last executing test programs: 20.936993272s ago: executing program 3 (id=1193): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083970000000000000100feff850000001700000018010000202069250000000000200000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) r6 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000900000000000000000000003c0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) socket$kcm(0xa, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x2d, 0x0, 0x88) sendmsg$sock(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oeN', 0x3}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x28, &(0x7f0000000040), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r9, 0x18000000000002a0, 0x21, 0x0, &(0x7f00000024c0)="b9ff0b078059268cb89e14f088a82d0c128c9c5d72cd89250b896043df0f801158", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 20.321576451s ago: executing program 3 (id=1202): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 19.970354312s ago: executing program 2 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, 0x0, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86"], 0xfe1b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000100)}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r8 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x25, 0x3, 0xdec0, &(0x7f0000000000)) sendmsg$kcm(r8, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}], 0x10}, 0x0) 19.526435156s ago: executing program 0 (id=1208): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000010000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000600002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70b00000000000085000000170000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x7fd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="ee3b2e04ad0ba8b145f290564428589ffa02fa10efa4c216eb128e266e6da87cea20463c14d2d0af5a158d26f33b6f32a3e7ff1b75decbb4aa84c11912cb", @ANYRESOCT, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT], 0x0, 0x9, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r5}, 0x38) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x2d8b, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000940), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 19.446808208s ago: executing program 1 (id=1209): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 19.327945462s ago: executing program 3 (id=1210): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff008500000083000000bf09"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x541b, 0x1000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19ffffff}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000480)=r3, 0x4) r4 = syz_clone(0x4080, &(0x7f00000001c0)="d5d7103d004e7830bc957bf9", 0xc, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="84f4c0882d4bbd4564240021b56b9bd7b69aaf3014e82ed178861b58cc8435227575d056fa75c47b762052096ade3a4084971c66fe40644c65fc10e5126ac7d91095b57f6f18287c8e7beded3f98bdbdbc9128dcf3a3b9de68fdfe42350ada165776367a14b16861df53886bd868e0498398894150daee4b056e172c5d573a2b9c7187f834600b907fd7265e95be09ab8b2382184935a54ca73a61d45e9ba817fd90d9b810e7a1b7838f21531aec364c2b7bcce4a14e925b") r5 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x5f, 0x1, 0x3, 0x40, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2, 0x6}, 0x104d0, 0x7, 0x80000000, 0x1, 0x275, 0xaa180, 0x1, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x7, r1, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="9f", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0xf, 0x3, 0x3, 0x0, 0x8000000000000000, 0x7e5945dc59866c2f, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x6, 0x0, 0x8, 0x3, 0x9, 0x2, 0x0, 0x1, 0x0, 0x65d}, r4, 0xc, r5, 0x0) 19.235102005s ago: executing program 0 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={0x0}, 0x18) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 19.178656687s ago: executing program 1 (id=1212): socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000580)=""/77) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6c, 0x7, 0x3, 0x3, 0x0, 0x52, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x1}, 0x13080, 0xfffffffffffffff9, 0xe3, 0x6, 0x3f, 0xa8bf, 0x800, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000200000076"], 0x40}, 0x20004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782", 0xc}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x20048884}, 0x40000) 18.77197752s ago: executing program 1 (id=1213): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000540)}, 0x20) sendmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000840) 18.77123064s ago: executing program 2 (id=1214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000280)=r3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'ip6_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) syz_open_procfs$namespace(0x0, 0x0) 18.362747153s ago: executing program 2 (id=1215): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf650f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x26, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x604, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.362022933s ago: executing program 1 (id=1216): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b", @ANYBLOB], 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000bebffffff0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r3, @ANYBLOB="0000000000ff00003f93000000000000b5030000000000008500000076000000b70000000000000095000000000000ac00000000000000570477f38bf2e0b188027dff724bdb3826ab8ebc584e489da618"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 18.194854628s ago: executing program 3 (id=1217): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000600002fb96d", 0xe}], 0x1}, 0x30040805) 18.12616762s ago: executing program 2 (id=1218): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 18.052962552s ago: executing program 1 (id=1219): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000010000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000600002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70b00000000000085000000170000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x7fd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="ee3b2e04ad0ba8b145f290564428589ffa02fa10efa4c216eb128e266e6da87cea20463c14d2d0af5a158d26f33b6f32a3e7ff1b75decbb4aa84c11912cb", @ANYRESOCT, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT], 0x0, 0x9, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r5}, 0x38) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x2d8b, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000940), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 17.951416126s ago: executing program 3 (id=1220): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff202000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 17.897591627s ago: executing program 0 (id=1221): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) (fail_nth: 6) 17.455871011s ago: executing program 0 (id=1222): socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000580)=""/77) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6c, 0x7, 0x3, 0x3, 0x0, 0x52, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x1}, 0x13080, 0xfffffffffffffff9, 0xe3, 0x6, 0x3f, 0xa8bf, 0x800, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000200000076"], 0x40}, 0x20004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782", 0xc}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x20048884}, 0x40000) 16.971728626s ago: executing program 3 (id=1223): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095000000000000008a5ca54879e4f6a84093996f1ad143"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 16.898543669s ago: executing program 1 (id=1224): openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x84, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="e34738802bbeb3d8cbd7051bd35e0f3a0a3f720f24c9f94244dc50f21f42b95bd69a29ba5cb9c81b4f0a37a0f996a013f43f34a71bf25fe369a0081c16b22c264ea1b63a06f711bc8641b39a80b5d80239f14ccff150f129901aa59f4a17f338e1d20486b26fc503db", 0x69}, {&(0x7f0000000300)="fc7fe6db427b1ec37285d7e07b09050db2a0358e17bf30858e12a97124a7f7f9f80d3ba8f0b4138367bfe1547a2cfca3551bf0f7bbddda9811a94b6bddc29b63eb9f52202fe2df586bc533f71b35946ad0330208d0bf5d02f6faa155d6be96f001d218ff0b4a1c3fa01cd570dc3f3dd192aa388f85f4", 0x76}, {&(0x7f0000000380)="636ad6984e2f18b01cd585ad5df93561b6c8c6ac9e0792dc59c54d4a596db0345b435caaa3bc1b10", 0x28}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x158}, 0x4008084) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x4000) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r1, 0x0, 0x100) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x2e072fe122b37128, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) 16.84582076s ago: executing program 0 (id=1225): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000540)}, 0x20) sendmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000840) 16.84548779s ago: executing program 2 (id=1226): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x2000, &(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) 16.573173959s ago: executing program 0 (id=1227): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b", @ANYBLOB], 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000bebffffff0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r3, @ANYBLOB="0000000000ff00003f93000000000000b5030000000000008500000076000000b70000000000000095000000000000ac00000000000000570477f38bf2e0b188027dff724bdb3826ab8ebc584e489da618"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 16.430885183s ago: executing program 2 (id=1228): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014", 0x7}], 0x1}, 0x30040805) 1.474312264s ago: executing program 32 (id=1227): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b", @ANYBLOB], 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000bebffffff0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r3, @ANYBLOB="0000000000ff00003f93000000000000b5030000000000008500000076000000b70000000000000095000000000000ac00000000000000570477f38bf2e0b188027dff724bdb3826ab8ebc584e489da618"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 1.334583168s ago: executing program 33 (id=1224): openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x84, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="e34738802bbeb3d8cbd7051bd35e0f3a0a3f720f24c9f94244dc50f21f42b95bd69a29ba5cb9c81b4f0a37a0f996a013f43f34a71bf25fe369a0081c16b22c264ea1b63a06f711bc8641b39a80b5d80239f14ccff150f129901aa59f4a17f338e1d20486b26fc503db", 0x69}, {&(0x7f0000000300)="fc7fe6db427b1ec37285d7e07b09050db2a0358e17bf30858e12a97124a7f7f9f80d3ba8f0b4138367bfe1547a2cfca3551bf0f7bbddda9811a94b6bddc29b63eb9f52202fe2df586bc533f71b35946ad0330208d0bf5d02f6faa155d6be96f001d218ff0b4a1c3fa01cd570dc3f3dd192aa388f85f4", 0x76}, {&(0x7f0000000380)="636ad6984e2f18b01cd585ad5df93561b6c8c6ac9e0792dc59c54d4a596db0345b435caaa3bc1b10", 0x28}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x158}, 0x4008084) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x4000) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r1, 0x0, 0x100) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x2e072fe122b37128, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) 1.199502102s ago: executing program 34 (id=1223): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095000000000000008a5ca54879e4f6a84093996f1ad143"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 0s ago: executing program 35 (id=1228): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014", 0x7}], 0x1}, 0x30040805) kernel console output (not intermixed with test programs): 047 Comm: syz.1.425 Not tainted syzkaller #0 [ 157.139487][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.149570][ T7047] Call Trace: [ 157.152873][ T7047] [ 157.155842][ T7047] dump_stack_lvl+0x18c/0x250 [ 157.160557][ T7047] ? show_regs_print_info+0x20/0x20 [ 157.165813][ T7047] ? load_image+0x420/0x420 [ 157.170369][ T7047] ? __might_fault+0xaa/0x120 [ 157.175113][ T7047] ? __lock_acquire+0x7d40/0x7d40 [ 157.180167][ T7047] should_fail_ex+0x39d/0x4d0 [ 157.184871][ T7047] _copy_from_iter+0x1d9/0x12e0 [ 157.189748][ T7047] ? __might_fault+0xaa/0x120 [ 157.194451][ T7047] ? _copy_from_iter+0x24e/0x12e0 [ 157.199505][ T7047] ? __virt_addr_valid+0x18c/0x540 [ 157.204653][ T7047] ? __lock_acquire+0x7d40/0x7d40 [ 157.209693][ T7047] ? copyout_mc+0x70/0x70 [ 157.214042][ T7047] ? copyout_mc+0x70/0x70 [ 157.218391][ T7047] ? __virt_addr_valid+0x18c/0x540 [ 157.223522][ T7047] ? page_copy_sane+0x16a/0x270 [ 157.228392][ T7047] copy_page_from_iter+0x7b/0x100 [ 157.233440][ T7047] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 157.239282][ T7047] tun_get_user+0x15db/0x3ca0 [ 157.243991][ T7047] ? aa_file_perm+0x11b/0xee0 [ 157.248712][ T7047] ? rcu_read_unlock+0xa0/0xa0 [ 157.253503][ T7047] ? tun_get+0x1c/0x2e0 [ 157.257677][ T7047] ? __lock_acquire+0x7d40/0x7d40 [ 157.262717][ T7047] ? tun_get+0x1c/0x2e0 [ 157.266896][ T7047] tun_chr_write_iter+0x119/0x200 [ 157.271941][ T7047] vfs_write+0x46c/0x990 [ 157.276214][ T7047] ? file_end_write+0x250/0x250 [ 157.281080][ T7047] ? __fget_files+0x43d/0x4b0 [ 157.285774][ T7047] ? __fdget_pos+0x1d8/0x330 [ 157.290396][ T7047] ? ksys_write+0x75/0x260 [ 157.294832][ T7047] ksys_write+0x150/0x260 [ 157.299180][ T7047] ? __ia32_sys_read+0x90/0x90 [ 157.303970][ T7047] ? lockdep_hardirqs_on+0x98/0x150 [ 157.309191][ T7047] do_syscall_64+0x55/0xb0 [ 157.313635][ T7047] ? clear_bhb_loop+0x40/0x90 [ 157.318331][ T7047] ? clear_bhb_loop+0x40/0x90 [ 157.323025][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.328943][ T7047] RIP: 0033:0x7fe160b9ce59 [ 157.333371][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.352990][ T7047] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.361420][ T7047] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 157.369411][ T7047] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 157.377394][ T7047] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 157.385371][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.393352][ T7047] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 157.401355][ T7047] [ 158.812460][ T7066] netlink: 'syz.1.433': attribute type 3 has an invalid length. [ 158.820192][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.433'. [ 158.868740][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 159.071705][ T7066] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 159.079554][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.433'. [ 159.130610][ T7066] bridge0: port 2(ipvlan1) entered blocking state [ 159.168718][ T7066] bridge0: port 2(ipvlan1) entered disabled state [ 159.202202][ T7066] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 159.508757][ T7083] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.439'. [ 160.084641][ T7103] netlink: 'syz.2.447': attribute type 3 has an invalid length. [ 160.096220][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 160.152315][ T7103] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 160.160062][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.447'. [ 160.171410][ T7103] bridge0: port 2(ipvlan1) entered blocking state [ 160.178163][ T7103] bridge0: port 2(ipvlan1) entered disabled state [ 160.191062][ T7103] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.006507][ T7127] wg2: entered promiscuous mode [ 161.024152][ T7129] netlink: 'syz.2.457': attribute type 3 has an invalid length. [ 161.026534][ T7127] wg2: entered allmulticast mode [ 161.038903][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.457'. [ 161.200166][ T7129] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 161.208904][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 161.218665][ T7129] bridge0: port 2(ipvlan1) entered blocking state [ 161.241493][ T7129] bridge0: port 2(ipvlan1) entered disabled state [ 161.255959][ T7129] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.399947][ T7138] FAULT_INJECTION: forcing