last executing test programs: 4.761043176s ago: executing program 2 (id=8331): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000003240)='GPL\x00'}, 0xc01) 4.60108997s ago: executing program 2 (id=8333): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f000085000000230000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r8, 0x4, r9}, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) 4.040913757s ago: executing program 2 (id=8339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068002900110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 3.588731371s ago: executing program 2 (id=8346): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1, 0x0, 0x18}, 0x0) 3.2970045s ago: executing program 2 (id=8349): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000040feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed000072030000040000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x80, 0x0}, 0x10) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/218, 0xda, 0x0, &(0x7f00000003c0)=""/101, 0x65}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000002880)=""/230, 0xe6}, {&(0x7f0000002980)}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000002a40)=""/24, 0x18}, {&(0x7f0000000200)=""/168, 0xa8}], 0x6, &(0x7f0000002bc0)=""/122, 0x7a}, 0x10020) 3.29650726s ago: executing program 3 (id=8350): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f000085000000230000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r8, 0x4, r9}, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) 2.855867954s ago: executing program 3 (id=8355): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.685598028s ago: executing program 3 (id=8356): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000007000000010000060400000000000001000000000061000000002e61"], 0x0, 0x36, 0x0, 0x8000000}, 0x28) 2.473107425s ago: executing program 3 (id=8360): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x2, 0x3ff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000280)="ec", 0x1}], 0x1}, 0x400c040) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 2.151182615s ago: executing program 1 (id=8362): openat$tun(0xffffffffffffff9c, 0x0, 0x84002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5ae) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) 2.007133329s ago: executing program 0 (id=8363): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xd6c02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000a0085100000010000009500000000000000691d5b000000000095"], &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/266, 0x3a, 0x10a, 0x6}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="f6000000310081044e81f782db44b905021d080005000000ccdcb93e53cda16c06c9ae2603600e12090a210000000419a8001600a40001", 0x37}], 0x1}, 0x2000c01d) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) sendmsg$inet(r0, 0x0, 0x52cc) 2.006796629s ago: executing program 2 (id=8364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xffffffffffffffd6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0xe828, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xde, 0x21, 0x10, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x4}, 0x1453e, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) syz_clone(0x40000300, &(0x7f0000000200)="41a0519263be12634439b7a9d45582de56bc1be2f18baeb3b0ea47adebda63d0bfbc41549170cafadcc15264ec0358042c1aa59a2b62dd5aa2a3d67e8d7f55070cb3be8a1b5833c406c722774ce68b97050ce8d0ac947ba1931ff5e2d7b53bd853f5b74b5bc3f7d451671c491b5b5d9eb2dfa68ea3cddb4c130788913d73df199f5173be6586553bd0b1c545976f3b07a103ad19bbb2cab48bf9a880f5fbcbbe576dcd9fe87695b39638080be61e", 0xae, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="b70e6ef092273a3c41f9805eba687b8bfba6be3b03c641b8a23f099d78dab287dde52ea3e1766ba0ea6d4d9cac3bb59dfd2a379f05dd60c4f30a459fec38764f0edd9578e5e2068f1af1345a01fcb4867446ade745065aab560efc64d77128fceb8593da86af55e5e8cebd5691224891328494f787423b96d37ebbe5b9c26e99270b5e238e43d36188e551c1ad0db9853466ecbc2f7a078a8d977f9c32ed2ad1b3f7eb13eff726abd359c93930f70a076b0c6e804a4cbba56e2f46d5ae02dc81c38f2e136514eccf2fcbc90940a5df39e683c5447ccc1ea49fd090e00935a3c021ce3571a87cf27f6c93c5d27617d3b017cd9686e692ed1b") r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x18, 0x0, 0x22) r9 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x1, 0x46, &(0x7f00000000c0)=r10, 0x4) r11 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x5}, r11, 0xffffffffffffffff, r9, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) 1.690377649s ago: executing program 1 (id=8366): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x56}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000eeb4fe8ba15e3999ef00000000008000"], 0x20}, 0x4045) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210006000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x999b, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180204000000001000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008edffffb603000000000000850000000600000085000000050600009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x1, 0x6, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x11) r5 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xe}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r5], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10}, 0x4004080) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x89f, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffb}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES16=r6], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000001c0)={r9, r10}) 1.527587674s ago: executing program 4 (id=8367): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.527409974s ago: executing program 0 (id=8368): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.367127719s ago: executing program 4 (id=8369): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x0, 0x40, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000", 0x10000000012}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="80005b", 0x3}, {&(0x7f00000001c0)="6e000000fe", 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x0) 1.362952239s ago: executing program 0 (id=8370): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x3, 0x0, 0x0, 0xf}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000001fc0)=""/4128, 0x3a, 0x1020, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x30, &(0x7f0000000100), 0x5000) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)=""/44, 0x2c}], 0x3, &(0x7f0000000140)=""/22, 0x16}, 0x12002) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x15, 0x4e4, 0x3, 0xfffffffd, 0x8, r4, 0x1ff, '\x00', 0x0, r1, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffffa, 0xf1, &(0x7f0000000340)=""/241, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xa, 0x6, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r6, r4, r4, r4, r4, r4, r4, r7, r4], 0x0, 0x10, 0x8}, 0x94) 1.137057366s ago: executing program 1 (id=8371): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000815e0c0000fff000000e0003001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.136700846s ago: executing program 4 (id=8372): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (fail_nth: 8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) sendmsg$inet(r0, 0x0, 0x52cc) 1.117709266s ago: executing program 3 (id=8373): r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xfffffc4a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000200), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000400)=""/220, 0x2b, 0xdc, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x9, 0x4, 0x11008, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff}, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r4, 0x20, &(0x7f00000009c0)={&(0x7f0000000880)=""/245, 0xf5, 0x0, &(0x7f0000000980)=""/35, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x9, 0x94, &(0x7f0000000740)=""/148, 0x40f00, 0x20, '\x00', r5, @sk_msg, r7, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x0, 0x6, 0x6}, 0x10, r8, r7, 0x5, 0x0, &(0x7f0000000a40)=[{0x5, 0x5, 0xa, 0x2}, {0x1, 0x3, 0x7, 0x9}, {0x2, 0x1, 0x1, 0x5}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x1, 0xd}], 0x10, 0x200}, 0x94) write$cgroup_int(r7, &(0x7f0000000200)=0x700, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x10) 926.315262ms ago: executing program 1 (id=8374): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') r0 = syz_clone(0x4000000, &(0x7f00000000c0)="2d5482450f399add6fe3d31134ddab060f11bdaddeb92c67d13882a20aca7f0d18fb697993d09de041c04bb9d55bac74a7b8b9ed211adf7f06cb20c8a5c403a767ae2959a7d4d82b24183b6234f10f58ca84797bb57a41dbb881d104dc5be2e91ea0a5f3894e315ed9f0ee3b635ce1ab59098af94727bbc69b7a9a28800e4cd56690bd22971fce15cb9ef112ca72d9be792f64", 0x93, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ecfecd14413b404cbfc9915cea25df451453729dd371afd60f4e20ae2415827e1a28acd92401d23ff30603682f2d306c6ad72034228d607e0e626e6b19b2dc89d34928790d077e576cb286795b6759163f117be49931435a89d6d104da4e872c4f303f7f45f230d4815bccf6ded37caa345d533c8a4fc314cba44180b777365369068302ed881e720c87e0b205769d921d0c9aea9581c82273aaa4321482aea24e81a6803f75f16c3f574bcdae14e8c7336fba107438456cbfa8e2e18e47be0fbff17e2efee908814d382799a0e2f7") syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/uts\x00') r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300)=r0, 0x12) 877.029414ms ago: executing program 4 (id=8375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x460, 0x9, 0x0, 0x8, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 810.441556ms ago: executing program 0 (id=8376): openat$tun(0xffffffffffffff9c, 0x0, 0x84002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5ae) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) 742.867008ms ago: executing program 1 (id=8377): r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], &(0x7f0000000440)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r2 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d000000000000000001000013040000007f4adfa0"], &(0x7f0000000c00)=""/253, 0x6a, 0xfd, 0x1}, 0x28) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xf7d}, 0x8) 410.585238ms ago: executing program 4 (id=8378): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000480000000dc8b850f238466ccfc007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 341.03507ms ago: executing program 0 (id=8379): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 265.070482ms ago: executing program 4 (id=8380): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x241, 0x10000000}, 0x52cc) 264.824282ms ago: executing program 1 (id=8381): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44040) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a70, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x12280, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="75212d289a97edff8dbd2c72008505be578dd01d4bf57e79a502507cafe6720accdbfe07e7b7e6b59bc04e695cc0419e12de4cecb5bcb1dbf008f9af958e73bcecca313caf87b249e32ba28fcffcaf8c4d86bc63cf622d124707be4898ea339b2a6a248ceed5b18d5b89af119d0b65a3091db43e72f923a161972c5a7616becc38f9f485e3c7c4d42f40a764d998f7406dbcc018e52db40fbe700fd9bf73aad6b4a8095c3f55b4076e46437384581d157bc90a414d4ecfc230f493a6ca54ecbeb18bc2ebdf69af6d7f8cb7e06caa8e8bc8f16a052a7b16bb90d81e", @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES32, @ANYRES64=r5, @ANYRESDEC=r7, @ANYRESOCT=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000340), &(0x7f0000000300)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) 82.473508ms ago: executing program 3 (id=8382): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)='P', 0x1080}], 0x1, 0x0, 0x0, 0x6000}, 0x20) (async) r4 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20) (async) recvmsg$kcm(r4, &(0x7f0000003180)={&(0x7f0000000340)=@nl, 0x80, &(0x7f0000003080)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/249, 0xf9}, {&(0x7f0000002dc0)=""/54, 0x36}, {&(0x7f0000002e00)=""/14, 0xe}, {&(0x7f0000002e40)=""/208, 0xd0}, {&(0x7f0000002f40)=""/65, 0x41}, {&(0x7f0000002fc0)=""/163, 0xa3}], 0x8, &(0x7f0000003100)=""/122, 0x7a}, 0x60) sendmsg$kcm(r4, &(0x7f0000001c80)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="8b2ba9417ef8ca1ffe87f589f51b5ff2ab7a61165423cb1d2a25fdcff8edb9ec91ed522210a6a45695d0ea294b38f21303003fad51fb23f5bbcc1b937ac43c26029a10e94a6d1ce9a083d7c2006a79c19354802ef154b7ad01a24794392e23dcfe6805284ba9ad7038b08187324ec72d5451ca5a78efa121451abcf07d23ca292f3662015efd2b6e8cd8f9c08ebf72825f4bb1276cb30874bbff9abf9acb0b740dc50246e2e58682677091fb1257005905818d5e6b3e3d4635f202a42a2fe8f602613990da0000000000000000cb3909", 0xd0}, {&(0x7f0000000200)="a36bf8be064d5a7eca5c28ad1c4ef55328d318ca2e81c3a0e7b61a30bed76aaafabdc9577a58ded61b0c548e8105e2f068c0885788d8f8d260", 0x39}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="101000000000000004010000040000005a116958750d96c713509d0a29ef69b97adfac0bd03ba1c7a4e2d1a8172d08fa1dceec856a38d0209445bd0871bbc5c5be281000e437f190633f687daaeb3322216a54fe5b591e3a3e5bbb442b258cab48fd0cf113b0f39052a2d54085349b26a06f9e14e13ccf94e5604d0ed14a1d017f6966ebe987af1f3b3f6086037d17d8febcbd79a0158a41e315c28e981707fe260d3916c46c3602909645b9aa9a11eb31fce9b198aedad5abba78106c11d285b1f5eb48bb07d68ea0bba870c6e0d5970f1187c9db0fa0ae40be47f34e508b1634a75340306ab3d8876807c375cbf74dab080000005f3eaaa5a5fa3f86214b6d19afa89b0b88e60ac48c3b78013b3a7ad2386359f4b0d9bc8f1abad899e279ce3a8b8b77987008dae12d9167a5b8892946f825275a3a096dabf04e28542673c5da54784384d4453735730ff6ddfde76f063c20da20e2bfe71a595bc87056659538758d201c85801c0a37497530bd12dfce59a3b048a880deb99ddbc7548834dbd3f26ac2099d097308a35222614c042eeac9d782d5890b87e23ba9d94796d29806ef117526a1b7d1d61c43e66a96800c2772b7e687fc1db889c2e50ce6a87b3258a1e2db1ddec996c628dd43399b48348710f217b648dfd04e2f7b1bf2252c87be95588a0f51243d15e251d59dc5eb9f82e8afc8fc2f04727353737bd13acd3d3091da9cbef8f039bcfda6534507aea9d857eceed0fe8a8b34f475317b6374cac94bf93693971cd17a96671457643ea17b57d980cbc04421a410af54088d6fa45905d090d154f8d2c526482cff7032c7545c5a5b34ed94cd8fbe4c08c93de10af77e0bc8ff61539bb1dc24894f7fb2c0a7a2ce032eb24d946ca84172649a768dbe7a6573ece96f25c08b46f3f55c8251a9bf77d5fadabd9eb8c6abc4dd2711c256fbcabbbac6196fc64ab854c47bb9f3025bee6cce45dcf62d91616f0bf642c9093364ca967b8c6f5a5e036a4181ce1ba1f7b6c318ed72aff71336ae8d579cc79eeefbdc9f65671a10afb67e990afd2a437c0ff8a09a930852d770eaeda5c412acbcfe743532329409b90c1e16e326fe3a1a42734b98cd9bf3350d1364188d609fc49fa8f5a78c2b46dd643b1250fa83dc5014d44633465c90c28ab664e27b7349cf970aea7e99cb89acd4241fffda1bf8745c57ef10ff9e78bf66ce4e4ade4c76fcf766e31bf7585aca364d4303b7b4435bd8ff78d81ee3b56bb5be6cc94eed4b32196674368d2ec1fe10e62beec3bd85e4a2bfaef5571b150fb49a1a69225ca62203fca93f11f311c7bd88c1c49617fe77d5ea9e7aad34c9211328aa2a11f268907b0af14f62e72d7606912c1dd61022ade4ac721759460d362657f2755ca20d0cb9c06021607a53493598fa918687917670d065abed4956ba89fe156ba2041a55f2369a586b692596bdda806db1ec8463a2867052ebbb57eec5f3c691157fa01cf55f51152f93c4d07947aead4d157092dc55f0d577db5ac1f957613fd7b91934db24266b715b3ee297287c5082fe5bf898943aeff10c1efd28a55fed3d0aacd3111b4fdf49bb9b1e13acd5fdf4b6a363eac7656ea62c4dcffbb1b1b8cd80ff3c926b9794aa98791d800d22ab6ac94425b3e526b858323f715218739a921cc255747314a7c71c415d3cb30b4d3076b8017d37ea3d0da0b15ed086c6a3cf8e95093fd54cf2165e11edab63a85deab8953693a9bc3ee4cf8f6fe96b2ca2ab948b8821d095e13c1ad253291bb475c7066185e1b49a1ebf1841fe0e13c00c54dc825b322b977f1bb3940f0e4e79cf5ea46009c2c07c774e98fa8605c9d1c336bb20e92e3901fdc2451a5a59077495acb77656e00e4cc3c426a7fb7f069f4b74ec036c6e7bbb58ef878a114092625f6a1b35282d7cbeb973c432aecc84cd40632eba5a6ccdc76c84fbc52a1b3e8886eb7725ef465cb31d7b3df1a93178c5635d947b420ce06ef199ec0ab20b0d02ab3caad11410d99eddf03a5a04d4e4f09d1eb399dc309e64c083e1de139572184eb58b911fac638413453fdca82c8afee999a773b0686153e196676ae8ac13897d5812ea6d09b8ae6ad5cccac6ab172cf64a36ebae9d08e04a6da5cda056145aef6030782d47d0c6ecfd522986ee4385d6d16e2964828af4ac11d1e0fe87cfd8572352545845d0a645b3e4d5a838b9788bc2c734db13b410de5e7c0f011832e7a7d458680495a0505b44cf7b41b24c7cd137bac33017412fad3e1870dc937a9825d20562743dd327a8a24541130f55fe04648471285fc7d42a22985af0894df27e2ce7925ce0dd20b228dbea8b1ee2cf9e058c941a4e9772e3b03f0e6af0e0251278cd265797fdb6e6ccf4ae03096c4dd96455dfad3836440f382f1df22c5035729b79ac32706a8d56cda2de06b8f55f5559615ea23afc43cdcfe15eef540287f3a03c0b5e77cdcff90de437669a5dcc57fe574f7cd8a04c58034fea4ad4cec297c08e5c9e94c4c0387cad161fb8caaeed0c2386eca15c778d083faf653af990b54d8a6fa79c6cc8014dc32fb0844e73a7e5b95c942d91c3bca3c5d2810be016634357fec885d0f3f4adeeebf86d44d4923c5f0e0000000000000023a55d66c144d89940a4e4b160efc57f167ef05486ec015560959fd453425b3654506189255da9c48d33e9db3e23c31d1f60b95a10283a4cd0c195e2dae2f74336439292787c557be375299b5b360a583a8d718f2b9aff7b3994d35256a56e5705ee966cccb7f59a7e0c29f7f0b8d36bdde977f99198a155d319ff37d6115192cdf945417b4bcd7e50a5ffee19be0ac08a8f681965e4871b7e183fe6be69e6189642749c090801d06c5f55777e3d935e53be2fc46ce14b596a8c3df884441a5bc0ac92d11864789d4233502570bdcce5e7dcef39e3295dc03ad808ef4e5e69b8abdcc40dcbcbbad027664cdbfc98886e8b7e9838d6609a2e069bd0661a609a7a8e420cc73335c2b48d28599c177fde9e9d12e9e23d93b201fec22fd85e72c0a67d9e4ec8abaa3f56ada6664619072731df8c09da14e825dea0a1e7f9b99c9fd21f3792a002e481a2516661e63d1eb27384e88f0f64b03719acfab65849994f7a35ce0809b4fe9f62ef7668fafaf8ebaf6a15449570303c66c3ddd3fd2213502e5c67366978bd8033b2b4f71fe9feed3b1eebdc14df81d762999f3d71d1cafe192a7a708e2cddb2ad731515f5cc8b5d941ba0afc1766d5ee17ea5969a87b66cb0507f0f6536085af78bdbf6ca4e51e7f86279a2f12672c5d73f7d2f93f33f9e2ad43cde772c8466691fb2a5d8e95b43a01e45399065ca23094c00069834ffe872b95f4c5bcf96eff6cd9a5f919f960eb19a470cbab53f5848a12f85d12920bf8e04d70c7a988b1d22a89a2ff8daab35f05601ecc27090649cebdb382902bdccf9b2ea6d203e574023a72671daee668b8bca8c7b67323e44612c2791e373b235d619e14f51533d4977be91ac17470e1865f925228ef6b65400f78f4bbc3d562f4000cc9e6af21af5ca99acb81221e5306f8e16c24792b20a51f44896d101e142247fb17e549135fdbad7c23b98a8db2238a69c0a9b282b59ec4146686c9b3be26383b20c7c786c08dceda79d86525a224a99c879a0fdd75e2e118