4b0 [ 1238.357834][T29350] ? __fdget_pos+0x2ae/0x360 [ 1238.362465][T29350] ? ksys_read+0x71/0x250 [ 1238.366818][T29350] ksys_read+0x14c/0x250 [ 1238.371086][T29350] ? vfs_write+0xa30/0xa30 [ 1238.375533][T29350] ? lockdep_hardirqs_on+0x94/0x140 [ 1238.380770][T29350] do_syscall_64+0x4c/0xa0 [ 1238.385205][T29350] ? clear_bhb_loop+0x60/0xb0 [ 1238.389912][T29350] ? clear_bhb_loop+0x60/0xb0 [ 1238.394605][T29350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1238.400509][T29350] RIP: 0033:0x7fc9ae55b58e [ 1238.404939][T29350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1238.424560][T29350] RSP: 002b:00007fc9af389fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1238.432997][T29350] RAX: ffffffffffffffda RBX: 00007fc9af38a6c0 RCX: 00007fc9ae55b58e [ 1238.440995][T29350] RDX: 000000000000000f RSI: 00007fc9af38a0a0 RDI: 0000000000000006 [ 1238.448995][T29350] RBP: 00007fc9af38a090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.456978][T29350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.465006][T29350] R13: 00007fc9ae816038 R14: 00007fc9ae815fa0 R15: 00007ffd349e4878 [ 1238.473025][T29350] [ 1238.518574][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.525059][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.887571][T29375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1239.250339][T29385] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8570'. [ 1239.679921][T29397] netlink: 'syz.2.8574': attribute type 10 has an invalid length. [ 1239.721059][T29397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8574'. [ 1240.159818][T29408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8579'. [ 1240.200921][T29408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8579'. [ 1240.237477][T29410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8579'. [ 1240.276892][T29408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8579'. [ 1240.432430][T29420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8584'. [ 1240.474402][T29420] tc_dump_action: action bad kind [ 1240.670972][T29428] netlink: 'syz.3.8587': attribute type 7 has an invalid length. [ 1240.709892][T29430] netlink: 'syz.2.8588': attribute type 11 has an invalid length. [ 1240.901296][T29435] delete_channel: no stack [ 1242.244822][T29453] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1242.254732][T29453] openvswitch: netlink: Flow key attr not present in new flow. [ 1242.729148][T29467] netlink: 'syz.2.8603': attribute type 10 has an invalid length. [ 1244.361282][T29501] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8615'. [ 1244.416272][T29501] device bond_slave_0 entered promiscuous mode [ 1244.422570][T29501] device bond_slave_1 entered promiscuous mode [ 1244.425791][T29505] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.8616'. [ 1244.428837][T29501] device netdevsim0 entered promiscuous mode [ 1244.454265][T29505] netlink: zone id is out of range [ 1244.459769][T29505] netlink: zone id is out of range [ 1244.496944][T29505] netlink: zone id is out of range [ 1244.512146][T29506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8617'. [ 1244.534597][T29505] netlink: zone id is out of range [ 1244.539768][T29505] netlink: zone id is out of range [ 1244.553952][T29505] netlink: zone id is out of range [ 1244.574570][T29505] netlink: zone id is out of range [ 1244.603578][T29505] netlink: zone id is out of range [ 1244.608781][T29505] netlink: zone id is out of range [ 1245.063249][ T38] syzkaller0: tun_net_xmit 76 [ 1245.231963][T29530] __nla_validate_parse: 1 callbacks