a failure. [ 161.399947][ T7138] name failslab, interval 1, probability 0, space 0, times 0 [ 161.431084][ T7138] CPU: 1 PID: 7138 Comm: syz.1.460 Not tainted syzkaller #0 [ 161.438445][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.448520][ T7138] Call Trace: [ 161.451817][ T7138] [ 161.454768][ T7138] dump_stack_lvl+0x18c/0x250 [ 161.459478][ T7138] ? show_regs_print_info+0x20/0x20 [ 161.464778][ T7138] ? load_image+0x420/0x420 [ 161.469304][ T7138] ? __might_sleep+0xe0/0xe0 [ 161.473945][ T7138] ? __lock_acquire+0x7d40/0x7d40 [ 161.479014][ T7138] ? __kmem_cache_free+0xba/0x1e0 [ 161.484068][ T7138] should_fail_ex+0x39d/0x4d0 [ 161.488777][ T7138] should_failslab+0x9/0x20 [ 161.493314][ T7138] slab_pre_alloc_hook+0x59/0x310 [ 161.498372][ T7138] ? __netdev_printk+0x4a0/0x4a0 [ 161.503326][ T7138] ? register_netdevice+0x573/0x1bb0 [ 161.508647][ T7138] __kmem_cache_alloc_node+0x53/0x250 [ 161.514048][ T7138] ? register_netdevice+0x573/0x1bb0 [ 161.519362][ T7138] kmalloc_trace+0x2a/0xe0 [ 161.523839][ T7138] register_netdevice+0x573/0x1bb0 [ 161.529010][ T7138] ? __kmem_cache_alloc_node+0x13a/0x250 [ 161.534683][ T7138] ? kvmalloc_node+0x70/0x180 [ 161.539387][ T7138] ? netif_stacked_transfer_operstate+0x210/0x210 [ 161.545833][ T7138] ? __asan_memset+0x22/0x40 [ 161.550459][ T7138] ? alloc_netdev_mqs+0xbb7/0x1040 [ 161.555594][ T7138] ? __asan_memcpy+0x40/0x70 [ 161.560240][ T7138] ? alloc_netdev_mqs+0xca6/0x1040 [ 161.565380][ T7138] ? ip6gre_tunnel_locate+0x274/0x5d0 [ 161.570790][ T7138] ip6gre_tunnel_locate+0x315/0x5d0 [ 161.576027][ T7138] ? ip6gre_tnl_change+0x920/0x920 [ 161.581174][ T7138] ? __asan_memcpy+0x40/0x70 [ 161.585805][ T7138] ? ip6gre_tunnel_siocdevprivate+0x521/0x740 [ 161.591916][ T7138] ip6gre_tunnel_siocdevprivate+0x54e/0x740 [ 161.597844][ T7138] ? ip6gre_tunnel_init+0x150/0x150 [ 161.603073][ T7138] ? __mutex_lock+0x315/0xcc0 [ 161.607784][ T7138] ? dev_ioctl+0x83c/0x1140 [ 161.612336][ T7138] ? dev_ifsioc+0x958/0xc40 [ 161.616881][ T7138] dev_ioctl+0x84c/0x1140 [ 161.621237][ T7138] sock_ioctl+0x74c/0x7e0 [ 161.625597][ T7138] ? sock_poll+0x3e0/0x3e0 [ 161.630050][ T7138] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.635011][ T7138] ? security_file_ioctl+0x80/0xa0 [ 161.640230][ T7138] ? sock_poll+0x3e0/0x3e0 [ 161.644672][ T7138] __se_sys_ioctl+0xfd/0x170 [ 161.649292][ T7138] do_syscall_64+0x55/0xb0 [ 161.653732][ T7138] ? clear_bhb_loop+0x40/0x90 [ 161.658435][ T7138] ? clear_bhb_loop+0x40/0x90 [ 161.663143][ T7138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.669059][ T7138] RIP: 0033:0x7fe160b9ce59 [ 161.673517][ T7138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.693157][ T7138] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.701604][ T7138] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 161.709590][ T7138] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 161.717571][ T7138] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 161.725561][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.733556][ T7138] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 161.741574][ T7138] [ 161.801305][ T7136] netlink: 'syz.0.459': attribute type 21 has an invalid length. [ 161.809189][ T7136] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 161.872506][ T7136] netlink: 100 bytes leftover after parsing attributes in process `syz.0.459'. [ 161.949617][ T7146] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.462'. [ 161.981332][ T7146] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 162.174858][ T7155] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 162.332938][ T7161] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 162.385019][ T7161] team0: Device hsr_slave_0 failed to register rx_handler [ 162.518393][ T7163] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 162.541958][ T7163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.469'. [ 162.634082][ T7166] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 162.651541][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.469'. [ 162.673884][ T7166] ipvlan1: entered promiscuous mode [ 162.679156][ T7166] ipvlan1: entered allmulticast mode [ 162.711455][ T7166] veth0_vlan: entered allmulticast mode [ 162.723656][ T7166] bridge0: port 2(ipvlan1) entered blocking state [ 162.737150][ T7166] bridge0: port 2(ipvlan1) entered disabled state [ 162.749407][ T7166] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 162.973212][ T7172] FAULT_INJECTION: forcing a failure. [ 162.973212][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.022586][ T7172] CPU: 0 PID: 7172 Comm: syz.0.472 Not tainted syzkaller #0 [ 163.029966][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.040055][ T7172] Call Trace: [ 163.043350][ T7172] [ 163.046310][ T7172] dump_stack_lvl+0x18c/0x250 [ 163.051053][ T7172] ? show_regs_print_info+0x20/0x20 [ 163.056284][ T7172] ? load_image+0x420/0x420 [ 163.060872][ T7172] ? __might_fault+0xaa/0x120 [ 163.065586][ T7172] ? __lock_acquire+0x7d40/0x7d40 [ 163.070737][ T7172] should_fail_ex+0x39d/0x4d0 [ 163.075455][ T7172] _copy_from_user+0x2f/0xe0 [ 163.080090][ T7172] ___sys_sendmsg+0x1c7/0x360 [ 163.084822][ T7172] ? __sys_sendmsg+0x2a0/0x2a0 [ 163.089684][ T7172] ? __lock_acquire+0x7d40/0x7d40 [ 163.094820][ T7172] __se_sys_sendmsg+0x1c2/0x2b0 [ 163.099739][ T7172] ? __x64_sys_sendmsg+0x80/0x80 [ 163.104769][ T7172] ? lockdep_hardirqs_on+0x98/0x150 [ 163.110030][ T7172] do_syscall_64+0x55/0xb0 [ 163.114494][ T7172] ? clear_bhb_loop+0x40/0x90 [ 163.119225][ T7172] ? clear_bhb_loop+0x40/0x90 [ 163.123993][ T7172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.129941][ T7172] RIP: 0033:0x7f76cf99ce59 [ 163.134414][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.154066][ T7172] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.162531][ T7172] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 163.170530][ T7172] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 163.178520][ T7172] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 163.186513][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.194513][ T7172] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 163.202531][ T7172] [ 163.528806][ T7184] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 163.690776][ T7190] FAULT_INJECTION: forcing a failure. [ 163.690776][ T7190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.705117][ T7190] CPU: 1 PID: 7190 Comm: syz.3.479 Not tainted syzkaller #0 [ 163.712471][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.722563][ T7190] Call Trace: [ 163.725875][ T7190] [ 163.728837][ T7190] dump_stack_lvl+0x18c/0x250 [ 163.733559][ T7190] ? show_regs_print_info+0x20/0x20 [ 163.738796][ T7190] ? load_image+0x420/0x420 [ 163.743351][ T7190] ? __might_fault+0xaa/0x120 [ 163.748068][ T7190] ? __lock_acquire+0x7d40/0x7d40 [ 163.753148][ T7190] should_fail_ex+0x39d/0x4d0 [ 163.757897][ T7190] _copy_from_user+0x2f/0xe0 [ 163.762538][ T7190] __sys_bpf+0x23e/0x890 [ 163.766828][ T7190] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.772259][ T7190] ? lock_chain_count+0x20/0x20 [ 163.777166][ T7190] __x64_sys_bpf+0x7c/0x90 [ 163.781625][ T7190] do_syscall_64+0x55/0xb0 [ 163.786077][ T7190] ? clear_bhb_loop+0x40/0x90 [ 163.790830][ T7190] ? clear_bhb_loop+0x40/0x90 [ 163.795548][ T7190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.801464][ T7190] RIP: 0033:0x7fa0f4b9ce59 [ 163.805904][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.825527][ T7190] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.833969][ T7190] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 163.841967][ T7190] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 163.849953][ T7190] RBP: 00007fa0f5a82090 R08: 0000000000000000 R09: 0000000000000000 [ 163.857943][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.865927][ T7190] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 163.873924][ T7190] [ 164.014161][ T7194] netlink: 'syz.2.480': attribute type 3 has an invalid length. [ 164.039473][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.480'. [ 164.264319][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.480'. [ 164.295857][ T7194] bridge0: port 2(ipvlan1) entered blocking state [ 164.331548][ T7194] bridge0: port 2(ipvlan1) entered disabled state [ 164.447179][ T7194] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 164.508732][ T7205] FAULT_INJECTION: forcing a failure. [ 164.508732][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 164.553055][ T7205] CPU: 0 PID: 7205 Comm: syz.1.486 Not tainted syzkaller #0 [ 164.560423][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.570519][ T7205] Call Trace: [ 164.573858][ T7205] [ 164.576802][ T7205] dump_stack_lvl+0x18c/0x250 [ 164.581506][ T7205] ? show_regs_print_info+0x20/0x20 [ 164.586768][ T7205] ? load_image+0x420/0x420 [ 164.591337][ T7205] ? __might_sleep+0xe0/0xe0 [ 164.595976][ T7205] ? __lock_acquire+0x7d40/0x7d40 [ 164.601053][ T7205] should_fail_ex+0x39d/0x4d0 [ 164.605792][ T7205] should_failslab+0x9/0x20 [ 164.610337][ T7205] slab_pre_alloc_hook+0x59/0x310 [ 164.615423][ T7205] ? vfs_write+0x7dd/0x990 [ 164.619886][ T7205] kmem_cache_alloc+0x5a/0x2d0 [ 164.624718][ T7205] ? getname_flags+0xbb/0x500 [ 164.629467][ T7205] getname_flags+0xbb/0x500 [ 164.634024][ T7205] do_sys_openat2+0xda/0x1d0 [ 164.638672][ T7205] ? do_sys_open+0xe0/0xe0 [ 164.643135][ T7205] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 164.649174][ T7205] ? lock_chain_count+0x20/0x20 [ 164.654093][ T7205] __x64_sys_openat+0x139/0x160 [ 164.659002][ T7205] do_syscall_64+0x55/0xb0 [ 164.663463][ T7205] ? clear_bhb_loop+0x40/0x90 [ 164.668189][ T7205] ? clear_bhb_loop+0x40/0x90 [ 164.672924][ T7205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.678866][ T7205] RIP: 0033:0x7fe160b5d68e [ 164.683325][ T7205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.702972][ T7205] RSP: 002b:00007fe161b05ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.711425][ T7205] RAX: ffffffffffffffda RBX: 00007fe161b066c0 RCX: 00007fe160b5d68e [ 164.719432][ T7205] RDX: 0000000000000002 RSI: 00007fe161b05f90 RDI: ffffffffffffff9c [ 164.727446][ T7205] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 164.735544][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.743552][ T7205] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 164.751604][ T7205] [ 165.200379][ T7217] delete_channel: no stack [ 165.514651][ T7228] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.494'. [ 165.561876][ T7228] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 165.642335][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.496'. [ 165.783715][ T7234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 165.811480][ T7234] bridge0: port 2(ipvlan1) entered blocking state [ 165.825959][ T7234] bridge0: port 2(ipvlan1) entered disabled state [ 165.847621][ T7234] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 166.064996][ T7239] validate_nla: 4 callbacks suppressed [ 166.065024][ T7239] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 166.249154][ T7241] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 166.353455][ T7243] netlink: 'syz.0.500': attribute type 3 has an invalid length. [ 166.391465][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.500'. [ 166.820833][ T7243] netlink: 'syz.0.500': attribute type 10 has an invalid length. [ 166.882292][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.500'. [ 166.924033][ T7243] bridge0: port 2(ipvlan1) entered blocking state [ 166.937399][ T7243] bridge0: port 2(ipvlan1) entered disabled state [ 166.956443][ T7243] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 167.191115][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.505'. [ 167.331112][ T7262] netlink: 'syz.2.507': attribute type 3 has an invalid length. [ 167.352335][ T7262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.507'. [ 167.384325][ T7266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.506'. [ 167.405570][ T7266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.431510][ T7265] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 167.498942][ T7262] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 167.537925][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 167.567418][ T7262] bridge0: port 2(ipvlan1) entered blocking state [ 167.607105][ T7262] bridge0: port 2(ipvlan1) entered disabled state [ 167.650444][ T7262] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 168.257309][ T7282] netlink: 'syz.3.514': attribute type 3 has an invalid length. [ 168.266351][ T7282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.514'. [ 168.343573][ T7282] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 168.357270][ T7282] bridge0: port 2(ipvlan1) entered blocking state [ 168.364198][ T7282] bridge0: port 2(ipvlan1) entered disabled state [ 168.374164][ T7282] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 168.636547][ T7288] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 169.348816][ T7308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.376683][ T7329] FAULT_INJECTION: forcing a failure. [ 170.376683][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 170.393690][ T7329] CPU: 0 PID: 7329 Comm: syz.3.532 Not tainted syzkaller #0 [ 170.401039][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.411137][ T7329] Call Trace: [ 170.414464][ T7329] [ 170.417446][ T7329] dump_stack_lvl+0x18c/0x250 [ 170.422175][ T7329] ? show_regs_print_info+0x20/0x20 [ 170.427414][ T7329] ? load_image+0x420/0x420 [ 170.431963][ T7329] ? __might_sleep+0xe0/0xe0 [ 170.436602][ T7329] ? __lock_acquire+0x7d40/0x7d40 [ 170.441680][ T7329] should_fail_ex+0x39d/0x4d0 [ 170.446431][ T7329] should_failslab+0x9/0x20 [ 170.450990][ T7329] slab_pre_alloc_hook+0x59/0x310 [ 170.456080][ T7329] ? dev_set_alias+0x68/0x1d0 [ 170.460820][ T7329] ? dev_set_alias+0x68/0x1d0 [ 170.465618][ T7329] __kmem_cache_alloc_node+0x53/0x250 [ 170.471034][ T7329] ? lockdep_hardirqs_on+0x98/0x150 [ 170.476276][ T7329] ? dev_set_alias+0x68/0x1d0 [ 170.480979][ T7329] __kmalloc+0xa4/0x230 [ 170.485173][ T7329] dev_set_alias+0x68/0x1d0 [ 170.489710][ T7329] do_setlink+0xa9a/0x4130 [ 170.494163][ T7329] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.500357][ T7329] ? mark_lock+0x94/0x320 [ 170.504715][ T7329] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 170.510893][ T7329] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 170.516914][ T7329] ? lock_chain_count+0x20/0x20 [ 170.521793][ T7329] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.528006][ T7329] ? lockdep_hardirqs_on+0x98/0x150 [ 170.533230][ T7329] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.539415][ T7329] ? bond_slave_changelink+0x225/0x3b0 [ 170.545041][ T7329] ? bond_slave_changelink+0x250/0x3b0 [ 170.550538][ T7329] ? bond_slave_changelink+0x2fd/0x3b0 [ 170.556040][ T7329] ? lock_chain_count+0x20/0x20 [ 170.560939][ T7329] ? bond_fill_info+0x1f70/0x1f70 [ 170.566000][ T7329] ? lockdep_hardirqs_on+0x98/0x150 [ 170.571252][ T7329] ? validate_linkmsg+0x719/0x910 [ 170.576341][ T7329] rtnl_newlink+0x17da/0x20a0 [ 170.581069][ T7329] ? rtnl_newlink+0x6f1/0x20a0 [ 170.585881][ T7329] ? rtnl_setlink+0x4e0/0x4e0 [ 170.590587][ T7329] ? trace_raw_output_contention_end+0xd0/0xd0 [ 170.596767][ T7329] ? rcu_is_watching+0x15/0xb0 [ 170.601566][ T7329] ? trace_contention_end+0x39/0xe0 [ 170.606828][ T7329] ? __mutex_lock+0x315/0xcc0 [ 170.611555][ T7329] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 170.616695][ T7329] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 170.621826][ T7329] ? rtnl_setlink+0x4e0/0x4e0 [ 170.626525][ T7329] rtnetlink_rcv_msg+0x869/0xfa0 [ 170.631498][ T7329] ? rtnetlink_bind+0x80/0x80 [ 170.636213][ T7329] ? perf_trace_preemptirq_template+0xac/0x330 [ 170.642396][ T7329] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 170.648400][ T7329] ? lock_chain_count+0x20/0x20 [ 170.653280][ T7329] ? __local_bh_enable_ip+0x13a/0x1c0 [ 170.658698][ T7329] ? lockdep_hardirqs_on+0x98/0x150 [ 170.663932][ T7329] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 170.669942][ T7329] ? lock_chain_count+0x20/0x20 [ 170.674835][ T7329] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.681028][ T7329] ? lockdep_hardirqs_on+0x98/0x150 [ 170.686253][ T7329] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.692448][ T7329] ? perf_trace_lock+0xfc/0x3b0 [ 170.697337][ T7329] netlink_rcv_skb+0x241/0x4d0 [ 170.702141][ T7329] ? rtnetlink_bind+0x80/0x80 [ 170.706849][ T7329] ? netlink_ack+0x1180/0x1180 [ 170.711649][ T7329] ? __lock_acquire+0x7d40/0x7d40 [ 170.716711][ T7329] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.721950][ T7329] netlink_unicast+0x751/0x8d0 [ 170.726793][ T7329] netlink_sendmsg+0x8d0/0xbf0 [ 170.731599][ T7329] ? netlink_getsockopt+0x590/0x590 [ 170.736831][ T7329] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 170.742406][ T7329] ? aa_sock_msg_perm+0x94/0x150 [ 170.747380][ T7329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.752697][ T7329] ? security_socket_sendmsg+0x80/0xa0 [ 170.758181][ T7329] ? netlink_getsockopt+0x590/0x590 [ 170.763413][ T7329] ____sys_sendmsg+0x5ba/0x960 [ 170.768205][ T7329] ? __asan_memset+0x22/0x40 [ 170.772841][ T7329] ? __sys_sendmsg_sock+0x30/0x30 [ 170.777895][ T7329] ? __import_iovec+0x3fa/0x850 [ 170.782779][ T7329] ? import_iovec+0x73/0xa0 [ 170.787301][ T7329] ___sys_sendmsg+0x2a6/0x360 [ 170.792011][ T7329] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.796815][ T7329] ? __lock_acquire+0x7d40/0x7d40 [ 170.801897][ T7329] __se_sys_sendmsg+0x1c2/0x2b0 [ 170.806780][ T7329] ? __x64_sys_sendmsg+0x80/0x80 [ 170.811771][ T7329] ? syscall_enter_from_user_mode+0x2e/0x80 [ 170.817691][ T7329] do_syscall_64+0x55/0xb0 [ 170.822122][ T7329] ? clear_bhb_loop+0x40/0x90 [ 170.826850][ T7329] ? clear_bhb_loop+0x40/0x90 [ 170.831553][ T7329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.837474][ T7329] RIP: 0033:0x7fa0f4b9ce59 [ 170.841911][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.861533][ T7329] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.869966][ T7329] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 170.877954][ T7329] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000008 [ 170.885946][ T7329] RBP: 00007fa0f5a82090 R08: 0000000000000000 R09: 0000000000000000 [ 170.893939][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.901933][ T7329] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 170.909942][ T7329] [ 170.998963][ T7329] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 171.340723][ T5776] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 171.342657][ T5783] Bluetooth: hci1: hardware error 0x00 [ 171.393637][ T7344] validate_nla: 1 callbacks suppressed [ 171.393650][ T7344] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 171.693253][ T7354] FAULT_INJECTION: forcing a failure. [ 171.693253][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.707837][ T7354] CPU: 0 PID: 7354 Comm: syz.0.541 Not tainted syzkaller #0 [ 171.715176][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.725269][ T7354] Call Trace: [ 171.728609][ T7354] [ 171.731577][ T7354] dump_stack_lvl+0x18c/0x250 [ 171.736312][ T7354] ? show_regs_print_info+0x20/0x20 [ 171.741554][ T7354] ? load_image+0x420/0x420 [ 171.746110][ T7354] ? __might_fault+0xaa/0x120 [ 171.750828][ T7354] ? __lock_acquire+0x7d40/0x7d40 [ 171.755933][ T7354] should_fail_ex+0x39d/0x4d0 [ 171.760662][ T7354] _copy_from_user+0x2f/0xe0 [ 171.765299][ T7354] ___sys_sendmsg+0x1c7/0x360 [ 171.770012][ T7354] ? get_pid_task+0x20/0x1e0 [ 171.774645][ T7354] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.779466][ T7354] ? __lock_acquire+0x7d40/0x7d40 [ 171.784556][ T7354] __se_sys_sendmsg+0x1c2/0x2b0 [ 171.789461][ T7354] ? __x64_sys_sendmsg+0x80/0x80 [ 171.794466][ T7354] ? lockdep_hardirqs_on+0x98/0x150 [ 171.799713][ T7354] do_syscall_64+0x55/0xb0 [ 171.804160][ T7354] ? clear_bhb_loop+0x40/0x90 [ 171.808874][ T7354] ? clear_bhb_loop+0x40/0x90 [ 171.813602][ T7354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.819554][ T7354] RIP: 0033:0x7f76cf99ce59 [ 171.824016][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.843676][ T7354] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.852123][ T7354] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 171.860119][ T7354] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 171.868120][ T7354] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.876115][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.884115][ T7354] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 171.892150][ T7354] [ 172.491421][ T7373] netlink: 'syz.1.547': attribute type 3 has an invalid length. [ 172.499232][ T7373] __nla_validate_parse: 6 callbacks suppressed [ 172.499243][ T7373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 172.692745][ T7378] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 172.707364][ T7378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.547'. [ 172.716636][ T7378] bridge0: port 2(ipvlan1) entered blocking state [ 172.730636][ T7378] bridge0: port 2(ipvlan1) entered disabled state [ 172.752299][ T7378] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 173.011841][ T7383] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.549'. [ 173.049741][ T7383] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 173.081430][ T7385] netlink: 'syz.0.550': attribute type 3 has an invalid length. [ 173.100042][ T7385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 173.194258][ T7390] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 173.228946][ T5776] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 173.230903][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 173.270004][ T7390] bridge0: port 2(ipvlan1) entered blocking state [ 173.308859][ T7390] bridge0: port 2(ipvlan1) entered disabled state [ 173.339398][ T7390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 173.442103][ T5783] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.448614][ T5783] Bluetooth: hci1: hardware error 0x00 [ 173.488406][ T7395] netlink: 140 bytes leftover after parsing attributes in process `syz.1.553'. [ 173.514647][ T7395] netlink: 10 bytes leftover after parsing attributes in process `syz.1.553'. [ 173.570849][ T7395] bond0: (slave bond_slave_0): Releasing backup interface [ 173.650691][ T7395] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 174.116680][ T7404] netlink: 128 bytes leftover after parsing attributes in process `syz.0.556'. [ 174.167389][ T7404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.323539][ T7411] netlink: 'syz.1.558': attribute type 3 has an invalid length. [ 174.367343][ T7411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 174.472805][ T7411] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 174.480854][ T7411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.558'. [ 174.529245][ T7411] bridge0: port 2(ipvlan1) entered blocking state [ 174.538396][ T7411] bridge0: port 2(ipvlan1) entered disabled state [ 174.568498][ T7411] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 174.833731][ T7425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.925335][ T7424] netlink: 'syz.3.563': attribute type 3 has an invalid length. [ 175.083032][ T7431] netlink: 'syz.0.567': attribute type 21 has an invalid length. [ 175.175105][ T7424] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 175.204144][ T7424] bridge0: port 2(ipvlan1) entered blocking state [ 175.210902][ T7424] bridge0: port 2(ipvlan1) entered disabled state [ 175.245427][ T7424] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 175.521362][ T5783] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 175.866405][ T7443] bridge0: port 2(ipvlan1) entered blocking state [ 175.875317][ T7443] bridge0: port 2(ipvlan1) entered disabled state [ 175.889130][ T7443] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 176.908380][ T7473] validate_nla: 2 callbacks suppressed [ 176.908394][ T7473] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 177.122426][ T7471] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 177.147643][ T7471] bridge0: port 2(ipvlan1) entered blocking state [ 177.174946][ T7471] bridge0: port 2(ipvlan1) entered disabled state [ 177.274636][ T7471] net_ratelimit: 1 callbacks suppressed [ 177.274651][ T7471] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 177.364662][ T7479] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 177.587366][ T7479] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 177.601462][ T7479] __nla_validate_parse: 9 callbacks suppressed [ 177.601476][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.582'. [ 177.617435][ T7479] bridge0: port 2(ipvlan1) entered blocking state [ 177.625426][ T7479] bridge0: port 2(ipvlan1) entered disabled state [ 177.636234][ T7479] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 177.653377][ T7481] netlink: 140 bytes leftover after parsing attributes in process `syz.0.583'. [ 177.663667][ T7481] netlink: 10 bytes leftover after parsing attributes in process `syz.0.583'. [ 177.698962][ T7481] bond0: (slave bond_slave_0): Releasing backup interface [ 177.782794][ T7481] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 178.290310][ T7498] netlink: 128 bytes leftover after parsing attributes in process `syz.2.588'. [ 178.310109][ T7498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.208269][ T7532] bridge_slave_0: left allmulticast mode [ 182.241842][ T7532] bridge_slave_0: left promiscuous mode [ 182.249106][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.779689][ T7549] netlink: 128 bytes leftover after parsing attributes in process `syz.0.601'. [ 182.792820][ T7549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.014516][ T7574] netlink: 156 bytes leftover after parsing attributes in process `syz.0.609'. [ 185.075985][ T7593] netlink: 'syz.0.616': attribute type 21 has an invalid length. [ 185.088785][ T7593] netlink: 'syz.0.616': attribute type 6 has an invalid length. [ 185.097182][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.616'. [ 185.111505][ T7594] netlink: 128 bytes leftover after parsing attributes in process `syz.2.614'. [ 185.132174][ T7594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.958465][ T7607] netlink: 156 bytes leftover after parsing attributes in process `syz.1.620'. [ 186.952658][ T5783] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 187.264404][ T7637] netlink: 156 bytes leftover after parsing attributes in process `syz.1.631'. [ 187.504506][ T7642] bridge_slave_0: left allmulticast mode [ 187.532312][ T7642] bridge_slave_0: left promiscuous mode [ 187.543068][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.247844][ T7654] netlink: 'syz.2.636': attribute type 3 has an invalid length. [ 188.261308][ T7654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.636'. [ 188.452531][ T7664] netlink: 156 bytes leftover after parsing attributes in process `syz.0.640'. [ 189.151930][ T7681] FAULT_INJECTION: forcing a failure. [ 189.151930][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.221352][ T7681] CPU: 1 PID: 7681 Comm: syz.0.645 Not tainted syzkaller #0 [ 189.228713][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.238799][ T7681] Call Trace: [ 189.242116][ T7681] [ 189.245079][ T7681] dump_stack_lvl+0x18c/0x250 [ 189.249797][ T7681] ? show_regs_print_info+0x20/0x20 [ 189.255018][ T7681] ? load_image+0x420/0x420 [ 189.259555][ T7681] ? __might_fault+0xaa/0x120 [ 189.264276][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 189.269342][ T7681] should_fail_ex+0x39d/0x4d0 [ 189.274063][ T7681] _copy_from_user+0x2f/0xe0 [ 189.278689][ T7681] ___sys_sendmsg+0x1c7/0x360 [ 189.283402][ T7681] ? get_pid_task+0x20/0x1e0 [ 189.288034][ T7681] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.292854][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 189.297969][ T7681] __se_sys_sendmsg+0x1c2/0x2b0 [ 189.302869][ T7681] ? __x64_sys_sendmsg+0x80/0x80 [ 189.307893][ T7681] ? lockdep_hardirqs_on+0x98/0x150 [ 189.313136][ T7681] do_syscall_64+0x55/0xb0 [ 189.317587][ T7681] ? clear_bhb_loop+0x40/0x90 [ 189.322286][ T7681] ? clear_bhb_loop+0x40/0x90 [ 189.327005][ T7681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.332934][ T7681] RIP: 0033:0x7f76cf99ce59 [ 189.337380][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.357014][ T7681] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.365449][ T7681] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 189.373444][ T7681] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 189.381449][ T7681] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 189.389450][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.397439][ T7681] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 189.405461][ T7681] [ 189.590334][ T7685] bridge_slave_0: left allmulticast mode [ 189.610404][ T7685] bridge_slave_0: left promiscuous mode [ 189.630565][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.253145][ T7698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.650'. [ 193.018614][ T7700] netlink: 'syz.3.651': attribute type 3 has an invalid length. [ 193.027128][ T7700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.651'. [ 193.157252][ T7704] FAULT_INJECTION: forcing a failure. [ 193.157252][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.174412][ T7704] CPU: 0 PID: 7704 Comm: syz.1.653 Not tainted syzkaller #0 [ 193.181748][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.191839][ T7704] Call Trace: [ 193.195147][ T7704] [ 193.198103][ T7704] dump_stack_lvl+0x18c/0x250 [ 193.202821][ T7704] ? show_regs_print_info+0x20/0x20 [ 193.208033][ T7704] ? load_image+0x420/0x420 [ 193.212554][ T7704] ? __might_fault+0xaa/0x120 [ 193.217242][ T7704] ? __lock_acquire+0x7d40/0x7d40 [ 193.222285][ T7704] should_fail_ex+0x39d/0x4d0 [ 193.226985][ T7704] _copy_to_user+0x2f/0xa0 [ 193.231420][ T7704] bpf_mprog_query+0x237/0x7b0 [ 193.236196][ T7704] ? tcx_prog_query+0x86/0x140 [ 193.240990][ T7704] ? bpf_mprog_delete+0x410/0x410 [ 193.246045][ T7704] ? lockdep_rtnl_is_held+0x26/0x30 [ 193.251267][ T7704] tcx_prog_query+0xd9/0x140 [ 193.255874][ T7704] __sys_bpf+0x7a0/0x890 [ 193.260130][ T7704] ? bpf_link_show_fdinfo+0x390/0x390 [ 193.265532][ T7704] ? lock_chain_count+0x20/0x20 [ 193.270399][ T7704] __x64_sys_bpf+0x7c/0x90 [ 193.274842][ T7704] do_syscall_64+0x55/0xb0 [ 193.279270][ T7704] ? clear_bhb_loop+0x40/0x90 [ 193.283965][ T7704] ? clear_bhb_loop+0x40/0x90 [ 193.288667][ T7704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.294577][ T7704] RIP: 0033:0x7fe160b9ce59 [ 193.298997][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.318617][ T7704] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.327070][ T7704] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 193.335070][ T7704] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000010 [ 193.343055][ T7704] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 193.351034][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.359023][ T7704] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 193.367039][ T7704] [ 194.329478][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336173][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.655893][ T7727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.659'. [ 195.667313][ T7727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.693052][ T7731] FAULT_INJECTION: forcing a failure. [ 195.693052][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 195.705843][ T7731] CPU: 1 PID: 7731 Comm: syz.3.661 Not tainted syzkaller #0 [ 195.713193][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.723284][ T7731] Call Trace: [ 195.726604][ T7731] [ 195.729567][ T7731] dump_stack_lvl+0x18c/0x250 [ 195.734302][ T7731] ? show_regs_print_info+0x20/0x20 [ 195.739542][ T7731] ? load_image+0x420/0x420 [ 195.744095][ T7731] ? mark_lock+0x94/0x320 [ 195.748485][ T7731] ? __lock_acquire+0x1347/0x7d40 [ 195.753542][ T7731] ? stack_trace_save+0x100/0x100 [ 195.758613][ T7731] should_fail_ex+0x39d/0x4d0 [ 195.763342][ T7731] should_failslab+0x9/0x20 [ 195.767897][ T7731] slab_pre_alloc_hook+0x59/0x310 [ 195.772966][ T7731] kmem_cache_alloc+0x5a/0x2d0 [ 195.777763][ T7731] ? fib6_add+0x389/0x49c0 [ 195.782216][ T7731] fib6_add+0x389/0x49c0 [ 195.786483][ T7731] ? kasan_set_track+0x4e/0x70 [ 195.791258][ T7731] ? __kasan_kmalloc+0x8f/0xa0 [ 195.796049][ T7731] ? ____sys_sendmsg+0x5ba/0x960 [ 195.801019][ T7731] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 195.806075][ T7731] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.812181][ T7731] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 195.817849][ T7731] ? do_raw_spin_lock+0x11f/0x2c0 [ 195.822898][ T7731] ? __rwlock_init+0x150/0x150 [ 195.827683][ T7731] ? inet6_rtm_newroute+0xcf8/0x1c90 [ 195.832990][ T7731] inet6_rtm_newroute+0xd14/0x1c90 [ 195.838146][ T7731] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 195.844075][ T7731] ? do_raw_spin_unlock+0x121/0x230 [ 195.849314][ T7731] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 195.854451][ T7731] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 195.859575][ T7731] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 195.865501][ T7731] rtnetlink_rcv_msg+0x869/0xfa0 [ 195.870461][ T7731] ? rtnetlink_bind+0x80/0x80 [ 195.875151][ T7731] ? perf_trace_preemptirq_template+0x269/0x330 [ 195.881422][ T7731] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 195.887428][ T7731] ? lock_chain_count+0x20/0x20 [ 195.892296][ T7731] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.897684][ T7731] ? lockdep_hardirqs_on+0x98/0x150 [ 195.902895][ T7731] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.908280][ T7731] ? _local_bh_enable+0xa0/0xa0 [ 195.913157][ T7731] ? __dev_queue_xmit+0x265/0x3660 [ 195.918291][ T7731] ? __dev_queue_xmit+0x265/0x3660 [ 195.923428][ T7731] ? __dev_queue_xmit+0x1b2c/0x3660 [ 195.928654][ T7731] ? __dev_queue_xmit+0x265/0x3660 [ 195.933788][ T7731] ? ref_tracker_free+0x690/0x840 [ 195.938833][ T7731] netlink_rcv_skb+0x241/0x4d0 [ 195.943622][ T7731] ? rtnetlink_bind+0x80/0x80 [ 195.948308][ T7731] ? netlink_ack+0x1180/0x1180 [ 195.953091][ T7731] ? __lock_acquire+0x7d40/0x7d40 [ 195.958133][ T7731] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.963378][ T7731] netlink_unicast+0x751/0x8d0 [ 195.968204][ T7731] netlink_sendmsg+0x8d0/0xbf0 [ 195.972994][ T7731] ? netlink_getsockopt+0x590/0x590 [ 195.978219][ T7731] ? aa_sock_msg_perm+0x94/0x150 [ 195.983174][ T7731] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.988478][ T7731] ? security_socket_sendmsg+0x80/0xa0 [ 195.993959][ T7731] ? netlink_getsockopt+0x590/0x590 [ 195.999185][ T7731] ____sys_sendmsg+0x5ba/0x960 [ 196.003980][ T7731] ? __asan_memset+0x22/0x40 [ 196.008594][ T7731] ? __sys_sendmsg_sock+0x30/0x30 [ 196.013630][ T7731] ? __import_iovec+0x5f2/0x850 [ 196.018506][ T7731] ? import_iovec+0x73/0xa0 [ 196.023033][ T7731] ___sys_sendmsg+0x2a6/0x360 [ 196.027732][ T7731] ? get_pid_task+0x20/0x1e0 [ 196.032346][ T7731] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.037144][ T7731] ? __lock_acquire+0x7d40/0x7d40 [ 196.042210][ T7731] __se_sys_sendmsg+0x1c2/0x2b0 [ 196.047088][ T7731] ? __x64_sys_sendmsg+0x80/0x80 [ 196.052053][ T7731] ? lockdep_hardirqs_on+0x98/0x150 [ 196.057273][ T7731] do_syscall_64+0x55/0xb0 [ 196.061709][ T7731] ? clear_bhb_loop+0x40/0x90 [ 196.066451][ T7731] ? clear_bhb_loop+0x40/0x90 [ 196.071173][ T7731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.077096][ T7731] RIP: 0033:0x7fa0f4b9ce59 [ 196.081533][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.101169][ T7731] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.109605][ T7731] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 196.117611][ T7731] RDX: 0000000020048812 RSI: 00002000000004c0 RDI: 0000000000000003 [ 196.125627][ T7731] RBP: 00007fa0f5a82090 R08: 0000000000000000 R09: 0000000000000000 [ 196.133612][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.141596][ T7731] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 196.149601][ T7731] [ 196.318220][ T7735] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 196.332791][ T7735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'. [ 196.393084][ T7741] netlink: 128 bytes leftover after parsing attributes in process `syz.1.662'. [ 196.433998][ T7741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.527024][ T7744] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 196.564533][ T7744] netlink: 119 bytes leftover after parsing attributes in process `syz.0.665'. [ 196.605795][ T7744] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 196.614323][ T7744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'. [ 196.632466][ T7744] bridge0: port 2(ipvlan1) entered blocking state [ 196.669935][ T7744] bridge0: port 2(ipvlan1) entered disabled state [ 196.832308][ T7744] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 197.730783][ T7767] netlink: 128 bytes leftover after parsing attributes in process `syz.3.671'. [ 197.749509][ T7767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.034381][ T7776] netlink: 'syz.2.675': attribute type 3 has an invalid length. [ 198.052546][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.675'. [ 199.106828][ T7806] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 199.115395][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.686'. [ 199.148644][ T7808] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.687'. [ 199.159331][ T7808] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.687'. [ 199.242884][ T7809] lo: entered allmulticast mode [ 199.646657][ T7822] netlink: 'syz.3.691': attribute type 9 has an invalid length. [ 199.665406][ T7824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.023945][ T7832] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.221537][ T7834] netlink: 'syz.2.697': attribute type 3 has an invalid length. [ 201.320609][ T7867] __nla_validate_parse: 4 callbacks suppressed [ 201.320644][ T7867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.707'. [ 201.486240][ T7873] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.710'. [ 202.302307][ T7902] netlink: 156 bytes leftover after parsing attributes in process `syz.0.718'. [ 203.922392][ T12] wlan1: Trigger new scan to find an IBSS to join [ 205.152567][ T7917] FAULT_INJECTION: forcing a failure. [ 205.152567][ T7917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.191379][ T7917] CPU: 0 PID: 7917 Comm: syz.2.722 Not tainted syzkaller #0 [ 205.198747][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.208844][ T7917] Call Trace: [ 205.212165][ T7917] [ 205.215134][ T7917] dump_stack_lvl+0x18c/0x250 [ 205.219873][ T7917] ? show_regs_print_info+0x20/0x20 [ 205.225124][ T7917] ? load_image+0x420/0x420 [ 205.229683][ T7917] ? __might_fault+0xaa/0x120 [ 205.234411][ T7917] ? __lock_acquire+0x7d40/0x7d40 [ 205.239507][ T7917] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 205.245798][ T7917] should_fail_ex+0x39d/0x4d0 [ 205.250535][ T7917] _copy_from_user+0x2f/0xe0 [ 205.255177][ T7917] __sys_bpf+0x23e/0x890 [ 205.259485][ T7917] ? bpf_link_show_fdinfo+0x390/0x390 [ 205.264930][ T7917] ? lock_chain_count+0x20/0x20 [ 205.269824][ T7917] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 205.275876][ T7917] __x64_sys_bpf+0x7c/0x90 [ 205.280341][ T7917] do_syscall_64+0x55/0xb0 [ 205.284806][ T7917] ? clear_bhb_loop+0x40/0x90 [ 205.289539][ T7917] ? clear_bhb_loop+0x40/0x90 [ 205.294273][ T7917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.300219][ T7917] RIP: 0033:0x7fa0a219ce59 [ 205.304675][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.324324][ T7917] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.332820][ T7917] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 205.340927][ T7917] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 205.348944][ T7917] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 205.357003][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.365010][ T7917] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 205.373025][ T7917] [ 205.678012][ T7927] FAULT_INJECTION: forcing a failure. [ 205.678012][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 205.701554][ T7927] CPU: 0 PID: 7927 Comm: syz.2.727 Not tainted syzkaller #0 [ 205.708999][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.719073][ T7927] Call Trace: [ 205.722371][ T7927] [ 205.725342][ T7927] dump_stack_lvl+0x18c/0x250 [ 205.730064][ T7927] ? show_regs_print_info+0x20/0x20 [ 205.735302][ T7927] ? load_image+0x420/0x420 [ 205.739857][ T7927] ? __might_sleep+0xe0/0xe0 [ 205.744495][ T7927] ? __lock_acquire+0x7d40/0x7d40 [ 205.749570][ T7927] should_fail_ex+0x39d/0x4d0 [ 205.754306][ T7927] should_failslab+0x9/0x20 [ 205.758889][ T7927] slab_pre_alloc_hook+0x59/0x310 [ 205.763975][ T7927] kmem_cache_alloc_node+0x60/0x320 [ 205.769227][ T7927] ? __alloc_skb+0x103/0x2c0 [ 205.773877][ T7927] __alloc_skb+0x103/0x2c0 [ 205.778343][ T7927] alloc_skb_with_frags+0xca/0x7b0 [ 205.783511][ T7927] ? mark_lock+0x94/0x320 [ 205.787896][ T7927] sock_alloc_send_pskb+0x883/0x9a0 [ 205.793162][ T7927] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 205.799813][ T7927] ? sock_kzfree_s+0x50/0x50 [ 205.804460][ T7927] tun_get_user+0x82c/0x3ca0 [ 205.809094][ T7927] ? aa_file_perm+0x11b/0xee0 [ 205.813844][ T7927] ? rcu_read_unlock+0xa0/0xa0 [ 205.818674][ T7927] ? tun_get+0x1c/0x2e0 [ 205.822879][ T7927] ? __lock_acquire+0x7d40/0x7d40 [ 205.827942][ T7927] ? tun_get+0x1c/0x2e0 [ 205.832231][ T7927] tun_chr_write_iter+0x119/0x200 [ 205.837281][ T7927] vfs_write+0x46c/0x990 [ 205.841561][ T7927] ? file_end_write+0x250/0x250 [ 205.846444][ T7927] ? __fget_files+0x43d/0x4b0 [ 205.851155][ T7927] ? __fdget_pos+0x1d8/0x330 [ 205.855765][ T7927] ? ksys_write+0x75/0x260 [ 205.860203][ T7927] ksys_write+0x150/0x260 [ 205.864564][ T7927] ? __ia32_sys_read+0x90/0x90 [ 205.869348][ T7927] ? lockdep_hardirqs_on+0x98/0x150 [ 205.874567][ T7927] do_syscall_64+0x55/0xb0 [ 205.878994][ T7927] ? clear_bhb_loop+0x40/0x90 [ 205.883687][ T7927] ? clear_bhb_loop+0x40/0x90 [ 205.888389][ T7927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.894335][ T7927] RIP: 0033:0x7fa0a219ce59 [ 205.898761][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.918384][ T7927] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.926822][ T7927] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 205.934865][ T7927] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 205.942860][ T7927] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 205.950843][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.958824][ T7927] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 205.966828][ T7927] [ 206.083457][ T7934] netlink: 156 bytes leftover after parsing attributes in process `syz.0.729'. [ 206.338649][ T7947] netlink: 128 bytes leftover after parsing attributes in process `syz.1.730'. [ 206.437902][ T7947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.518718][ T7950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.732'. [ 206.558985][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.642553][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 207.273943][ T7965] FAULT_INJECTION: forcing a failure. [ 207.273943][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 207.332689][ T7965] CPU: 0 PID: 7965 Comm: syz.3.740 Not tainted syzkaller #0 [ 207.340090][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.350238][ T7965] Call Trace: [ 207.353581][ T7965] [ 207.356577][ T7965] dump_stack_lvl+0x18c/0x250 [ 207.361455][ T7965] ? show_regs_print_info+0x20/0x20 [ 207.366722][ T7965] ? load_image+0x420/0x420 [ 207.371331][ T7965] ? __might_sleep+0xe0/0xe0 [ 207.375997][ T7965] ? __lock_acquire+0x7d40/0x7d40 [ 207.381164][ T7965] should_fail_ex+0x39d/0x4d0 [ 207.385943][ T7965] should_failslab+0x9/0x20 [ 207.390515][ T7965] slab_pre_alloc_hook+0x59/0x310 [ 207.395626][ T7965] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 207.401952][ T7965] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 207.408259][ T7965] __kmem_cache_alloc_node+0x53/0x250 [ 207.413732][ T7965] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 207.420040][ T7965] __kmalloc+0xa4/0x230 [ 207.424269][ T7965] ? netlink_lookup+0x30/0x200 [ 207.429137][ T7965] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 207.435384][ T7965] genl_start+0x180/0x6b0 [ 207.439772][ T7965] ? netlink_lookup+0x30/0x200 [ 207.444647][ T7965] __netlink_dump_start+0x4a9/0x810 [ 207.449975][ T7965] genl_family_rcv_msg_dumpit+0x214/0x310 [ 207.455790][ T7965] ? genl_rcv_msg+0x7a0/0x7a0 [ 207.460525][ T7965] ? genl_get_cmd+0x692/0x920 [ 207.465290][ T7965] ? genl_family_rcv_msg_doit+0x310/0x310 [ 207.471074][ T7965] ? genl_start+0x6b0/0x6b0 [ 207.475641][ T7965] ? genl_dumpit+0x1a0/0x1a0 [ 207.480357][ T7965] genl_rcv_msg+0x5e5/0x7a0 [ 207.484947][ T7965] ? genl_bind+0x360/0x360 [ 207.489463][ T7965] ? ethnl_default_doit+0xb80/0xb80 [ 207.494731][ T7965] ? ethnl_default_start+0x560/0x560 [ 207.500086][ T7965] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 207.505536][ T7965] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 207.512197][ T7965] ? ref_tracker_free+0x690/0x840 [ 207.517328][ T7965] netlink_rcv_skb+0x241/0x4d0 [ 207.522178][ T7965] ? genl_bind+0x360/0x360 [ 207.526681][ T7965] ? netlink_ack+0x1180/0x1180 [ 207.531572][ T7965] ? __lock_acquire+0x7d40/0x7d40 [ 207.536721][ T7965] ? down_read+0x1ac/0x2e0 [ 207.541230][ T7965] genl_rcv+0x28/0x40 [ 207.545294][ T7965] netlink_unicast+0x751/0x8d0 [ 207.550185][ T7965] netlink_sendmsg+0x8d0/0xbf0 [ 207.555053][ T7965] ? netlink_getsockopt+0x590/0x590 [ 207.560334][ T7965] ? aa_sock_msg_perm+0x94/0x150 [ 207.565346][ T7965] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.570699][ T7965] ? security_socket_sendmsg+0x80/0xa0 [ 207.576229][ T7965] ? netlink_getsockopt+0x590/0x590 [ 207.581516][ T7965] ____sys_sendmsg+0x5ba/0x960 [ 207.586372][ T7965] ? __asan_memset+0x22/0x40 [ 207.591042][ T7965] ? __sys_sendmsg_sock+0x30/0x30 [ 207.596145][ T7965] ? __import_iovec+0x5f2/0x850 [ 207.601085][ T7965] ? import_iovec+0x73/0xa0 [ 207.605692][ T7965] ___sys_sendmsg+0x2a6/0x360 [ 207.610440][ T7965] ? get_pid_task+0x20/0x1e0 [ 207.615121][ T7965] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.620029][ T7965] ? __lock_acquire+0x7d40/0x7d40 [ 207.625240][ T7965] __se_sys_sendmsg+0x1c2/0x2b0 [ 207.630172][ T7965] ? __x64_sys_sendmsg+0x80/0x80 [ 207.635233][ T7965] ? lockdep_hardirqs_on+0x98/0x150 [ 207.640514][ T7965] do_syscall_64+0x55/0xb0 [ 207.644994][ T7965] ? clear_bhb_loop+0x40/0x90 [ 207.649746][ T7965] ? clear_bhb_loop+0x40/0x90 [ 207.654509][ T7965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.660469][ T7965] RIP: 0033:0x7fa0f4b9ce59 [ 207.664965][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.684646][ T7965] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.693131][ T7965] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 207.701181][ T7965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 207.709237][ T7965] RBP: 00007fa0f5a82090 R08: 0000000000000000 R09: 0000000000000000 [ 207.717276][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.725311][ T7965] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 207.733432][ T7965] [ 207.833603][ T7969] netlink: 156 bytes leftover after parsing attributes in process `syz.2.742'. [ 208.275251][ T7981] FAULT_INJECTION: forcing a failure. [ 208.275251][ T7981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.382392][ T7981] CPU: 1 PID: 7981 Comm: syz.2.744 Not tainted syzkaller #0 [ 208.389793][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.399923][ T7981] Call Trace: [ 208.403265][ T7981] [ 208.406264][ T7981] dump_stack_lvl+0x18c/0x250 [ 208.411033][ T7981] ? show_regs_print_info+0x20/0x20 [ 208.416309][ T7981] ? load_image+0x420/0x420 [ 208.420896][ T7981] ? __might_fault+0xaa/0x120 [ 208.425653][ T7981] ? __lock_acquire+0x7d40/0x7d40 [ 208.430795][ T7981] should_fail_ex+0x39d/0x4d0 [ 208.435561][ T7981] _copy_from_iter+0x1d9/0x12e0 [ 208.440499][ T7981] ? __virt_addr_valid+0x18c/0x540 [ 208.445674][ T7981] ? __lock_acquire+0x7d40/0x7d40 [ 208.450786][ T7981] ? copyout_mc+0x70/0x70 [ 208.455183][ T7981] ? __virt_addr_valid+0x18c/0x540 [ 208.460375][ T7981] ? __virt_addr_valid+0x18c/0x540 [ 208.465562][ T7981] ? __virt_addr_valid+0x469/0x540 [ 208.470763][ T7981] ? __check_object_size+0x506/0xa20 [ 208.476132][ T7981] kernfs_fop_write_iter+0x1a4/0x520 [ 208.481520][ T7981] vfs_write+0x46c/0x990 [ 208.485871][ T7981] ? file_end_write+0x250/0x250 [ 208.490804][ T7981] ? __fget_files+0x43d/0x4b0 [ 208.495591][ T7981] ? __fdget_pos+0x2a3/0x330 [ 208.500244][ T7981] ? ksys_write+0x75/0x260 [ 208.504746][ T7981] ksys_write+0x150/0x260 [ 208.509150][ T7981] ? __ia32_sys_read+0x90/0x90 [ 208.514001][ T7981] ? lockdep_hardirqs_on+0x98/0x150 [ 208.519294][ T7981] do_syscall_64+0x55/0xb0 [ 208.523770][ T7981] ? clear_bhb_loop+0x40/0x90 [ 208.528517][ T7981] ? clear_bhb_loop+0x40/0x90 [ 208.533283][ T7981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.539239][ T7981] RIP: 0033:0x7fa0a219ce59 [ 208.543715][ T7981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.563392][ T7981] RSP: 002b:00007fa0a2ff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.571882][ T7981] RAX: ffffffffffffffda RBX: 00007fa0a2416180 RCX: 00007fa0a219ce59 [ 208.579914][ T7981] RDX: 000000000000006a RSI: 0000200000000100 RDI: 0000000000000009 [ 208.587939][ T7981] RBP: 00007fa0a2ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 208.595965][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.603994][ T7981] R13: 00007fa0a2416218 R14: 00007fa0a2416180 R15: 00007fffb72561b8 [ 208.612102][ T7981] [ 208.965136][ T59] wlan1: Trigger new scan to find an IBSS to join [ 209.593424][ T8002] netlink: 128 bytes leftover after parsing attributes in process `syz.3.749'. [ 209.630649][ T8002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.908015][ T8009] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 209.948518][ T8009] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 210.000100][ T8010] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 210.076567][ T8009] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 210.248455][ T8009] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 210.431379][ T8012] netlink: 'syz.2.752': attribute type 29 has an invalid length. [ 210.497460][ T12] wlan1: Creating new IBSS network, BSSID 6a:db:75:61:e0:d7 [ 210.976726][ T8017] netlink: 156 bytes leftover after parsing attributes in process `syz.3.753'. [ 210.998353][ T8020] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 211.020202][ T8020] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 211.036517][ T8021] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 211.072510][ T8020] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 211.853104][ T8041] netlink: 128 bytes leftover after parsing attributes in process `syz.1.761'. [ 211.877953][ T8041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.043734][ T8047] netlink: 128 bytes leftover after parsing attributes in process `syz.0.762'. [ 212.079888][ T8047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.220114][ T8051] netlink: zone id is out of range [ 212.261344][ T8051] netlink: set zone limit has 8 unknown bytes [ 212.365536][ T8054] netlink: 156 bytes leftover after parsing attributes in process `syz.2.765'. [ 213.003123][ T8063] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.769'. [ 213.533295][ T8075] team0: Device veth1_vlan failed to register rx_handler [ 213.618384][ T8077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.774'. [ 214.498631][ T8110] netlink: 152 bytes leftover after parsing attributes in process `syz.2.784'. [ 215.059590][ T8116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.786'. [ 215.635006][ T8122] sit0: entered allmulticast mode [ 215.714765][ T8125] sit0: entered promiscuous mode [ 215.798879][ T8128] validate_nla: 9 callbacks suppressed [ 215.798906][ T8128] netlink: 'syz.0.792': attribute type 29 has an invalid length. [ 215.923918][ T59] wlan1: Trigger new scan to find an IBSS to join [ 216.469213][ T8128] netlink: 'syz.0.792': attribute type 29 has an invalid length. [ 216.483787][ T8132] veth1_to_batadv: entered promiscuous mode [ 216.550815][ T8132] veth1_to_batadv: entered allmulticast mode [ 216.616383][ T8131] netlink: 'syz.0.792': attribute type 29 has an invalid length. [ 216.667062][ T5783] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 216.668104][ T5776] Bluetooth: hci0: hardware error 0x00 [ 216.715090][ T8142] netlink: 156 bytes leftover after parsing attributes in process `syz.3.796'. [ 217.474051][ T8166] netlink: 'syz.3.804': attribute type 10 has an invalid length. [ 217.496431][ T8166] team0: Device veth1_vlan failed to register rx_handler [ 217.665697][ T8169] netlink: 'syz.3.806': attribute type 21 has an invalid length. [ 217.683554][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.843900][ T8174] netlink: 128 bytes leftover after parsing attributes in process `syz.2.807'. [ 217.863764][ T8174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.249061][ T8178] netlink: 156 bytes leftover after parsing attributes in process `syz.0.808'. [ 218.661548][ T8191] netlink: 128 bytes leftover after parsing attributes in process `syz.0.810'. [ 218.699628][ T8191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.741287][ T5776] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.860596][ T8196] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.814'. [ 218.961647][ T59] wlan1: Trigger new scan to find an IBSS to join [ 219.136333][ T8205] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.817'. [ 219.404788][ T8210] netlink: 156 bytes leftover after parsing attributes in process `syz.2.819'. [ 219.740223][ T8223] netlink: 128 bytes leftover after parsing attributes in process `syz.0.821'. [ 219.769978][ T8223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.907940][ T2936] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 219.974133][ T8228] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.825'. [ 220.033627][ T8230] netlink: 'syz.3.826': attribute type 29 has an invalid length. [ 220.046290][ T8230] netlink: 'syz.3.826': attribute type 29 has an invalid length. [ 220.365563][ T8241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.831'. [ 220.388357][ T8242] netlink: 128 bytes leftover after parsing attributes in process `syz.1.830'. [ 220.422563][ T8242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.816791][ T5776] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 221.096593][ T8264] netlink: 'syz.3.838': attribute type 21 has an invalid length. [ 221.128711][ T8270] netlink: 'syz.2.840': attribute type 29 has an invalid length. [ 221.156408][ T8270] netlink: 'syz.2.840': attribute type 29 has an invalid length. [ 221.181411][ T8270] netlink: 'syz.2.840': attribute type 29 has an invalid length. [ 221.204916][ T8270] veth1_to_batadv: entered promiscuous mode [ 221.223384][ T8270] veth1_to_batadv: entered allmulticast mode [ 221.230344][ T8271] netlink: 'syz.0.839': attribute type 21 has an invalid length. [ 221.248786][ T8271] netlink: 'syz.0.839': attribute type 4 has an invalid length. [ 222.308131][ T8297] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 222.367710][ T8297] team0: Device veth1_vlan failed to register rx_handler [ 223.123431][ T8307] __nla_validate_parse: 4 callbacks suppressed [ 223.123447][ T8307] netlink: 128 bytes leftover after parsing attributes in process `syz.3.852'. [ 223.150411][ T8307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.356227][ T8315] netlink: 156 bytes leftover after parsing attributes in process `syz.2.855'. [ 223.540333][ T8321] netlink: 156 bytes leftover after parsing attributes in process `syz.1.858'. [ 223.705739][ T8327] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 223.717722][ T8327] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 223.728016][ T8327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.861'. [ 224.037060][ T8330] netlink: 'syz.2.862': attribute type 29 has an invalid length. [ 224.086166][ T8339] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.865'. [ 224.102019][ T8338] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.865'. [ 224.275326][ T8341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.867'. [ 224.483428][ T8343] team0: Device veth1_vlan failed to register rx_handler [ 225.058541][ T8375] netlink: 128 bytes leftover after parsing attributes in process `syz.1.874'. [ 225.068092][ T8375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.508683][ T8383] netlink: 156 bytes leftover after parsing attributes in process `syz.0.879'. [ 225.696029][ T8390] FAULT_INJECTION: forcing a failure. [ 225.696029][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 225.708985][ T8390] CPU: 1 PID: 8390 Comm: syz.0.881 Not tainted syzkaller #0 [ 225.716314][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.726496][ T8390] Call Trace: [ 225.729813][ T8390] [ 225.732792][ T8390] dump_stack_lvl+0x18c/0x250 [ 225.737513][ T8390] ? show_regs_print_info+0x20/0x20 [ 225.742747][ T8390] ? load_image+0x420/0x420 [ 225.747292][ T8390] ? __might_sleep+0xe0/0xe0 [ 225.751919][ T8390] ? __lock_acquire+0x7d40/0x7d40 [ 225.756996][ T8390] should_fail_ex+0x39d/0x4d0 [ 225.761729][ T8390] should_failslab+0x9/0x20 [ 225.766272][ T8390] slab_pre_alloc_hook+0x59/0x310 [ 225.771333][ T8390] ? __lock_acquire+0x7d40/0x7d40 [ 225.776409][ T8390] kmem_cache_alloc_node+0x60/0x320 [ 225.781650][ T8390] ? __alloc_skb+0x103/0x2c0 [ 225.786278][ T8390] __alloc_skb+0x103/0x2c0 [ 225.790736][ T8390] netlink_sendmsg+0x66a/0xbf0 [ 225.795565][ T8390] ? netlink_getsockopt+0x590/0x590 [ 225.800899][ T8390] ? aa_sock_msg_perm+0x94/0x150 [ 225.805873][ T8390] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 225.811281][ T8390] ? security_socket_sendmsg+0x80/0xa0 [ 225.816785][ T8390] ? netlink_getsockopt+0x590/0x590 [ 225.822043][ T8390] ____sys_sendmsg+0x5ba/0x960 [ 225.826860][ T8390] ? __asan_memset+0x22/0x40 [ 225.831586][ T8390] ? __sys_sendmsg_sock+0x30/0x30 [ 225.836659][ T8390] ? __import_iovec+0x5f2/0x850 [ 225.841574][ T8390] ? import_iovec+0x73/0xa0 [ 225.846121][ T8390] ___sys_sendmsg+0x2a6/0x360 [ 225.850843][ T8390] ? get_pid_task+0x20/0x1e0 [ 225.855486][ T8390] ? __sys_sendmsg+0x2a0/0x2a0 [ 225.860313][ T8390] ? __lock_acquire+0x7d40/0x7d40 [ 225.865411][ T8390] __se_sys_sendmsg+0x1c2/0x2b0 [ 225.870312][ T8390] ? __x64_sys_sendmsg+0x80/0x80 [ 225.875316][ T8390] ? lockdep_hardirqs_on+0x98/0x150 [ 225.880570][ T8390] do_syscall_64+0x55/0xb0 [ 225.885027][ T8390] ? clear_bhb_loop+0x40/0x90 [ 225.889751][ T8390] ? clear_bhb_loop+0x40/0x90 [ 225.894470][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.900407][ T8390] RIP: 0033:0x7f76cf99ce59 [ 225.904863][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.924608][ T8390] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.933063][ T8390] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 225.941077][ T8390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 225.949094][ T8390] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.957108][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.965120][ T8390] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 225.973192][ T8390] [ 226.746952][ T8405] FAULT_INJECTION: forcing a failure. [ 226.746952][ T8405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.771721][ T8405] CPU: 1 PID: 8405 Comm: syz.2.886 Not tainted syzkaller #0 [ 226.779116][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.789232][ T8405] Call Trace: [ 226.792556][ T8405] [ 226.795531][ T8405] dump_stack_lvl+0x18c/0x250 [ 226.800269][ T8405] ? show_regs_print_info+0x20/0x20 [ 226.805525][ T8405] ? load_image+0x420/0x420 [ 226.810113][ T8405] ? __might_fault+0xaa/0x120 [ 226.814845][ T8405] ? __lock_acquire+0x7d40/0x7d40 [ 226.819936][ T8405] should_fail_ex+0x39d/0x4d0 [ 226.824700][ T8405] _copy_from_user+0x2f/0xe0 [ 226.829349][ T8405] ___sys_sendmsg+0x1c7/0x360 [ 226.834072][ T8405] ? get_pid_task+0x20/0x1e0 [ 226.838726][ T8405] ? __sys_sendmsg+0x2a0/0x2a0 [ 226.843602][ T8405] ? __lock_acquire+0x7d40/0x7d40 [ 226.848756][ T8405] __se_sys_sendmsg+0x1c2/0x2b0 [ 226.853663][ T8405] ? __x64_sys_sendmsg+0x80/0x80 [ 226.858697][ T8405] ? lockdep_hardirqs_on+0x98/0x150 [ 226.863964][ T8405] do_syscall_64+0x55/0xb0 [ 226.868421][ T8405] ? clear_bhb_loop+0x40/0x90 [ 226.873142][ T8405] ? clear_bhb_loop+0x40/0x90 [ 226.877868][ T8405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.883805][ T8405] RIP: 0033:0x7fa0a219ce59 [ 226.888271][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.907926][ T8405] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.916400][ T8405] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 226.924416][ T8405] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 226.932433][ T8405] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 226.940440][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.948443][ T8405] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 226.956515][ T8405] [ 227.137496][ T8409] netlink: 156 bytes leftover after parsing attributes in process `syz.1.889'. [ 227.755702][ T8425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.167558][ T8429] __nla_validate_parse: 2 callbacks suppressed [ 228.167570][ T8429] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.896'. [ 228.189769][ T8431] netlink: 156 bytes leftover after parsing attributes in process `syz.0.894'. [ 228.288820][ T8433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.895'. [ 228.327326][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.682761][ T8443] netlink: 156 bytes leftover after parsing attributes in process `syz.3.900'. [ 228.703307][ T8441] validate_nla: 3 callbacks suppressed [ 228.703341][ T8441] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 228.741326][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.899'. [ 228.752076][ T8441] team0: entered promiscuous mode [ 228.757397][ T8441] team_slave_0: entered promiscuous mode [ 228.765142][ T8441] team_slave_1: entered promiscuous mode [ 228.773266][ T8441] team0: entered allmulticast mode [ 228.779157][ T8441] team_slave_0: entered allmulticast mode [ 228.785445][ T8441] team_slave_1: entered allmulticast mode [ 228.817836][ T8441] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.990650][ T8453] netlink: 'syz.0.904': attribute type 39 has an invalid length. [ 229.504644][ T8467] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.906'. [ 229.744484][ T8471] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.909'. [ 229.754361][ T8471] bridge_slave_1: default FDB implementation only supports local addresses [ 229.835777][ T8473] netlink: 128 bytes leftover after parsing attributes in process `syz.2.908'. [ 229.875510][ T8473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.975085][ T8477] netlink: 156 bytes leftover after parsing attributes in process `syz.3.910'. [ 229.999523][ T8479] FAULT_INJECTION: forcing a failure. [ 229.999523][ T8479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.013814][ T8479] CPU: 1 PID: 8479 Comm: syz.0.911 Not tainted syzkaller #0 [ 230.021164][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.031274][ T8479] Call Trace: [ 230.034593][ T8479] [ 230.037584][ T8479] dump_stack_lvl+0x18c/0x250 [ 230.042312][ T8479] ? show_regs_print_info+0x20/0x20 [ 230.047565][ T8479] ? load_image+0x420/0x420 [ 230.052127][ T8479] ? __might_fault+0xaa/0x120 [ 230.056851][ T8479] ? __lock_acquire+0x7d40/0x7d40 [ 230.061933][ T8479] should_fail_ex+0x39d/0x4d0 [ 230.066676][ T8479] _copy_from_iter+0x1d9/0x12e0 [ 230.071593][ T8479] ? __might_fault+0xaa/0x120 [ 230.076324][ T8479] ? _copy_from_iter+0x24e/0x12e0 [ 230.081406][ T8479] ? __virt_addr_valid+0x18c/0x540 [ 230.086562][ T8479] ? __lock_acquire+0x7d40/0x7d40 [ 230.091613][ T8479] ? copyout_mc+0x70/0x70 [ 230.095986][ T8479] ? copyout_mc+0x70/0x70 [ 230.100347][ T8479] ? __virt_addr_valid+0x18c/0x540 [ 230.105507][ T8479] ? page_copy_sane+0x16a/0x270 [ 230.110391][ T8479] copy_page_from_iter+0x7b/0x100 [ 230.115458][ T8479] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 230.121317][ T8479] tun_get_user+0x15db/0x3ca0 [ 230.126043][ T8479] ? aa_file_perm+0x11b/0xee0 [ 230.130755][ T8479] ? rcu_read_unlock+0xa0/0xa0 [ 230.135563][ T8479] ? tun_get+0x1c/0x2e0 [ 230.139750][ T8479] ? __lock_acquire+0x7d40/0x7d40 [ 230.144808][ T8479] ? tun_get+0x1c/0x2e0 [ 230.148992][ T8479] tun_chr_write_iter+0x119/0x200 [ 230.154046][ T8479] vfs_write+0x46c/0x990 [ 230.158322][ T8479] ? file_end_write+0x250/0x250 [ 230.163221][ T8479] ? __fget_files+0x43d/0x4b0 [ 230.167942][ T8479] ? __fdget_pos+0x1d8/0x330 [ 230.172596][ T8479] ? ksys_write+0x75/0x260 [ 230.177063][ T8479] ksys_write+0x150/0x260 [ 230.181439][ T8479] ? __ia32_sys_read+0x90/0x90 [ 230.186242][ T8479] ? lockdep_hardirqs_on+0x98/0x150 [ 230.191480][ T8479] do_syscall_64+0x55/0xb0 [ 230.195927][ T8479] ? clear_bhb_loop+0x40/0x90 [ 230.200635][ T8479] ? clear_bhb_loop+0x40/0x90 [ 230.205353][ T8479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.211269][ T8479] RIP: 0033:0x7f76cf99ce59 [ 230.215709][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.235356][ T8479] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.243804][ T8479] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 230.251801][ T8479] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 230.259790][ T8479] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 230.267777][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.275766][ T8479] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 230.283766][ T8479] [ 230.769156][ T8490] netlink: 128 bytes leftover after parsing attributes in process `syz.1.922'. [ 230.781199][ T8490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.810206][ T8491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.376100][ T8494] netlink: 'syz.3.915': attribute type 39 has an invalid length. [ 231.416050][ T8495] FAULT_INJECTION: forcing a failure. [ 231.416050][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.435883][ T8495] CPU: 1 PID: 8495 Comm: syz.0.924 Not tainted syzkaller #0 [ 231.443241][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.453364][ T8495] Call Trace: [ 231.456829][ T8495] [ 231.459784][ T8495] dump_stack_lvl+0x18c/0x250 [ 231.464501][ T8495] ? show_regs_print_info+0x20/0x20 [ 231.469758][ T8495] ? load_image+0x420/0x420 [ 231.474324][ T8495] ? __might_fault+0xaa/0x120 [ 231.479074][ T8495] ? __lock_acquire+0x7d40/0x7d40 [ 231.484162][ T8495] should_fail_ex+0x39d/0x4d0 [ 231.488911][ T8495] _copy_from_user+0x2f/0xe0 [ 231.493564][ T8495] ____sys_sendmsg+0x2fd/0x960 [ 231.498482][ T8495] ? __lock_acquire+0x7d40/0x7d40 [ 231.503562][ T8495] ? __sys_sendmsg_sock+0x30/0x30 [ 231.508637][ T8495] ? __import_iovec+0x3fa/0x850 [ 231.513542][ T8495] ? import_iovec+0x73/0xa0 [ 231.518093][ T8495] ___sys_sendmsg+0x2a6/0x360 [ 231.522823][ T8495] ? __sys_sendmsg+0x2a0/0x2a0 [ 231.527628][ T8495] ? perf_trace_preemptirq_template+0xac/0x330 [ 231.533868][ T8495] __se_sys_sendmsg+0x1c2/0x2b0 [ 231.538797][ T8495] ? __x64_sys_sendmsg+0x80/0x80 [ 231.543759][ T8495] ? lockdep_hardirqs_on+0x98/0x150 [ 231.548968][ T8495] do_syscall_64+0x55/0xb0 [ 231.553403][ T8495] ? clear_bhb_loop+0x40/0x90 [ 231.558107][ T8495] ? clear_bhb_loop+0x40/0x90 [ 231.562805][ T8495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.568740][ T8495] RIP: 0033:0x7f76cf99ce59 [ 231.573178][ T8495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.592819][ T8495] RSP: 002b:00007f76d07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.601260][ T8495] RAX: ffffffffffffffda RBX: 00007f76cfc15fa0 RCX: 00007f76cf99ce59 [ 231.609280][ T8495] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000007 [ 231.617278][ T8495] RBP: 00007f76d07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 231.625285][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.633290][ T8495] R13: 00007f76cfc16038 R14: 00007f76cfc15fa0 R15: 00007ffefab4bf38 [ 231.641296][ T8495] [ 232.004164][ T8507] FAULT_INJECTION: forcing a failure. [ 232.004164][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.045568][ T8507] CPU: 1 PID: 8507 Comm: syz.1.919 Not tainted syzkaller #0 [ 232.052945][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.063047][ T8507] Call Trace: [ 232.066364][ T8507] [ 232.069339][ T8507] dump_stack_lvl+0x18c/0x250 [ 232.074077][ T8507] ? show_regs_print_info+0x20/0x20 [ 232.079336][ T8507] ? load_image+0x420/0x420 [ 232.083896][ T8507] ? __might_fault+0xaa/0x120 [ 232.088624][ T8507] ? __lock_acquire+0x7d40/0x7d40 [ 232.093700][ T8507] should_fail_ex+0x39d/0x4d0 [ 232.098431][ T8507] _copy_from_user+0x2f/0xe0 [ 232.103069][ T8507] ___sys_sendmsg+0x1c7/0x360 [ 232.107805][ T8507] ? get_pid_task+0x20/0x1e0 [ 232.112449][ T8507] ? __sys_sendmsg+0x2a0/0x2a0 [ 232.117253][ T8507] ? __lock_acquire+0x7d40/0x7d40 [ 232.122352][ T8507] __se_sys_sendmsg+0x1c2/0x2b0 [ 232.127258][ T8507] ? __x64_sys_sendmsg+0x80/0x80 [ 232.132241][ T8507] ? lockdep_hardirqs_on+0x98/0x150 [ 232.137477][ T8507] do_syscall_64+0x55/0xb0 [ 232.141920][ T8507] ? clear_bhb_loop+0x40/0x90 [ 232.146630][ T8507] ? clear_bhb_loop+0x40/0x90 [ 232.151333][ T8507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.157258][ T8507] RIP: 0033:0x7fe160b9ce59 [ 232.161698][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.181338][ T8507] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.189810][ T8507] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 232.197829][ T8507] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000003 [ 232.205825][ T8507] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 232.213818][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.221809][ T8507] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 232.229830][ T8507] [ 232.875740][ T8526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.958478][ T8528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.210599][ T8547] __nla_validate_parse: 4 callbacks suppressed [ 234.210635][ T8547] netlink: 156 bytes leftover after parsing attributes in process `syz.1.934'. [ 234.911954][ T8565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.938'. [ 234.954118][ T8565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.348910][ T8575] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.941'. [ 235.653975][ T8580] FAULT_INJECTION: forcing a failure. [ 235.653975][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 235.667103][ T8580] CPU: 1 PID: 8580 Comm: syz.1.942 Not tainted syzkaller #0 [ 235.674443][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.684541][ T8580] Call Trace: [ 235.687859][ T8580] [ 235.690817][ T8580] dump_stack_lvl+0x18c/0x250 [ 235.695540][ T8580] ? show_regs_print_info+0x20/0x20 [ 235.700779][ T8580] ? load_image+0x420/0x420 [ 235.705339][ T8580] should_fail_ex+0x39d/0x4d0 [ 235.710065][ T8580] should_failslab+0x9/0x20 [ 235.714616][ T8580] slab_pre_alloc_hook+0x59/0x310 [ 235.719694][ T8580] ? ip6_pol_route+0x171/0x1230 [ 235.724604][ T8580] kmem_cache_alloc+0x5a/0x2d0 [ 235.729427][ T8580] ? dst_alloc+0x105/0x170 [ 235.733902][ T8580] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 235.739600][ T8580] dst_alloc+0x105/0x170 [ 235.743897][ T8580] ip6_pol_route+0x94f/0x1230 [ 235.748622][ T8580] ? ip6_pol_route+0x171/0x1230 [ 235.753527][ T8580] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 235.759223][ T8580] fib6_rule_lookup+0x20c/0x570 [ 235.764115][ T8580] ? skb_header_pointer+0x120/0x120 [ 235.769360][ T8580] ? fib6_lookup+0x2d0/0x2d0 [ 235.773998][ T8580] ? verify_lock_unused+0x140/0x140 [ 235.779248][ T8580] ? read_lock_is_recursive+0x20/0x20 [ 235.784690][ T8580] ip6_route_output_flags+0x364/0x5d0 [ 235.790122][ T8580] ? ip6_route_output_flags+0x2e/0x5d0 [ 235.795640][ T8580] ip6_dst_lookup_tail+0x1ae/0x1530 [ 235.800898][ T8580] ? sk_dst_check+0x25/0x430 [ 235.805549][ T8580] ? ip6_dst_lookup+0x60/0x60 [ 235.810272][ T8580] ? __lock_acquire+0x7d40/0x7d40 [ 235.815354][ T8580] ? sk_dst_check+0x25/0x430 [ 235.820003][ T8580] ? sk_dst_check+0x2f3/0x430 [ 235.824738][ T8580] ip6_sk_dst_lookup_flow+0x731/0x970 [ 235.830166][ T8580] ? udpv6_sendmsg+0x1664/0x2390 [ 235.835157][ T8580] udpv6_sendmsg+0x188c/0x2390 [ 235.839971][ T8580] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 235.844877][ T8580] ? udp_v6_early_demux+0xf80/0xf80 [ 235.850121][ T8580] ? perf_trace_preemptirq_template+0xac/0x330 [ 235.856335][ T8580] ? lock_chain_count+0x20/0x20 [ 235.861237][ T8580] ? _local_bh_enable+0xa0/0xa0 [ 235.866136][ T8580] ? inet_send_prepare+0x1b3/0x260 [ 235.871301][ T8580] ? inet_send_prepare+0x1b3/0x260 [ 235.876483][ T8580] ? inet6_sendmsg+0x5f/0xd0 [ 235.881127][ T8580] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 235.886391][ T8580] ____sys_sendmsg+0x5ba/0x960 [ 235.891202][ T8580] ? __lock_acquire+0x7d40/0x7d40 [ 235.896273][ T8580] ? __asan_memset+0x22/0x40 [ 235.900912][ T8580] ? __sys_sendmsg_sock+0x30/0x30 [ 235.905981][ T8580] ? __import_iovec+0x3fa/0x850 [ 235.910885][ T8580] ? import_iovec+0x73/0xa0 [ 235.915443][ T8580] ___sys_sendmsg+0x2a6/0x360 [ 235.920168][ T8580] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.925001][ T8580] ? trace_call_bpf+0xc3/0x6c0 [ 235.929853][ T8580] __se_sys_sendmsg+0x1c2/0x2b0 [ 235.934735][ T8580] ? __x64_sys_sendmsg+0x80/0x80 [ 235.939720][ T8580] ? lockdep_hardirqs_on+0x98/0x150 [ 235.944980][ T8580] do_syscall_64+0x55/0xb0 [ 235.949429][ T8580] ? clear_bhb_loop+0x40/0x90 [ 235.954131][ T8580] ? clear_bhb_loop+0x40/0x90 [ 235.958875][ T8580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.964812][ T8580] RIP: 0033:0x7fe160b9ce59 [ 235.969272][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.988920][ T8580] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.997391][ T8580] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 236.005396][ T8580] RDX: 000000000000fff5 RSI: 0000200000000380 RDI: 0000000000000003 [ 236.013414][ T8580] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 236.021454][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.029469][ T8580] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 236.037513][ T8580] [ 236.205582][ T8586] netlink: 156 bytes leftover after parsing attributes in process `syz.3.946'. [ 236.232412][ T8587] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.943'. [ 236.241749][ T8587] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.943'. [ 236.251357][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.943'. [ 236.276842][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.943'. [ 236.392520][ T8591] netlink: 156 bytes leftover after parsing attributes in process `syz.1.957'. [ 236.793983][ T8603] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.952'. [ 236.848021][ T8602] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 237.092520][ T8609] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 237.123028][ T8609] team0: Device veth1_macvtap failed to register rx_handler [ 237.193516][ T8608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.250001][ T8630] syzkaller0: entered promiscuous mode [ 238.680207][ T8638] raw_sendmsg: syz.0.967 forgot to set AF_INET. Fix it! [ 238.962283][ T11] wlan1: Trigger new scan to find an IBSS to join [ 238.990378][ T8642] FAULT_INJECTION: forcing a failure. [ 238.990378][ T8642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.035953][ T8642] CPU: 1 PID: 8642 Comm: syz.2.968 Not tainted syzkaller #0 [ 239.043384][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.053599][ T8642] Call Trace: [ 239.056936][ T8642] [ 239.059922][ T8642] dump_stack_lvl+0x18c/0x250 [ 239.064689][ T8642] ? show_regs_print_info+0x20/0x20 [ 239.069932][ T8642] ? load_image+0x420/0x420 [ 239.074486][ T8642] ? __might_fault+0xaa/0x120 [ 239.079218][ T8642] ? __lock_acquire+0x7d40/0x7d40 [ 239.084293][ T8642] ? __virt_addr_valid+0x18c/0x540 [ 239.089460][ T8642] should_fail_ex+0x39d/0x4d0 [ 239.094216][ T8642] _copy_from_user+0x2f/0xe0 [ 239.098866][ T8642] ___bpf_copy_key+0xb0/0x100 [ 239.103604][ T8642] map_update_elem+0x260/0x700 [ 239.108443][ T8642] __sys_bpf+0x6b5/0x890 [ 239.112751][ T8642] ? bpf_link_show_fdinfo+0x390/0x390 [ 239.118213][ T8642] ? lock_chain_count+0x20/0x20 [ 239.123139][ T8642] __x64_sys_bpf+0x7c/0x90 [ 239.127609][ T8642] do_syscall_64+0x55/0xb0 [ 239.132073][ T8642] ? clear_bhb_loop+0x40/0x90 [ 239.136804][ T8642] ? clear_bhb_loop+0x40/0x90 [ 239.141555][ T8642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.147505][ T8642] RIP: 0033:0x7fa0a219ce59 [ 239.151980][ T8642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.171631][ T8642] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.180094][ T8642] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 239.188106][ T8642] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 239.196126][ T8642] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 239.204149][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.212164][ T8642] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 239.220242][ T8642] [ 241.152805][ T8641] __nla_validate_parse: 1 callbacks suppressed [ 241.152823][ T8641] netlink: 140 bytes leftover after parsing attributes in process `syz.0.967'. [ 241.187155][ T8659] netlink: 128 bytes leftover after parsing attributes in process `syz.2.972'. [ 241.198939][ T8659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.106642][ T8697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.985'. [ 243.130013][ T8697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.608997][ T8714] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 247.153944][ T8714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.191222][ T8725] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 247.269683][ T8725] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.288622][ T8728] bond0: entered promiscuous mode [ 247.301430][ T8728] bond_slave_1: entered promiscuous mode [ 247.307467][ T8728] dummy0: entered promiscuous mode [ 247.321851][ T8728] bond0: entered allmulticast mode [ 247.360775][ T8728] bond_slave_1: entered allmulticast mode [ 247.370897][ T8728] bridge_slave_1: entered allmulticast mode [ 247.396589][ T8728] dummy0: entered allmulticast mode [ 247.810041][ T8746] netlink: 128 bytes leftover after parsing attributes in process `syz.2.999'. [ 247.831969][ T8746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.278858][ T8765] syzkaller0: entered promiscuous mode [ 249.294891][ T8765] syzkaller0: entered allmulticast mode [ 249.945823][ T2988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.568465][ T8774] syzkaller0: entered promiscuous mode [ 251.583864][ T8774] syzkaller0: entered allmulticast mode [ 251.609308][ T8784] IPv6: Can't replace route, no match found [ 253.380474][ T8792] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.428286][ T8802] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1014'. [ 253.462364][ T8802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.579885][ T8836] IPv6: Can't replace route, no match found [ 254.639617][ T8843] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1027'. [ 254.666493][ T8843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.144228][ T8857] FAULT_INJECTION: forcing a failure. [ 255.144228][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.160775][ T8857] CPU: 0 PID: 8857 Comm: syz.1.1033 Not tainted syzkaller #0 [ 255.168205][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.178289][ T8857] Call Trace: [ 255.181591][ T8857] [ 255.184544][ T8857] dump_stack_lvl+0x18c/0x250 [ 255.189255][ T8857] ? show_regs_print_info+0x20/0x20 [ 255.194473][ T8857] ? load_image+0x420/0x420 [ 255.199017][ T8857] ? __might_fault+0xaa/0x120 [ 255.203723][ T8857] ? __lock_acquire+0x7d40/0x7d40 [ 255.208777][ T8857] should_fail_ex+0x39d/0x4d0 [ 255.213494][ T8857] _copy_from_iter+0x1d9/0x12e0 [ 255.218375][ T8857] ? __virt_addr_valid+0x18c/0x540 [ 255.223528][ T8857] ? __lock_acquire+0x7d40/0x7d40 [ 255.228591][ T8857] ? __alloc_skb+0x138/0x2c0 [ 255.233207][ T8857] ? copyout_mc+0x70/0x70 [ 255.237571][ T8857] ? __virt_addr_valid+0x18c/0x540 [ 255.242711][ T8857] ? __virt_addr_valid+0x18c/0x540 [ 255.247846][ T8857] ? __virt_addr_valid+0x469/0x540 [ 255.252984][ T8857] ? __phys_addr_symbol+0x2f/0x70 [ 255.258042][ T8857] ? __check_object_size+0x506/0xa20 [ 255.263379][ T8857] udplite_getfrag+0x4d/0xa0 [ 255.268012][ T8857] __ip6_append_data+0x2fb8/0x3cf0 [ 255.273179][ T8857] ? udpv6_sendmsg+0x2390/0x2390 [ 255.278159][ T8857] ? ip6_setup_cork+0xfe0/0xfe0 [ 255.283044][ T8857] ? __local_bh_enable_ip+0x13a/0x1c0 [ 255.288452][ T8857] ip6_append_data+0x1b0/0x350 [ 255.293249][ T8857] ? udpv6_sendmsg+0x2390/0x2390 [ 255.298229][ T8857] udpv6_sendmsg+0xc37/0x2390 [ 255.302934][ T8857] ? udpv6_sendmsg+0x2390/0x2390 [ 255.307898][ T8857] ? udp_v6_early_demux+0xf80/0xf80 [ 255.313155][ T8857] ? inet_send_prepare+0x5c/0x260 [ 255.318206][ T8857] ? inet6_sendmsg+0x5f/0xd0 [ 255.322821][ T8857] sock_write_iter+0x2df/0x420 [ 255.327620][ T8857] ? sock_read_iter+0x3e0/0x3e0 [ 255.332518][ T8857] ? common_file_perm+0x198/0x1f0 [ 255.337582][ T8857] vfs_write+0x46c/0x990 [ 255.341859][ T8857] ? file_end_write+0x250/0x250 [ 255.346744][ T8857] ? __fget_files+0x43d/0x4b0 [ 255.351475][ T8857] ? __fdget_pos+0x1d8/0x330 [ 255.356086][ T8857] ? ksys_write+0x75/0x260 [ 255.360545][ T8857] ksys_write+0x150/0x260 [ 255.364919][ T8857] ? __ia32_sys_read+0x90/0x90 [ 255.369726][ T8857] ? lockdep_hardirqs_on+0x98/0x150 [ 255.374974][ T8857] do_syscall_64+0x55/0xb0 [ 255.379430][ T8857] ? clear_bhb_loop+0x40/0x90 [ 255.384134][ T8857] ? clear_bhb_loop+0x40/0x90 [ 255.388840][ T8857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.394753][ T8857] RIP: 0033:0x7fe160b9ce59 [ 255.399205][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.418949][ T8857] RSP: 002b:00007fe161b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.427396][ T8857] RAX: ffffffffffffffda RBX: 00007fe160e15fa0 RCX: 00007fe160b9ce59 [ 255.435396][ T8857] RDX: 000000000000fe33 RSI: 0000200000000300 RDI: 0000000000000004 [ 255.443395][ T8857] RBP: 00007fe161b06090 R08: 0000000000000000 R09: 0000000000000000 [ 255.451395][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.459385][ T8857] R13: 00007fe160e16038 R14: 00007fe160e15fa0 R15: 00007ffedc94d828 [ 255.467430][ T8857] [ 255.769719][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776994][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.034107][ T8871] wg2: left promiscuous mode [ 256.039998][ T8871] wg2: left allmulticast mode [ 256.668522][ T8884] IPv6: Can't replace route, no match found [ 257.190363][ T8906] FAULT_INJECTION: forcing a failure. [ 257.190363][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 257.203138][ T8906] CPU: 0 PID: 8906 Comm: syz.2.1050 Not tainted syzkaller #0 [ 257.210560][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.220658][ T8906] Call Trace: [ 257.223998][ T8906] [ 257.226972][ T8906] dump_stack_lvl+0x18c/0x250 [ 257.231692][ T8906] ? show_regs_print_info+0x20/0x20 [ 257.236935][ T8906] ? load_image+0x420/0x420 [ 257.241500][ T8906] should_fail_ex+0x39d/0x4d0 [ 257.246236][ T8906] should_failslab+0x9/0x20 [ 257.250795][ T8906] slab_pre_alloc_hook+0x59/0x310 [ 257.255878][ T8906] ? verify_lock_unused+0x140/0x140 [ 257.261130][ T8906] kmem_cache_alloc+0x5a/0x2d0 [ 257.265951][ T8906] ? skb_clone+0x1eb/0x370 [ 257.270430][ T8906] skb_clone+0x1eb/0x370 [ 257.274724][ T8906] bpf_clone_redirect+0x167/0x4a0 [ 257.279815][ T8906] bpf_prog_208b094576c80b22+0x5e/0x63 [ 257.285328][ T8906] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 257.291360][ T8906] ? lock_chain_count+0x20/0x20 [ 257.296263][ T8906] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 257.302568][ T8906] ? lockdep_softirqs_on+0x580/0x580 [ 257.307895][ T8906] ? ktime_get+0x7f/0x280 [ 257.312271][ T8906] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 257.318565][ T8906] ? ktime_get_real_ts64+0x440/0x440 [ 257.323994][ T8906] ? __x64_sys_bpf+0x7c/0x90 [ 257.328636][ T8906] ? __local_bh_disable_ip+0x108/0x1a0 [ 257.334145][ T8906] ? __cant_sleep+0x220/0x220 [ 257.338883][ T8906] ? read_tsc+0x9/0x20 [ 257.343013][ T8906] ? ktime_get+0x24b/0x280 [ 257.347508][ T8906] ? bpf_test_run+0x174/0x870 [ 257.352234][ T8906] bpf_test_run+0x2df/0x870 [ 257.356809][ T8906] ? bpf_test_run+0x174/0x870 [ 257.361532][ T8906] ? convert___skb_to_skb+0x590/0x590 [ 257.366953][ T8906] ? eth_get_headlen+0x210/0x210 [ 257.371933][ T8906] ? slab_build_skb+0x25f/0x3f0 [ 257.376821][ T8906] ? convert___skb_to_skb+0x3d/0x590 [ 257.382174][ T8906] bpf_prog_test_run_skb+0xad2/0x12b0 [ 257.387609][ T8906] ? cpu_online+0x60/0x60 [ 257.391982][ T8906] bpf_prog_test_run+0x321/0x390 [ 257.396965][ T8906] __sys_bpf+0x49d/0x890 [ 257.401255][ T8906] ? bpf_link_show_fdinfo+0x390/0x390 [ 257.406687][ T8906] ? lock_chain_count+0x20/0x20 [ 257.411614][ T8906] __x64_sys_bpf+0x7c/0x90 [ 257.416087][ T8906] do_syscall_64+0x55/0xb0 [ 257.420561][ T8906] ? clear_bhb_loop+0x40/0x90 [ 257.425378][ T8906] ? clear_bhb_loop+0x40/0x90 [ 257.430102][ T8906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.436045][ T8906] RIP: 0033:0x7fa0a219ce59 [ 257.440496][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.460140][ T8906] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.468601][ T8906] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 257.476642][ T8906] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 257.484655][ T8906] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 257.492667][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.500683][ T8906] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 257.508812][ T8906] [ 261.387916][ T8948] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1064'. [ 261.404123][ T8947] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1065'. [ 261.433461][ T8947] bridge_slave_1: default FDB implementation only supports local addresses [ 262.009139][ T8953] syzkaller0: entered promiscuous mode [ 262.021613][ T8953] syzkaller0: entered allmulticast mode [ 265.507689][ T8976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1075'. [ 265.525862][ T8976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.601827][ T9000] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1081'. [ 265.610939][ T9000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.853447][ T9014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1082'. [ 265.874231][ T9014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.546220][ T9031] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1091'. [ 266.556466][ T9031] bridge_slave_1: default FDB implementation only supports local addresses [ 266.733456][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 266.791259][ T9033] FAULT_INJECTION: forcing a failure. [ 266.791259][ T9033] name failslab, interval 1, probability 0, space 0, times 0 [ 266.828814][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 266.838031][ T9033] CPU: 0 PID: 9033 Comm: syz.2.1092 Not tainted syzkaller #0 [ 266.845460][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.855547][ T9033] Call Trace: [ 266.858838][ T9033] [ 266.861779][ T9033] dump_stack_lvl+0x18c/0x250 [ 266.866468][ T9033] ? show_regs_print_info+0x20/0x20 [ 266.871678][ T9033] ? load_image+0x420/0x420 [ 266.876207][ T9033] ? __might_sleep+0xe0/0xe0 [ 266.880814][ T9033] ? __lock_acquire+0x7d40/0x7d40 [ 266.885855][ T9033] should_fail_ex+0x39d/0x4d0 [ 266.890568][ T9033] should_failslab+0x9/0x20 [ 266.895125][ T9033] slab_pre_alloc_hook+0x59/0x310 [ 266.900211][ T9033] ? tomoyo_encode+0x28b/0x540 [ 266.905028][ T9033] ? tomoyo_encode+0x28b/0x540 [ 266.909831][ T9033] __kmem_cache_alloc_node+0x53/0x250 [ 266.915255][ T9033] ? tomoyo_encode+0x28b/0x540 [ 266.920048][ T9033] __kmalloc+0xa4/0x230 [ 266.924247][ T9033] tomoyo_encode+0x28b/0x540 [ 266.928867][ T9033] tomoyo_realpath_from_path+0x592/0x5d0 [ 266.934539][ T9033] tomoyo_path_number_perm+0x248/0x620 [ 266.940042][ T9033] ? tomoyo_path_number_perm+0x217/0x620 [ 266.945726][ T9033] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 266.951225][ T9033] ? trace_call_bpf+0xc3/0x6c0 [ 266.956034][ T9033] ? trace_call_bpf+0xc3/0x6c0 [ 266.960835][ T9033] ? trace_call_bpf+0x5e9/0x6c0 [ 266.965748][ T9033] ? __fget_files+0x28/0x4b0 [ 266.970371][ T9033] ? __fget_files+0x28/0x4b0 [ 266.975007][ T9033] security_file_ioctl+0x70/0xa0 [ 266.979983][ T9033] __se_sys_ioctl+0x48/0x170 [ 266.984626][ T9033] do_syscall_64+0x55/0xb0 [ 266.989081][ T9033] ? clear_bhb_loop+0x40/0x90 [ 266.993798][ T9033] ? clear_bhb_loop+0x40/0x90 [ 266.998518][ T9033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.004460][ T9033] RIP: 0033:0x7fa0a219ce59 [ 267.008911][ T9033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.028647][ T9033] RSP: 002b:00007fa0a3034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.037099][ T9033] RAX: ffffffffffffffda RBX: 00007fa0a2415fa0 RCX: 00007fa0a219ce59 [ 267.045095][ T9033] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003 [ 267.053099][ T9033] RBP: 00007fa0a3034090 R08: 0000000000000000 R09: 0000000000000000 [ 267.061099][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.069103][ T9033] R13: 00007fa0a2416038 R14: 00007fa0a2415fa0 R15: 00007fffb72561b8 [ 267.077120][ T9033] [ 267.118180][ T9033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.213826][ T9045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1094'. [ 267.233606][ T9045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.281642][ T9046] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1095'. [ 268.853026][ T9072] netlink: 'syz.0.1104': attribute type 17 has an invalid length. [ 268.870757][ T9072] netlink: 'syz.0.1104': attribute type 16 has an invalid length. [ 268.887058][ T9072] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1104'. [ 268.906572][ T9076] netlink: 'syz.2.1105': attribute type 10 has an invalid length. [ 268.919351][ T9076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1105'. [ 269.076050][ T9078] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1106'. [ 269.476965][ T9094] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1110'. [ 269.512556][ T9094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.908744][ T9106] netlink: 'syz.1.1116': attribute type 153 has an invalid length. [ 269.928222][ T9106] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1116'. [ 270.061553][ T9112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.596719][ T9130] netlink: 'syz.1.1124': attribute type 3 has an invalid length. [ 270.605992][ T9130] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 271.088644][ T9145] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 271.111710][ T9145] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 271.272243][ T9147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.772299][ T9156] netlink: 'syz.1.1132': attribute type 39 has an invalid length. [ 271.974672][ T9160] __nla_validate_parse: 5 callbacks suppressed [ 271.974690][ T9160] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1133'. [ 272.015146][ T9159] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1133'. [ 273.119212][ T9187] netlink: 'syz.0.1144': attribute type 12 has an invalid length. [ 274.015690][ T9211] validate_nla: 1 callbacks suppressed [ 274.015730][ T9211] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 274.046027][ T9211] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1154'. [ 274.075694][ T9214] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 274.087040][ T9214] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1154'. [ 274.231919][ T9218] netlink: 'syz.3.1156': attribute type 39 has an invalid length. [ 275.220659][ T9236] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 275.229765][ T9236] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1171'. [ 275.283532][ T9236] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 275.300369][ T9236] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1171'. [ 275.737612][ T9253] netlink: 'syz.0.1168': attribute type 39 has an invalid length. [ 277.721399][ T9283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1179'. [ 277.737714][ T9283] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 278.015184][ T9266] netlink: 'syz.3.1174': attribute type 39 has an invalid length. [ 278.232762][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1180'. [ 278.695260][ T9292] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 278.758537][ T9292] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1182'. [ 278.793367][ T9298] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 278.811347][ T9298] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1182'. [ 279.070564][ T9311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1186'. [ 279.092654][ T9311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.241038][ T9315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1188'. [ 279.260205][ T9315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.938593][ T9321] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1193'. [ 279.974954][ T9325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1194'. [ 280.684881][ T9347] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 280.981401][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.962143][ T9400] FAULT_INJECTION: forcing a failure. [ 282.962143][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 282.975270][ T9400] CPU: 1 PID: 9400 Comm: syz.3.1220 Not tainted syzkaller #0 [ 282.982697][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.992795][ T9400] Call Trace: [ 282.996106][ T9400] [ 282.999069][ T9400] dump_stack_lvl+0x18c/0x250 [ 283.003799][ T9400] ? show_regs_print_info+0x20/0x20 [ 283.009037][ T9400] ? load_image+0x420/0x420 [ 283.013598][ T9400] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 283.019635][ T9400] ? lock_chain_count+0x20/0x20 [ 283.024541][ T9400] should_fail_ex+0x39d/0x4d0 [ 283.029300][ T9400] should_failslab+0x9/0x20 [ 283.033868][ T9400] slab_pre_alloc_hook+0x59/0x310 [ 283.038944][ T9400] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.045148][ T9400] kmem_cache_alloc+0x5a/0x2d0 [ 283.049958][ T9400] ? skb_clone+0x1eb/0x370 [ 283.054429][ T9400] skb_clone+0x1eb/0x370 [ 283.058741][ T9400] bpf_clone_redirect+0x167/0x4a0 [ 283.063840][ T9400] bpf_prog_208b094576c80b22+0x5e/0x63 [ 283.069357][ T9400] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 283.075390][ T9400] ? lock_chain_count+0x20/0x20 [ 283.080295][ T9400] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 283.086586][ T9400] ? lockdep_softirqs_on+0x580/0x580 [ 283.091923][ T9400] ? ktime_get+0x7f/0x280 [ 283.096296][ T9400] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 283.102580][ T9400] ? ktime_get_real_ts64+0x440/0x440 [ 283.107922][ T9400] ? __x64_sys_bpf+0x7c/0x90 [ 283.112557][ T9400] ? __local_bh_disable_ip+0x108/0x1a0 [ 283.118069][ T9400] ? __cant_sleep+0x220/0x220 [ 283.122807][ T9400] ? read_tsc+0x9/0x20 [ 283.126938][ T9400] ? ktime_get+0x24b/0x280 [ 283.131402][ T9400] ? bpf_test_run+0x174/0x870 [ 283.136144][ T9400] bpf_test_run+0x2df/0x870 [ 283.140703][ T9400] ? bpf_test_run+0x174/0x870 [ 283.145476][ T9400] ? convert___skb_to_skb+0x590/0x590 [ 283.150923][ T9400] ? eth_get_headlen+0x210/0x210 [ 283.155944][ T9400] ? slab_build_skb+0x25f/0x3f0 [ 283.160844][ T9400] ? convert___skb_to_skb+0x3d/0x590 [ 283.166183][ T9400] bpf_prog_test_run_skb+0xad2/0x12b0 [ 283.171629][ T9400] ? cpu_online+0x60/0x60 [ 283.176013][ T9400] bpf_prog_test_run+0x321/0x390 [ 283.181010][ T9400] __sys_bpf+0x49d/0x890 [ 283.185310][ T9400] ? bpf_link_show_fdinfo+0x390/0x390 [ 283.190757][ T9400] ? lock_chain_count+0x20/0x20 [ 283.195680][ T9400] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 283.201739][ T9400] __x64_sys_bpf+0x7c/0x90 [ 283.206219][ T9400] do_syscall_64+0x55/0xb0 [ 283.210684][ T9400] ? clear_bhb_loop+0x40/0x90 [ 283.215426][ T9400] ? clear_bhb_loop+0x40/0x90 [ 283.220199][ T9400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.226147][ T9400] RIP: 0033:0x7fa0f4b9ce59 [ 283.230613][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.250269][ T9400] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.258733][ T9400] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 283.266750][ T9400] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 283.274770][ T9400] RBP: 00007fa0f5a82090 R08: 0000000000000000 R09: 0000000000000000 [ 283.282789][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.290798][ T9400] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 283.298833][ T9400] [ 300.573343][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.582656][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.590433][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.598882][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.611772][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 300.619221][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.912288][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.931287][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.939238][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.948453][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.956910][ T5776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 300.964734][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.121751][ T5783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.133599][ T5783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.141871][ T5783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.150437][ T5783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.159398][ T5783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 301.167093][ T5783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.992722][ T9427] chnl_net:caif_netlink_parms(): no params data found [ 302.152347][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 302.299714][ T5776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.309161][ T5776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.317817][ T5776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.326594][ T5776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.334753][ T5776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 302.342561][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.404388][ T9434] chnl_net:caif_netlink_parms(): no params data found [ 302.616416][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.627830][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.640725][ T9427] bridge_slave_0: entered allmulticast mode [ 302.648887][ T9427] bridge_slave_0: entered promiscuous mode [ 302.710768][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.722445][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.729730][ T9427] bridge_slave_1: entered allmulticast mode [ 302.736185][ T51] Bluetooth: hci4: command tx timeout [ 302.754055][ T9427] bridge_slave_1: entered promiscuous mode [ 302.854962][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.870431][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.889652][ T9432] bridge_slave_0: entered allmulticast mode [ 302.900092][ T9432] bridge_slave_0: entered promiscuous mode [ 302.940178][ T9427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.965476][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.979446][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.992155][ T9432] bridge_slave_1: entered allmulticast mode [ 302.999823][ T9432] bridge_slave_1: entered promiscuous mode [ 303.040509][ T9427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.050000][ T51] Bluetooth: hci5: command tx timeout [ 303.208072][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.228238][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.239083][ T9434] bridge_slave_0: entered allmulticast mode [ 303.253233][ T9434] bridge_slave_0: entered promiscuous mode [ 303.276687][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.284605][ T51] Bluetooth: hci6: command tx timeout [ 303.302784][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.310064][ T9434] bridge_slave_1: entered allmulticast mode [ 303.327330][ T9434] bridge_slave_1: entered promiscuous mode [ 303.345330][ T9427] team0: Port device team_slave_0 added [ 303.364859][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.430390][ T9427] team0: Port device team_slave_1 added [ 303.448133][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.530435][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.600544][ T9432] team0: Port device team_slave_0 added [ 303.628335][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.675951][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.692188][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.728626][ T9427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.744123][ T9432] team0: Port device team_slave_1 added [ 303.763621][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.770624][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.810774][ T9427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.401601][ T5783] Bluetooth: hci7: command tx timeout [ 304.801276][ T5783] Bluetooth: hci4: command tx timeout [ 305.131477][ T5783] Bluetooth: hci5: command tx timeout [ 305.361662][ T5783] Bluetooth: hci6: command tx timeout [ 306.481528][ T5783] Bluetooth: hci7: command tx timeout [ 306.881856][ T5783] Bluetooth: hci4: command tx timeout [ 307.201596][ T5783] Bluetooth: hci5: command tx timeout [ 307.451705][ T5783] Bluetooth: hci6: command tx timeout [ 308.561446][ T5783] Bluetooth: hci7: command tx timeout [ 308.971453][ T5783] Bluetooth: hci4: command tx timeout [ 309.281233][ T5783] Bluetooth: hci5: command tx timeout [ 309.531917][ T5783] Bluetooth: hci6: command tx timeout [ 310.651791][ T5783] Bluetooth: hci7: command tx timeout [ 314.570760][ T1118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 362.152336][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 362.161299][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 362.169047][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 362.177867][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 362.186127][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 362.193812][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 362.342797][ T5783] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 362.361102][ T5783] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 362.369396][ T5783] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 362.383861][ T5783] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 362.392488][ T5783] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 362.421301][ T5783] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 362.532522][ T5783] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 362.541965][ T5783] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 362.549801][ T5783] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 362.558822][ T5783] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 362.567123][ T5783] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 362.575379][ T5783] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 363.038170][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 363.056622][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 363.064121][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.070438][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.087179][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 363.103718][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 363.119984][ T51] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 363.139843][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 364.251740][ T51] Bluetooth: hci8: command tx timeout [ 364.491760][ T51] Bluetooth: hci9: command tx timeout [ 364.651596][ T51] Bluetooth: hci10: command tx timeout [ 365.211652][ T51] Bluetooth: hci11: command tx timeout [ 366.331690][ T51] Bluetooth: hci8: command tx timeout [ 366.561707][ T51] Bluetooth: hci9: command tx timeout [ 366.721627][ T51] Bluetooth: hci10: command tx timeout [ 367.291664][ T51] Bluetooth: hci11: command tx timeout [ 368.414187][ T51] Bluetooth: hci8: command tx timeout [ 368.641344][ T51] Bluetooth: hci9: command tx timeout [ 368.811585][ T51] Bluetooth: hci10: command tx timeout [ 369.371588][ T51] Bluetooth: hci11: command tx timeout [ 370.481510][ T51] Bluetooth: hci8: command tx timeout [ 370.721555][ T51] Bluetooth: hci9: command tx timeout [ 370.881672][ T51] Bluetooth: hci10: command tx timeout [ 371.441229][ T51] Bluetooth: hci11: command tx timeout [ 389.091124][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 389.097781][ C0] rcu: 0-....: (9189 ticks this GP) idle=a08c/1/0x4000000000000000 softirq=29122/29123 fqs=4484 [ 389.109172][ C0] rcu: hardirqs softirqs csw/system [ 389.115674][ C0] rcu: number: 1258648 0 0 [ 389.122087][ C0] rcu: cputime: 18106 34362 67 ==> 52470(ms) [ 389.129923][ C0] rcu: (t=10500 jiffies g=38577 q=2651 ncpus=2) [ 389.136295][ C0] CPU: 0 PID: 9407 Comm: syz.3.1223 Not tainted syzkaller #0 [ 389.143706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.153801][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x60 [ 389.159990][ C0] Code: 48 8b 04 24 65 48 8b 0d 10 8e 7c 7e 65 8b 15 11 8e 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 389.179606][ C0] RSP: 0018:ffffc900000073e8 EFLAGS: 00000246 [ 389.185685][ C0] RAX: ffffffff813b64b7 RBX: 1ffff92000000eb1 RCX: ffff88802e4a9e00 [ 389.193668][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 389.201647][ C0] RBP: ffffc90000007610 R08: ffff88802e4a9e00 R09: 0000000000000003 [ 389.209621][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000008000 [ 389.217599][ C0] R13: 1ffff92000000eb3 R14: ffffc90000000000 R15: ffffc90000007588 [ 389.225582][ C0] FS: 00007fa0f5a826c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 389.234717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.241301][ C0] CR2: 0000000100000000 CR3: 0000000077e9e000 CR4: 00000000003506f0 [ 389.249278][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 389.257257][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 389.265238][ C0] Call Trace: [ 389.268529][ C0] [ 389.271396][ C0] deref_stack_reg+0xc7/0x240 [ 389.276108][ C0] unwind_next_frame+0x1789/0x2970 [ 389.281332][ C0] ? arch_stack_walk+0xf8/0x190 [ 389.286196][ C0] __unwind_start+0x66a/0x7e0 [ 389.290881][ C0] ? stack_trace_save+0x100/0x100 [ 389.295924][ C0] arch_stack_walk+0xf8/0x190 [ 389.300618][ C0] ? stack_trace_save+0xaa/0x100 [ 389.305655][ C0] stack_trace_save+0xaa/0x100 [ 389.310433][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 389.315558][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 389.320683][ C0] __kfence_alloc+0x2d7/0x3d0 [ 389.325389][ C0] ? kfence_guarded_free+0x4b0/0x4b0 [ 389.330731][ C0] ? should_failslab+0x9/0x20 [ 389.335428][ C0] ? slab_pre_alloc_hook+0x59/0x310 [ 389.340644][ C0] kmem_cache_alloc_node+0x2b4/0x320 [ 389.345963][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 389.351180][ C0] ? __alloc_skb+0x103/0x2c0 [ 389.355787][ C0] __alloc_skb+0x103/0x2c0 [ 389.360223][ C0] ndisc_alloc_skb+0xa6/0x450 [ 389.364923][ C0] ndisc_send_rs+0x2a6/0x610 [ 389.369529][ C0] addrconf_rs_timer+0x2d5/0x630 [ 389.374493][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 389.380585][ C0] call_timer_fn+0x189/0x540 [ 389.385185][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 389.391261][ C0] ? call_timer_fn+0xd2/0x540 [ 389.395952][ C0] ? __run_timers+0x800/0x800 [ 389.400644][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.405852][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 389.411058][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 389.417135][ C0] __run_timers+0x542/0x800 [ 389.421658][ C0] ? detach_timer+0x2b0/0x2b0 [ 389.426350][ C0] ? lock_chain_count+0x20/0x20 [ 389.431222][ C0] run_timer_softirq+0x67/0xf0 [ 389.435994][ C0] handle_softirqs+0x280/0x820 [ 389.440767][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 389.445563][ C0] ? do_softirq+0x1a0/0x1a0 [ 389.450077][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 389.455282][ C0] __irq_exit_rcu+0xd3/0x190 [ 389.459876][ C0] ? irq_exit_rcu+0x20/0x20 [ 389.464396][ C0] irq_exit_rcu+0x9/0x20 [ 389.468641][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 389.474303][ C0] [ 389.477245][ C0] [ 389.480181][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.486189][ C0] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 389.491958][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 389.511575][ C0] RSP: 0018:ffffc9000bd07778 EFLAGS: 00000206 [ 389.517664][ C0] RAX: d92d09a887f00d00 RBX: ffff88802e4a9e00 RCX: d92d09a887f00d00 [ 389.525650][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9860 [ 389.533648][ C0] RBP: 0000000000000000 R08: ffffc9000bd0795f R09: 0000000000000000 [ 389.541627][ C0] R10: ffffc9000bd07950 R11: fffff520017a0f2c R12: 0000000000000002 [ 389.549634][ C0] R13: 0000000000000246 R14: ffffffff8d1321c0 R15: ffff88802e4aa930 [ 389.557659][ C0] __schedule+0x1db/0x45a0 [ 389.562089][ C0] ? mark_lock+0x94/0x320 [ 389.566433][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 389.572434][ C0] ? lock_chain_count+0x20/0x20 [ 389.577296][ C0] ? asan.module_dtor+0x20/0x20 [ 389.582153][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.588325][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 389.593545][ C0] ? preempt_schedule+0xc0/0xd0 [ 389.598411][ C0] preempt_schedule_common+0x82/0xc0 [ 389.603703][ C0] preempt_schedule+0xc0/0xd0 [ 389.608393][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 389.614046][ C0] ? event_function+0x300/0x300 [ 389.618913][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 389.624653][ C0] preempt_schedule_thunk+0x1a/0x30 [ 389.629870][ C0] ? smp_call_function_single+0x488/0x5a0 [ 389.635604][ C0] smp_call_function_single+0x48d/0x5a0 [ 389.641252][ C0] ? event_function+0x300/0x300 [ 389.646119][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 389.652323][ C0] ? event_function+0x300/0x300 [ 389.657237][ C0] perf_install_in_context+0x5be/0x920 [ 389.662732][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 389.668726][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 389.673948][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 389.679160][ C0] ? perf_event__header_size+0x165/0x220 [ 389.684897][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 389.690658][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 389.696313][ C0] ? lock_chain_count+0x20/0x20 [ 389.701196][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 389.706403][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 389.712047][ C0] do_syscall_64+0x55/0xb0 [ 389.716467][ C0] ? clear_bhb_loop+0x40/0x90 [ 389.721155][ C0] ? clear_bhb_loop+0x40/0x90 [ 389.725846][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.731747][ C0] RIP: 0033:0x7fa0f4b9ce59 [ 389.736168][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.755787][ C0] RSP: 002b:00007fa0f5a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 389.764211][ C0] RAX: ffffffffffffffda RBX: 00007fa0f4e15fa0 RCX: 00007fa0f4b9ce59 [ 389.772220][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 389.780208][ C0] RBP: 00007fa0f4c32d6f R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.788208][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 389.796208][ C0] R13: 00007fa0f4e16038 R14: 00007fa0f4e15fa0 R15: 00007ffe72c7ee18 [ 389.804206][ C0]