b12ccdc9fe4b4f2a7ba1e3df4f0167d3e6b4951feff28ba3d56435cb4a0e4815e996441cf73d9e392e24299679b8f69a27784d6c85d3b31e924b83c1af05a820a93e4d5b9f2ce5e2c18251e2edd9a7bf154f58ef605a66af411efa4f54c58fab18a7d574363e1cc1b0fb88d2a608b0237b734c28b2c58774b224381d88646bf788c8b3b88e119ced654af9cf5f3d28a86c3a8635251d2e802c48de4063f473aed690a8908b5950448eecd39350d01a75dd565c364880ecd09a6b25217f8956b80a572afc1b850a721b7c42b13555cb7562ed4f0b454c60d0fc1e304c84ea9b58e1b8432f7565707aea5bf9ac88e4863aa41626487ea4d78c7477dacb5d2cbb9c1a5bf9aa3897eb1d032f15e7d0b10e208aafbcbcadb03a0cfbc9a9f14568ab6bab03d134f172aa32acb83200e6113fa975366f09f648f7a925458b0f7481935ff3cfe3b4278aebb404e5ac197127c3579d5e135bdb25448001e3f97e4051c17ab8548342d21dae3486b3e730a5e6b0ba08a74d99ae3822606ac7483b133ad8c09d0eb34abfee5b8c4a6f2da70ce54e11e092c2249397b60da9109eff43e94010f57edc822e156aaf47c5c190228e8e26ae543b6bef90b96f10a5e5e9dd1f8dddf87d822905e3af93a2ae40a923b9fbbdc5a94d83a4d82dd2388ea0370758184483aa286268a6ea85c6015204e400d3a61a563934a5d4f7d2a3d9c75eec985d8af667fb993c7ea1a16313997a17f6c7872d4c7a5ca1317947417c4a368ce005979daacdc0dee5bb41e234dd09ccf2e4df25358193688bec6aec6f3af79fba35a6203eea1d302e741860ecdc4b9d436c0d2868e595d8c127634e04b311fc524074746b2811971a5fb031f5b3388fb835b83f4d6463455dc173a8cc8f213eee0c9a404cb444d73c615094945db1e419d50038ea6b391e62fcedc7de30ccacb515e7402dfe5141898a878ffb037cc8fb9865605e6e3cec94b4abbe32051655b23996de73c87199fc626a6aa9789bf29d42f94144a634ee8d5861b7eabbd91d9fa184867951cba531b5931d225dff642ff0748f09ef4d8f872706cea451b60967bfaa46c2e6b48e061976bf877d183f070e3ae1429e341a195f4c1c983519037eaed1de483885d1bba394b3843d7f8c58656874dcb6031d4fb6a760227161f4684bc6877854f6f8d906d6c6d61bc3dc25f4e9cc567758c207bae8904bb8297858ef866922032e3dc3ee2a8253ec93d2fa82cb243117c5d1c1274b79dbf708a12b23e0bc107265d5ff907e2bdadd65427e9781c0af46ba8ddee596961fa3d2437769c8c02c9e92c3fa26f1c363e7a1f4600ca3456389c98696099c6b897953de9a7650b9e391305a8ad94b6f9572ab0d066c323e1c1d76a9bc6ccd21a2d49bd6db5dd008048f56134a19a2d0d581c8ce5ba1821748adf5635b4f5eb3bc1191d8b440f5f35b9c0d52ea266edc90347444878e5e0e822ed65547753a1c95614a37bce4f6b8636ba427c9ad01fa6d4168c30f2c747b2bdbdd5dff8ddc1353cb44c7a49ce912ad4f1eba07c58cb8b2376562c80e661cb0bd0acbf0abaaa08e35085c29b0eb41b7efb3d773b91e0c39c5d0103fd00cc2d37eb45fb70b2fa6dc9a7973d8921075f201f6bb8d13197056e5b3fb85fa49164da3eaf1c25a7cdd66c27d2f8824b7b0bacc76e901e74683726b3115af849231b5c27763fb6d75067685d40434e4811e6d7520e3d6563b822ec1f91c0452b59e2e46d69e1c0e7217eec6b19919a0bc7ef250e4a31b0cf1618f64b8a5abdb96ba734d9dc91027d17101a23e7dd442f1b015a9ff7eede2df59b728ea9d7119a144619888a21795e4a0e1b68a267e2e6cd1d6f3c8d2b7b1dfd3953163e77ab6263b5ea85a21803b64fcb6365ef86483b2eddce7711f03929b0e61532f64c8191bf2f1eade95d11e94210a6830cd1272553903754b00e5776b221da6640f5a64922deffc09dd36bfc5b64142c94ecf11be54fb594070034bceb3d44c26d1d94106fd3bf52f366234733bf1b8da2c475c81c17b34acb3f8992152f92a9e931461e10e38038e8e93fa87923b9be389f525edb444d3f03b4225ffd8f31a68de870018b2263356f30b21d017792763243fe50ec610942cc62e8a2a4ce5540930209"], 0x1010}, 0x54) (async) socket$kcm(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9125b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x200, 0xc2ba, 0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000031c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000007800000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7be}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r11, 0x4) (async) r12 = getpid() perf_event_open(&(0x7f0000000b00)={0x4, 0x80, 0x3, 0x1, 0x8, 0x40, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000ac0)}, 0x8000, 0x8, 0x1, 0x5, 0xffff, 0x9, 0x100, 0x0, 0x8, 0x0, 0x7f}, r12, 0x2, 0xffffffffffffffff, 0x8) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000a80)=r11, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000800)=r11, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d4}, 0x50) (async) socket$kcm(0x21, 0x2, 0x2) 0s ago: executing program 0 (id=8383): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41000000, '\x00', 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): ft promiscuous mode [ 1132.717404][T23514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.816780][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1132.826145][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.896683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1132.909997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1132.948370][T23514] device veth0_vlan entered promiscuous mode [ 1132.968118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1132.984126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.003569][T23514] device veth1_vlan entered promiscuous mode [ 1133.062546][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1133.084090][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1133.121202][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1133.162113][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1133.213110][T23514] device veth0_macvtap entered promiscuous mode [ 1133.249657][T23514] device veth1_macvtap entered promiscuous mode [ 1133.346006][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.385241][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.422965][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.458495][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.488866][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.501799][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.520759][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.531541][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.543829][T23514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.570970][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.587813][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.600407][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.630465][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.656632][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.676877][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.691434][T23514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.703407][T23514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.729552][T23514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.772468][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1133.789273][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1133.813039][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1133.840271][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1133.873246][T23514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.896322][T23514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.921192][T23514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.940476][T23514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.180774][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.209735][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.235224][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1134.294602][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.319400][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.368918][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1134.788045][T23844] -1: renamed from syzkaller0 [ 1134.891817][T23848] netlink: 'syz.1.6411': attribute type 3 has an invalid length. [ 1135.072207][T23848] netlink: 'syz.1.6411': attribute type 1 has an invalid length. [ 1135.141698][T23848] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6411'. [ 1135.991746][T23881] netlink: 'syz.3.6421': attribute type 10 has an invalid length. [ 1136.076858][T23881] team0: Port device macvlan0 added [ 1136.480805][T23897] -1: renamed from syzkaller0 [ 1136.554454][T23901] netlink: 'syz.3.6427': attribute type 21 has an invalid length. [ 1137.608878][T23924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6436'. [ 1137.744679][T23930] syz.1.6433[23930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1137.744842][T23930] syz.1.6433[23930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1138.522149][T23944] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1138.769589][T23948] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.6443'. [ 1140.346914][T23995] IPv6: pim6reg1: Disabled Multicast RS [ 1140.481662][T24003] netlink: 'syz.0.6467': attribute type 39 has an invalid length. [ 1140.774649][T24010] tipc: Started in network mode [ 1140.804752][T24010] tipc: Node identity 9215a268, cluster identity 4711 [ 1140.845323][T24010] tipc: Node number set to 2450891368 [ 1141.458665][T24026] device bridge_slave_1 left promiscuous mode [ 1141.481985][T24026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.775450][T24026] device bridge_slave_0 left promiscuous mode [ 1141.799889][T24026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.455184][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1142.703725][T24037] netlink: 'syz.4.6481': attribute type 10 has an invalid length. [ 1142.728900][T24037] device geneve0 entered promiscuous mode [ 1142.846553][T24037] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1143.177623][T24045] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1144.566353][T24079] netlink: 'syz.4.6496': attribute type 39 has an invalid length. [ 1144.856780][T24093] batman_adv: The newly added mac address (0a:73:74:72:5f:6c) already exists on: batadv_slave_0 [ 1144.897869][T24093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.940446][T24086] can: request_module (can-proto-0) failed. [ 1145.209646][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1145.418444][T24109] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1145.748764][T24120] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.6507'. [ 1145.835787][T24120] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6507'. [ 1146.669326][T24157] batman_adv: The newly added mac address (0a:73:74:72:5f:6c) already exists on: batadv_slave_0 [ 1146.722559][T24157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.770170][T24157] batman_adv: The newly added mac address (0a:73:74:72:5f:6c) already exists on: batadv_slave_0 [ 1146.793593][T24157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.052585][T24171] tun0: tun_chr_ioctl cmd 2147767507 [ 1147.556505][T24188] netlink: 'syz.2.6531': attribute type 23 has an invalid length. [ 1147.595188][T24188] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1147.642007][T24194] netlink: 'syz.1.6532': attribute type 10 has an invalid length. [ 1147.679430][T24194] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 1147.857061][T24202] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 1147.901465][T24207] netlink: 'syz.3.6536': attribute type 29 has an invalid length. [ 1147.936192][T24207] netlink: 'syz.3.6536': attribute type 29 has an invalid length. [ 1147.955794][T24202] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1148.145776][T24215] -1: renamed from syzkaller0 [ 1148.206626][T24211] netlink: 'syz.1.6538': attribute type 1 has an invalid length. [ 1148.372642][T24226] device bond_slave_1 entered promiscuous mode [ 1148.553595][T24233] netlink: 'syz.4.6549': attribute type 10 has an invalid length. [ 1148.580566][T24239] netlink: 'syz.1.6550': attribute type 10 has an invalid length. [ 1148.678030][T24240] netlink: 'syz.3.6548': attribute type 6 has an invalid length. [ 1148.713920][T24240] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1149.206982][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1150.052269][T24288] netlink: 'syz.0.6566': attribute type 27 has an invalid length. [ 1150.081293][T24288] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6566'. [ 1150.608204][T24299] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1150.633131][T24308] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1150.643792][T24308] openvswitch: netlink: Key type 386 is out of range max 32 [ 1150.994688][T24299] device syzkaller0 entered promiscuous mode [ 1151.182797][T24314] can: request_module (can-proto-0) failed. [ 1153.727305][T24329] FAULT_INJECTION: forcing a failure. [ 1153.727305][T24329] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.772373][T24329] CPU: 0 PID: 24329 Comm: syz.4.6579 Not tainted syzkaller #0 [ 1153.779909][T24329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.789988][T24329] Call Trace: [ 1153.793290][T24329] [ 1153.796247][T24329] dump_stack_lvl+0x188/0x24e [ 1153.800963][T24329] ? show_regs_print_info+0x12/0x12 [ 1153.806201][T24329] ? load_image+0x400/0x400 [ 1153.810744][T24329] ? __might_sleep+0xd0/0xd0 [ 1153.815361][T24329] ? __lock_acquire+0x7d10/0x7d10 [ 1153.820434][T24329] should_fail_ex+0x399/0x4d0 [ 1153.825155][T24329] should_failslab+0x5/0x20 [ 1153.829690][T24329] slab_pre_alloc_hook+0x59/0x310 [ 1153.834788][T24329] ? __lock_acquire+0x13cf/0x7d10 [ 1153.839862][T24329] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1153.845662][T24329] __kmem_cache_alloc_node+0x4f/0x260 [ 1153.851082][T24329] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1153.856845][T24329] __kmalloc+0xa0/0x240 [ 1153.861059][T24329] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1153.866670][T24329] tomoyo_check_open_permission+0x212/0x440 [ 1153.872628][T24329] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1153.878741][T24329] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1153.884848][T24329] ? perf_trace_lock+0xf8/0x390 [ 1153.889780][T24329] ? __lock_acquire+0x7d10/0x7d10 [ 1153.894847][T24329] ? __rwlock_init+0x140/0x140 [ 1153.899642][T24329] ? do_raw_spin_lock+0x128/0x2f0 [ 1153.904707][T24329] ? tomoyo_file_open+0xe9/0x170 [ 1153.909689][T24329] security_file_open+0x5e/0xa0 [ 1153.914596][T24329] do_dentry_open+0x305/0x10d0 [ 1153.919413][T24329] path_openat+0x2635/0x2ee0 [ 1153.924077][T24329] ? do_filp_open+0x430/0x430 [ 1153.928795][T24329] ? perf_trace_lock+0xf8/0x390 [ 1153.933694][T24329] ? trace_event_raw_event_lock+0x250/0x250 [ 1153.939642][T24329] do_filp_open+0x1f1/0x430 [ 1153.944201][T24329] ? vfs_tmpfile+0x480/0x480 [ 1153.948852][T24329] ? _raw_spin_unlock+0x24/0x40 [ 1153.953747][T24329] ? alloc_fd+0x58f/0x630 [ 1153.958138][T24329] do_sys_openat2+0x150/0x4b0 [ 1153.962875][T24329] ? ct_nmi_exit+0x145/0x1c0 [ 1153.967529][T24329] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1153.973737][T24329] ? do_sys_open+0xe0/0xe0 [ 1153.978201][T24329] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1153.984237][T24329] ? lock_chain_count+0x20/0x20 [ 1153.989136][T24329] ? exit_to_user_mode_loop+0xdc/0x110 [ 1153.994647][T24329] __x64_sys_openat+0x135/0x160 [ 1153.999556][T24329] do_syscall_64+0x4c/0xa0 [ 1154.004000][T24329] ? clear_bhb_loop+0x60/0xb0 [ 1154.008732][T24329] ? clear_bhb_loop+0x60/0xb0 [ 1154.013461][T24329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.019396][T24329] RIP: 0033:0x7f9b4a15d68e [ 1154.023849][T24329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1154.043503][T24329] RSP: 002b:00007f9b4af9aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1154.051950][T24329] RAX: ffffffffffffffda RBX: 00007f9b4af9b6c0 RCX: 00007f9b4a15d68e [ 1154.059948][T24329] RDX: 0000000000000000 RSI: 00007f9b4af9af90 RDI: ffffffffffffff9c [ 1154.067945][T24329] RBP: 00007f9b4af9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.075936][T24329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.083924][T24329] R13: 00007f9b4a416038 R14: 00007f9b4a415fa0 R15: 00007fff71680358 [ 1154.091920][T24329] [ 1154.112294][T24329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1154.525424][T24343] validate_nla: 1 callbacks suppressed [ 1154.525464][T24343] netlink: 'syz.0.6584': attribute type 29 has an invalid length. [ 1154.643928][T24343] netlink: 'syz.0.6584': attribute type 29 has an invalid length. [ 1154.760141][T24355] netlink: 'syz.1.6588': attribute type 10 has an invalid length. [ 1154.781738][T24355] team0: Device ipvlan1 failed to register rx_handler [ 1155.087192][T24365] netlink: 'syz.1.6592': attribute type 39 has an invalid length. [ 1155.456853][T24382] netlink: 'syz.3.6598': attribute type 1 has an invalid length. [ 1155.464656][T24382] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.6598'. [ 1155.554743][T24378] can: request_module (can-proto-0) failed. [ 1155.610240][T24388] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6599'. [ 1155.925824][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1156.433176][T24406] netlink: 'syz.0.6607': attribute type 10 has an invalid length. [ 1156.460231][T24406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1156.471775][T24410] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1156.499201][T24406] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1156.614698][T24410] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1157.262001][T24451] netlink: 'syz.4.6622': attribute type 10 has an invalid length. [ 1157.301225][T24453] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1157.599474][T24463] netlink: 'syz.2.6628': attribute type 1 has an invalid length. [ 1157.615157][T24463] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6628'. [ 1157.643820][T24468] netlink: 'syz.2.6628': attribute type 29 has an invalid length. [ 1157.674053][T24468] netlink: 'syz.2.6628': attribute type 29 has an invalid length. [ 1158.319526][T24491] team0: Port device macvlan0 added [ 1158.370957][T24495] team0: Port device virt_wifi0 added [ 1158.588482][T24504] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6646'. [ 1158.634984][T24504] netlink: zone id is out of range [ 1158.646814][T24504] netlink: zone id is out of range [ 1158.683101][T24504] netlink: zone id is out of range [ 1158.709410][T24521] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6652'. [ 1158.731742][T24504] netlink: zone id is out of range [ 1158.772603][T24504] netlink: zone id is out of range [ 1158.792900][T24504] netlink: zone id is out of range [ 1158.803046][T24504] netlink: zone id is out of range [ 1158.825108][T24504] netlink: zone id is out of range [ 