suppressed [ 1245.231979][T29530] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1245.362411][T29537] netlink: 'syz.3.8629': attribute type 21 has an invalid length. [ 1246.472629][T29582] FAULT_INJECTION: forcing a failure. [ 1246.472629][T29582] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.521819][T29582] CPU: 0 PID: 29582 Comm: syz.2.8643 Not tainted syzkaller #0 [ 1246.529352][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1246.539432][T29582] Call Trace: [ 1246.542733][T29582] [ 1246.545697][T29582] dump_stack_lvl+0x188/0x24e [ 1246.550423][T29582] ? show_regs_print_info+0x12/0x12 [ 1246.555693][T29582] ? load_image+0x400/0x400 [ 1246.560241][T29582] ? __might_sleep+0xd0/0xd0 [ 1246.564863][T29582] ? __lock_acquire+0x7d10/0x7d10 [ 1246.569928][T29582] should_fail_ex+0x399/0x4d0 [ 1246.574652][T29582] should_failslab+0x5/0x20 [ 1246.579190][T29582] slab_pre_alloc_hook+0x59/0x310 [ 1246.584253][T29582] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1246.589831][T29582] __kmem_cache_alloc_node+0x4f/0x260 [ 1246.595239][T29582] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1246.600819][T29582] __kmalloc+0xa0/0x240 [ 1246.605016][T29582] bpf_prog_test_run_skb+0x234/0x12a0 [ 1246.610421][T29582] ? __fget_files+0x28/0x4b0 [ 1246.615062][T29582] ? __fget_files+0x28/0x4b0 [ 1246.619722][T29582] ? __fget_files+0x43d/0x4b0 [ 1246.624459][T29582] ? cpu_online+0xa0/0xa0 [ 1246.628825][T29582] bpf_prog_test_run+0x31e/0x390 [ 1246.633800][T29582] __sys_bpf+0x62b/0x780 [ 1246.638082][T29582] ? bpf_link_show_fdinfo+0x380/0x380 [ 1246.643523][T29582] ? lock_chain_count+0x20/0x20 [ 1246.648434][T29582] __x64_sys_bpf+0x78/0x90 [ 1246.652898][T29582] do_syscall_64+0x4c/0xa0 [ 1246.657363][T29582] ? clear_bhb_loop+0x60/0xb0 [ 1246.662087][T29582] ? clear_bhb_loop+0x60/0xb0 [ 1246.666798][T29582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1246.672721][T29582] RIP: 0033:0x7f6d4059acb9 [ 1246.677158][T29582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.696790][T29582] RSP: 002b:00007f6d4146c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1246.705230][T29582] RAX: ffffffffffffffda RBX: 00007f6d40815fa0 RCX: 00007f6d4059acb9 [ 1246.713228][T29582] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 1246.721226][T29582] RBP: 00007f6d4146c090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.729219][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.737210][T29582] R13: 00007f6d40816038 R14: 00007f6d40815fa0 R15: 00007ffc64b94e48 [ 1246.745222][T29582] [ 1246.813048][T29591] netlink: 'syz.3.8647': attribute type 17 has an invalid length. [ 1246.821250][T29591] netlink: 'syz.3.8647': attribute type 16 has an invalid length. [ 1246.887854][T29591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8647'. [ 1247.217698][T29608] netlink: 'syz.0.8653': attribute type 39 has an invalid length. [ 1247.294779][T29599] net_ratelimit: 3670 callbacks suppressed [ 1247.294826][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.371094][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.425582][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.439426][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.485102][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.508861][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.521087][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.533215][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.552295][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1247.576714][T29599] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1249.622017][T27509] wlan1: Trigger new scan to find an IBSS to join [ 1249.974776][T29600] ------------[ cut here ]------------ [ 1249.980331][T29600] WARNING: CPU: 1 PID: 29600 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 1249.990446][T29600] Modules linked in: [ 1249.994467][T29600] CPU: 1 PID: 29600 Comm: syz.2.8652 Not tainted syzkaller #0 [ 1250.002067][T29600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.012238][T29600] RIP: 0010:perf_pending_task+0x358/0x470 [ 1250.017997][T29600] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 1250.038185][T29600] RSP: 0018:ffffc9000e6cf8e0 EFLAGS: 00010293 [ 1250.044373][T29600] RAX: ffffffff81a7f328 RBX: ffff888053d0ba58 RCX: ffff88805ffc1dc0 [ 1250.052430][T29600] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1250.060430][T29600] RBP: 0000000000000001 R08: ffff88805ffc27c3 R09: 1ffff1100bff84f8 [ 1250.068592][T29600] R10: dffffc0000000000 R11: ffffed100bff84f9 R12: ffff88805ffc1dc0 [ 1250.076676][T29600] R13: ffff8880678c9d60 R14: ffff888053d0b820 R15: 1ffff1100a7a1704 [ 1250.084804][T29600] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1250.093860][T29600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1250.100491][T29600] CR2: 00007fdc58c55e07 CR3: 0000000023b77000 CR4: 00000000003506e0 [ 1250.108567][T29600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1250.116645][T29600] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1250.124751][T29600] Call Trace: [ 1250.128070][T29600] [ 1250.131048][T29600] task_work_run+0x1d0/0x260 [ 1250.135766][T29600] ? task_work_cancel+0x220/0x220 [ 1250.140843][T29600] ? do_raw_spin_unlock+0x11d/0x230 [ 1250.146158][T29600] do_exit+0x982/0x2480 [ 1250.150381][T29600] ? lock_chain_count+0x20/0x20 [ 1250.155343][T29600] ? put_task_struct+0x80/0x80 [ 1250.160168][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.166430][T29600] ? lockdep_hardirqs_on+0x94/0x140 [ 1250.171784][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.177987][T29600] do_group_exit+0x217/0x2d0 [ 1250.182680][T29600] ? _raw_spin_unlock_irq+0x25/0x40 [ 1250.187938][T29600] get_signal+0x1272/0x1350 [ 1250.192561][T29600] arch_do_signal_or_restart+0xc4/0x1350 [ 1250.198247][T29600] ? do_futex+0x310/0x320 [ 1250.202664][T29600] ? get_sigframe_size+0x10/0x10 [ 1250.207671][T29600] ? exit_to_user_mode_loop+0x3b/0x110 [ 1250.213249][T29600] exit_to_user_mode_loop+0x70/0x110 [ 1250.218587][T29600] exit_to_user_mode_prepare+0xee/0x180 [ 1250.224226][T29600] syscall_exit_to_user_mode+0x16/0x40 [ 1250.229735][T29600] do_syscall_64+0x58/0xa0 [ 1250.234252][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1250.238983][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1250.243756][T29600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.249687][T29600] RIP: 0033:0x7f6d4059acb9 [ 1250.254185][T29600] Code: Unable to access opcode bytes at 0x7f6d4059ac8f. [ 1250.261229][T29600] RSP: 002b:00007f6d4146c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1250.269739][T29600] RAX: fffffffffffffe00 RBX: 00007f6d40815fa8 RCX: 00007f6d4059acb9 [ 1250.277811][T29600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d40815fa8 [ 1250.285906][T29600] RBP: 00007f6d40815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.293971][T29600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.302027][T29600] R13: 00007f6d40816038 R14: 00007ffc64b94d60 R15: 00007ffc64b94e48 [ 1250.310049][T29600] [ 1250.313167][T29600] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1250.320465][T29600] CPU: 1 PID: 29600 Comm: syz.2.8652 Not tainted syzkaller #0 [ 1250.327982][T29600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.338068][T29600] Call Trace: [ 1250.341369][T29600] [ 1250.344317][T29600] dump_stack_lvl+0x188/0x24e [ 1250.349019][T29600] ? memcpy+0x3c/0x60 [ 1250.353014][T29600] ? show_regs_print_info+0x12/0x12 [ 1250.358255][T29600] ? load_image+0x400/0x400 [ 1250.362786][T29600] panic+0x2e5/0x730 [ 1250.366732][T29600] ? bpf_jit_dump+0xd0/0xd0 [ 1250.371268][T29600] __warn+0x2f8/0x4f0 [ 1250.375272][T29600] ? perf_pending_task+0x358/0x470 [ 1250.380402][T29600] ? perf_pending_task+0x358/0x470 [ 1250.385553][T29600] report_bug+0x2ba/0x4f0 [ 1250.389913][T29600] ? perf_pending_task+0x358/0x470 [ 1250.395049][T29600] handle_bug+0x3a/0x70 [ 1250.399218][T29600] exc_invalid_op+0x16/0x40 [ 1250.403737][T29600] asm_exc_invalid_op+0x16/0x20 [ 1250.408598][T29600] RIP: 0010:perf_pending_task+0x358/0x470 [ 1250.414335][T29600] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 1250.433947][T29600] RSP: 0018:ffffc9000e6cf8e0 EFLAGS: 00010293 [ 1250.440022][T29600] RAX: ffffffff81a7f328 RBX: ffff888053d0ba58 RCX: ffff88805ffc1dc0 [ 1250.448005][T29600] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1250.455988][T29600] RBP: 0000000000000001 R08: ffff88805ffc27c3 R09: 1ffff1100bff84f8 [ 1250.463978][T29600] R10: dffffc0000000000 R11: ffffed100bff84f9 R12: ffff88805ffc1dc0 [ 1250.471959][T29600] R13: ffff8880678c9d60 R14: ffff888053d0b820 R15: 1ffff1100a7a1704 [ 1250.479944][T29600] ? perf_pending_task+0x358/0x470 [ 1250.485107][T29600] task_work_run+0x1d0/0x260 [ 1250.489719][T29600] ? task_work_cancel+0x220/0x220 [ 1250.494761][T29600] ? do_raw_spin_unlock+0x11d/0x230 [ 1250.499976][T29600] do_exit+0x982/0x2480 [ 1250.504158][T29600] ? lock_chain_count+0x20/0x20 [ 1250.509024][T29600] ? put_task_struct+0x80/0x80 [ 1250.513805][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.520098][T29600] ? lockdep_hardirqs_on+0x94/0x140 [ 1250.525332][T29600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.531511][T29600] do_group_exit+0x217/0x2d0 [ 1250.536140][T29600] ? _raw_spin_unlock_irq+0x25/0x40 [ 1250.541357][T29600] get_signal+0x1272/0x1350 [ 1250.545908][T29600] arch_do_signal_or_restart+0xc4/0x1350 [ 1250.551590][T29600] ? do_futex+0x310/0x320 [ 1250.555948][T29600] ? get_sigframe_size+0x10/0x10 [ 1250.560929][T29600] ? exit_to_user_mode_loop+0x3b/0x110 [ 1250.566419][T29600] exit_to_user_mode_loop+0x70/0x110 [ 1250.571738][T29600] exit_to_user_mode_prepare+0xee/0x180 [ 1250.577305][T29600] syscall_exit_to_user_mode+0x16/0x40 [ 1250.582788][T29600] do_syscall_64+0x58/0xa0 [ 1250.587229][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1250.591918][T29600] ? clear_bhb_loop+0x60/0xb0 [ 1250.596628][T29600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.602541][T29600] RIP: 0033:0x7f6d4059acb9 [ 1250.606968][T29600] Code: Unable to access opcode bytes at 0x7f6d4059ac8f. [ 1250.613996][T29600] RSP: 002b:00007f6d4146c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1250.622425][T29600] RAX: fffffffffffffe00 RBX: 00007f6d40815fa8 RCX: 00007f6d4059acb9 [ 1250.630410][T29600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d40815fa8 [ 1250.638394][T29600] RBP: 00007f6d40815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.646382][T29600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.654368][T29600] R13: 00007f6d40816038 R14: 00007ffc64b94d60 R15: 00007ffc64b94e48 [ 1250.662364][T29600] [ 1250.666000][T29600] Kernel Offset: disabled [ 1250.670335][T29600] Rebooting in 86400 seconds..