1158.830391][T24504] netlink: zone id is out of range [ 1160.190691][T24570] -1: renamed from syzkaller0 [ 1161.173705][T24559] delete_channel: no stack [ 1161.249423][T24581] __nla_validate_parse: 2 callbacks suppressed [ 1161.249469][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1161.512579][T24594] validate_nla: 6 callbacks suppressed [ 1161.512596][T24594] netlink: 'syz.2.6679': attribute type 5 has an invalid length. [ 1161.564485][T24596] FAULT_INJECTION: forcing a failure. [ 1161.564485][T24596] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.581900][T24596] CPU: 0 PID: 24596 Comm: syz.1.6681 Not tainted syzkaller #0 [ 1161.589431][T24596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1161.599514][T24596] Call Trace: [ 1161.602820][T24596] [ 1161.605772][T24596] dump_stack_lvl+0x188/0x24e [ 1161.610475][T24596] ? show_regs_print_info+0x12/0x12 [ 1161.615701][T24596] ? load_image+0x400/0x400 [ 1161.620233][T24596] ? __might_sleep+0xd0/0xd0 [ 1161.624831][T24596] ? __lock_acquire+0x7d10/0x7d10 [ 1161.629893][T24596] should_fail_ex+0x399/0x4d0 [ 1161.634594][T24596] should_failslab+0x5/0x20 [ 1161.639118][T24596] slab_pre_alloc_hook+0x59/0x310 [ 1161.644169][T24596] ? tomoyo_encode+0x27e/0x540 [ 1161.648965][T24596] __kmem_cache_alloc_node+0x4f/0x260 [ 1161.654368][T24596] ? tomoyo_encode+0x27e/0x540 [ 1161.659164][T24596] __kmalloc+0xa0/0x240 [ 1161.663352][T24596] tomoyo_encode+0x27e/0x540 [ 1161.667965][T24596] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1161.673636][T24596] tomoyo_check_open_permission+0x212/0x440 [ 1161.679551][T24596] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1161.685643][T24596] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1161.691771][T24596] ? __lock_acquire+0x7d10/0x7d10 [ 1161.696825][T24596] ? __rwlock_init+0x140/0x140 [ 1161.701606][T24596] ? do_raw_spin_lock+0x128/0x2f0 [ 1161.706655][T24596] ? tomoyo_file_open+0xe9/0x170 [ 1161.711620][T24596] security_file_open+0x5e/0xa0 [ 1161.716508][T24596] do_dentry_open+0x305/0x10d0 [ 1161.721316][T24596] path_openat+0x2635/0x2ee0 [ 1161.725945][T24596] ? verify_lock_unused+0x140/0x140 [ 1161.731173][T24596] ? do_syscall_64+0x4c/0xa0 [ 1161.735806][T24596] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.741914][T24596] ? do_filp_open+0x430/0x430 [ 1161.746641][T24596] do_filp_open+0x1f1/0x430 [ 1161.751172][T24596] ? vfs_tmpfile+0x480/0x480 [ 1161.755806][T24596] ? _raw_spin_unlock+0x24/0x40 [ 1161.760684][T24596] ? alloc_fd+0x58f/0x630 [ 1161.765053][T24596] do_sys_openat2+0x150/0x4b0 [ 1161.769755][T24596] ? ct_nmi_exit+0x145/0x1c0 [ 1161.774395][T24596] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1161.780569][T24596] ? do_sys_open+0xe0/0xe0 [ 1161.785003][T24596] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1161.791017][T24596] ? lock_chain_count+0x20/0x20 [ 1161.795898][T24596] ? exit_to_user_mode_loop+0xdc/0x110 [ 1161.801389][T24596] __x64_sys_openat+0x135/0x160 [ 1161.806273][T24596] do_syscall_64+0x4c/0xa0 [ 1161.810707][T24596] ? clear_bhb_loop+0x60/0xb0 [ 1161.815408][T24596] ? clear_bhb_loop+0x60/0xb0 [ 1161.820115][T24596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.826033][T24596] RIP: 0033:0x7ff83975d68e [ 1161.830465][T24596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.850105][T24596] RSP: 002b:00007ff83a712ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1161.858541][T24596] RAX: ffffffffffffffda RBX: 00007ff83a7136c0 RCX: 00007ff83975d68e [ 1161.866546][T24596] RDX: 0000000000000000 RSI: 00007ff83a712f90 RDI: ffffffffffffff9c [ 1161.874570][T24596] RBP: 00007ff83a713090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.882583][T24596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.890593][T24596] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1161.898606][T24596] [ 1161.907038][T24596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.060786][T24602] netlink: 'syz.0.6682': attribute type 39 has an invalid length. [ 1162.641624][T24615] device syzkaller0 entered promiscuous mode [ 1162.981853][T24628] FAULT_INJECTION: forcing a failure. [ 1162.981853][T24628] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.021562][T24628] CPU: 0 PID: 24628 Comm: syz.4.6691 Not tainted syzkaller #0 [ 1163.029121][T24628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1163.039213][T24628] Call Trace: [ 1163.042512][T24628] [ 1163.045470][T24628] dump_stack_lvl+0x188/0x24e [ 1163.050205][T24628] ? show_regs_print_info+0x12/0x12 [ 1163.055440][T24628] ? load_image+0x400/0x400 [ 1163.059986][T24628] ? __might_sleep+0xd0/0xd0 [ 1163.064602][T24628] ? __lock_acquire+0x7d10/0x7d10 [ 1163.069677][T24628] should_fail_ex+0x399/0x4d0 [ 1163.074389][T24628] should_failslab+0x5/0x20 [ 1163.078925][T24628] slab_pre_alloc_hook+0x59/0x310 [ 1163.083992][T24628] ? kvmalloc_node+0x6c/0x180 [ 1163.088725][T24628] __kmem_cache_alloc_node+0x4f/0x260 [ 1163.094148][T24628] ? kvmalloc_node+0x6c/0x180 [ 1163.098865][T24628] __kmalloc_node+0xa0/0x240 [ 1163.103497][T24628] kvmalloc_node+0x6c/0x180 [ 1163.108045][T24628] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1163.113552][T24628] ? verify_lock_unused+0x140/0x140 [ 1163.118795][T24628] ? kasan_set_track+0x60/0x70 [ 1163.123599][T24628] ? kasan_set_track+0x4b/0x70 [ 1163.128388][T24628] ? __kasan_kmalloc+0x8e/0xa0 [ 1163.133168][T24628] ? __kmalloc+0xb0/0x240 [ 1163.137534][T24628] ? bpf_test_init+0x9f/0x140 [ 1163.142255][T24628] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 1163.147736][T24628] ? bpf_prog_test_run+0x31e/0x390 [ 1163.152886][T24628] ? __x64_sys_bpf+0x78/0x90 [ 1163.157501][T24628] ? do_syscall_64+0x4c/0xa0 [ 1163.162134][T24628] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.168239][T24628] ? xdp_convert_md_to_buff+0x330/0x330 [ 1163.173820][T24628] ? __lock_acquire+0x7d10/0x7d10 [ 1163.178864][T24628] ? __virt_addr_valid+0x188/0x540 [ 1163.183992][T24628] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1163.190250][T24628] ? bpf_test_init+0x119/0x140 [ 1163.195026][T24628] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1163.200500][T24628] bpf_prog_test_run_xdp+0x736/0xf10 [ 1163.205808][T24628] ? dev_put+0x80/0x80 [ 1163.209906][T24628] ? dev_put+0x80/0x80 [ 1163.213985][T24628] bpf_prog_test_run+0x31e/0x390 [ 1163.218941][T24628] __sys_bpf+0x62b/0x780 [ 1163.223205][T24628] ? bpf_link_show_fdinfo+0x380/0x380 [ 1163.228627][T24628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1163.234826][T24628] __x64_sys_bpf+0x78/0x90 [ 1163.239261][T24628] do_syscall_64+0x4c/0xa0 [ 1163.243717][T24628] ? clear_bhb_loop+0x60/0xb0 [ 1163.248414][T24628] ? clear_bhb_loop+0x60/0xb0 [ 1163.253124][T24628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.259050][T24628] RIP: 0033:0x7f9b4a19ce59 [ 1163.263484][T24628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.283100][T24628] RSP: 002b:00007f9b4af9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1163.291526][T24628] RAX: ffffffffffffffda RBX: 00007f9b4a415fa0 RCX: 00007f9b4a19ce59 [ 1163.299509][T24628] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1163.307491][T24628] RBP: 00007f9b4af9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.315489][T24628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.323486][T24628] R13: 00007f9b4a416038 R14: 00007f9b4a415fa0 R15: 00007fff71680358 [ 1163.331494][T24628] [ 1164.195034][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1165.156153][T24617] -1: renamed from syzkaller0 [ 1165.168181][T24626] netlink: 'syz.2.6690': attribute type 10 has an invalid length. [ 1165.178485][T24626] team0: Device ipvlan1 failed to register rx_handler [ 1165.444338][T24639] netlink: 'syz.3.6696': attribute type 39 has an invalid length. [ 1165.861118][T24651] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6700'. [ 1165.942479][T24652] netlink: 'syz.1.6699': attribute type 2 has an invalid length. [ 1166.043781][T24652] netlink: 'syz.1.6699': attribute type 1 has an invalid length. [ 1166.121452][T24652] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6699'. [ 1166.703634][T24673] -1: renamed from syzkaller0 [ 1167.014682][T24691] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1167.289535][T24700] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1167.323738][T24700] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1167.367289][T24698] netlink: 'syz.3.6714': attribute type 39 has an invalid length. [ 1167.414047][T24702] netlink: 'syz.1.6716': attribute type 29 has an invalid length. [ 1167.458699][T24702] netlink: 'syz.1.6716': attribute type 29 has an invalid length. [ 1167.492024][T24708] netlink: 'syz.1.6716': attribute type 29 has an invalid length. [ 1168.111708][T24719] netlink: 'syz.0.6725': attribute type 10 has an invalid length. [ 1168.217778][T24725] device wlan1 entered promiscuous mode [ 1169.242383][T24740] netlink: 'syz.4.6731': attribute type 39 has an invalid length. [ 1170.564641][T24744] netlink: 'syz.4.6734': attribute type 1 has an invalid length. [ 1170.585069][T24744] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1170.623557][T24744] netlink: 'syz.4.6734': attribute type 29 has an invalid length. [ 1170.667274][T24744] netlink: 'syz.4.6734': attribute type 29 has an invalid length. [ 1170.934512][T24755] FAULT_INJECTION: forcing a failure. [ 1170.934512][T24755] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.979418][T24755] CPU: 1 PID: 24755 Comm: syz.2.6738 Not tainted syzkaller #0 [ 1170.986958][T24755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.997089][T24755] Call Trace: [ 1171.000424][T24755] [ 1171.003408][T24755] dump_stack_lvl+0x188/0x24e [ 1171.008182][T24755] ? show_regs_print_info+0x12/0x12 [ 1171.013443][T24755] ? load_image+0x400/0x400 [ 1171.018035][T24755] ? __might_sleep+0xd0/0xd0 [ 1171.022683][T24755] ? __lock_acquire+0x7d10/0x7d10 [ 1171.027796][T24755] should_fail_ex+0x399/0x4d0 [ 1171.032556][T24755] should_failslab+0x5/0x20 [ 1171.037113][T24755] slab_pre_alloc_hook+0x59/0x310 [ 1171.042213][T24755] ? tomoyo_encode+0x27e/0x540 [ 1171.047052][T24755] __kmem_cache_alloc_node+0x4f/0x260 [ 1171.052505][T24755] ? tomoyo_encode+0x27e/0x540 [ 1171.057362][T24755] __kmalloc+0xa0/0x240 [ 1171.061590][T24755] tomoyo_encode+0x27e/0x540 [ 1171.066290][T24755] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1171.072019][T24755] ? tomoyo_path_number_perm+0x205/0x650 [ 1171.077710][T24755] tomoyo_path_number_perm+0x22f/0x650 [ 1171.083215][T24755] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1171.088722][T24755] ? ksys_write+0x1c0/0x250 [ 1171.093272][T24755] ? common_file_perm+0x171/0x1c0 [ 1171.098423][T24755] ? __fget_files+0x28/0x4b0 [ 1171.103057][T24755] ? __fget_files+0x28/0x4b0 [ 1171.107716][T24755] security_file_ioctl+0x6c/0xa0 [ 1171.112696][T24755] __se_sys_ioctl+0x48/0x170 [ 1171.117329][T24755] do_syscall_64+0x4c/0xa0 [ 1171.121776][T24755] ? clear_bhb_loop+0x60/0xb0 [ 1171.126494][T24755] ? clear_bhb_loop+0x60/0xb0 [ 1171.131233][T24755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.137158][T24755] RIP: 0033:0x7f7f9b39ce59 [ 1171.141601][T24755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.161243][T24755] RSP: 002b:00007f7f9c1f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.169688][T24755] RAX: ffffffffffffffda RBX: 00007f7f9b615fa0 RCX: 00007f7f9b39ce59 [ 1171.177686][T24755] RDX: 0000200000000340 RSI: 000000000000541b RDI: 0000000000000005 [ 1171.185684][T24755] RBP: 00007f7f9c1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.193680][T24755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.201682][T24755] R13: 00007f7f9b616038 R14: 00007f7f9b615fa0 R15: 00007fffc75ae6b8 [ 1171.209726][T24755] [ 1171.255500][T24757] netlink: 'syz.0.6740': attribute type 10 has an invalid length. [ 1171.406476][T24755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1171.733650][ T48] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1172.011093][T24784] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6749'. [ 1172.105655][T24784] net_ratelimit: 10 callbacks suppressed [ 1172.105670][T24784] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1172.413182][T24806] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1172.487433][T24806] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1172.603835][T24810] validate_nla: 3 callbacks suppressed [ 1172.603861][T24810] netlink: 'syz.0.6759': attribute type 39 has an invalid length. [ 1172.786991][T24812] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1173.069439][T24822] netlink: 'syz.0.6764': attribute type 39 has an invalid length. [ 1175.106050][T24811] delete_channel: no stack [ 1175.113766][T24822] device veth0_macvtap left promiscuous mode [ 1175.886068][T24840] netlink: 'syz.1.6768': attribute type 1 has an invalid length. [ 1175.911908][T24840] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.6768'. [ 1176.043602][T24847] mac80211_hwsim hwsim225 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1176.410012][T24855] netlink: 'syz.1.6774': attribute type 39 has an invalid length. [ 1176.849677][T24861] -1: renamed from syzkaller0 [ 1177.304476][T24872] netlink: 'syz.2.6780': attribute type 10 has an invalid length. [ 1177.318195][T24872] device geneve0 entered promiscuous mode [ 1177.365468][T24872] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1177.521882][T24878] netlink: 'syz.3.6781': attribute type 19 has an invalid length. [ 1177.575067][T24878] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1177.911043][T24890] netlink: 'syz.3.6787': attribute type 39 has an invalid length. [ 1178.572978][T24912] FAULT_INJECTION: forcing a failure. [ 1178.572978][T24912] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.593027][T24912] CPU: 1 PID: 24912 Comm: syz.3.6796 Not tainted syzkaller #0 [ 1178.600548][T24912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.610671][T24912] Call Trace: [ 1178.614000][T24912] [ 1178.616961][T24912] dump_stack_lvl+0x188/0x24e [ 1178.621681][T24912] ? show_regs_print_info+0x12/0x12 [ 1178.626920][T24912] ? load_image+0x400/0x400 [ 1178.631482][T24912] ? __might_sleep+0xd0/0xd0 [ 1178.636121][T24912] ? __lock_acquire+0x7d10/0x7d10 [ 1178.641202][T24912] should_fail_ex+0x399/0x4d0 [ 1178.645929][T24912] should_failslab+0x5/0x20 [ 1178.650473][T24912] slab_pre_alloc_hook+0x59/0x310 [ 1178.655539][T24912] ? tomoyo_encode+0x27e/0x540 [ 1178.660386][T24912] __kmem_cache_alloc_node+0x4f/0x260 [ 1178.665802][T24912] ? tomoyo_encode+0x27e/0x540 [ 1178.670599][T24912] __kmalloc+0xa0/0x240 [ 1178.674787][T24912] tomoyo_encode+0x27e/0x540 [ 1178.679409][T24912] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1178.685079][T24912] tomoyo_check_open_permission+0x212/0x440 [ 1178.691560][T24912] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1178.697657][T24912] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1178.703777][T24912] ? __lock_acquire+0x7d10/0x7d10 [ 1178.708830][T24912] ? __rwlock_init+0x140/0x140 [ 1178.713628][T24912] ? do_raw_spin_lock+0x128/0x2f0 [ 1178.718677][T24912] ? tomoyo_file_open+0xe9/0x170 [ 1178.723650][T24912] security_file_open+0x5e/0xa0 [ 1178.728525][T24912] do_dentry_open+0x305/0x10d0 [ 1178.733323][T24912] path_openat+0x2635/0x2ee0 [ 1178.737953][T24912] ? verify_lock_unused+0x140/0x140 [ 1178.743184][T24912] ? do_syscall_64+0x4c/0xa0 [ 1178.747791][T24912] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.753894][T24912] ? do_filp_open+0x430/0x430 [ 1178.758617][T24912] do_filp_open+0x1f1/0x430 [ 1178.763146][T24912] ? vfs_tmpfile+0x480/0x480 [ 1178.767773][T24912] ? _raw_spin_unlock+0x24/0x40 [ 1178.772647][T24912] ? alloc_fd+0x58f/0x630 [ 1178.777009][T24912] do_sys_openat2+0x150/0x4b0 [ 1178.781705][T24912] ? ct_nmi_exit+0x145/0x1c0 [ 1178.786319][T24912] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1178.792488][T24912] ? do_sys_open+0xe0/0xe0 [ 1178.796938][T24912] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1178.802955][T24912] ? lock_chain_count+0x20/0x20 [ 1178.807837][T24912] __x64_sys_openat+0x135/0x160 [ 1178.812726][T24912] do_syscall_64+0x4c/0xa0 [ 1178.817168][T24912] ? clear_bhb_loop+0x60/0xb0 [ 1178.821877][T24912] ? clear_bhb_loop+0x60/0xb0 [ 1178.826581][T24912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.832501][T24912] RIP: 0033:0x7fcfe795d68e [ 1178.836926][T24912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1178.856548][T24912] RSP: 002b:00007fcfe87d9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1178.865002][T24912] RAX: ffffffffffffffda RBX: 00007fcfe87da6c0 RCX: 00007fcfe795d68e [ 1178.872989][T24912] RDX: 0000000000000000 RSI: 00007fcfe87d9f90 RDI: ffffffffffffff9c [ 1178.880980][T24912] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.888965][T24912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.896948][T24912] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1178.904961][T24912] [ 1178.919114][T24912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1178.996153][T24911] -1: renamed from syzkaller0 [ 1179.182441][T24917] netlink: 'syz.0.6800': attribute type 29 has an invalid length. [ 1179.891401][T24917] netlink: 'syz.0.6800': attribute type 29 has an invalid length. [ 1179.902859][T24926] netlink: 'syz.2.6802': attribute type 39 has an invalid length. [ 1180.041100][ T8922] wlan1: Trigger new scan to find an IBSS to join [ 1180.173436][T24935] FAULT_INJECTION: forcing a failure. [ 1180.173436][T24935] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.220875][T24935] CPU: 0 PID: 24935 Comm: syz.4.6805 Not tainted syzkaller #0 [ 1180.228398][T24935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1180.238489][T24935] Call Trace: [ 1180.241805][T24935] [ 1180.244760][T24935] dump_stack_lvl+0x188/0x24e [ 1180.249502][T24935] ? show_regs_print_info+0x12/0x12 [ 1180.254734][T24935] ? load_image+0x400/0x400 [ 1180.259281][T24935] ? __might_sleep+0xd0/0xd0 [ 1180.263940][T24935] ? __lock_acquire+0x7d10/0x7d10 [ 1180.269015][T24935] should_fail_ex+0x399/0x4d0 [ 1180.273732][T24935] should_failslab+0x5/0x20 [ 1180.278269][T24935] slab_pre_alloc_hook+0x59/0x310 [ 1180.283355][T24935] ? kvmalloc_node+0x6c/0x180 [ 1180.288076][T24935] __kmem_cache_alloc_node+0x4f/0x260 [ 1180.293485][T24935] ? kvmalloc_node+0x6c/0x180 [ 1180.298199][T24935] __kmalloc_node+0xa0/0x240 [ 1180.302834][T24935] kvmalloc_node+0x6c/0x180 [ 1180.307392][T24935] bpf_test_run_xdp_live+0x209/0x1a90 [ 1180.312814][T24935] ? verify_lock_unused+0x140/0x140 [ 1180.318064][T24935] ? perf_trace_lock+0xf8/0x390 [ 1180.322959][T24935] ? perf_trace_lock+0xf8/0x390 [ 1180.327869][T24935] ? xdp_convert_md_to_buff+0x330/0x330 [ 1180.333490][T24935] ? __lock_acquire+0x7d10/0x7d10 [ 1180.338561][T24935] ? __might_fault+0x4e/0x120 [ 1180.343278][T24935] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1180.349554][T24935] ? bpf_test_init+0x119/0x140 [ 1180.354356][T24935] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1180.359867][T24935] bpf_prog_test_run_xdp+0x736/0xf10 [ 1180.365206][T24935] ? dev_put+0x80/0x80 [ 1180.369315][T24935] ? dev_put+0x80/0x80 [ 1180.373411][T24935] bpf_prog_test_run+0x31e/0x390 [ 1180.378391][T24935] __sys_bpf+0x62b/0x780 [ 1180.382684][T24935] ? bpf_link_show_fdinfo+0x380/0x380 [ 1180.388110][T24935] ? lock_chain_count+0x20/0x20 [ 1180.393019][T24935] __x64_sys_bpf+0x78/0x90 [ 1180.397468][T24935] do_syscall_64+0x4c/0xa0 [ 1180.401911][T24935] ? clear_bhb_loop+0x60/0xb0 [ 1180.406628][T24935] ? clear_bhb_loop+0x60/0xb0 [ 1180.411435][T24935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.417370][T24935] RIP: 0033:0x7f9b4a19ce59 [ 1180.421810][T24935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.441446][T24935] RSP: 002b:00007f9b4af9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1180.449899][T24935] RAX: ffffffffffffffda RBX: 00007f9b4a415fa0 RCX: 00007f9b4a19ce59 [ 1180.457912][T24935] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1180.465920][T24935] RBP: 00007f9b4af9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.473965][T24935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.481965][T24935] R13: 00007f9b4a416038 R14: 00007f9b4a415fa0 R15: 00007fff71680358 [ 1180.489983][T24935] [ 1180.677459][T24945] netlink: 'syz.2.6807': attribute type 2 has an invalid length. [ 1180.832722][T24945] netlink: 'syz.2.6807': attribute type 3 has an invalid length. [ 1180.843454][T24945] netlink: 'syz.2.6807': attribute type 1 has an invalid length. [ 1180.852329][T24945] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1181.175600][T24958] netlink: 'syz.4.6809': attribute type 10 has an invalid length. [ 1181.256920][T24958] team0: Device ipvlan1 failed to register rx_handler [ 1182.287586][T24985] netlink: 'syz.2.6815': attribute type 10 has an invalid length. [ 1182.322782][T24985] device veth1_macvtap left promiscuous mode [ 1182.496525][T24991] netlink: 'syz.3.6817': attribute type 39 has an invalid length. [ 1182.603783][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.610279][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.253620][T25003] FAULT_INJECTION: forcing a failure. [ 1183.253620][T25003] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.275116][T25003] CPU: 0 PID: 25003 Comm: syz.3.6822 Not tainted syzkaller #0 [ 1183.282638][T25003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1183.293009][T25003] Call Trace: [ 1183.296329][T25003] [ 1183.299290][T25003] dump_stack_lvl+0x188/0x24e [ 1183.304011][T25003] ? show_regs_print_info+0x12/0x12 [ 1183.309284][T25003] ? load_image+0x400/0x400 [ 1183.313836][T25003] ? __might_sleep+0xd0/0xd0 [ 1183.318474][T25003] ? __lock_acquire+0x7d10/0x7d10 [ 1183.323554][T25003] should_fail_ex+0x399/0x4d0 [ 1183.328277][T25003] should_failslab+0x5/0x20 [ 1183.332835][T25003] slab_pre_alloc_hook+0x59/0x310 [ 1183.337913][T25003] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.343689][T25003] __kmem_cache_alloc_node+0x4f/0x260 [ 1183.349108][T25003] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.354875][T25003] __kmalloc+0xa0/0x240 [ 1183.359096][T25003] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1183.364708][T25003] ? tomoyo_path_number_perm+0x205/0x650 [ 1183.370391][T25003] tomoyo_path_number_perm+0x22f/0x650 [ 1183.375901][T25003] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1183.382528][T25003] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1183.388160][T25003] ? __fget_files+0x28/0x4b0 [ 1183.392824][T25003] ? __fget_files+0x28/0x4b0 [ 1183.397455][T25003] security_file_ioctl+0x6c/0xa0 [ 1183.402412][T25003] __se_sys_ioctl+0x48/0x170 [ 1183.407024][T25003] do_syscall_64+0x4c/0xa0 [ 1183.411458][T25003] ? clear_bhb_loop+0x60/0xb0 [ 1183.416159][T25003] ? clear_bhb_loop+0x60/0xb0 [ 1183.420867][T25003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.426781][T25003] RIP: 0033:0x7fcfe799ce59 [ 1183.431225][T25003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.450855][T25003] RSP: 002b:00007fcfe87da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.459286][T25003] RAX: ffffffffffffffda RBX: 00007fcfe7c15fa0 RCX: 00007fcfe799ce59 [ 1183.467277][T25003] RDX: 00002000000001c0 RSI: 00000000000089e0 RDI: 0000000000000005 [ 1183.475276][T25003] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.483264][T25003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.491261][T25003] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1183.499261][T25003] [ 1183.510237][T25003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1183.864654][T25020] netlink: 'syz.2.6829': attribute type 10 has an invalid length. [ 1183.889602][T25017] -1: renamed from syzkaller0 [ 1184.035251][T24797] wlan1: Trigger new scan to find an IBSS to join [ 1184.143536][T25025] netlink: 'syz.2.6831': attribute type 39 has an invalid length. [ 1184.153718][T24799] wlan1: Creating new IBSS network, BSSID 7e:c4:93:3e:c3:54 [ 1184.233476][T25029] netlink: 'syz.3.6833': attribute type 3 has an invalid length. [ 1184.258578][T25029] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1184.428824][T25036] netlink: 'syz.1.6835': attribute type 10 has an invalid length. [ 1184.480254][T25036] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6835'. [ 1184.761817][T25036] team0: Port device virt_wifi0 removed [ 1185.534820][T25065] -1: renamed from syzkaller0 [ 1185.645460][T25067] netlink: 'syz.2.6846': attribute type 39 has an invalid length. [ 1185.731856][T25070] netlink: 'syz.3.6848': attribute type 10 has an invalid length. [ 1185.822242][T25073] netlink: 'syz.4.6849': attribute type 10 has an invalid length. [ 1185.833878][T25073] team0: Port device virt_wifi0 added [ 1185.997181][T25079] FAULT_INJECTION: forcing a failure. [ 1185.997181][T25079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.104956][T25079] CPU: 1 PID: 25079 Comm: syz.3.6852 Not tainted syzkaller #0 [ 1186.112498][T25079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.122597][T25079] Call Trace: [ 1186.125940][T25079] [ 1186.128922][T25079] dump_stack_lvl+0x188/0x24e [ 1186.133666][T25079] ? show_regs_print_info+0x12/0x12 [ 1186.138938][T25079] ? load_image+0x400/0x400 [ 1186.143524][T25079] ? __lock_acquire+0x7d10/0x7d10 [ 1186.148644][T25079] ? snprintf+0xe5/0x140 [ 1186.153017][T25079] should_fail_ex+0x399/0x4d0 [ 1186.157791][T25079] _copy_to_user+0x2c/0x130 [ 1186.162372][T25079] simple_read_from_buffer+0xe3/0x150 [ 1186.167820][T25079] proc_fail_nth_read+0x1a6/0x220 [ 1186.172913][T25079] ? proc_fault_inject_write+0x310/0x310 [ 1186.178623][T25079] ? fsnotify_perm+0x248/0x550 [ 1186.183454][T25079] ? proc_fault_inject_write+0x310/0x310 [ 1186.189164][T25079] vfs_read+0x2de/0xa00 [ 1186.193396][T25079] ? kernel_read+0x1e0/0x1e0 [ 1186.198072][T25079] ? __fget_files+0x28/0x4b0 [ 1186.202737][T25079] ? __fget_files+0x28/0x4b0 [ 1186.207399][T25079] ? __fget_files+0x43d/0x4b0 [ 1186.212185][T25079] ? __fdget_pos+0x2ae/0x360 [ 1186.216841][T25079] ? ksys_read+0x71/0x250 [ 1186.221239][T25079] ksys_read+0x14c/0x250 [ 1186.225553][T25079] ? vfs_write+0xa30/0xa30 [ 1186.230042][T25079] ? lockdep_hardirqs_on+0x94/0x140 [ 1186.235321][T25079] do_syscall_64+0x4c/0xa0 [ 1186.239803][T25079] ? clear_bhb_loop+0x60/0xb0 [ 1186.244548][T25079] ? clear_bhb_loop+0x60/0xb0 [ 1186.249294][T25079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.255251][T25079] RIP: 0033:0x7fcfe795d68e [ 1186.259728][T25079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1186.279420][T25079] RSP: 002b:00007fcfe87d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1186.287923][T25079] RAX: ffffffffffffffda RBX: 00007fcfe87da6c0 RCX: 00007fcfe795d68e [ 1186.295949][T25079] RDX: 000000000000000f RSI: 00007fcfe87da0a0 RDI: 0000000000000007 [ 1186.303972][T25079] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.312012][T25079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.320037][T25079] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1186.328120][T25079] [ 1186.453692][T25083] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.6854'. [ 1186.920032][T25089] netlink: 'syz.0.6856': attribute type 2 has an invalid length. [ 1187.074398][T25092] netlink: 'syz.0.6856': attribute type 3 has an invalid length. [ 1187.137617][T25092] netlink: 'syz.0.6856': attribute type 1 has an invalid length. [ 1187.215796][T25092] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1187.369426][T25098] -1: renamed from syzkaller0 [ 1189.520418][T25142] validate_nla: 1 callbacks suppressed [ 1189.520438][T25142] netlink: 'syz.1.6873': attribute type 39 has an invalid length. [ 1189.795229][T21657] Bluetooth: hci1: command 0x0406 tx timeout [ 1190.652233][T25152] -1: renamed from syzkaller0 [ 1191.023764][T25167] FAULT_INJECTION: forcing a failure. [ 1191.023764][T25167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.076471][T25167] CPU: 1 PID: 25167 Comm: syz.1.6883 Not tainted syzkaller #0 [ 1191.084177][T25167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1191.094267][T25167] Call Trace: [ 1191.097599][T25167] [ 1191.100556][T25167] dump_stack_lvl+0x188/0x24e [ 1191.105273][T25167] ? show_regs_print_info+0x12/0x12 [ 1191.110508][T25167] ? load_image+0x400/0x400 [ 1191.115049][T25167] ? __lock_acquire+0x7d10/0x7d10 [ 1191.120113][T25167] should_fail_ex+0x399/0x4d0 [ 1191.124823][T25167] _copy_from_user+0x2c/0x170 [ 1191.129537][T25167] kstrtouint_from_user+0xda/0x170 [ 1191.134688][T25167] ? kstrtol_from_user+0x190/0x190 [ 1191.139860][T25167] proc_fail_nth_write+0x8b/0x200 [ 1191.144931][T25167] ? proc_fail_nth_read+0x220/0x220 [ 1191.150186][T25167] ? common_file_perm+0x171/0x1c0 [ 1191.155265][T25167] ? proc_fail_nth_read+0x220/0x220 [ 1191.160491][T25167] vfs_write+0x2e6/0xa30 [ 1191.164784][T25167] ? file_end_write+0x250/0x250 [ 1191.169698][T25167] ? __fget_files+0x28/0x4b0 [ 1191.174336][T25167] ? __fget_files+0x28/0x4b0 [ 1191.178983][T25167] ? __fget_files+0x43d/0x4b0 [ 1191.183713][T25167] ? __fdget_pos+0x2ae/0x360 [ 1191.188341][T25167] ? ksys_write+0x71/0x250 [ 1191.192798][T25167] ksys_write+0x14c/0x250 [ 1191.197177][T25167] ? __ia32_sys_read+0x80/0x80 [ 1191.201985][T25167] ? lockdep_hardirqs_on+0x94/0x140 [ 1191.207224][T25167] do_syscall_64+0x4c/0xa0 [ 1191.211667][T25167] ? clear_bhb_loop+0x60/0xb0 [ 1191.216377][T25167] ? clear_bhb_loop+0x60/0xb0 [ 1191.221096][T25167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1191.227035][T25167] RIP: 0033:0x7ff83975d68e [ 1191.231497][T25167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1191.251153][T25167] RSP: 002b:00007ff83a712fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1191.259624][T25167] RAX: ffffffffffffffda RBX: 00007ff83a7136c0 RCX: 00007ff83975d68e [ 1191.267650][T25167] RDX: 0000000000000001 RSI: 00007ff83a7130a0 RDI: 0000000000000007 [ 1191.275659][T25167] RBP: 00007ff83a713090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.283656][T25167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.291666][T25167] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1191.299683][T25167] [ 1191.901824][T25178] netlink: 'syz.0.6887': attribute type 39 has an invalid length. [ 1192.155515][T25182] sctp: [Deprecated]: syz.3.6888 (pid 25182) Use of int in maxseg socket option. [ 1192.155515][T25182] Use struct sctp_assoc_value instead [ 1192.784541][T25196] netlink: 'syz.1.6895': attribute type 2 has an invalid length. [ 1192.808225][T25196] netlink: 'syz.1.6895': attribute type 8 has an invalid length. [ 1192.821622][T25196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1192.856190][T25202] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6897'. [ 1193.083492][T25210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1193.493009][T25226] netlink: 'syz.2.6904': attribute type 6 has an invalid length. [ 1193.580044][T25226] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6904'. [ 1193.864644][T25238] netlink: 'syz.1.6908': attribute type 39 has an invalid length. [ 1194.363825][T25242] bond0: (slave geneve0): Error: Slave device does not support XDP [ 1194.841244][T25256] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1194.884088][T25249] netlink: 'syz.3.6912': attribute type 2 has an invalid length. [ 1194.958272][T25249] netlink: 'syz.3.6912': attribute type 8 has an invalid length. [ 1195.048302][T25249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6912'. [ 1195.161521][T25256] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1196.007337][T25288] netlink: 'syz.2.6925': attribute type 39 has an invalid length. [ 1196.295627][T25296] netlink: 'syz.2.6929': attribute type 1 has an invalid length. [ 1196.311679][T25298] netlink: 'syz.2.6929': attribute type 29 has an invalid length. [ 1196.355225][T25298] netlink: 'syz.2.6929': attribute type 29 has an invalid length. [ 1196.363988][T25296] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1196.490311][T25303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6931'. [ 1196.719610][T25305] sctp: [Deprecated]: syz.1.6932 (pid 25305) Use of int in maxseg socket option. [ 1196.719610][T25305] Use struct sctp_assoc_value instead [ 1196.943981][T25312] syz.0.6935[25312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1197.003028][T25316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1197.245655][T25322] netlink: 'syz.4.6939': attribute type 39 has an invalid length. [ 1197.401523][T25330] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6941'. [ 1197.424817][T25331] netlink: 'syz.0.6940': attribute type 11 has an invalid length. [ 1197.443032][T25331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1197.462262][T25331] netlink: 'syz.0.6940': attribute type 3 has an invalid length. [ 1198.165171][T25324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.657741][T25339] netlink: 'syz.1.6943': attribute type 22 has an invalid length. [ 1198.675135][T25339] __nla_validate_parse: 1 callbacks suppressed [ 1198.675150][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6943'. [ 1199.139349][T25344] netlink: 'syz.4.6945': attribute type 10 has an invalid length. [ 1200.011497][T25375] netlink: 'syz.4.6955': attribute type 39 has an invalid length. [ 1200.114661][T25364] syz.2.6951[25364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1201.190802][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1202.484590][T25458] netlink: 'syz.4.6983': attribute type 11 has an invalid length. [ 1202.524254][T25458] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6983'. [ 1202.563091][T25456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.911711][T25465] device syzkaller0 entered promiscuous mode [ 1203.067742][T25477] netlink: 'syz.4.6990': attribute type 10 has an invalid length. [ 1203.129365][T25477] team0: Device ipvlan1 failed to register rx_handler [ 1205.293763][T25512] netlink: 'syz.0.7000': attribute type 2 has an invalid length. [ 1205.314942][T25512] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7000'. [ 1207.602808][T25519] netlink: 'syz.0.7002': attribute type 10 has an invalid length. [ 1207.639480][T25522] FAULT_INJECTION: forcing a failure. [ 1207.639480][T25522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.675716][T25522] CPU: 1 PID: 25522 Comm: syz.1.7004 Not tainted syzkaller #0 [ 1207.683247][T25522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.693331][T25522] Call Trace: [ 1207.696640][T25522] [ 1207.699599][T25522] dump_stack_lvl+0x188/0x24e [ 1207.704309][T25522] ? show_regs_print_info+0x12/0x12 [ 1207.709543][T25522] ? load_image+0x400/0x400 [ 1207.714086][T25522] ? __lock_acquire+0x7d10/0x7d10 [ 1207.719144][T25522] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1207.724817][T25522] should_fail_ex+0x399/0x4d0 [ 1207.729525][T25522] _copy_from_user+0x2c/0x170 [ 1207.734221][T25522] kcm_ioctl+0x34e/0x1090 [ 1207.738640][T25522] ? __kmem_cache_free+0xb6/0x1f0 [ 1207.743686][T25522] ? tomoyo_path_number_perm+0x205/0x650 [ 1207.749340][T25522] ? kcm_release+0x5b0/0x5b0 [ 1207.753946][T25522] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1207.759595][T25522] ? tomoyo_path_number_perm+0x205/0x650 [ 1207.765249][T25522] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1207.770740][T25522] sock_do_ioctl+0xfb/0x320 [ 1207.775285][T25522] ? sock_show_fdinfo+0xb0/0xb0 [ 1207.780162][T25522] sock_ioctl+0x4d2/0x710 [ 1207.784517][T25522] ? sock_poll+0x410/0x410 [ 1207.788972][T25522] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1207.793932][T25522] ? security_file_ioctl+0x7c/0xa0 [ 1207.799064][T25522] ? sock_poll+0x410/0x410 [ 1207.803519][T25522] __se_sys_ioctl+0xfa/0x170 [ 1207.808155][T25522] do_syscall_64+0x4c/0xa0 [ 1207.812587][T25522] ? clear_bhb_loop+0x60/0xb0 [ 1207.817284][T25522] ? clear_bhb_loop+0x60/0xb0 [ 1207.821980][T25522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.827902][T25522] RIP: 0033:0x7ff83979ce59 [ 1207.832335][T25522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.851947][T25522] RSP: 002b:00007ff83a713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.860379][T25522] RAX: ffffffffffffffda RBX: 00007ff839a15fa0 RCX: 00007ff83979ce59 [ 1207.868361][T25522] RDX: 00002000000001c0 RSI: 00000000000089e0 RDI: 0000000000000005 [ 1207.876354][T25522] RBP: 00007ff83a713090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.884336][T25522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.892413][T25522] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1207.900413][T25522] [ 1208.233871][T25533] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1208.274575][T25532] netlink: 'syz.0.7009': attribute type 10 has an invalid length. [ 1208.308878][T25532] device syz_tun entered promiscuous mode [ 1208.439489][T25533] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1208.673765][T25537] syz.1.7007[25537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1209.231104][T25559] netlink: 'syz.1.7017': attribute type 1 has an invalid length. [ 1209.306685][T25559] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7017'. [ 1209.354445][T25564] netlink: 'syz.1.7017': attribute type 29 has an invalid length. [ 1209.378947][T25562] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1209.398851][T25564] netlink: 'syz.1.7017': attribute type 29 has an invalid length. [ 1209.631449][T25570] netlink: 'syz.2.7021': attribute type 39 has an invalid length. [ 1209.981235][T25585] device wlan1 entered promiscuous mode [ 1210.199968][T25597] netlink: 'syz.4.7033': attribute type 10 has an invalid length. [ 1210.275048][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 1210.619578][T25604] netlink: 'syz.4.7036': attribute type 10 has an invalid length. [ 1211.073060][T25620] netlink: 'syz.1.7041': attribute type 39 has an invalid length. [ 1211.457723][T25631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1212.161335][T25659] netlink: 'syz.2.7054': attribute type 39 has an invalid length. [ 1212.453091][T25662] device wlan1 left promiscuous mode [ 1212.503447][T25669] tipc: Started in network mode [ 1212.510724][T25669] tipc: Node identity 9215a268, cluster identity 4711 [ 1212.526333][T25669] tipc: Node number set to 2450891368 [ 1213.982124][T25692] netlink: 'syz.4.7069': attribute type 29 has an invalid length. [ 1213.994167][T25694] netlink: 'syz.3.7070': attribute type 39 has an invalid length. [ 1214.020515][T25692] netlink: 'syz.4.7069': attribute type 29 has an invalid length. [ 1214.508177][T25714] -1: renamed from syzkaller0 [ 1214.933614][T25730] netlink: 'syz.4.7083': attribute type 39 has an invalid length. [ 1215.025158][T25733] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1215.034261][T25733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.176701][T25738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.922125][T25763] -1: renamed from syzkaller0 [ 1216.297630][T25772] netlink: 'syz.4.7098': attribute type 39 has an invalid length. [ 1217.226337][T25795] device wlan1 entered promiscuous mode [ 1217.789751][T25809] device syzkaller0 entered promiscuous mode [ 1217.845090][T25815] netlink: 'syz.4.7111': attribute type 39 has an invalid length. [ 1217.963661][T25818] netlink: 'syz.0.7113': attribute type 10 has an invalid length. [ 1218.287619][T25829] netlink: 'syz.3.7116': attribute type 29 has an invalid length. [ 1220.118141][T25829] netlink: 'syz.3.7116': attribute type 29 has an invalid length. [ 1220.132875][T25838] netlink: 'syz.0.7122': attribute type 39 has an invalid length. [ 1220.141329][T25840] netlink: 'syz.4.7123': attribute type 10 has an invalid length. [ 1220.352653][T25847] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7125'. [ 1220.383093][T25847] device hsr_slave_0 left promiscuous mode [ 1220.417703][T25847] device hsr_slave_1 left promiscuous mode [ 1220.600286][T25859] FAULT_INJECTION: forcing a failure. [ 1220.600286][T25859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.631208][T25859] CPU: 0 PID: 25859 Comm: syz.2.7129 Not tainted syzkaller #0 [ 1220.638725][T25859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1220.648815][T25859] Call Trace: [ 1220.652150][T25859] [ 1220.655119][T25859] dump_stack_lvl+0x188/0x24e [ 1220.659841][T25859] ? show_regs_print_info+0x12/0x12 [ 1220.665072][T25859] ? load_image+0x400/0x400 [ 1220.669629][T25859] ? __lock_acquire+0x7d10/0x7d10 [ 1220.674696][T25859] ? snprintf+0xe5/0x140 [ 1220.678986][T25859] should_fail_ex+0x399/0x4d0 [ 1220.683706][T25859] _copy_to_user+0x2c/0x130 [ 1220.688265][T25859] simple_read_from_buffer+0xe3/0x150 [ 1220.693688][T25859] proc_fail_nth_read+0x1a6/0x220 [ 1220.698772][T25859] ? proc_fault_inject_write+0x310/0x310 [ 1220.704447][T25859] ? fsnotify_perm+0x248/0x550 [ 1220.709254][T25859] ? proc_fault_inject_write+0x310/0x310 [ 1220.714929][T25859] vfs_read+0x2de/0xa00 [ 1220.719135][T25859] ? kernel_read+0x1e0/0x1e0 [ 1220.723781][T25859] ? __fget_files+0x28/0x4b0 [ 1220.728419][T25859] ? __fget_files+0x28/0x4b0 [ 1220.733068][T25859] ? __fget_files+0x43d/0x4b0 [ 1220.737832][T25859] ? __fdget_pos+0x2ae/0x360 [ 1220.742478][T25859] ? ksys_read+0x71/0x250 [ 1220.746863][T25859] ksys_read+0x14c/0x250 [ 1220.751184][T25859] ? vfs_write+0xa30/0xa30 [ 1220.755659][T25859] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.760932][T25859] do_syscall_64+0x4c/0xa0 [ 1220.765386][T25859] ? clear_bhb_loop+0x60/0xb0 [ 1220.770121][T25859] ? clear_bhb_loop+0x60/0xb0 [ 1220.774841][T25859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.780772][T25859] RIP: 0033:0x7f7f9b35d68e [ 1220.785235][T25859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1220.804893][T25859] RSP: 002b:00007f7f9c1f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1220.813342][T25859] RAX: ffffffffffffffda RBX: 00007f7f9c1f96c0 RCX: 00007f7f9b35d68e [ 1220.821344][T25859] RDX: 000000000000000f RSI: 00007f7f9c1f90a0 RDI: 0000000000000007 [ 1220.829347][T25859] RBP: 00007f7f9c1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.837347][T25859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.845372][T25859] R13: 00007f7f9b616038 R14: 00007f7f9b615fa0 R15: 00007fffc75ae6b8 [ 1220.853425][T25859] [ 1220.892469][T25858] netlink: 'syz.4.7128': attribute type 10 has an invalid length. [ 1221.398019][T25880] device syzkaller0 entered promiscuous mode [ 1221.473096][T25889] netlink: 'syz.3.7142': attribute type 1 has an invalid length. [ 1221.510089][T25889] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1221.583118][T25889] netlink: 'syz.3.7142': attribute type 29 has an invalid length. [ 1221.605358][T25889] netlink: 'syz.3.7142': attribute type 29 has an invalid length. [ 1222.406421][T25917] sock: sock_set_timeout: `syz.2.7153' (pid 25917) tries to set negative timeout [ 1223.843660][T25906] netlink: 'syz.3.7150': attribute type 10 has an invalid length. [ 1223.855109][T25906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.874093][T25906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.901180][T25906] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1223.911189][T25908] netlink: 'syz.4.7151': attribute type 14 has an invalid length. [ 1223.925002][T25915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7149'. [ 1223.945021][T25915] device hsr_slave_0 left promiscuous mode [ 1223.964810][T25915] device hsr_slave_1 left promiscuous mode [ 1224.743832][T25953] netlink: 'syz.2.7165': attribute type 10 has an invalid length. [ 1224.941546][T25957] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1225.136808][T25961] netlink: 'syz.3.7171': attribute type 39 has an invalid length. [ 1225.623627][T25977] netlink: 'syz.2.7176': attribute type 10 has an invalid length. [ 1225.635084][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.012658][T25980] netlink: 'syz.0.7178': attribute type 10 has an invalid length. [ 1226.518294][T26007] netlink: 'syz.2.7188': attribute type 39 has an invalid length. [ 1226.741196][T26016] netlink: 'syz.3.7192': attribute type 29 has an invalid length. [ 1226.797988][T26016] netlink: 'syz.3.7192': attribute type 29 has an invalid length. [ 1226.832563][T26020] delete_channel: no stack [ 1226.923470][T26020] netlink: 'syz.2.7194': attribute type 3 has an invalid length. [ 1226.964325][T26020] netlink: 'syz.2.7194': attribute type 1 has an invalid length. [ 1227.026156][T26020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7194'. [ 1227.245776][T26031] device bridge_slave_1 left promiscuous mode [ 1227.273558][T26031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.332110][T26031] device bridge_slave_0 left promiscuous mode [ 1227.392064][T26031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.656197][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7198'. [ 1227.688602][T26036] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.7200'. [ 1228.051148][T26062] netlink: 'syz.2.7207': attribute type 29 has an invalid length. [ 1228.162075][T26048] netlink: 'syz.0.7204': attribute type 39 has an invalid length. [ 1228.194811][T26067] netlink: 12927 bytes leftover after parsing attributes in process `syz.3.7208'. [ 1228.218251][T26061] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1228.271767][T26061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1228.336608][T26062] netlink: 'syz.2.7207': attribute type 29 has an invalid length. [ 1228.359906][T26067] netlink: 'syz.3.7208': attribute type 10 has an invalid length. [ 1228.410014][T26067] device veth0_macvtap left promiscuous mode [ 1228.603970][T26064] netlink: 'syz.2.7207': attribute type 29 has an invalid length. [ 1229.009859][T26085] sock: sock_set_timeout: `syz.4.7215' (pid 26085) tries to set negative timeout [ 1229.326556][T26091] -1: renamed from syzkaller0 [ 1230.699275][T26104] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1230.743227][T26104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.671071][T26138] netlink: 12927 bytes leftover after parsing attributes in process `syz.2.7234'. [ 1232.147204][T26138] validate_nla: 1 callbacks suppressed [ 1232.147240][T26138] netlink: 'syz.2.7234': attribute type 10 has an invalid length. [ 1232.193288][T26138] device veth0_macvtap left promiscuous mode [ 1233.260946][T26171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7243'. [ 1233.282376][T26171] device hsr_slave_0 left promiscuous mode [ 1233.360626][T26171] device hsr_slave_1 left promiscuous mode [ 1233.846168][T26173] netlink: 'syz.3.7245': attribute type 10 has an invalid length. [ 1234.239912][T26184] netlink: 'syz.4.7249': attribute type 10 has an invalid length. [ 1235.700009][T26199] netlink: 'syz.4.7251': attribute type 10 has an invalid length. [ 1235.789771][T26199] team0: Port device hsr_slave_0 added [ 1235.907131][T26211] device wlan0 left promiscuous mode [ 1235.943820][T26213] -1: renamed from syzkaller0 [ 1236.015712][T26216] netlink: 'syz.0.7256': attribute type 10 has an invalid length. [ 1236.143417][T26216] device veth0_vlan left promiscuous mode [ 1236.158135][T26216] device veth0_vlan entered promiscuous mode [ 1236.179930][T26216] team0: Device veth0_vlan failed to register rx_handler [ 1236.675883][T26235] -1: renamed from syzkaller0 [ 1236.702456][T26238] netlink: 'syz.3.7268': attribute type 1 has an invalid length. [ 1236.732498][T26238] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1236.757148][T26242] netlink: 'syz.3.7268': attribute type 29 has an invalid length. [ 1236.774558][T26242] netlink: 'syz.3.7268': attribute type 29 has an invalid length. [ 1237.055479][T26254] netlink: 'syz.0.7274': attribute type 2 has an invalid length. [ 1237.085011][T26254] netlink: 'syz.0.7274': attribute type 1 has an invalid length. [ 1237.092793][T26254] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.7274'. [ 1237.258122][T26259] -1: renamed from syzkaller0 [ 1237.672787][T26283] -1: renamed from syzkaller0 [ 1238.914114][T26312] validate_nla: 2 callbacks suppressed [ 1238.914131][T26312] netlink: 'syz.1.7298': attribute type 10 has an invalid length. [ 1239.820652][T26312] team0: Port device macvlan0 added [ 1239.881333][T26324] netlink: 'syz.4.7301': attribute type 39 has an invalid length. [ 1239.902353][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7302'. [ 1240.774202][T26366] netlink: 'syz.3.7316': attribute type 39 has an invalid length. [ 1241.463429][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7321'. [ 1241.742303][T26372] device syzkaller0 entered promiscuous mode [ 1242.683162][T26414] netlink: 'syz.3.7331': attribute type 7 has an invalid length. [ 1242.721660][T26414] netlink: 'syz.3.7331': attribute type 1 has an invalid length. [ 1242.738333][T26414] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1244.049080][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.055524][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.974299][T26405] netlink: 'syz.2.7330': attribute type 39 has an invalid length. [ 1246.115114][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.829006][T26440] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.7343'. [ 1246.891182][T26440] openvswitch: netlink: Flow actions attr not present in new flow. [ 1249.351559][T26473] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7355'. [ 1249.821006][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7356'. [ 1251.195699][T26489] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.7360'. [ 1251.253467][T26489] openvswitch: netlink: Flow actions attr not present in new flow. [ 1252.605883][T26502] netlink: 'syz.4.7365': attribute type 39 has an invalid length. [ 1253.983046][T26511] netlink: 'syz.3.7368': attribute type 10 has an invalid length. [ 1254.168119][T26517] netlink: 'syz.3.7368': attribute type 29 has an invalid length. [ 1254.383579][T26511] team0: Port device geneve1 added [ 1254.451351][T26517] netlink: 'syz.3.7368': attribute type 29 has an invalid length. [ 1254.539497][T26513] netlink: 'syz.3.7368': attribute type 29 has an invalid length. [ 1254.632302][T26521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1255.571893][T26534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1255.881729][T26534] netlink: 'syz.4.7374': attribute type 10 has an invalid length. [ 1255.965177][T26539] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.7375'. [ 1255.974576][T26539] openvswitch: netlink: Flow actions attr not present in new flow. [ 1256.489492][T26534] device veth0_vlan left promiscuous mode [ 1256.532762][T26534] device veth0_vlan entered promiscuous mode [ 1256.569117][T26534] team0: Device veth0_vlan failed to register rx_handler [ 1256.777427][T26537] netlink: 'syz.0.7372': attribute type 11 has an invalid length. [ 1257.209599][T26547] netlink: 'syz.2.7377': attribute type 39 has an invalid length. [ 1258.313863][T26558] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1258.408873][T26559] -1: renamed from syzkaller0 [ 1259.525184][T26567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7384'. [ 1260.800457][T26569] netlink: 'syz.1.7386': attribute type 10 has an invalid length. [ 1261.013113][T26578] netlink: 'syz.1.7386': attribute type 29 has an invalid length. [ 1261.456355][T26569] team0: Port device geneve1 added [ 1261.498304][T26578] netlink: 'syz.1.7386': attribute type 29 has an invalid length. [ 1261.526638][T26570] netlink: 'syz.1.7386': attribute type 29 has an invalid length. [ 1261.896364][T26588] netlink: 'syz.4.7391': attribute type 39 has an invalid length. [ 1263.812235][T26614] -1: renamed from syzkaller0 [ 1270.390599][T26674] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1270.411723][T26675] netlink: 'syz.1.7419': attribute type 10 has an invalid length. [ 1270.491100][T26675] team0: Device ipvlan1 failed to register rx_handler [ 1270.544123][T26678] FAULT_INJECTION: forcing a failure. [ 1270.544123][T26678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.628305][T26678] CPU: 1 PID: 26678 Comm: syz.4.7420 Not tainted syzkaller #0 [ 1270.635852][T26678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1270.645939][T26678] Call Trace: [ 1270.649241][T26678] [ 1270.652218][T26678] dump_stack_lvl+0x188/0x24e [ 1270.656949][T26678] ? show_regs_print_info+0x12/0x12 [ 1270.662190][T26678] ? load_image+0x400/0x400 [ 1270.666739][T26678] ? __lock_acquire+0x7d10/0x7d10 [ 1270.671811][T26678] should_fail_ex+0x399/0x4d0 [ 1270.676531][T26678] _copy_to_user+0x2c/0x130 [ 1270.681099][T26678] bpf_test_finish+0x266/0x600 [ 1270.685906][T26678] ? convert_skb_to___skb+0x420/0x420 [ 1270.691337][T26678] ? bpf_test_init+0x119/0x140 [ 1270.696142][T26678] bpf_prog_test_run_xdp+0x80a/0xf10 [ 1270.701485][T26678] ? dev_put+0x80/0x80 [ 1270.705595][T26678] ? dev_put+0x80/0x80 [ 1270.709707][T26678] bpf_prog_test_run+0x31e/0x390 [ 1270.714688][T26678] __sys_bpf+0x62b/0x780 [ 1270.718988][T26678] ? bpf_link_show_fdinfo+0x380/0x380 [ 1270.724433][T26678] ? lock_chain_count+0x20/0x20 [ 1270.729341][T26678] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1270.735383][T26678] __x64_sys_bpf+0x78/0x90 [ 1270.739842][T26678] do_syscall_64+0x4c/0xa0 [ 1270.744285][T26678] ? clear_bhb_loop+0x60/0xb0 [ 1270.749003][T26678] ? clear_bhb_loop+0x60/0xb0 [ 1270.753724][T26678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.759648][T26678] RIP: 0033:0x7f9b4a19ce59 [ 1270.764088][T26678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.783726][T26678] RSP: 002b:00007f9b4af9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1270.792169][T26678] RAX: ffffffffffffffda RBX: 00007f9b4a415fa0 RCX: 00007f9b4a19ce59 [ 1270.800175][T26678] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1270.808176][T26678] RBP: 00007f9b4af9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.816174][T26678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.824166][T26678] R13: 00007f9b4a416038 R14: 00007f9b4a415fa0 R15: 00007fff71680358 [ 1270.832172][T26678] [ 1271.131431][T26685] -1: renamed from syzkaller0 [ 1271.552087][T26697] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7427'. [ 1271.575286][T26697] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7427'. [ 1271.608885][T26696] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7427'. [ 1271.977720][T26712] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7432'. [ 1272.092469][T26717] netlink: 'syz.0.7433': attribute type 29 has an invalid length. [ 1272.181918][T26717] netlink: 'syz.0.7433': attribute type 29 has an invalid length. [ 1272.289508][T26714] netlink: 'syz.0.7433': attribute type 1 has an invalid length. [ 1272.310306][T26721] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7434'. [ 1272.325129][T26714] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1272.580105][T26729] -1: renamed from syzkaller0 [ 1273.161415][T26752] netlink: 'syz.3.7447': attribute type 21 has an invalid length. [ 1273.170779][T26752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7447'. [ 1273.201046][T26751] netlink: 'syz.3.7447': attribute type 21 has an invalid length. [ 1273.230964][T26751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7447'. [ 1274.050462][T26775] -1: renamed from syzkaller0 [ 1274.086990][T26781] netlink: 'syz.1.7456': attribute type 3 has an invalid length. [ 1274.125148][T26781] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7456'. [ 1274.359418][T26793] netlink: 'syz.0.7461': attribute type 10 has an invalid length. [ 1274.441089][T26798] netlink: 'syz.2.7463': attribute type 10 has an invalid length. [ 1276.917082][T26827] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1276.944205][T26822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.976004][T26822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.988857][T26822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.997263][T26822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.188702][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7473'. [ 1280.327408][T26840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7477'. [ 1280.730598][T26852] device syzkaller0 entered promiscuous mode [ 1280.743710][T26858] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1280.788174][T26858] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1280.803153][T26862] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1280.833736][T26858] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1280.856036][T26858] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1280.879057][T26858] netlink: 'syz.0.7483': attribute type 29 has an invalid length. [ 1283.238754][T26888] netlink: 'syz.3.7496': attribute type 10 has an invalid length. [ 1284.284787][T26942] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7519'. [ 1284.309046][T26947] delete_channel: no stack [ 1286.151347][T27009] -1: renamed from syzkaller0 [ 1286.254973][T27015] netlink: 'syz.3.7546': attribute type 3 has an invalid length. [ 1286.278348][T27015] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1286.299255][T27013] netlink: 'syz.2.7555': attribute type 39 has an invalid length. [ 1287.015374][T27039] netlink: 'syz.1.7553': attribute type 10 has an invalid length. [ 1287.055610][T27039] device geneve0 entered promiscuous mode [ 1287.165724][T27039] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1287.208328][T27042] netlink: 'syz.2.7554': attribute type 10 has an invalid length. [ 1287.598423][T27055] netlink: 'syz.1.7562': attribute type 39 has an invalid length. [ 1287.734077][T27061] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.7563'. [ 1287.841981][T27065] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7563'. [ 1287.924824][T27067] netlink: 'syz.1.7577': attribute type 39 has an invalid length. [ 1289.426984][T27119] netlink: 'syz.3.7580': attribute type 29 has an invalid length. [ 1289.452937][T27119] netlink: 'syz.3.7580': attribute type 29 has an invalid length. [ 1289.914596][T27142] tipc: Started in network mode [ 1289.930092][T27142] tipc: Node identity 9215a268, cluster identity 4711 [ 1289.955006][T27142] tipc: Node number set to 2450891368 [ 1290.941402][T27168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1290.960827][T27168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1291.063914][T27174] netlink: 'syz.4.7604': attribute type 39 has an invalid length. [ 1292.326419][T27205] netlink: 'syz.0.7614': attribute type 10 has an invalid length. [ 1292.347462][T27207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7615'. [ 1292.811709][T27215] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1292.832705][T27215] openvswitch: netlink: Flow key attr not present in new flow. [ 1292.896796][T27215] netlink: 'syz.0.7617': attribute type 13 has an invalid length. [ 1292.915239][T27215] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1293.108889][T27220] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1293.120829][T27222] netlink: 'syz.2.7620': attribute type 10 has an invalid length. [ 1293.133406][T27222] team0: Port device virt_wifi0 added [ 1293.359910][T27226] netlink: 'syz.4.7621': attribute type 39 has an invalid length. [ 1293.826543][T27238] netlink: 'syz.2.7627': attribute type 13 has an invalid length. [ 1293.892119][T27238] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1293.933928][T27240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1294.034777][T27246] bond0: (slave geneve0): Error: Slave device does not support XDP [ 1294.858641][T27273] sock: sock_set_timeout: `syz.1.7640' (pid 27273) tries to set negative timeout [ 1295.850405][T27292] netlink: 'syz.4.7647': attribute type 39 has an invalid length. [ 1296.162125][T27301] netlink: 'syz.3.7648': attribute type 10 has an invalid length. [ 1296.468963][T27309] netlink: 'syz.4.7652': attribute type 10 has an invalid length. [ 1296.537413][T27309] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7652'. [ 1296.562878][T27309] device bond0 entered promiscuous mode [ 1296.579082][T27309] device bond_slave_0 entered promiscuous mode [ 1296.993251][T27323] -1: renamed from syzkaller0 [ 1297.567655][T27344] netlink: 'syz.3.7667': attribute type 3 has an invalid length. [ 1297.628203][T27344] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7667'. [ 1297.746454][T27349] netlink: 'syz.2.7669': attribute type 10 has an invalid length. [ 1297.889663][T27349] team0: Device wg1 is of different type [ 1298.104638][T27364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1298.497784][T27371] bridge0: port 3(dummy0) entered disabled state [ 1298.504429][T27371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.512166][T27371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.983613][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7685'. [ 1300.158961][T27400] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7687'. [ 1300.193868][T27400] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1300.453421][T27405] netlink: 'syz.4.7688': attribute type 39 has an invalid length. [ 1300.539360][ T48] Bluetooth: hci2: Malformed LE Event: 0x0b [ 1301.008109][T27423] netlink: 'syz.2.7695': attribute type 10 has an invalid length. [ 1301.332582][T27430] FAULT_INJECTION: forcing a failure. [ 1301.332582][T27430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.351790][T27432] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7697'. [ 1301.371516][T27430] CPU: 1 PID: 27430 Comm: syz.0.7699 Not tainted syzkaller #0 [ 1301.379115][T27430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.389219][T27430] Call Trace: [ 1301.392534][T27430] [ 1301.395494][T27430] dump_stack_lvl+0x188/0x24e [ 1301.400242][T27430] ? show_regs_print_info+0x12/0x12 [ 1301.405481][T27430] ? load_image+0x400/0x400 [ 1301.410023][T27430] ? __lock_acquire+0x7d10/0x7d10 [ 1301.415085][T27430] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1301.421375][T27430] should_fail_ex+0x399/0x4d0 [ 1301.426102][T27430] _copy_from_user+0x2c/0x170 [ 1301.430828][T27430] __sys_bpf+0x2ea/0x780 [ 1301.435110][T27430] ? bpf_link_show_fdinfo+0x380/0x380 [ 1301.440527][T27430] ? lock_chain_count+0x20/0x20 [ 1301.445417][T27430] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1301.451456][T27430] __x64_sys_bpf+0x78/0x90 [ 1301.455913][T27430] do_syscall_64+0x4c/0xa0 [ 1301.460365][T27430] ? clear_bhb_loop+0x60/0xb0 [ 1301.465087][T27430] ? clear_bhb_loop+0x60/0xb0 [ 1301.469807][T27430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1301.475767][T27430] RIP: 0033:0x7f3919b9ce59 [ 1301.480240][T27430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.499965][T27430] RSP: 002b:00007f391aa88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1301.508398][T27430] RAX: ffffffffffffffda RBX: 00007f3919e15fa0 RCX: 00007f3919b9ce59 [ 1301.516386][T27430] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1301.524369][T27430] RBP: 00007f391aa88090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.532358][T27430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.540341][T27430] R13: 00007f3919e16038 R14: 00007f3919e15fa0 R15: 00007ffd80ab9c88 [ 1301.548340][T27430] [ 1301.656154][T27435] -1: renamed from syzkaller0 [ 1301.720082][T27441] netlink: 'syz.3.7701': attribute type 39 has an invalid length. [ 1301.751727][T27442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1302.046010][T27452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7703'. [ 1303.101185][T27485] netlink: 'syz.1.7717': attribute type 39 has an invalid length. [ 1303.488904][T27502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7725'. [ 1303.787399][T27510] netlink: 'syz.4.7728': attribute type 4 has an invalid length. [ 1303.828846][T27510] netlink: 'syz.4.7728': attribute type 3 has an invalid length. [ 1303.853910][T27510] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1304.155431][T27523] netlink: 'syz.0.7733': attribute type 39 has an invalid length. [ 1304.484891][T27527] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1304.657404][T27527] device syzkaller0 entered promiscuous mode [ 1304.715603][T27530] delete_channel: no stack [ 1304.894011][T27540] netlink: 'syz.1.7738': attribute type 1 has an invalid length. [ 1304.914977][T27540] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7738'. [ 1304.950366][T27540] netlink: 'syz.1.7738': attribute type 29 has an invalid length. [ 1305.489097][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.495713][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.491400][T27540] netlink: 'syz.1.7738': attribute type 29 has an invalid length. [ 1307.943985][T27587] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.7754'. [ 1308.014104][T27587] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7754'. [ 1308.170409][T27589] -1: renamed from syzkaller0 [ 1308.227897][T27593] netlink: 'syz.2.7755': attribute type 29 has an invalid length. [ 1308.237654][T27591] FAULT_INJECTION: forcing a failure. [ 1308.237654][T27591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.285586][T27591] CPU: 1 PID: 27591 Comm: syz.3.7753 Not tainted syzkaller #0 [ 1308.293106][T27591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1308.303189][T27591] Call Trace: [ 1308.306496][T27591] [ 1308.309457][T27591] dump_stack_lvl+0x188/0x24e [ 1308.314187][T27591] ? show_regs_print_info+0x12/0x12 [ 1308.319424][T27591] ? load_image+0x400/0x400 [ 1308.323993][T27591] ? __lock_acquire+0x7d10/0x7d10 [ 1308.329068][T27591] should_fail_ex+0x399/0x4d0 [ 1308.333802][T27591] _copy_from_user+0x2c/0x170 [ 1308.338531][T27591] br_ioctl_stub+0x475/0xcf0 [ 1308.343247][T27591] ? rcu_is_watching+0x11/0xa0 [ 1308.348056][T27591] ? rcu_read_unlock+0xa0/0xa0 [ 1308.352866][T27591] ? __mutex_lock+0x1ab/0xaf0 [ 1308.357606][T27591] ? mutex_lock_nested+0x10/0x10 [ 1308.362599][T27591] ? rcu_read_unlock+0xa0/0xa0 [ 1308.367398][T27591] sock_ioctl+0x494/0x710 [ 1308.371781][T27591] ? sock_poll+0x410/0x410 [ 1308.376240][T27591] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1308.381248][T27591] ? security_file_ioctl+0x7c/0xa0 [ 1308.386401][T27591] ? sock_poll+0x410/0x410 [ 1308.390855][T27591] __se_sys_ioctl+0xfa/0x170 [ 1308.395487][T27591] do_syscall_64+0x4c/0xa0 [ 1308.399932][T27591] ? clear_bhb_loop+0x60/0xb0 [ 1308.404660][T27591] ? clear_bhb_loop+0x60/0xb0 [ 1308.409384][T27591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1308.415321][T27591] RIP: 0033:0x7fcfe799ce59 [ 1308.419770][T27591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.439414][T27591] RSP: 002b:00007fcfe87b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.447873][T27591] RAX: ffffffffffffffda RBX: 00007fcfe7c16090 RCX: 00007fcfe799ce59 [ 1308.455884][T27591] RDX: 00002000000000c0 RSI: 00000000000089a0 RDI: 0000000000000008 [ 1308.463988][T27591] RBP: 00007fcfe87b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.472051][T27591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.480090][T27591] R13: 00007fcfe7c16128 R14: 00007fcfe7c16090 R15: 00007fff8c5580e8 [ 1308.488111][T27591] [ 1308.509605][T27593] netlink: 'syz.2.7755': attribute type 29 has an invalid length. [ 1309.080624][T27615] netlink: 'syz.1.7765': attribute type 10 has an invalid length. [ 1309.181526][T27622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7766'. [ 1309.614633][T27632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1310.650566][T27655] netlink: 'syz.0.7780': attribute type 20 has an invalid length. [ 1310.722149][T27658] netlink: 'syz.2.7781': attribute type 10 has an invalid length. [ 1310.741678][T27659] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7780'. [ 1310.767248][T27659] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7780'. [ 1310.815341][T27655] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7780'. [ 1313.803327][T27767] netlink: 'syz.2.7819': attribute type 2 has an invalid length. [ 1313.848471][T27767] netlink: 'syz.2.7819': attribute type 8 has an invalid length. [ 1313.884589][T27769] netlink: 'syz.1.7820': attribute type 39 has an invalid length. [ 1313.895141][T27767] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.7819'. [ 1314.584101][T27796] netlink: 'syz.2.7831': attribute type 3 has an invalid length. [ 1314.607795][T27796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1314.810375][T27805] netlink: 'syz.1.7834': attribute type 39 has an invalid length. [ 1315.099480][T27811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1315.181422][T27817] netlink: 'syz.3.7840': attribute type 29 has an invalid length. [ 1315.236873][T27817] netlink: 'syz.3.7840': attribute type 29 has an invalid length. [ 1315.990707][T27841] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.7850'. [ 1316.663624][T27858] netlink: 'syz.0.7855': attribute type 29 has an invalid length. [ 1316.727783][T27858] netlink: 'syz.0.7855': attribute type 29 has an invalid length. [ 1316.786472][T27861] netlink: 'syz.2.7858': attribute type 21 has an invalid length. [ 1316.974788][T27862] sock: sock_set_timeout: `syz.0.7855' (pid 27862) tries to set negative timeout [ 1317.886153][T27884] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1317.948960][T27884] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1319.381600][T27924] validate_nla: 4 callbacks suppressed [ 1319.381618][T27924] netlink: 'syz.0.7879': attribute type 2 has an invalid length. [ 1319.454436][T27924] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.7879'. [ 1319.484170][T27935] netlink: 'syz.2.7883': attribute type 39 has an invalid length. [ 1319.529746][T27937] device wlan1 entered promiscuous mode [ 1320.167752][T27959] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7891'. [ 1320.307201][T27970] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7896'. [ 1320.341610][T27969] netlink: 'syz.2.7897': attribute type 39 has an invalid length. [ 1321.397428][T28005] netlink: 'syz.1.7910': attribute type 39 has an invalid length. [ 1321.707076][T28011] sock: sock_set_timeout: `syz.1.7912' (pid 28011) tries to set negative timeout [ 1321.803053][T28011] netlink: 'syz.1.7912': attribute type 13 has an invalid length. [ 1321.832849][T28011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7912'. [ 1321.868461][T28011] syz_tun: refused to change device tx_queue_len [ 1321.869361][T28021] netlink: 'syz.3.7914': attribute type 1 has an invalid length. [ 1321.942509][T28011] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1321.945474][T28021] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7914'. [ 1322.085508][T28017] netlink: 'syz.4.7915': attribute type 10 has an invalid length. [ 1322.135449][T28023] netlink: 'syz.1.7912': attribute type 13 has an invalid length. [ 1322.155041][T28023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7912'. [ 1322.239306][T28023] syz_tun: refused to change device tx_queue_len [ 1322.275653][T28023] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1323.039519][T28042] netlink: 'syz.2.7922': attribute type 39 has an invalid length. [ 1323.318165][T28047] -1: renamed from syzkaller0 [ 1324.442440][T28081] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1324.502561][T28078] -1: renamed from syzkaller0 [ 1324.560195][T28081] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1325.053376][T28092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7938'. [ 1325.255561][T28098] netlink: 'syz.2.7942': attribute type 21 has an invalid length. [ 1325.516097][T28103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1325.810968][T28110] -1: renamed from syzkaller0 [ 1325.979857][T28115] netlink: 'syz.4.7948': attribute type 1 has an invalid length. [ 1326.085316][T28115] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.7948'. [ 1326.402987][T28121] netlink: 'syz.1.7950': attribute type 39 has an invalid length. [ 1327.240568][T28141] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1327.294168][T28141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.650130][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7960'. [ 1327.976791][T28165] netlink: 'syz.4.7966': attribute type 39 has an invalid length. [ 1328.750994][T28172] netlink: 'syz.3.7968': attribute type 2 has an invalid length. [ 1329.411259][T28185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.311165][T28216] netlink: 'syz.3.7986': attribute type 10 has an invalid length. [ 1330.323985][T28217] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1330.799946][T28236] netlink: 'syz.3.7994': attribute type 39 has an invalid length. [ 1330.813713][T28235] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1330.866556][T28235] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1330.874455][T28235] CPU: 0 PID: 28235 Comm: syz.4.7993 Not tainted syzkaller #0 [ 1330.881955][T28235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1330.892044][T28235] Call Trace: [ 1330.895355][T28235] [ 1330.898312][T28235] dump_stack_lvl+0x188/0x24e [ 1330.903026][T28235] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1330.909287][T28235] ? show_regs_print_info+0x12/0x12 [ 1330.914539][T28235] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1330.920773][T28235] sysfs_warn_dup+0x8a/0xa0 [ 1330.925372][T28235] sysfs_do_create_link_sd+0xc0/0x110 [ 1330.930775][T28235] device_add+0x7f6/0x1000 [ 1330.935215][T28235] wiphy_register+0x1d9f/0x2ac0 [ 1330.940104][T28235] ? cfg80211_event_work+0x40/0x40 [ 1330.945235][T28235] ? minstrel_ht_alloc+0x894/0xa20 [ 1330.950453][T28235] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1330.956551][T28235] ieee80211_register_hw+0x2d00/0x39f0 [ 1330.962041][T28235] ? ieee80211_register_hw+0xec1/0x39f0 [ 1330.967621][T28235] ? ieee80211_register_hw+0xec1/0x39f0 [ 1330.973201][T28235] ? ieee80211_tasklet_handler+0x20/0x20 [ 1330.978865][T28235] ? memset+0x1e/0x40 [ 1330.982871][T28235] ? __hrtimer_init+0x186/0x270 [ 1330.987745][T28235] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1330.993493][T28235] hwsim_new_radio_nl+0xafa/0xce0 [ 1330.998548][T28235] genl_family_rcv_msg_doit+0x22a/0x330 [ 1331.004133][T28235] ? end_current_label_crit_section+0x170/0x170 [ 1331.010395][T28235] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1331.016316][T28235] ? bpf_lsm_capable+0x5/0x10 [ 1331.021018][T28235] ? security_capable+0x85/0xb0 [ 1331.025895][T28235] genl_rcv_msg+0x604/0x790 [ 1331.030429][T28235] ? genl_bind+0x360/0x360 [ 1331.034865][T28235] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1331.041252][T28235] netlink_rcv_skb+0x1fb/0x450 [ 1331.046060][T28235] ? genl_bind+0x360/0x360 [ 1331.050513][T28235] ? netlink_ack+0x1170/0x1170 [ 1331.055318][T28235] ? down_read+0x1a8/0x2d0 [ 1331.059765][T28235] genl_rcv+0x24/0x40 [ 1331.063770][T28235] netlink_unicast+0x74d/0x8d0 [ 1331.068572][T28235] netlink_sendmsg+0x8ad/0xbd0 [ 1331.073372][T28235] ? netlink_getsockopt+0x550/0x550 [ 1331.078604][T28235] ? aa_sock_msg_perm+0x94/0x150 [ 1331.083581][T28235] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1331.088943][T28235] ? security_socket_sendmsg+0x7c/0xa0 [ 1331.094448][T28235] ? netlink_getsockopt+0x550/0x550 [ 1331.099682][T28235] ____sys_sendmsg+0x5be/0x970 [ 1331.104471][T28235] ? __sys_sendmsg_sock+0x30/0x30 [ 1331.109513][T28235] ? __import_iovec+0x315/0x500 [ 1331.114406][T28235] ? import_iovec+0x6f/0xa0 [ 1331.118941][T28235] ___sys_sendmsg+0x2a2/0x360 [ 1331.123648][T28235] ? try_to_wake_up+0x6ae/0x1080 [ 1331.128616][T28235] ? __sys_sendmsg+0x290/0x290 [ 1331.133412][T28235] ? ktime_get_real_ts64+0x440/0x440 [ 1331.138751][T28235] __se_sys_sendmsg+0x1bb/0x2a0 [ 1331.143652][T28235] ? __x64_sys_sendmsg+0x80/0x80 [ 1331.148629][T28235] ? lockdep_hardirqs_on+0x94/0x140 [ 1331.153857][T28235] do_syscall_64+0x4c/0xa0 [ 1331.158296][T28235] ? clear_bhb_loop+0x60/0xb0 [ 1331.163004][T28235] ? clear_bhb_loop+0x60/0xb0 [ 1331.167705][T28235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.173618][T28235] RIP: 0033:0x7f9b4a19ce59 [ 1331.178059][T28235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.197690][T28235] RSP: 002b:00007f9b4af7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.206132][T28235] RAX: ffffffffffffffda RBX: 00007f9b4a416090 RCX: 00007f9b4a19ce59 [ 1331.214120][T28235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1331.222104][T28235] RBP: 00007f9b4a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1331.230085][T28235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.238075][T28235] R13: 00007f9b4a416128 R14: 00007f9b4a416090 R15: 00007fff71680358 [ 1331.246086][T28235] [ 1332.149368][T28273] netlink: 'syz.4.8007': attribute type 1 has an invalid length. [ 1332.178416][T28273] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.8007'. [ 1332.378093][T28278] netlink: 'syz.1.8009': attribute type 39 has an invalid length. [ 1332.952235][T28298] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1333.202645][T28310] device pim6reg1 entered promiscuous mode [ 1333.686257][T28321] -1: renamed from syzkaller0 [ 1333.818307][T28328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1334.111499][T28347] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.8035'. [ 1334.171528][T28347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8035'. [ 1334.424239][T28363] delete_channel: no stack [ 1334.576720][T28369] netlink: 'syz.3.8044': attribute type 1 has an invalid length. [ 1334.615830][T28369] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.8044'. [ 1334.808808][T28379] -1: renamed from syzkaller0 [ 1334.878486][T28387] FAULT_INJECTION: forcing a failure. [ 1334.878486][T28387] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.896174][T28387] CPU: 1 PID: 28387 Comm: syz.0.8047 Not tainted syzkaller #0 [ 1334.903671][T28387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1334.913769][T28387] Call Trace: [ 1334.917086][T28387] [ 1334.920039][T28387] dump_stack_lvl+0x188/0x24e [ 1334.924734][T28387] ? show_regs_print_info+0x12/0x12 [ 1334.929950][T28387] ? load_image+0x400/0x400 [ 1334.934478][T28387] ? __might_sleep+0xd0/0xd0 [ 1334.939090][T28387] ? __lock_acquire+0x7d10/0x7d10 [ 1334.944150][T28387] should_fail_ex+0x399/0x4d0 [ 1334.948867][T28387] should_failslab+0x5/0x20 [ 1334.953397][T28387] slab_pre_alloc_hook+0x59/0x310 [ 1334.958441][T28387] ? init_timer_key+0x178/0x320 [ 1334.963307][T28387] ? kvmalloc_node+0x6c/0x180 [ 1334.968009][T28387] __kmem_cache_alloc_node+0x4f/0x260 [ 1334.973404][T28387] ? kvmalloc_node+0x6c/0x180 [ 1334.978108][T28387] __kmalloc_node+0xa0/0x240 [ 1334.982739][T28387] kvmalloc_node+0x6c/0x180 [ 1334.987275][T28387] alloc_netdev_mqs+0x7e9/0xf00 [ 1334.992148][T28387] br_add_bridge+0x35/0xe0 [ 1334.996605][T28387] br_ioctl_stub+0x5e2/0xcf0 [ 1335.001221][T28387] ? rcu_is_watching+0x11/0xa0 [ 1335.006013][T28387] ? rcu_read_unlock+0xa0/0xa0 [ 1335.010792][T28387] ? __mutex_lock+0x1ab/0xaf0 [ 1335.015500][T28387] ? mutex_lock_nested+0x10/0x10 [ 1335.020480][T28387] ? rcu_read_unlock+0xa0/0xa0 [ 1335.025296][T28387] sock_ioctl+0x494/0x710 [ 1335.029647][T28387] ? sock_poll+0x410/0x410 [ 1335.034094][T28387] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1335.039060][T28387] ? security_file_ioctl+0x7c/0xa0 [ 1335.044195][T28387] ? sock_poll+0x410/0x410 [ 1335.048634][T28387] __se_sys_ioctl+0xfa/0x170 [ 1335.053269][T28387] do_syscall_64+0x4c/0xa0 [ 1335.057706][T28387] ? clear_bhb_loop+0x60/0xb0 [ 1335.062436][T28387] ? clear_bhb_loop+0x60/0xb0 [ 1335.067138][T28387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1335.073065][T28387] RIP: 0033:0x7f3919b9ce59 [ 1335.077501][T28387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.097131][T28387] RSP: 002b:00007f391aa67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.105563][T28387] RAX: ffffffffffffffda RBX: 00007f3919e16090 RCX: 00007f3919b9ce59 [ 1335.113607][T28387] RDX: 00002000000000c0 RSI: 00000000000089a0 RDI: 0000000000000008 [ 1335.121600][T28387] RBP: 00007f391aa67090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.129596][T28387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.137591][T28387] R13: 00007f3919e16128 R14: 00007f3919e16090 R15: 00007ffd80ab9c88 [ 1335.145616][T28387] [ 1335.301716][T28388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8050'. [ 1335.667638][T28404] netlink: 'syz.4.8056': attribute type 39 has an invalid length. [ 1335.918830][T28410] netlink: 'syz.2.8060': attribute type 1 has an invalid length. [ 1335.956209][T28410] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.8060'. [ 1336.426821][T28435] device pim6reg1 left promiscuous mode [ 1336.451521][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8068'. [ 1336.692478][T28437] netlink: 'syz.0.8069': attribute type 10 has an invalid length. [ 1336.761865][T28440] netlink: 'syz.3.8070': attribute type 39 has an invalid length. [ 1337.057766][T28445] netlink: 103 bytes leftover after parsing attributes in process `syz.3.8074'. [ 1337.252992][T28451] netlink: 'syz.0.8075': attribute type 1 has an invalid length. [ 1337.265068][T28451] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1337.839914][T28467] tap0: tun_chr_ioctl cmd 1074025677 [ 1337.877194][T28467] tap0: linktype set to 774 [ 1338.659559][T28484] netlink: 'syz.4.8085': attribute type 29 has an invalid length. [ 1338.686766][T28484] netlink: 'syz.4.8085': attribute type 29 has an invalid length. [ 1338.712720][T28484] netlink: 'syz.4.8085': attribute type 29 has an invalid length. [ 1339.085348][T28498] FAULT_INJECTION: forcing a failure. [ 1339.085348][T28498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.156430][T28498] CPU: 0 PID: 28498 Comm: syz.3.8090 Not tainted syzkaller #0 [ 1339.163976][T28498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1339.174082][T28498] Call Trace: [ 1339.177431][T28498] [ 1339.180438][T28498] dump_stack_lvl+0x188/0x24e [ 1339.185193][T28498] ? show_regs_print_info+0x12/0x12 [ 1339.190459][T28498] ? load_image+0x400/0x400 [ 1339.195038][T28498] ? __lock_acquire+0x7d10/0x7d10 [ 1339.200140][T28498] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1339.205857][T28498] should_fail_ex+0x399/0x4d0 [ 1339.210621][T28498] _copy_from_user+0x2c/0x170 [ 1339.215379][T28498] ___sys_sendmsg+0x1c3/0x360 [ 1339.220143][T28498] ? __sys_sendmsg+0x290/0x290 [ 1339.225064][T28498] ? __lock_acquire+0x7d10/0x7d10 [ 1339.230278][T28498] __se_sys_sendmsg+0x1bb/0x2a0 [ 1339.235229][T28498] ? __x64_sys_sendmsg+0x80/0x80 [ 1339.240299][T28498] ? lockdep_hardirqs_on+0x94/0x140 [ 1339.245582][T28498] do_syscall_64+0x4c/0xa0 [ 1339.250050][T28498] ? clear_bhb_loop+0x60/0xb0 [ 1339.254785][T28498] ? clear_bhb_loop+0x60/0xb0 [ 1339.259541][T28498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1339.265502][T28498] RIP: 0033:0x7fcfe799ce59 [ 1339.269979][T28498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.289641][T28498] RSP: 002b:00007fcfe87da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.298124][T28498] RAX: ffffffffffffffda RBX: 00007fcfe7c15fa0 RCX: 00007fcfe799ce59 [ 1339.306173][T28498] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 1339.314194][T28498] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.322238][T28498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.330260][T28498] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1339.338340][T28498] [ 1339.389449][T28506] netlink: 'syz.1.8092': attribute type 1 has an invalid length. [ 1339.421190][T28506] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8092'. [ 1340.568413][T28540] netlink: 'syz.1.8107': attribute type 29 has an invalid length. [ 1340.920917][T28547] delete_channel: no stack [ 1341.129978][T28563] validate_nla: 2 callbacks suppressed [ 1341.130010][T28563] netlink: 'syz.0.8114': attribute type 2 has an invalid length. [ 1341.676060][T28583] netlink: 'syz.1.8121': attribute type 1 has an invalid length. [ 1341.713551][T28583] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1342.191866][T28595] netlink: 'syz.4.8125': attribute type 10 has an invalid length. [ 1342.483851][T28602] netlink: 'syz.3.8130': attribute type 2 has an invalid length. [ 1342.877019][T28615] netlink: 'syz.4.8134': attribute type 1 has an invalid length. [ 1342.907552][T28615] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.8134'. [ 1343.080204][T28625] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.8138'. [ 1343.150142][T28625] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8138'. [ 1343.173421][T28627] netlink: 'syz.3.8139': attribute type 3 has an invalid length. [ 1343.211460][T28627] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1343.528762][T28638] netlink: 'syz.1.8144': attribute type 1 has an invalid length. [ 1343.554565][T28638] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8144'. [ 1343.574644][T28646] netlink: 'syz.4.8146': attribute type 2 has an invalid length. [ 1343.597685][T28638] netlink: 'syz.1.8144': attribute type 29 has an invalid length. [ 1343.660821][T28638] netlink: 'syz.1.8144': attribute type 29 has an invalid length. [ 1343.983031][T28660] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.8151'. [ 1345.243609][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1345.282449][T28701] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1345.705437][T28717] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.8173'. [ 1346.639689][T28746] FAULT_INJECTION: forcing a failure. [ 1346.639689][T28746] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.680482][T28746] CPU: 1 PID: 28746 Comm: syz.1.8184 Not tainted syzkaller #0 [ 1346.688005][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.698101][T28746] Call Trace: [ 1346.701414][T28746] [ 1346.704375][T28746] dump_stack_lvl+0x188/0x24e [ 1346.709084][T28746] ? lock_chain_count+0x20/0x20 [ 1346.713998][T28746] ? show_regs_print_info+0x12/0x12 [ 1346.719247][T28746] ? load_image+0x400/0x400 [ 1346.723808][T28746] ? lockdep_hardirqs_on+0x94/0x140 [ 1346.729068][T28746] should_fail_ex+0x399/0x4d0 [ 1346.733800][T28746] should_failslab+0x5/0x20 [ 1346.738340][T28746] slab_pre_alloc_hook+0x59/0x310 [ 1346.743449][T28746] ? free_zapped_rcu+0x1f0/0x1f0 [ 1346.748461][T28746] kmem_cache_alloc+0x56/0x2f0 [ 1346.753278][T28746] ? __build_skb+0x2a/0x3c0 [ 1346.757828][T28746] __build_skb+0x2a/0x3c0 [ 1346.762207][T28746] build_skb+0x1e/0x230 [ 1346.766409][T28746] bpf_prog_test_run_skb+0x391/0x1890 [ 1346.771834][T28746] ? __fget_files+0x28/0x4b0 [ 1346.776500][T28746] ? cpu_online+0xa0/0xa0 [ 1346.780909][T28746] bpf_prog_test_run+0x31e/0x390 [ 1346.785886][T28746] __sys_bpf+0x62b/0x780 [ 1346.790159][T28746] ? bpf_link_show_fdinfo+0x380/0x380 [ 1346.795574][T28746] ? lock_chain_count+0x20/0x20 [ 1346.800460][T28746] __x64_sys_bpf+0x78/0x90 [ 1346.804905][T28746] do_syscall_64+0x4c/0xa0 [ 1346.809348][T28746] ? clear_bhb_loop+0x60/0xb0 [ 1346.814100][T28746] ? clear_bhb_loop+0x60/0xb0 [ 1346.818824][T28746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.824756][T28746] RIP: 0033:0x7ff83979ce59 [ 1346.829206][T28746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.848853][T28746] RSP: 002b:00007ff83a713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1346.857292][T28746] RAX: ffffffffffffffda RBX: 00007ff839a15fa0 RCX: 00007ff83979ce59 [ 1346.865284][T28746] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1346.873271][T28746] RBP: 00007ff83a713090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.881268][T28746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.889268][T28746] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1346.897280][T28746] [ 1347.269827][T28750] validate_nla: 9 callbacks suppressed [ 1347.269845][T28750] netlink: 'syz.0.8185': attribute type 3 has an invalid length. [ 1347.295130][T28750] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1347.868618][T28780] netlink: 'syz.2.8194': attribute type 21 has an invalid length. [ 1347.916968][T28785] __nla_validate_parse: 3 callbacks suppressed [ 1347.916982][T28785] netlink: 15318 bytes leftover after parsing attributes in process `syz.1.8196'. [ 1348.127282][T28792] device virt_wifi0 entered promiscuous mode [ 1348.867559][T28816] device wlan1 left promiscuous mode [ 1348.906269][T28816] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1349.078698][T28827] netlink: 'syz.3.8215': attribute type 2 has an invalid length. [ 1349.193881][T28827] device 0 entered promiscuous mode [ 1349.412203][T28839] FAULT_INJECTION: forcing a failure. [ 1349.412203][T28839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.445928][T28839] CPU: 1 PID: 28839 Comm: syz.3.8220 Not tainted syzkaller #0 [ 1349.453460][T28839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.463567][T28839] Call Trace: [ 1349.466871][T28839] [ 1349.469819][T28839] dump_stack_lvl+0x188/0x24e [ 1349.474531][T28839] ? show_regs_print_info+0x12/0x12 [ 1349.479755][T28839] ? load_image+0x400/0x400 [ 1349.484290][T28839] ? __lock_acquire+0x7d10/0x7d10 [ 1349.489350][T28839] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1349.495464][T28839] should_fail_ex+0x399/0x4d0 [ 1349.500181][T28839] _copy_from_user+0x2c/0x170 [ 1349.504892][T28839] ___sys_sendmsg+0x1c3/0x360 [ 1349.509601][T28839] ? __sys_sendmsg+0x290/0x290 [ 1349.514406][T28839] ? __lock_acquire+0x7d10/0x7d10 [ 1349.519471][T28839] __se_sys_sendmsg+0x1bb/0x2a0 [ 1349.524355][T28839] ? __x64_sys_sendmsg+0x80/0x80 [ 1349.529337][T28839] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.534574][T28839] do_syscall_64+0x4c/0xa0 [ 1349.539008][T28839] ? clear_bhb_loop+0x60/0xb0 [ 1349.543703][T28839] ? clear_bhb_loop+0x60/0xb0 [ 1349.548395][T28839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.554320][T28839] RIP: 0033:0x7fcfe799ce59 [ 1349.558753][T28839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.578394][T28839] RSP: 002b:00007fcfe87da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.586824][T28839] RAX: ffffffffffffffda RBX: 00007fcfe7c15fa0 RCX: 00007fcfe799ce59 [ 1349.594813][T28839] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 1349.602800][T28839] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.610781][T28839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.618769][T28839] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1349.626778][T28839] [ 1349.666444][T28841] netlink: 'syz.1.8221': attribute type 29 has an invalid length. [ 1349.697964][T28841] netlink: 'syz.1.8221': attribute type 29 has an invalid length. [ 1350.370298][T28869] netlink: 'syz.4.8230': attribute type 39 has an invalid length. [ 1350.631852][T28877] netlink: 'syz.3.8233': attribute type 10 has an invalid length. [ 1351.072809][T28893] -1: renamed from syzkaller0 [ 1351.918024][T28918] netlink: 'syz.3.8246': attribute type 39 has an invalid length. [ 1351.993112][T28922] netlink: 'syz.2.8248': attribute type 33 has an invalid length. [ 1352.007629][T28922] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8248'. [ 1352.282327][T28926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1352.327470][T28929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1352.620501][T28931] netlink: 'syz.2.8253': attribute type 21 has an invalid length. [ 1352.656505][T28931] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1352.767542][T28945] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8256'. [ 1352.913727][T28949] netlink: 'syz.4.8259': attribute type 39 has an invalid length. [ 1352.948087][T28951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8260'. [ 1353.811397][T28976] -1: renamed from syzkaller0 [ 1353.975282][T28985] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8272'. [ 1355.753565][T28993] netlink: 'syz.0.8275': attribute type 39 has an invalid length. [ 1355.762446][T28991] netlink: 'syz.2.8274': attribute type 2 has an invalid length. [ 1356.217501][ T48] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1356.221620][T29012] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8284'. [ 1356.259625][T29015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8282'. [ 1356.333219][T29015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8282'. [ 1356.688500][T29020] device wlan1 entered promiscuous mode [ 1357.690898][T29052] netlink: 'syz.1.8298': attribute type 1 has an invalid length. [ 1357.715548][T29052] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8298'. [ 1357.940309][T29063] FAULT_INJECTION: forcing a failure. [ 1357.940309][T29063] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.973571][T29063] CPU: 0 PID: 29063 Comm: syz.1.8302 Not tainted syzkaller #0 [ 1357.981108][T29063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1357.991219][T29063] Call Trace: [ 1357.994553][T29063] [ 1357.997549][T29063] dump_stack_lvl+0x188/0x24e [ 1358.002341][T29063] ? show_regs_print_info+0x12/0x12 [ 1358.007635][T29063] ? load_image+0x400/0x400 [ 1358.012223][T29063] ? __might_sleep+0xd0/0xd0 [ 1358.016882][T29063] ? __lock_acquire+0x7d10/0x7d10 [ 1358.021970][T29063] should_fail_ex+0x399/0x4d0 [ 1358.026705][T29063] should_failslab+0x5/0x20 [ 1358.031243][T29063] slab_pre_alloc_hook+0x59/0x310 [ 1358.036325][T29063] kmem_cache_alloc_node+0x5a/0x320 [ 1358.041565][T29063] ? __alloc_skb+0xfc/0x7e0 [ 1358.046128][T29063] __alloc_skb+0xfc/0x7e0 [ 1358.050540][T29063] tcp_stream_alloc_skb+0x3e/0x330 [ 1358.055799][T29063] tcp_sendmsg_locked+0xca4/0x3a90 [ 1358.061234][T29063] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1358.066964][T29063] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1358.073614][T29063] ? mark_lock+0x94/0x320 [ 1358.077994][T29063] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1358.084052][T29063] ? tcp_set_state+0x520/0x520 [ 1358.088897][T29063] tcp_sendmsg+0x2b/0x40 [ 1358.093197][T29063] ? inet_send_prepare+0x260/0x260 [ 1358.098377][T29063] ____sys_sendmsg+0x5be/0x970 [ 1358.103209][T29063] ? __sys_sendmsg_sock+0x30/0x30 [ 1358.108265][T29063] ? __import_iovec+0x315/0x500 [ 1358.113192][T29063] ? import_iovec+0x6f/0xa0 [ 1358.117753][T29063] ___sys_sendmsg+0x2a2/0x360 [ 1358.122494][T29063] ? __sys_sendmsg+0x290/0x290 [ 1358.127364][T29063] ? __lock_acquire+0x7d10/0x7d10 [ 1358.132528][T29063] __se_sys_sendmsg+0x1bb/0x2a0 [ 1358.137434][T29063] ? __x64_sys_sendmsg+0x80/0x80 [ 1358.142458][T29063] ? lockdep_hardirqs_on+0x94/0x140 [ 1358.147734][T29063] do_syscall_64+0x4c/0xa0 [ 1358.152189][T29063] ? clear_bhb_loop+0x60/0xb0 [ 1358.156929][T29063] ? clear_bhb_loop+0x60/0xb0 [ 1358.161649][T29063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.167587][T29063] RIP: 0033:0x7ff83979ce59 [ 1358.172033][T29063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.191690][T29063] RSP: 002b:00007ff83a713028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.200151][T29063] RAX: ffffffffffffffda RBX: 00007ff839a15fa0 RCX: 00007ff83979ce59 [ 1358.208169][T29063] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 1358.216182][T29063] RBP: 00007ff83a713090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.224195][T29063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.232210][T29063] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1358.240263][T29063] [ 1358.245042][T29065] netlink: 'syz.4.8303': attribute type 10 has an invalid length. [ 1358.732130][T29085] netlink: 'syz.1.8312': attribute type 1 has an invalid length. [ 1358.774944][T29085] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1358.883584][T29091] FAULT_INJECTION: forcing a failure. [ 1358.883584][T29091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.969200][T29089] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8314'. [ 1358.990152][T29091] CPU: 1 PID: 29091 Comm: syz.3.8315 Not tainted syzkaller #0 [ 1358.997664][T29091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1359.002820][T29094] netlink: 'syz.0.8314': attribute type 11 has an invalid length. [ 1359.008083][T29091] Call Trace: [ 1359.008096][T29091] [ 1359.008105][T29091] dump_stack_lvl+0x188/0x24e [ 1359.008137][T29091] ? show_regs_print_info+0x12/0x12 [ 1359.008162][T29091] ? load_image+0x400/0x400 [ 1359.008195][T29091] ? __lock_acquire+0x7d10/0x7d10 [ 1359.041802][T29091] should_fail_ex+0x399/0x4d0 [ 1359.046532][T29091] _copy_from_user+0x2c/0x170 [ 1359.051263][T29091] __copy_msghdr+0x3b7/0x580 [ 1359.055890][T29091] ___sys_sendmsg+0x210/0x360 [ 1359.060597][T29091] ? __sys_sendmsg+0x290/0x290 [ 1359.065402][T29091] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1359.071169][T29091] __se_sys_sendmsg+0x1bb/0x2a0 [ 1359.076061][T29091] ? __x64_sys_sendmsg+0x80/0x80 [ 1359.081032][T29091] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1359.086967][T29091] do_syscall_64+0x4c/0xa0 [ 1359.091409][T29091] ? clear_bhb_loop+0x60/0xb0 [ 1359.096114][T29091] ? clear_bhb_loop+0x60/0xb0 [ 1359.100825][T29091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.106743][T29091] RIP: 0033:0x7fcfe799ce59 [ 1359.111177][T29091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.130803][T29091] RSP: 002b:00007fcfe87da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.139236][T29091] RAX: ffffffffffffffda RBX: 00007fcfe7c15fa0 RCX: 00007fcfe799ce59 [ 1359.147233][T29091] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 1359.155216][T29091] RBP: 00007fcfe87da090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.163201][T29091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.171188][T29091] R13: 00007fcfe7c16038 R14: 00007fcfe7c15fa0 R15: 00007fff8c5580e8 [ 1359.179187][T29091] [ 1359.192872][T29089] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1359.222727][T29089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1359.714324][T29116] -1: renamed from syzkaller0 [ 1360.731277][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1360.786541][T29153] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8333'. [ 1360.798373][T29153] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1360.825117][T29153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1360.923645][T29150] netlink: 'syz.2.8333': attribute type 11 has an invalid length. [ 1361.444722][T29172] netlink: 'syz.4.8341': attribute type 1 has an invalid length. [ 1361.475217][T29172] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8341'. [ 1361.508459][T29176] netlink: 'syz.4.8341': attribute type 29 has an invalid length. [ 1361.527531][T29176] netlink: 'syz.4.8341': attribute type 29 has an invalid length. [ 1361.631754][T29178] netlink: 'syz.3.8343': attribute type 21 has an invalid length. [ 1361.655054][T29180] netlink: 'syz.1.8344': attribute type 2 has an invalid length. [ 1361.677271][T29178] device syzkaller0 entered promiscuous mode [ 1361.683612][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1362.182479][T29197] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8350'. [ 1362.208253][T29203] netlink: 'syz.3.8350': attribute type 11 has an invalid length. [ 1362.221055][T29197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1362.272129][T29197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1362.450675][T29207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8353'. [ 1362.707993][T29220] -1: renamed from syzkaller0 [ 1362.724705][T29220] FAULT_INJECTION: forcing a failure. [ 1362.724705][T29220] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.763588][T29220] CPU: 1 PID: 29220 Comm: syz.0.8358 Not tainted syzkaller #0 [ 1362.771109][T29220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1362.781203][T29220] Call Trace: [ 1362.784523][T29220] [ 1362.787488][T29220] dump_stack_lvl+0x188/0x24e [ 1362.792215][T29220] ? show_regs_print_info+0x12/0x12 [ 1362.797443][T29220] ? load_image+0x400/0x400 [ 1362.801998][T29220] ? should_fail_ex+0x31e/0x4d0 [ 1362.806883][T29220] should_fail_ex+0x399/0x4d0 [ 1362.811601][T29220] should_failslab+0x5/0x20 [ 1362.816138][T29220] slab_pre_alloc_hook+0x59/0x310 [ 1362.821229][T29220] ? __netdev_printk+0x3d0/0x3d0 [ 1362.826205][T29220] ? register_netdevice+0x552/0x1b10 [ 1362.831541][T29220] __kmem_cache_alloc_node+0x4f/0x260 [ 1362.836958][T29220] ? register_netdevice+0x552/0x1b10 [ 1362.842282][T29220] kmalloc_trace+0x26/0xe0 [ 1362.846758][T29220] register_netdevice+0x552/0x1b10 [ 1362.851936][T29220] ? __kmem_cache_alloc_node+0x140/0x260 [ 1362.857605][T29220] ? rcu_is_watching+0x11/0xa0 [ 1362.862397][T29220] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1362.868837][T29220] ? memset+0x1e/0x40 [ 1362.872828][T29220] ? alloc_netdev_mqs+0xae4/0xf00 [ 1362.877875][T29220] ? alloc_netdev_mqs+0xb64/0xf00 [ 1362.882923][T29220] br_add_bridge+0x9f/0xe0 [ 1362.887361][T29220] br_ioctl_stub+0x5e2/0xcf0 [ 1362.891978][T29220] ? rcu_is_watching+0x11/0xa0 [ 1362.896773][T29220] ? rcu_read_unlock+0xa0/0xa0 [ 1362.901564][T29220] ? __mutex_lock+0x1ab/0xaf0 [ 1362.906259][T29220] ? lock_chain_count+0x20/0x20 [ 1362.911134][T29220] ? rcu_is_watching+0x11/0xa0 [ 1362.915960][T29220] ? mutex_lock_nested+0x10/0x10 [ 1362.920912][T29220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1362.927099][T29220] ? sock_ioctl+0x44f/0x710 [ 1362.931622][T29220] ? rcu_read_unlock+0xa0/0xa0 [ 1362.936432][T29220] sock_ioctl+0x494/0x710 [ 1362.940780][T29220] ? sock_poll+0x410/0x410 [ 1362.945231][T29220] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1362.950201][T29220] ? security_file_ioctl+0x7c/0xa0 [ 1362.955341][T29220] ? sock_poll+0x410/0x410 [ 1362.959774][T29220] __se_sys_ioctl+0xfa/0x170 [ 1362.964393][T29220] do_syscall_64+0x4c/0xa0 [ 1362.968843][T29220] ? clear_bhb_loop+0x60/0xb0 [ 1362.973545][T29220] ? clear_bhb_loop+0x60/0xb0 [ 1362.978255][T29220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.984196][T29220] RIP: 0033:0x7f3919b9ce59 [ 1362.988662][T29220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.008287][T29220] RSP: 002b:00007f391aa88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.016722][T29220] RAX: ffffffffffffffda RBX: 00007f3919e15fa0 RCX: 00007f3919b9ce59 [ 1363.024709][T29220] RDX: 00002000000000c0 RSI: 00000000000089a0 RDI: 0000000000000008 [ 1363.032698][T29220] RBP: 00007f391aa88090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.040688][T29220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.048669][T29220] R13: 00007f3919e16038 R14: 00007f3919e15fa0 R15: 00007ffd80ab9c88 [ 1363.056672][T29220] [ 1363.469120][T29232] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8363'. [ 1363.805247][T29244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8366'. [ 1363.831213][T29244] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8366'. [ 1363.850483][T29249] netlink: 'syz.1.8366': attribute type 33 has an invalid length. [ 1363.924169][T29249] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8366'. [ 1363.951861][T29253] __sock_release: fasync list not empty! [ 1364.493011][T29270] -1: renamed from syzkaller0 [ 1365.180420][T29285] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1365.188298][T29285] #PF: supervisor instruction fetch in kernel mode [ 1365.194838][T29285] #PF: error_code(0x0010) - not-present page [ 1365.200859][T29285] PGD 76eb4067 P4D 76eb4067 PUD 0 [ 1365.206053][T29285] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1365.211279][T29285] CPU: 0 PID: 29285 Comm: syz.1.8381 Not tainted syzkaller #0 [ 1365.218782][T29285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1365.228875][T29285] RIP: 0010:0x0 [ 1365.232367][T29285] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1365.239755][T29285] RSP: 0018:ffffc9000ce97458 EFLAGS: 00010246 [ 1365.245842][T29285] RAX: 1ffffffff162da83 RBX: 1ffff920019d2e9c RCX: 0000000000000001 [ 1365.253844][T29285] RDX: ffffc9000ce97500 RSI: 0000000000000001 RDI: ffff888078c0e000 [ 1365.261831][T29285] RBP: ffffc9000ce97570 R08: ffff888078c0e03f R09: 1ffff1100f181c07 [ 1365.269819][T29285] R10: dffffc0000000000 R11: ffffed100f181c08 R12: ffffe8ffffc76db8 [ 1365.277825][T29285] R13: ffffffff8b16d418 R14: 0000000000000000 R15: ffff888078c0e000 [ 1365.285830][T29285] FS: 00007ff83a7136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1365.294782][T29285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.301383][T29285] CR2: ffffffffffffffd6 CR3: 0000000026da9000 CR4: 00000000003506f0 [ 1365.309369][T29285] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1365.317355][T29285] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1365.325341][T29285] Call Trace: [ 1365.328641][T29285] [ 1365.331588][T29285] bond_xdp_xmit+0x31e/0x550 [ 1365.336311][T29285] ? bond_xdp_xmit+0x94/0x550 [ 1365.341013][T29285] ? bond_xdp+0x890/0x890 [ 1365.345364][T29285] ? __next_zones_zonelist+0x99/0x120 [ 1365.350743][T29285] bq_xmit_all+0xd3f/0x11b0 [ 1365.355315][T29285] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1365.361483][T29285] ? rcu_read_lock_bh_held+0x76/0xf0 [ 1365.366781][T29285] ? bq_enqueue+0x2ee/0x3d0 [ 1365.371317][T29285] ? __dev_flush+0x1b0/0x1b0 [ 1365.375940][T29285] ? dev_map_enqueue_multi+0xecf/0x1020 [ 1365.381562][T29285] ? dev_map_enqueue+0x340/0x340 [ 1365.386518][T29285] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1365.392721][T29285] ? rcu_is_watching+0x11/0xa0 [ 1365.397526][T29285] ? trace_xdp_redirect+0xb3/0x2b0 [ 1365.402662][T29285] __dev_flush+0xbf/0x1b0 [ 1365.407012][T29285] xdp_do_flush+0xa/0x20 [ 1365.411268][T29285] bpf_test_run_xdp_live+0x1545/0x1a90 [ 1365.416755][T29285] ? 0xffffffffa00041c0 [ 1365.420940][T29285] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 1365.426505][T29285] ? xdp_convert_md_to_buff+0x330/0x330 [ 1365.432093][T29285] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1365.438359][T29285] ? bpf_test_init+0x119/0x140 [ 1365.443141][T29285] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1365.448632][T29285] bpf_prog_test_run_xdp+0x736/0xf10 [ 1365.453943][T29285] ? dev_put+0x80/0x80 [ 1365.458042][T29285] ? dev_put+0x80/0x80 [ 1365.462139][T29285] bpf_prog_test_run+0x31e/0x390 [ 1365.467098][T29285] __sys_bpf+0x62b/0x780 [ 1365.471365][T29285] ? bpf_link_show_fdinfo+0x380/0x380 [ 1365.476776][T29285] ? lock_chain_count+0x20/0x20 [ 1365.481653][T29285] __x64_sys_bpf+0x78/0x90 [ 1365.486090][T29285] do_syscall_64+0x4c/0xa0 [ 1365.490520][T29285] ? clear_bhb_loop+0x60/0xb0 [ 1365.495222][T29285] ? clear_bhb_loop+0x60/0xb0 [ 1365.499922][T29285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.505842][T29285] RIP: 0033:0x7ff83979ce59 [ 1365.510279][T29285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.529900][T29285] RSP: 002b:00007ff83a713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1365.538322][T29285] RAX: ffffffffffffffda RBX: 00007ff839a15fa0 RCX: 00007ff83979ce59 [ 1365.546303][T29285] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1365.554284][T29285] RBP: 00007ff839832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1365.562283][T29285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.570265][T29285] R13: 00007ff839a16038 R14: 00007ff839a15fa0 R15: 00007ffc04ed3c78 [ 1365.578254][T29285] [ 1365.581302][T29285] Modules linked in: [ 1365.585214][T29285] CR2: 0000000000000000 [ 1365.589375][T29285] ---[ end trace 0000000000000000 ]--- [ 1365.594837][T29285] RIP: 0010:0x0 [ 1365.598312][T29285] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1365.605687][T29285] RSP: 0018:ffffc9000ce97458 EFLAGS: 00010246 [ 1365.611759][T29285] RAX: 1ffffffff162da83 RBX: 1ffff920019d2e9c RCX: 0000000000000001 [ 1365.619748][T29285] RDX: ffffc9000ce97500 RSI: 0000000000000001 RDI: ffff888078c0e000 [ 1365.627735][T29285] RBP: ffffc9000ce97570 R08: ffff888078c0e03f R09: 1ffff1100f181c07 [ 1365.635726][T29285] R10: dffffc0000000000 R11: ffffed100f181c08 R12: ffffe8ffffc76db8 [ 1365.643732][T29285] R13: ffffffff8b16d418 R14: 0000000000000000 R15: ffff888078c0e000 [ 1365.651726][T29285] FS: 00007ff83a7136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1365.660678][T29285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.667278][T29285] CR2: ffffffffffffffd6 CR3: 0000000026da9000 CR4: 00000000003506f0 [ 1365.675261][T29285] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1365.683253][T29285] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1365.691246][T29285] Kernel panic - not syncing: Fatal exception in interrupt [ 1365.699029][T29285] Kernel Offset: disabled [ 1365.703357][T29285] Rebooting in 86400 seconds..